last executing test programs:

2m5.425079447s ago: executing program 1 (id=1035):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$getenv(0x4201, r0, 0x3, &(0x7f0000000040))

2m3.700927192s ago: executing program 1 (id=1041):
socket$netlink(0x10, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x1992, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x181005)
ioctl$SG_IO(r5, 0x2285, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
dup(r5)
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r8)
sendmmsg$unix(r7, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20}}], 0x2, 0x24000010)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f00000003c0)={0x0})

2m2.691142027s ago: executing program 1 (id=1049):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)={0x1c, r1, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0x13c}]}, 0x1c}}, 0x0)

2m2.39982203s ago: executing program 1 (id=1052):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000200)={[{@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00')

2m0.129481409s ago: executing program 1 (id=1061):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800)

1m59.176319258s ago: executing program 1 (id=1066):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c)

1m58.698343283s ago: executing program 32 (id=1066):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @local, 0xe79}, 0x1c)

14.655350457s ago: executing program 4 (id=1481):
socket$netlink(0x10, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x181005)
ioctl$SG_IO(r4, 0x2285, 0x0)
writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
dup(r4)
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r7)
sendmmsg$unix(r6, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r7, r8}}}], 0x20}}], 0x2, 0x24000010)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f00000003c0)={0x0})

13.759787165s ago: executing program 4 (id=1487):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)

12.647658441s ago: executing program 4 (id=1490):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)

12.537052472s ago: executing program 4 (id=1491):
socket$netlink(0x10, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x1992, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x181005)
ioctl$SG_IO(r5, 0x2285, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
dup(r5)
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r8)
sendmmsg$unix(r7, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20}}], 0x2, 0x24000010)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f00000003c0)={0x0})

12.395406244s ago: executing program 3 (id=1492):
unshare(0x62040200)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f000000010902"], 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20})

8.703794596s ago: executing program 3 (id=1502):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918)
keyctl$setperm(0x5, 0x0, 0x100)
r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc0045540, &(0x7f0000001280)=0x10001)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=@newsa={0x184, 0x10, 0x713, 0x800, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@mcast1, 0x4, 0x0, 0x4e23, 0x80, 0x0, 0x0, 0x20, 0x1d}, {@in=@remote, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x4, 0x800, 0x8000000000000000}, {}, {0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040))
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES64=r8], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

7.50200268s ago: executing program 3 (id=1504):
sched_setscheduler(0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, &(0x7f00000004c0))
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

7.287800782s ago: executing program 3 (id=1506):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x2, &(0x7f00000003c0)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x187842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
timer_getoverrun(r1)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clock_gettime(0x0, &(0x7f0000019580)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000019500)=[{{&(0x7f0000000200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000019300)}, 0xfff}, {{0x0, 0x0, &(0x7f0000019400), 0x0, &(0x7f0000019440)=""/171, 0xab}, 0xfffffffc}], 0x2, 0x100, &(0x7f00000195c0)={r3, r4+60000000})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000000300)=""/102392, 0x18ff8)
syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[], 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5f)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r6, &(0x7f0000000280)=""/188, 0xbc)
connect$packet(r6, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r6, 0x1)

6.614222298s ago: executing program 2 (id=1509):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000c80)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000d00)={0x1, 0x10, 0xfa00, {&(0x7f0000000cc0), r1}}, 0x18)

6.508663733s ago: executing program 0 (id=1510):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4)
sendto$inet6(r3, &(0x7f0000000400), 0x0, 0x40000, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000f4, 0x0, 0x67c7}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
r7 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6ed, &(0x7f00000003c0)="$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")
bind$inet6(r7, 0x0, 0x0)
listen(r7, 0x2)
r8 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r8, 0x0, 0x0)
listen(r8, 0x3a5)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)

6.360726475s ago: executing program 2 (id=1511):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10)

6.215162449s ago: executing program 3 (id=1513):
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f802000010000100fcffff0700000000fc0100000000000000000000000000010000000000000000000000000000000000000000200000080000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000046c000000fc02000000000000000000000000000100000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000050000000000000004000000000000000d000000000000000a00000000000000000000000004000005000000fcffffff000000000a0001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d10001"], 0x2f8}}, 0x20000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x202}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f00000001c0)={<r8=>0x0, 0x5b96, 0x1, [0x81]}, &(0x7f0000000200)=0xa)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, &(0x7f0000000180)={r8}, 0x2)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000})
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

6.015770392s ago: executing program 2 (id=1514):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001c40)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x34, 0x2)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

3.691448412s ago: executing program 2 (id=1517):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000001640)={0x1, 0x0, [{0x4b564d04, 0x0, 0xffffffffffffffff}]})

3.586733755s ago: executing program 0 (id=1518):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x14, &(0x7f0000002240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffc01}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb5111132c32e4187}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x13, 0x2, 0x125, &(0x7f0000000940)})
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0)
r3 = syz_open_dev$video(&(0x7f0000000140), 0x8, 0x140)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}})
ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f0000000000)={0x0, 0x8a})
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
fanotify_init(0x200, 0x0)
syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0x8, 0x0, 0x0, 0x4, 0x1, 0xfffffff7}, @func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x0, 0x2e, 0x30]}}, &(0x7f0000000200)=""/138, 0x39, 0x8a, 0x1}, 0x28)

3.523438435s ago: executing program 4 (id=1519):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r0, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4)

2.542843608s ago: executing program 4 (id=1520):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r0)

2.541259526s ago: executing program 5 (id=1521):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4)
recvmmsg(r0, &(0x7f000001c0c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001ba40)=""/10, 0xa}, 0xe0}], 0x1, 0x10162, 0x0)

2.449486427s ago: executing program 3 (id=1522):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)=ANY=[@ANYBLOB='journal_async_commit,heartbeat=none,usrquota,barrier=000000000\x000000000007,heartbeat=none,nointr,\x00'], 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0xa00801, 0x0, 0x1, 0x0, &(0x7f0000000200))
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

2.404975432s ago: executing program 2 (id=1523):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x2, &(0x7f00000003c0)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x187842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
timer_getoverrun(r1)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clock_gettime(0x0, &(0x7f0000019580))
gettid()
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[], 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x1d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5f)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
read(r3, &(0x7f0000000280)=""/188, 0xbc)
connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
shutdown(r3, 0x1)

2.319875526s ago: executing program 5 (id=1524):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c810}, 0x10)

1.723009334s ago: executing program 0 (id=1525):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:4\t\n', @ANYBLOB='Q'], 0xa)

1.722756674s ago: executing program 2 (id=1526):
mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

1.652628292s ago: executing program 5 (id=1527):
socket$netlink(0x10, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x1992, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x181005)
ioctl$SG_IO(r5, 0x2285, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
dup(r5)
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r7)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000003c0)={0x0})

1.582591479s ago: executing program 0 (id=1528):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r3, 0x11, 0x100000000a, &(0x7f0000000440)=0x800000001, 0x4)
sendto$inet6(r3, &(0x7f0000000400), 0x0, 0x40000, 0x0, 0x0)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000f4, 0x0, 0x67c7}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000280008800c00014000000000000002000c0002"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0)
r7 = socket$inet6(0xa, 0x5, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6ed, &(0x7f00000003c0)="$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")
bind$inet6(r7, 0x0, 0x0)
listen(r7, 0x2)
r8 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r8, 0x0, 0x0)
listen(r8, 0x3a5)
sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808)

903.211772ms ago: executing program 5 (id=1529):
socket$netlink(0x10, 0x3, 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x1992, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}]}}]}, 0x8c}}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x181005)
ioctl$SG_IO(r5, 0x2285, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0c00000f7fc08fcd111fbdf23ea32dbb0664a5f747d7deda3fa0b7327bd49eb067a0689fff2a4", 0x2b}], 0x2)
dup(r5)
socket(0x10, 0x3, 0x0)
setregid(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, 0x0, r8)
sendmmsg$unix(r7, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r9}}}], 0x20}}], 0x2, 0x24000010)
r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r10, 0xc01864c6, &(0x7f00000003c0)={0x0})

366.184178ms ago: executing program 5 (id=1530):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f00000001c0)={0x7, 0x0, 0x0, 0x0})

272.003912ms ago: executing program 0 (id=1531):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

142.737662ms ago: executing program 5 (id=1532):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e", @ANYRES8], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0d, 0x0)

0s ago: executing program 0 (id=1533):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2a0, 0x0, &(0x7f00000003c0)="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", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

kernel console output (not intermixed with test programs):

, default is ufstype=old
[  438.067819][ T8729] ufs: ufstype=old is supported read-only
[  438.129171][ T5915] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  438.163973][ T5915] uvcvideo 2-1:0.105: No valid video chain found.
[  438.191240][ T5915] usb 2-1: USB disconnect, device number 5
[  438.221023][ T8736] netlink: 5 bytes leftover after parsing attributes in process `syz.2.786'.
[  438.230906][ T8736] ..0ªî{X¹¦: renamed from gretap0 (while UP)
[  438.259678][ T8736] ..0ªî{X¹¦: entered allmulticast mode
[  439.158170][    C1] net_ratelimit: 3 callbacks suppressed
[  439.158193][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  439.281301][ T8757] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  439.281301][ T8757]    program syz.1.795 not setting count and/or reply_len properly
[  439.330259][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  439.576993][ T8765] infiniband: Added to hash: ib_dev=ffff888036524000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  439.588846][ T8765] siw: device registration error -23
[  439.594399][ T8765] infiniband: Removed from hash: ib_dev=ffff888036524000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  440.269403][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  440.440359][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  441.380632][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  441.513129][ T8780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'.
[  441.536994][ T8780] netlink: 336 bytes leftover after parsing attributes in process `syz.3.802'.
[  441.551690][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  442.369574][ T8788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'.
[  442.383587][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.805'.
[  442.491907][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  442.662823][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  443.256008][ T8810] infiniband: Added to hash: ib_dev=ffff888033984000 (0)() ndev=ffff88807ce5a000 (16)(virt_wifi0)
[  443.267312][ T8810] siw: device registration error -23
[  443.272910][ T8810] infiniband: Removed from hash: ib_dev=ffff888033984000 (0)() ndev=ffff88807ce5a000 (16)(virt_wifi0)
[  443.613769][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  443.774106][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  444.714398][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  444.864720][ T5822] Bluetooth: hci1: unexpected cc 0x2027 length: 5 > 1
[  444.871883][ T5822] Bluetooth: hci1: unexpected event for opcode 0x2027
[  444.885282][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  445.116967][ T8843] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  445.596120][ T8850] infiniband: Added to hash: ib_dev=ffff888036520000 (0)() ndev=ffff88807ce5a000 (16)(virt_wifi0)
[  445.607496][ T8850] siw: device registration error -23
[  445.613292][ T8850] infiniband: Removed from hash: ib_dev=ffff888036520000 (0)() ndev=ffff88807ce5a000 (16)(virt_wifi0)
[  445.836424][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  445.996573][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  446.936774][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  447.075055][ T8852] loop1: detected capacity change from 0 to 2048
[  447.118424][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  447.276294][ T8852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  448.048031][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  448.219123][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  448.357450][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.831'.
[  448.561997][ T8864] Can't find ip_set type hash:ip,port,i
[  449.159234][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  449.340877][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  450.281177][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  450.342488][ T8894] loop1: detected capacity change from 0 to 512
[  450.452183][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  450.581694][ T8894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.644803][ T8894] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  450.796934][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.381690][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  451.563344][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  451.822777][ T8914] loop1: detected capacity change from 0 to 1024
[  451.960540][ T8914] EXT4-fs: Ignoring removed nobh option
[  451.990350][ T8887] loop4: detected capacity change from 0 to 32768
[  451.999823][ T8914] EXT4-fs: inline encryption not supported
[  452.045459][ T8887] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.842 (8887)
[  452.055664][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  452.064964][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  452.132514][ T8914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.195241][ T8887] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  452.306776][ T8887] BTRFS info (device loop4): using sha256 checksum algorithm
[  452.435077][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.493016][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  452.653341][ T8887] BTRFS info (device loop4): enabling ssd optimizations
[  452.662185][ T8887] BTRFS info (device loop4): turning on async discard
[  452.669207][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  452.686162][ T8887] BTRFS info (device loop4): enabling free space tree
[  453.077912][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  453.105568][ T5822] Bluetooth: hci0: unexpected event for opcode 0x203d
[  453.614837][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  453.785814][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  454.715377][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  454.817202][ T8971] loop2: detected capacity change from 0 to 1024
[  454.830669][ T8946] loop1: detected capacity change from 0 to 32768
[  454.886703][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  454.917957][ T8946] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  455.115551][ T8288] hfsplus: b-tree write err: -5, ino 4
[  455.143519][ T8946] XFS (loop1): Ending clean mount
[  455.462416][ T5820] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  455.826623][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  455.997590][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  456.937860][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  456.967273][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.877'.
[  457.067194][ T9004] vlan2: entered promiscuous mode
[  457.072578][ T9004] gretap0: entered promiscuous mode
[  457.104866][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88802bac4000 (12)(vlan2) start
[  457.122913][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  457.215674][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88802bac4000 (3)(vlan2) end
[  457.579166][ T9017] team0: Device gtp0 is up. Set it down before adding it as a team port
[  457.676630][ T9021] loop2: detected capacity change from 0 to 1024
[  457.694540][ T9021] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  457.779917][ T9021] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 1: comm syz.2.884: lblock 1 mapped to illegal pblock 1 (length 1)
[  457.801517][ T9021] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  457.803280][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  457.819305][    C1] EXT4-fs (loop2): initial error at time 1770076030: ext4_map_blocks:818: inode 3: block 1
[  457.829650][    C1] EXT4-fs (loop2): last error at time 1770076030: ext4_map_blocks:818: inode 3: block 1
[  457.842860][ T9021] __quota_error: 30 callbacks suppressed
[  457.842880][ T9021] Quota error (device loop2): write_blk: dquota write failed
[  457.857463][ T9021] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  457.868147][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  457.877384][ T9021] EXT4-fs error (device loop2): ext4_acquire_dquot:7006: comm syz.2.884: Failed to acquire dquot type 0
[  457.892845][ T9021] loop2: lost filesystem error report for type 5 error -117
[  457.893711][ T9021] EXT4-fs error (device loop2): ext4_free_blocks:6726: comm syz.2.884: Freeing blocks not in datazone - block = 0, count = 4096
[  457.920218][ T9021] loop2: lost filesystem error report for type 5 error -117
[  457.924606][ T9021] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.884: Invalid inode bitmap blk 0 in block_group 0
[  457.947890][ T8288] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1)
[  457.948413][ T9021] loop2: lost filesystem error report for type 5 error -117
[  457.967386][ T9021] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem
[  457.983673][ T9021] loop2: lost filesystem error report for type 5 error -117
[  457.984049][ T9021] EXT4-fs (loop2): 1 orphan inode deleted
[  457.986384][ T8288] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  458.002379][ T8288] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  458.026774][ T9021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  458.029430][ T8288] EXT4-fs error (device loop2): ext4_release_dquot:7042: comm kworker/u8:17: Failed to release dquot type 0
[  458.041876][   T24] usb 5-1: Using ep0 maxpacket: 8
[  458.052315][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  458.060989][ T8288] loop2: lost filesystem error report for type 5 error -117
[  458.067329][   T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  458.090813][   T24] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  458.111127][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.119494][   T24] usb 5-1: Product: syz
[  458.134183][   T24] usb 5-1: Manufacturer: syz
[  458.139553][   T24] usb 5-1: SerialNumber: syz
[  458.185324][   T24] usb 5-1: config 0 descriptor??
[  458.198383][   T24] gspca_main: sq930x-2.14.0 probing 2770:930c
[  458.230946][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  458.248426][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  458.260628][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.272663][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.287948][   T43] usb 2-1: New USB device found, idVendor=046d, idProduct=0026, bcdDevice= 0.00
[  458.305003][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.357362][   T43] usb 2-1: config 0 descriptor??
[  458.766634][   T24] gspca_sq930x: ucbus_write failed -71
[  458.897515][   T24] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  458.966237][   T24] usb 5-1: USB disconnect, device number 7
[  459.016041][   T43] hid-generic 0003:046D:0026.0002: hidraw0: USB HID v0.00 Device [HID 046d:0026] on usb-dummy_hcd.1-1/input0
[  459.163729][   T43] usb 2-1: USB disconnect, device number 6
[  459.172568][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  459.331386][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  460.271608][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  460.442477][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  460.743392][ T9070] loop1: detected capacity change from 0 to 512
[  460.751512][ T9070] EXT4-fs: Ignoring removed orlov option
[  460.796321][ T9070] EXT4-fs (loop1): Test dummy encryption mode enabled
[  460.803416][ T9070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  460.866988][ T9070] EXT4-fs (loop1): 1 truncate cleaned up
[  460.888438][ T9070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.939077][ T9070] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  461.216275][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.382761][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  461.553815][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  462.069954][ T9080] loop2: detected capacity change from 0 to 64
[  462.166589][ T9080] hfs: get root inode failed
[  462.493988][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  462.522799][ T9084] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  462.522799][ T9084]    program syz.1.903 not setting count and/or reply_len properly
[  462.675673][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  462.978878][ T9097] loop2: detected capacity change from 0 to 512
[  463.116927][ T9097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  463.176329][ T9097] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  463.317219][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  463.391568][ T5883] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  463.394574][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.478391][ T9110] bond1: Unable to set up delay as MII monitoring is disabled
[  463.497516][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a234000 (42)(bond1) start
[  463.505775][ T9110] bond1 (unregistering): Released all slaves
[  463.553147][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a234000 (5)(bond1) end
[  463.556343][ T5883] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  463.587035][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.596152][ T5883] usb 2-1: Product: syz
[  463.605358][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  463.606384][ T5883] usb 2-1: Manufacturer: syz
[  463.624402][ T5883] usb 2-1: SerialNumber: syz
[  463.786910][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  464.145687][ T5883] r8152-cfgselector 2-1: Unknown version 0x0000
[  464.152504][ T5883] r8152-cfgselector 2-1: config 0 descriptor??
[  464.716450][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  464.887418][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  464.999932][ T9130] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  464.999932][ T9130]    program syz.2.921 not setting count and/or reply_len properly
[  465.163965][ T5883] r8152-cfgselector 2-1: USB disconnect, device number 7
[  465.580362][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.927'.
[  465.633470][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.927'.
[  465.650402][ T9141] loop2: detected capacity change from 0 to 1024
[  465.827671][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  465.998728][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  466.030894][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  466.446083][   T24] usb 5-1: Using ep0 maxpacket: 8
[  466.938900][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  467.058372][   T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.069927][   T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.080405][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  467.087758][   T24] usb 5-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  467.096978][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.108633][   T24] usb 5-1: config 0 descriptor??
[  467.113709][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  467.453278][ T9163] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  467.453278][ T9163]    program syz.2.936 not setting count and/or reply_len properly
[  467.575965][   T24] hid_parser_main: 91 callbacks suppressed
[  467.575995][   T24] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0
[  467.607382][   T24] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0
[  467.623108][   T24] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0
[  467.641815][   T24] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0
[  467.654775][   T24] ntrig 0003:1B96:0004.0003: unknown main item tag 0x0
[  468.060842][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  468.145699][   T24] ntrig 0003:1B96:0004.0003: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.4-1/input0
[  468.165153][ T9154] loop1: detected capacity change from 0 to 32768
[  468.231857][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  468.240337][   T24] usb 5-1: USB disconnect, device number 8
[  468.261252][ T9154] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.933 (9154)
[  468.362192][ T9168] fido_id[9168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  468.384639][ T9154] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  468.409584][ T9154] BTRFS info (device loop1): using sha256 checksum algorithm
[  468.543055][ T9154] BTRFS info (device loop1): rebuilding free space tree
[  468.607562][ T9154] BTRFS info (device loop1): disabling free space tree
[  468.660869][ T9154] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  468.728264][ T9154] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  468.781843][ T9154] BTRFS info (device loop1): enabling ssd optimizations
[  468.819792][ T9154] BTRFS info (device loop1): turning on async discard
[  468.839475][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'.
[  468.860940][ T9154] BTRFS info (device loop1): force clearing of disk cache
[  468.873226][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'.
[  468.890307][ T9189] loop4: detected capacity change from 0 to 1024
[  468.920390][ T9154] BTRFS info (device loop1): enabling auto defrag
[  468.939614][ T9154] BTRFS info (device loop1): max_inline set to 4096
[  469.161371][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  469.332346][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  469.354887][ T5820] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  469.460704][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  469.968013][   T43] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  470.002069][   T24] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  470.052458][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.121314][   T24] usb 3-1: config 0 has no interface number 0
[  470.171666][   T24] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  470.209812][   T43] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  470.245130][   T24] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  470.272602][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  470.291469][   T43] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  470.407183][   T24] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  470.443594][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  470.455793][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[  470.462740][   T43] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  470.484318][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.504030][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.514159][   T24] usb 3-1: Product: syz
[  470.529355][   T24] usb 3-1: Manufacturer: syz
[  470.534241][   T24] usb 3-1: SerialNumber: syz
[  470.612689][   T43] usb 5-1: config 0 descriptor??
[  470.622368][   T24] usb 3-1: config 0 descriptor??
[  470.927178][ T9211] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  470.927178][ T9211]    program syz.1.947 not setting count and/or reply_len properly
[  471.124794][   T43] uclogic 0003:5543:0042.0004: unbalanced delimiter at end of report description
[  471.169844][   T43] uclogic 0003:5543:0042.0004: parse failed
[  471.177439][   T43] uclogic 0003:5543:0042.0004: probe with driver uclogic failed with error -22
[  471.260526][ T9220] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  471.260526][ T9220]    program syz.1.954 not setting count and/or reply_len properly
[  471.293608][   T24] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71
[  471.324755][ T5883] usb 5-1: USB disconnect, device number 9
[  471.355227][   T24] usb 3-1: USB disconnect, device number 10
[  471.383828][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  471.554938][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  472.495052][    C1] net_ratelimit: 17 callbacks suppressed
[  472.495073][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  472.666100][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  473.106709][ T9230] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  473.106709][ T9230]    program syz.2.956 not setting count and/or reply_len properly
[  473.616960][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  473.787927][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  473.937267][ T9244] loop4: detected capacity change from 0 to 512
[  473.988274][ T9244] EXT4-fs: Ignoring removed mblk_io_submit option
[  474.054363][ T9244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.963: Parent and EA inode have the same ino 15
[  474.141752][ T9244] loop4: lost filesystem error report for type 5 error -117
[  474.151185][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  474.165544][    C0] EXT4-fs (loop4): initial error at time 1770076045: ext4_xattr_inode_iget:437
[  474.175024][    C0] EXT4-fs (loop4): last error at time 1770076045: ext4_xattr_inode_iget:437
[  474.188256][ T9244] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  474.219770][ T9244] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.963: Parent and EA inode have the same ino 15
[  474.289763][ T9244] loop4: lost filesystem error report for type 5 error -117
[  474.292019][ T9244] EXT4-fs (loop4): 1 orphan inode deleted
[  474.319320][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88804a040000 (7)(syzkaller1) start
[  474.333991][ T9244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.377036][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88804a040000 (3)(syzkaller1) end
[  474.437288][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.717718][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  474.899323][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  475.742190][ T9276] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  475.742190][ T9276]    program syz.4.976 not setting count and/or reply_len properly
[  475.828730][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  475.903591][ T5915] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  475.999726][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  476.090951][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  476.111956][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  476.132408][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.151460][ T5915] usb 2-1: config 0 descriptor??
[  476.614898][ T5915] hid (null): bogus close delimiter
[  476.686918][ T9288] ufs: You didn't specify the type of your ufs filesystem
[  476.686918][ T9288] 
[  476.686918][ T9288] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  476.686918][ T9288] 
[  476.686918][ T9288] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  476.718666][ T9288] ufs: ufstype=old is supported read-only
[  476.939960][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  477.111075][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  477.146676][ T5915] lg-g15 0003:046D:C222.0005: bogus close delimiter
[  477.153360][ T5915] lg-g15 0003:046D:C222.0005: item 0 4 2 10 parsing failed
[  477.174645][ T5915] lg-g15 0003:046D:C222.0005: probe with driver lg-g15 failed with error -22
[  477.203350][ T5915] usb 2-1: USB disconnect, device number 8
[  477.307706][ T9286] loop2: detected capacity change from 0 to 32768
[  477.327854][ T9292] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  477.327854][ T9292]    program syz.4.982 not setting count and/or reply_len properly
[  477.362304][ T9286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.981 (9286)
[  477.410503][ T9286] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  477.480520][ T9286] BTRFS info (device loop2): using sha256 checksum algorithm
[  477.867732][ T9286] BTRFS info (device loop2): enabling ssd optimizations
[  477.881050][ T9286] BTRFS info (device loop2): turning on async discard
[  477.924092][ T9286] BTRFS info (device loop2): enabling free space tree
[  478.051669][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  478.190321][ T5817] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  478.222161][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  478.270755][ T9321] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  478.270755][ T9321]    program syz.4.989 not setting count and/or reply_len properly
[  479.112779][ T9322] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  479.112779][ T9322]    program syz.1.988 not setting count and/or reply_len properly
[  479.162446][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  479.333500][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  479.546359][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  479.640087][ T9341] loop1: detected capacity change from 0 to 512
[  479.761534][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  479.770241][ T9341] EXT4-fs (loop1): orphan cleanup on readonly fs
[  479.772277][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  479.787556][ T5915] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  479.801424][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  479.813330][ T5915] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  479.822187][ T9341] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #11: block 1: comm syz.1.996: lblock 0 mapped to illegal pblock 1 (length 1)
[  479.825426][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0
[  479.849374][ T9348] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  479.849374][ T9348]    program syz.0.997 not setting count and/or reply_len properly
[  479.877299][ T9341] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  479.879707][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  479.895681][    C0] EXT4-fs (loop1): initial error at time 1770076051: ext4_map_blocks:776: inode 11: block 1
[  479.910380][    C0] EXT4-fs (loop1): last error at time 1770076051: ext4_map_blocks:776: inode 11: block 1
[  479.936466][ T5915] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  479.946199][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.955468][ T9341] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  479.970063][ T5915] usb 3-1: Product: syz
[  479.974740][ T5915] usb 3-1: Manufacturer: syz
[  479.979745][ T5915] usb 3-1: SerialNumber: syz
[  479.993098][ T9341] EXT4-fs error (device loop1): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.1.996: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  480.031579][ T5915] usb 3-1: config 0 descriptor??
[  480.041989][ T9335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  480.236967][ T9341] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  480.284362][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  480.444618][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  480.466842][ T9341] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.1.996: ea_inode dec ref err=-117
[  480.514765][ T9341] EXT4-fs (loop1): 1 orphan inode deleted
[  480.538657][ T9351] team_slave_0: entered promiscuous mode
[  480.544990][ T9351] team_slave_1: entered promiscuous mode
[  480.553524][ T9341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  480.567417][ T9351] macvtap1: entered promiscuous mode
[  480.576900][ T9351] team0: entered promiscuous mode
[  480.588194][ T9351] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  480.603042][ T9351] team0: Device macvtap1 is already an upper device of the team interface
[  480.630742][ T9335] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  480.652206][ T9351] team0: left promiscuous mode
[  480.657929][ T9351] team_slave_0: left promiscuous mode
[  480.661278][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.663693][ T9351] team_slave_1: left promiscuous mode
[  480.682201][ T5915] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  480.737588][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888059270000 (12)(macvtap1) start
[  480.787707][ T9332] loop4: detected capacity change from 0 to 32768
[  480.805289][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888059270000 (6)(macvtap1) end
[  480.881775][ T9332] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  480.908570][ T5826] usb 3-1: USB disconnect, device number 11
[  481.103375][ T9332] XFS (loop4): Ending clean mount
[  481.240279][ T5824] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  481.395588][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  481.451673][ T9371] loop1: detected capacity change from 0 to 512
[  481.556132][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  481.593546][ T9371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  481.640512][ T9371] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  481.761439][ T9380] infiniband: Added to hash: ib_dev=ffff88802bc00000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  481.807249][ T9380] siw: device registration error -23
[  481.828485][ T9380] infiniband: Removed from hash: ib_dev=ffff88802bc00000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  482.012445][ T5820] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  482.496131][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  482.667282][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  482.715056][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'.
[  482.805262][ T9394] loop4: detected capacity change from 0 to 1024
[  483.483009][ T9397] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  483.483009][ T9397]    program syz.1.1010 not setting count and/or reply_len properly
[  483.607343][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  483.778542][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  483.863683][ T9399] tipc: Started in network mode
[  483.869385][ T9399] tipc: Node identity 4, cluster identity 4711
[  483.941901][ T9399] tipc: Node number set to 4
[  483.994147][ T9399] tipc: Cannot configure node identity twice
[  484.014213][ T9402] netlink: 'syz.3.1014': attribute type 1 has an invalid length.
[  484.048707][ T9402] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1014'.
[  484.110023][ T9402] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1014'.
[  484.128109][ T9406] loop4: detected capacity change from 0 to 1024
[  484.143758][ T9402] netlink: 'syz.3.1014': attribute type 1 has an invalid length.
[  484.164137][ T9406] EXT4-fs: Ignoring removed bh option
[  484.185360][ T9402] netlink: 634 bytes leftover after parsing attributes in process `syz.3.1014'.
[  484.201338][ T9406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.404031][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.718961][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  484.889577][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  485.830207][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  486.000825][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  486.477723][ T9435] loop4: detected capacity change from 0 to 4096
[  486.588516][ T9435] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  486.941029][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  487.111988][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  487.345722][ T9435] ntfs3(loop4): ino=1a, mi_enum_attr
[  487.374168][ T9435] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  487.682034][ T9444] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  487.682034][ T9444]    program syz.2.1027 not setting count and/or reply_len properly
[  487.717562][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1028'.
[  487.770287][ T8275] ntfs3(loop4): ino=1e, ntfs3_write_inode failed, -22.
[  488.052325][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  488.199172][ T9457] infiniband: Added to hash: ib_dev=ffff8880322a0000 (0)() ndev=ffff88805ab4a000 (16)(virt_wifi0)
[  488.210248][ T9457] siw: device registration error -23
[  488.215698][ T9457] infiniband: Removed from hash: ib_dev=ffff8880322a0000 (0)() ndev=ffff88805ab4a000 (16)(virt_wifi0)
[  488.227646][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  489.163572][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  489.345131][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  489.690961][ T9472] comedi comedi3: bad chanlist[0]=0x25dfb300 chan=45824 range length=0
[  490.211934][ T9484] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  490.211934][ T9484]    program syz.1.1041 not setting count and/or reply_len properly
[  490.274810][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  490.445726][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  490.564855][ T9483] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  490.564855][ T9483]    program syz.4.1042 not setting count and/or reply_len properly
[  491.386016][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  491.567586][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  491.969636][ T9513] loop1: detected capacity change from 0 to 512
[  492.021493][ T9513] EXT4-fs: Ignoring removed mblk_io_submit option
[  492.507854][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  492.534693][ T9513] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  492.668270][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  492.746460][ T9513] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1052: attempt to clear invalid blocks 2 len 1
[  492.883576][ T9513] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  492.892535][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  492.908524][    C1] EXT4-fs (loop1): initial error at time 1770076063: ext4_clear_blocks:876: inode 13
[  492.918142][    C1] EXT4-fs (loop1): last error at time 1770076063: ext4_clear_blocks:876: inode 13
[  492.954033][ T9513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  493.013764][ T9513] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1052: invalid indirect mapped block 1819239214 (level 0)
[  493.102398][ T9513] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  493.102914][ T9513] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1052: invalid indirect mapped block 1819239214 (level 1)
[  493.183468][ T9513] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  493.194414][ T9513] EXT4-fs (loop1): 1 truncate cleaned up
[  493.268271][ T9513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.381908][ T5820] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0
[  493.487720][ T9532] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  493.487720][ T9532]    program syz.4.1058 not setting count and/or reply_len properly
[  493.543566][ T5820] EXT4-fs error (device loop1): ext4_iget_extra_inode:5052: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  493.591028][ T5820] EXT4-fs error (device loop1): ext4_iget_extra_inode:5052: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  493.608505][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  493.779373][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  493.848090][ T9313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.148855][ T8286] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805d0b0000 (20)(syz_tun) start
[  494.201248][ T8286] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805d0b0000 (12)(syz_tun) end
[  494.584497][ T9544] loop2: detected capacity change from 0 to 256
[  494.599031][ T9544] exfat: Deprecated parameter 'utf8'
[  494.608015][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a484000 (13)(netdevsim3) start
[  494.630883][ T8286] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.665135][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a484000 (5)(netdevsim3) end
[  494.714143][ T9544] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[  494.726768][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  494.838558][ T8286] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.852084][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a628000 (5)(netdevsim2) start
[  494.881289][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a628000 (4)(netdevsim2) end
[  494.899508][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  494.972823][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a62c000 (22)(netdevsim1) start
[  495.580042][ T8286] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.633172][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a62c000 (9)(netdevsim1) end
[  495.830879][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  496.001936][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  496.104517][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a6a8000 (13)(netdevsim0) start
[  496.132987][ T8286] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.224993][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a6a8000 (5)(netdevsim0) end
[  496.782884][ T9563] loop2: detected capacity change from 0 to 64
[  496.831282][ T9563] hfs: unable to locate alternate MDB
[  496.859025][ T9563] hfs: continuing without an alternate MDB
[  496.942138][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  497.113314][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  497.386489][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  497.404214][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  497.434678][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  497.630739][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  497.637466][ T8286] bond0: left allmulticast mode
[  497.987271][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  498.042690][ T8286] bond_slave_0: left allmulticast mode
[  498.048630][ T8286] bond_slave_1: left allmulticast mode
[  498.054390][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  498.087411][ T8286] team0: left allmulticast mode
[  498.093349][ T8286] team_slave_0: left allmulticast mode
[  498.100701][ T8286] team_slave_1: left allmulticast mode
[  498.117759][ T8286] dummy0: left allmulticast mode
[  498.131024][ T8286] bridge0: port 3(bond0) entered disabled state
[  498.164098][ T8286] bridge_slave_1: left allmulticast mode
[  498.169806][ T8286] bridge_slave_1: left promiscuous mode
[  498.192460][ T8286] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.224321][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  498.261985][ T8286] bridge_slave_0: left allmulticast mode
[  498.278809][ T8286] bridge_slave_0: left promiscuous mode
[  498.304734][ T8286] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.164546][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  499.346296][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  500.286465][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  500.293948][ T5829] Bluetooth: hci1: command tx timeout
[  500.446870][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  500.447122][ T9611] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  500.447122][ T9611]    program syz.0.1083 not setting count and/or reply_len properly
[  500.625907][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805d704000 (15)(ip6gretap0) start
[  500.664519][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805d704000 (7)(ip6gretap0) end
[  501.387028][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  501.521677][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805cf44000 (12)(erspan0) start
[  501.558259][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  501.558470][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805cf44000 (7)(erspan0) end
[  501.592640][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888029746000 (13)(gretap0) start
[  501.665277][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888029746000 (5)(gretap0) end
[  502.238745][ T9635] openvswitch: netlink: IP tunnel dst address not specified
[  502.498241][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  502.669433][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  503.160875][   T29] audit: type=1326 audit(1770076072.204:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.3.1092" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff4399aeb9 code=0x0
[  503.237847][ T5829] Bluetooth: hci1: command tx timeout
[  503.609509][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  503.780688][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  503.925269][ T9639] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  503.925269][ T9639]    program syz.4.1093 not setting count and/or reply_len properly
[  504.123694][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cd1a000 (14)(geneve1) start
[  504.142152][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cd1a000 (14)(geneve1) end
[  504.216044][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cb1e000 (14)(geneve0) start
[  504.242734][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cb1e000 (7)(geneve0) end
[  504.263086][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805cb68000 (16)(bridge0) start
[  504.285187][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805cb68000 (12)(bridge0) end
[  504.362436][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034404000 (19)(bond0) start
[  504.381947][ T8286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  504.394484][ T8286] bond_slave_0: left promiscuous mode
[  504.395294][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034404000 (16)(bond0) end
[  504.422911][ T8286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  504.433848][ T8286] bond_slave_1: left promiscuous mode
[  504.444646][ T8286] bond0 (unregistering): (slave team0): Releasing backup interface
[  504.454846][ T8286] team0: left promiscuous mode
[  504.460091][ T8286] team_slave_0: left promiscuous mode
[  504.466894][ T8286] team_slave_1: left promiscuous mode
[  504.480109][ T8286] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  504.490010][ T8286] dummy0: left promiscuous mode
[  504.512181][ T8286] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  504.523206][ T8286] veth1_vlan: left allmulticast mode
[  504.535559][ T8286] bond0 (unregistering): Released all slaves
[  504.725162][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  504.754609][ T9635] team0 (unregistering): Port device team_slave_0 removed
[  504.766781][ T9635] team0 (unregistering): Port device team_slave_1 removed
[  504.781105][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (29)(veth1_to_team) cookie=ffff888036cac000 (9)(team0) start
[  504.800634][ T5826] syz2: Port: 1 Link DOWN
[  505.308183][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888036cac000 (6)(team0) end
[  505.344427][ T8286] tipc: Disabling bearer <udp:s>
[  505.371648][ T8286] tipc: Left network mode
[  505.443911][ T9567] lo speed is unknown, defaulting to 1000
[  505.479529][ T5829] Bluetooth: hci1: command tx timeout
[  505.539045][ T9567] virt_wifi0 speed is unknown, defaulting to 1000
[  505.672062][   T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  505.728905][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806ed40000 (11)(wlan1) start
[  505.831937][    C1] net_ratelimit: 1 callbacks suppressed
[  505.831959][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  505.896212][   T24] usb 5-1: Using ep0 maxpacket: 8
[  506.065052][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806ed40000 (4)(wlan1) end
[  506.144739][   T24] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  506.154632][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.177881][   T24] usb 5-1: Product: syz
[  506.182740][   T24] usb 5-1: Manufacturer: syz
[  506.189178][   T24] usb 5-1: SerialNumber: syz
[  506.252475][   T24] usb 5-1: config 0 descriptor??
[  506.266363][   T24] gspca_main: sq930x-2.14.0 probing 2770:930c
[  506.416828][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806e63c000 (11)(wlan0) start
[  506.497319][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806e63c000 (3)(wlan0) end
[  506.943158][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  506.961623][   T24] gspca_sq930x: reg_w 0305 fd00 failed -71
[  506.986368][   T24] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  507.017982][   T24] usb 5-1: USB disconnect, device number 10
[  507.627128][ T5829] Bluetooth: hci1: command tx timeout
[  508.065090][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  508.204449][ T9695] ufs: You didn't specify the type of your ufs filesystem
[  508.204449][ T9695] 
[  508.204449][ T9695] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  508.204449][ T9695] 
[  508.204449][ T9695] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  508.236726][ T9695] ufs: ufstype=old is supported read-only
[  508.955160][ T9663] loop2: detected capacity change from 0 to 32768
[  509.115801][ T9663] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  509.165616][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  509.216435][ T8286] hsr_slave_0: left promiscuous mode
[  509.236786][ T8286] hsr_slave_1: left promiscuous mode
[  509.258377][ T9663] XFS (loop2): Ending clean mount
[  509.271029][ T8286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.312136][ T8286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.321164][ T9663] XFS (loop2): Quotacheck needed: Please wait.
[  509.353280][ T8286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.416311][ T8286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.505448][ T8286] veth1_macvtap: left promiscuous mode
[  509.515913][ T8286] veth0_macvtap: left promiscuous mode
[  509.516003][ T9663] XFS (loop2): Quotacheck: Done.
[  509.521761][ T8286] veth1_vlan: left promiscuous mode
[  509.534429][ T8286] veth0_vlan: left promiscuous mode
[  509.621503][ T9716] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  509.621503][ T9716]    program syz.4.1111 not setting count and/or reply_len properly
[  509.653740][ T5817] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  509.919575][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cd6a000 (4)(macsec1) start
[  510.030886][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cd6a000 (4)(macsec1) end
[  510.138382][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888079762000 (4)(macvlan4) start
[  510.218292][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888079762000 (4)(macvlan4) end
[  510.269039][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888057c24000 (4)(macvlan3) start
[  510.286505][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  510.749755][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888057c24000 (4)(macvlan3) end
[  510.792180][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880599bc000 (4)(macvlan2) start
[  510.865727][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880599bc000 (4)(macvlan2) end
[  510.893274][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cfa8000 (6)(macsec0) start
[  510.923747][ T8288] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cfa8000 (6)(macsec0) end
[  510.974087][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888033f64000 (5)(macvtap0) start
[  510.998456][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888033f64000 (5)(macvtap0) end
[  511.182020][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806f50c000 (7)(veth0_macvtap) start
[  511.201788][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806f50c000 (7)(veth0_macvtap) end
[  511.225002][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806f50a000 (7)(veth1_macvtap) start
[  511.239619][  T978] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  511.310833][ T9735] ufs: You didn't specify the type of your ufs filesystem
[  511.310833][ T9735] 
[  511.310833][ T9735] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  511.310833][ T9735] 
[  511.310833][ T9735] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  511.342796][ T9735] ufs: ufstype=old is supported read-only
[  511.388072][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  511.498732][ T9735] ufs: ufs_fill_super(): bad magic number
[  511.859371][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88806f50a000 (7)(veth1_macvtap) end
[  511.879667][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807c48c000 (6)(ipvlan1) start
[  511.898149][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807c48c000 (6)(ipvlan1) end
[  511.925730][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c210000 (6)(ipvlan0) start
[  511.945440][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c210000 (6)(ipvlan0) end
[  511.964094][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805ab04000 (5)(macvlan1) start
[  512.027383][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805ab04000 (5)(macvlan1) end
[  512.034220][  T978] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[  512.046507][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880321ec000 (5)(macvlan0) start
[  512.116590][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880321ec000 (5)(macvlan0) end
[  512.116790][  T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.194900][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cfca000 (6)(vlan1) start
[  512.226610][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cfca000 (6)(vlan1) end
[  512.244134][  T978] usb 3-1: config 0 descriptor??
[  512.263656][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a94c000 (6)(vlan0) start
[  512.281917][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a94c000 (6)(vlan0) end
[  512.300611][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d32a000 (8)(veth0_vlan) start
[  512.499304][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  512.577044][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d32a000 (8)(veth0_vlan) end
[  512.596200][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d328000 (8)(veth1_vlan) start
[  512.614919][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d328000 (8)(veth1_vlan) end
[  512.615806][ T8286] team0 (unregistering): Port device team_slave_1 removed
[  513.002356][  T978] viewsonic 0003:2133:0018.0006: hidraw0: USB HID v1.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0
[  513.238367][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807ce5a000 (6)(virt_wifi0) start
[  513.280918][  T978] usb 3-1: USB disconnect, device number 12
[  513.305743][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807ce5a000 (6)(virt_wifi0) end
[  513.331104][ T8286] team0 (unregistering): Port device team_slave_0 removed
[  513.374406][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a832000 (6)(veth0_virt_wifi) start
[  513.419577][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a832000 (6)(veth0_virt_wifi) end
[  513.469679][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a830000 (6)(veth1_virt_wifi) start
[  513.501338][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a830000 (6)(veth1_virt_wifi) end
[  513.544625][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805cfd8000 (5)(hsr0) start
[  513.585452][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805cfd8000 (5)(hsr0) end
[  513.621309][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  513.640003][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cf20000 (5)(hsr_slave_1) start
[  513.696430][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807cf20000 (5)(hsr_slave_1) end
[  513.739947][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c800000 (6)(veth1_to_hsr) start
[  513.761971][ T9745] fido_id[9745]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  513.782562][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c800000 (6)(veth1_to_hsr) end
[  513.782760][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805b260000 (5)(hsr_slave_0) start
[  513.782807][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805b260000 (5)(hsr_slave_0) end
[  513.782891][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c53e000 (6)(veth0_to_hsr) start
[  513.782937][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c53e000 (6)(veth0_to_hsr) end
[  513.783074][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d3e4000 (6)(batadv_slave_1) start
[  513.783117][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d3e4000 (6)(batadv_slave_1) end
[  513.783252][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d3e2000 (6)(veth1_to_batadv) start
[  513.783296][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d3e2000 (6)(veth1_to_batadv) end
[  513.783433][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888022b8c000 (6)(batadv_slave_0) start
[  513.783477][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888022b8c000 (6)(batadv_slave_0) end
[  513.828742][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807ca18000 (6)(veth0_to_batadv) start
[  513.830035][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807ca18000 (6)(veth0_to_batadv) end
[  513.838780][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888032140000 (10)(team_slave_1) start
[  514.084489][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888032140000 (10)(team_slave_1) end
[  514.095689][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d3ce000 (6)(veth1_to_team) start
[  514.132877][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807d3ce000 (6)(veth1_to_team) end
[  514.152914][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807c9e4000 (10)(team_slave_0) start
[  514.172866][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807c9e4000 (10)(team_slave_0) end
[  514.193283][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807c9e2000 (9)(veth0_to_team) start
[  514.238932][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807c9e2000 (9)(veth0_to_team) end
[  514.257525][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88802bfc0000 (4)(bond_slave_1) start
[  514.278503][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88802bfc0000 (4)(bond_slave_1) end
[  514.310370][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880318fe000 (5)(veth1_to_bond) start
[  514.332254][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1123'.
[  514.341916][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880318fe000 (5)(veth1_to_bond) end
[  514.365243][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888079a3e000 (4)(bond_slave_0) start
[  514.385981][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888079a3e000 (4)(bond_slave_0) end
[  514.409465][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888079a3c000 (5)(veth0_to_bond) start
[  514.433486][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888079a3c000 (5)(veth0_to_bond) end
[  514.455920][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034972000 (5)(bridge_slave_1) start
[  514.478646][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'.
[  514.507313][ T9752] loop2: detected capacity change from 0 to 1024
[  514.515187][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034972000 (5)(bridge_slave_1) end
[  514.610610][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034970000 (6)(veth1_to_bridge) start
[  514.631670][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034970000 (6)(veth1_to_bridge) end
[  514.653961][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034578000 (5)(bridge_slave_0) start
[  514.679547][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034578000 (5)(bridge_slave_0) end
[  514.698978][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034596000 (6)(veth0_to_bridge) start
[  514.721846][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  514.878924][ T8292] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888034596000 (6)(veth0_to_bridge) end
[  515.507910][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (29)(veth1_to_team) cookie=ffff88803504a000 (13)(veth1) start
[  515.542109][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88803504a000 (8)(veth1) end
[  515.584467][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888035048000 (8)(veth0) start
[  515.604806][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888035048000 (6)(veth0) end
[  515.833151][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  515.848490][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888035084000 (14)(batadv0) start
[  516.449528][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888035084000 (4)(batadv0) end
[  516.468088][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888036472000 (4)(dummy0) start
[  516.485579][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888036472000 (4)(dummy0) end
[  516.517097][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888035080000 (4)(team0) start
[  516.559647][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888035080000 (4)(team0) end
[  516.790029][ T9567] chnl_net:caif_netlink_parms(): no params data found
[  516.819368][ T9767] loop2: detected capacity change from 0 to 2048
[  516.865032][ T9767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  516.955049][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  517.166189][ T5826] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  517.439177][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  517.446108][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  517.531902][ T5826] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  518.055442][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  518.198944][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'.
[  518.210070][ T5826] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  518.225497][ T5826] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  518.239585][ T5826] usb 5-1: config 0 interface 0 has no altsetting 0
[  518.261636][ T5826] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  518.287239][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.300609][ T5826] usb 5-1: config 0 descriptor??
[  518.323344][ T9765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  518.571285][ T5826] usbhid 5-1:0.0: can't add hid device: -71
[  518.577522][ T5826] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  518.615745][ T5826] usb 5-1: USB disconnect, device number 11
[  518.891412][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.902157][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.909677][ T9567] bridge_slave_0: entered allmulticast mode
[  518.927714][ T9567] bridge_slave_0: entered promiscuous mode
[  518.938186][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.953418][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.978049][ T9567] bridge_slave_1: entered allmulticast mode
[  518.995167][ T9567] bridge_slave_1: entered promiscuous mode
[  519.014080][ T8286] IPVS: stop unused estimator thread 0...
[  519.061118][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.077249][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.081725][  T978] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  519.166685][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  519.257449][ T9567] team0: Port device team_slave_0 added
[  519.276394][  T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.292752][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1133'.
[  519.330815][  T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.365286][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1133'.
[  519.426971][  T978] usb 3-1: New USB device found, idVendor=a86d, idProduct=c626, bcdDevice= 0.00
[  519.463562][ T9805] loop4: detected capacity change from 0 to 1024
[  519.510873][  T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.778804][  T978] usb 3-1: config 0 descriptor??
[  520.277943][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  520.488428][ T9567] team0: Port device team_slave_1 added
[  520.583304][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.591037][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.601773][  T978] hid-generic 0003:A86D:C626.0007: unbalanced collection at end of report description
[  520.619009][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.778970][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.792106][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.897163][ T9809] ufs: You didn't specify the type of your ufs filesystem
[  520.897163][ T9809] 
[  520.897163][ T9809] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  520.897163][ T9809] 
[  520.897163][ T9809] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  520.929535][ T9809] ufs: ufstype=old is supported read-only
[  521.399926][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  521.458244][  T978] hid-generic 0003:A86D:C626.0007: probe with driver hid-generic failed with error -22
[  521.469674][ T9809] ufs: ufs_fill_super(): bad magic number
[  521.484727][  T978] usb 3-1: USB disconnect, device number 13
[  521.491788][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.449411][ T9567] hsr_slave_0: entered promiscuous mode
[  522.500360][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  522.596724][ T9567] hsr_slave_1: entered promiscuous mode
[  522.708686][ T9567] debugfs: 'hsr0' already exists in 'hsr'
[  522.767944][ T9567] Cannot create hsr debugfs directory
[  523.611599][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  523.767892][ T9833] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  523.767892][ T9833]    program syz.2.1137 not setting count and/or reply_len properly
[  524.722842][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  525.071426][ T9567] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  525.140982][ T9567] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  525.246937][ T9858] ufs: You didn't specify the type of your ufs filesystem
[  525.246937][ T9858] 
[  525.246937][ T9858] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  525.246937][ T9858] 
[  525.246937][ T9858] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  525.279569][ T9858] ufs: ufstype=old is supported read-only
[  525.834131][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  525.951341][ T9567] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  526.063591][ T9863] loop4: detected capacity change from 0 to 512
[  526.095366][ T9567] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  526.104402][ T9863] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  526.179405][ T9863] EXT4-fs (loop4): 1 truncate cleaned up
[  526.209557][ T9863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  526.243198][ T9863] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #2: block 13: comm syz.4.1147: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  526.308437][ T9863] EXT4-fs (loop4): Remounting filesystem read-only
[  526.402932][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.720391][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.955993][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  527.015681][ T9567] 8021q: adding VLAN 0 to HW filter on device team0
[  527.145398][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.152798][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  527.350323][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.358155][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  527.730603][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'.
[  528.056579][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  528.427909][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1157'.
[  528.511571][ T9914] infiniband: Added to hash: ib_dev=ffff88807dbe8000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  528.523003][ T9914] siw: device registration error -23
[  528.528474][ T9914] infiniband: Removed from hash: ib_dev=ffff88807dbe8000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  529.147438][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'.
[  529.167796][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  529.238069][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.290260][ T9922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'.
[  529.342299][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'.
[  529.514421][ T9923] loop4: detected capacity change from 0 to 1024
[  529.538958][ T9924] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  529.538958][ T9924]    program syz.0.1159 not setting count and/or reply_len properly
[  530.279005][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  530.642457][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  530.642476][ T5829] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  531.390240][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  531.814964][ T9567] veth0_vlan: entered promiscuous mode
[  531.861640][ T9567] veth1_vlan: entered promiscuous mode
[  531.987611][ T9567] veth0_macvtap: entered promiscuous mode
[  532.028964][ T9567] veth1_macvtap: entered promiscuous mode
[  532.107864][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_0
[  532.151068][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.153717][ T9948] loop2: detected capacity change from 0 to 32768
[  532.213563][   T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.235047][ T9948] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  532.238588][   T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.268424][ T5915] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  532.283670][   T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.324162][   T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.392337][ T9948] XFS (loop2): Ending clean mount
[  532.420119][ T9948] XFS (loop2): Quotacheck needed: Please wait.
[  532.440977][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  532.489994][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.501553][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  532.544197][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  532.563578][ T8286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.573433][ T5915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  532.589587][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.591958][ T8286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.606508][ T5915] usb 5-1: config 0 descriptor??
[  532.619066][ T9948] XFS (loop2): Quotacheck: Done.
[  532.744128][ T5817] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  532.755755][ T8286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.764055][ T8286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.169315][ T5915] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  533.279894][ T5912] usb 5-1: USB disconnect, device number 12
[  533.436503][ T9969] fido_id[9969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  533.623432][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  533.787832][ T9984] infiniband: Added to hash: ib_dev=ffff88807dbec000 (0)() ndev=ffff88805ab4a000 (16)(virt_wifi0)
[  533.798982][ T9984] siw: device registration error -23
[  533.804466][ T9984] infiniband: Removed from hash: ib_dev=ffff88807dbec000 (0)() ndev=ffff88805ab4a000 (16)(virt_wifi0)
[  534.723892][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  535.629991][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1179'.
[  535.699892][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'.
[  535.713338][T10000] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  535.713338][T10000]    program syz.5.1180 not setting count and/or reply_len properly
[  535.835147][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  535.903166][T10001] loop4: detected capacity change from 0 to 1024
[  536.946362][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  538.057582][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  538.450903][T10021] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  538.450903][T10021]    program syz.4.1184 not setting count and/or reply_len properly
[  538.518169][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1185'.
[  538.915096][T10037] loop2: detected capacity change from 0 to 64
[  539.169105][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  539.954304][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'.
[  540.028015][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'.
[  540.098734][T10053] loop2: detected capacity change from 0 to 1024
[  540.280042][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  541.391280][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  542.502598][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  543.613723][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  544.735649][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  544.918147][T10076] netlink: 'syz.2.1202': attribute type 2 has an invalid length.
[  545.009268][T10078] ufs: You didn't specify the type of your ufs filesystem
[  545.009268][T10078] 
[  545.009268][T10078] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  545.009268][T10078] 
[  545.009268][T10078] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  545.040720][T10078] ufs: ufstype=old is supported read-only
[  545.220525][T10070] loop5: detected capacity change from 0 to 4096
[  545.691436][T10070] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  545.846869][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  545.955788][T10070] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  545.993535][T10067] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  546.113154][ T5970] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  546.148976][T10093] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  546.148976][T10093]    program syz.4.1206 not setting count and/or reply_len properly
[  546.166707][ T9567] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  546.175234][ T9567] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  546.182803][ T9567] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  546.190655][   T77] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  546.947435][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  547.819916][T10123] loop2: detected capacity change from 0 to 1024
[  547.975546][T10123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  548.058937][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  548.150205][   T29] audit: type=1800 audit(1770076115.021:121): pid=10123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1211" name="file2" dev="loop2" ino=16 res=0 errno=0
[  548.367888][T10136] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  548.367888][T10136]    program syz.0.1214 not setting count and/or reply_len properly
[  549.127194][T10150] loop4: detected capacity change from 0 to 512
[  549.169875][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  549.379166][T10150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.153067][T10150] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  550.281132][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  550.290850][   T29] audit: type=1800 audit(1770076117.024:122): pid=10150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1220" name="file1" dev="loop4" ino=15 res=0 errno=0
[  550.422272][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.978585][T10186] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  550.978585][T10186]    program syz.5.1230 not setting count and/or reply_len properly
[  551.358346][T10197] loop5: detected capacity change from 0 to 1024
[  551.392330][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  551.534206][ T5970] hfsplus: b-tree write err: -5, ino 4
[  551.584722][  T978] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  551.731629][T10208] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  551.731629][T10208]    program syz.5.1240 not setting count and/or reply_len properly
[  551.777161][  T978] usb 5-1: Using ep0 maxpacket: 16
[  551.790003][  T978] usb 5-1: config 0 interface 0 has no altsetting 0
[  551.797074][  T978] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  551.807184][  T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.825864][  T978] usb 5-1: config 0 descriptor??
[  552.277429][  T978] megaworld 0003:07B5:0312.0009: unbalanced collection at end of report description
[  552.288402][  T978] megaworld 0003:07B5:0312.0009: parse failed
[  552.295290][  T978] megaworld 0003:07B5:0312.0009: probe with driver megaworld failed with error -22
[  552.491630][  T978] usb 5-1: USB disconnect, device number 13
[  552.496927][T10214] loop5: detected capacity change from 0 to 1024
[  552.504595][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  552.614319][ T8275] hfsplus: b-tree write err: -5, ino 4
[  552.682320][T10219] loop5: detected capacity change from 0 to 64
[  552.711351][T10219] hfs: get root inode failed
[  552.895734][ T5829] Bluetooth: hci4: unexpected event for opcode 0x042e
[  552.945703][T10230] tipc: Started in network mode
[  552.950850][T10230] tipc: Node identity 40000000000000000000000000000001, cluster identity 4711
[  552.995172][T10230] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  553.163821][T10238] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  553.163821][T10238]    program syz.2.1253 not setting count and/or reply_len properly
[  553.614924][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  553.681731][T10254] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  553.681731][T10254]    program syz.5.1260 not setting count and/or reply_len properly
[  554.726049][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  555.847938][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  556.409885][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1274'.
[  556.948791][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  557.121138][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1274'.
[  557.179434][T10290] loop5: detected capacity change from 0 to 1024
[  558.059729][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  559.171010][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  559.371490][T10303] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  559.371490][T10303]    program syz.0.1278 not setting count and/or reply_len properly
[  560.292948][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  560.780677][T10306] loop4: detected capacity change from 0 to 512
[  561.049282][T10306] EXT4-fs (loop4): first meta block group too large: 3 (group descriptor block count 1)
[  561.393389][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  561.716132][T10311] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  561.716132][T10311]    program syz.5.1279 not setting count and/or reply_len properly
[  562.176065][T10331] loop4: detected capacity change from 0 to 1024
[  562.448594][ T5912] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  562.504624][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  562.622450][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  562.867725][ T5915] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  562.972883][ T5912] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  562.987696][ T5912] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34
[  562.997508][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.005536][ T5912] usb 6-1: Product: syz
[  563.016937][ T5912] usb 6-1: Manufacturer: syz
[  563.037708][ T5912] usb 6-1: SerialNumber: syz
[  563.074214][   T13] hfsplus: b-tree write err: -5, ino 4
[  563.117205][ T5915] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  563.149981][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0
[  563.187207][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  563.221310][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  563.240655][ T5915] usb 3-1: Product: syz
[  563.249085][ T5915] usb 3-1: Manufacturer: syz
[  563.256822][ T5915] usb 3-1: SerialNumber: syz
[  563.266853][ T5915] usb 3-1: config 0 descriptor??
[  563.284963][ T5915] usb 3-1: selecting invalid altsetting 0
[  563.331980][ T5912] peak_usb 6-1:255.0 can0: unable to request usb[type=0 value=1] err=-71
[  563.343172][ T5912] peak_usb 6-1:255.0: unable to read PCAN-USB Pro FD firmware info (err -71)
[  563.456790][ T5912] peak_usb 6-1:255.0: probe with driver peak_usb failed with error -71
[  563.549431][ T5912] usb 6-1: USB disconnect, device number 2
[  563.616166][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  564.065640][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'.
[  564.074357][ T5915] usb 3-1: USB disconnect, device number 14
[  564.229645][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'.
[  564.275979][T10361] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  564.727204][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  565.838640][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  565.876396][T10380] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  565.876396][T10380]    program syz.2.1305 not setting count and/or reply_len properly
[  565.988225][T10390] ufs: You didn't specify the type of your ufs filesystem
[  565.988225][T10390] 
[  565.988225][T10390] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  565.988225][T10390] 
[  565.988225][T10390] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  566.020272][T10390] ufs: ufstype=old is supported read-only
[  566.949685][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  567.136234][T10389] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  567.136234][T10389]    program syz.4.1310 not setting count and/or reply_len properly
[  567.281449][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1312'.
[  567.358907][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1312'.
[  567.451552][T10405] loop5: detected capacity change from 0 to 1024
[  568.060970][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  569.172194][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  569.695416][T10411] macvlan2: entered promiscuous mode
[  569.725501][T10411] macvlan2: entered allmulticast mode
[  569.797805][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888036472000 (7)(macvlan2) start
[  569.850632][   T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff888036472000 (3)(macvlan2) end
[  569.913832][T10420] bridge0: Device is already in use.
[  570.100271][T10424] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  570.100271][T10424]    program syz.5.1322 not setting count and/or reply_len properly
[  570.283476][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  570.414229][T10428] ufs: You didn't specify the type of your ufs filesystem
[  570.414229][T10428] 
[  570.414229][T10428] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  570.414229][T10428] 
[  570.414229][T10428] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  570.446430][T10428] ufs: ufstype=old is supported read-only
[  571.066849][T10428] ufs: ufs_fill_super(): bad magic number
[  571.394721][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  572.506202][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  573.617243][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  574.115548][T10469] loop5: detected capacity change from 0 to 512
[  574.195727][T10469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  574.230807][T10469] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  574.400864][ T9567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  574.612376][T10480] loop4: detected capacity change from 0 to 128
[  574.654103][T10480] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  574.678233][T10480] hpfs: filesystem error: improperly stopped
[  574.684631][T10480] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  574.695542][T10480] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  574.739111][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  574.772592][T10480] hpfs: You really don't want any checks? You are crazy...
[  575.117597][T10480] hpfs: hpfs_map_sector(): read error
[  575.123036][T10480] hpfs: code page support is disabled
[  575.131086][T10480] hpfs: hpfs_map_4sectors(): unaligned read
[  575.198576][T10480] hpfs: hpfs_map_4sectors(): unaligned read
[  575.204973][T10480] hpfs: filesystem error: unable to find root dir
[  575.550278][T10489] lo speed is unknown, defaulting to 1000
[  575.669443][T10489] virt_wifi0 speed is unknown, defaulting to 1000
[  575.839569][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  576.149373][ T5912] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  576.331331][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  576.364035][ T5912] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  576.435665][ T5912] usb 6-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  576.554172][ T5912] usb 6-1: config 0 interface 0 has no altsetting 0
[  576.620788][ T5912] usb 6-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00
[  576.666530][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.696875][ T5912] usb 6-1: config 0 descriptor??
[  576.895768][T10510] netlink: 'syz.3.1356': attribute type 1 has an invalid length.
[  576.910270][T10510] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1356'.
[  576.922566][T10510] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1356'.
[  576.950801][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  577.249543][ T5970] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a68c000 (11)(erspan0) start
[  577.270456][  T978] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  577.287643][ T5970] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805a68c000 (4)(erspan0) end
[  577.308648][ T5970] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88804aae2000 (4)(gretap0) start
[  577.329013][ T5970] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88804aae2000 (3)(gretap0) end
[  577.437310][   T10] usb 6-1: USB disconnect, device number 3
[  577.468633][  T978] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  577.492668][  T978] usb 5-1: config 0 has no interface number 0
[  577.522946][  T978] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  577.548165][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.574888][  T978] usb 5-1: Product: syz
[  577.579484][  T978] usb 5-1: Manufacturer: syz
[  577.593933][  T978] usb 5-1: SerialNumber: syz
[  577.634498][  T978] usb 5-1: config 0 descriptor??
[  577.873873][  T978] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  577.887751][  T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  577.906104][  T978] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  577.917496][  T978] usb 5-1: media controller created
[  577.937012][  T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  577.992099][T10525] futex_wake_op: syz.0.1364 tries to shift op by -1; fix this program
[  578.061935][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  578.089867][  T978] usb 5-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)...
[  578.112355][  T978] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered.
[  578.604138][  T978] DVB: Unable to find symbol mxl5005s_attach()
[  579.068281][T10544] loop4: detected capacity change from 0 to 128
[  579.104528][  T978] usb 5-1: USB disconnect, device number 14
[  579.173280][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  579.861080][T10572] ªªªªªª: renamed from vlan0 (while UP)
[  579.869835][  T978] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  579.931761][ T5826] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  580.179207][  T978] usb 6-1: Using ep0 maxpacket: 32
[  580.284393][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  580.295667][  T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  580.345827][  T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  580.376961][  T978] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  580.411826][  T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.524038][  T978] usb 6-1: config 0 descriptor??
[  580.595457][  T978] hub 6-1:0.0: USB hub found
[  580.798570][  T978] hub 6-1:0.0: 29 ports detected
[  580.805372][  T978] hub 6-1:0.0: insufficient power available to use all downstream ports
[  580.915261][ T5826] usb 3-1: Using ep0 maxpacket: 32
[  580.924748][ T5826] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  580.937007][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.945886][ T5826] usb 3-1: Product: syz
[  580.950595][ T5826] usb 3-1: Manufacturer: syz
[  580.955653][ T5826] usb 3-1: SerialNumber: syz
[  580.964802][ T5826] usb 3-1: config 0 descriptor??
[  581.196720][ T5826] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 015
[  581.279273][  T978] usb 6-1: USB disconnect, device number 4
[  581.386928][T10599] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1392'.
[  581.396533][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  581.410153][ T5883] usb 3-1: USB disconnect, device number 15
[  581.926114][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'.
[  581.953965][T10610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'.
[  582.506906][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  582.941286][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  582.948023][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  583.218099][T10626] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  583.391028][T10633] loop8: detected capacity change from 0 to 1
[  583.455464][ T5826] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  583.530396][T10634] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  583.530396][T10634]    program syz.5.1407 not setting count and/or reply_len properly
[  583.578833][T10633] Dev loop8: unable to read RDB block 1
[  583.618197][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  583.709378][ T5826] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  583.721049][ T5826] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  583.724181][T10633]  loop8: unable to read partition table
[  583.731719][ T5826] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  583.748527][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.810891][T10633] loop8: partition table beyond EOD, truncated
[  583.862356][T10627] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  583.916777][T10633] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  584.091374][ T5826] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  584.378314][ T5826] usb 3-1: USB disconnect, device number 16
[  584.391532][T10638] lo speed is unknown, defaulting to 1000
[  584.418024][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1410'.
[  584.434669][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'.
[  584.461421][T10642] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  584.461421][T10642]    program syz.5.1411 not setting count and/or reply_len properly
[  584.482105][T10640] loop4: detected capacity change from 0 to 1024
[  584.631123][T10638] virt_wifi0 speed is unknown, defaulting to 1000
[  584.729352][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  585.840586][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  585.997865][T10657] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  585.997865][T10657]    program syz.2.1416 not setting count and/or reply_len properly
[  586.541226][T10663] loop5: detected capacity change from 0 to 256
[  586.585726][T10663] exfat: Deprecated parameter 'namecase'
[  586.619843][T10663] exfat: Deprecated parameter 'utf8'
[  586.720787][T10663] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  586.951821][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  587.298971][T10668] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  587.298971][T10668]    program syz.5.1422 not setting count and/or reply_len properly
[  587.725457][T10675] kvm: kvm [10674]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x7
[  587.765953][   T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807db5a000 (4)(erspan0) start
[  587.805124][   T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88807db5a000 (4)(erspan0) end
[  587.830664][   T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880324ce000 (4)(gretap0) start
[  587.856358][   T35] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880324ce000 (4)(gretap0) end
[  588.062994][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  588.532573][T10682] loop4: detected capacity change from 0 to 512
[  588.622815][T10682] EXT4-fs (loop4): 1 truncate cleaned up
[  588.684559][T10682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  588.815255][   T29] audit: type=1800 audit(1770076153.084:123): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1428" name="file1" dev="loop4" ino=15 res=0 errno=0
[  588.836930][T10682] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1428: bg 0: block 465: padding at end of block bitmap is not set
[  588.869086][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1429'.
[  588.964985][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1429'.
[  589.006226][T10694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  589.013716][T10694] IPv6: NLM_F_CREATE should be set when creating new route
[  589.174278][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  590.285448][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  590.379999][T10693] loop5: detected capacity change from 0 to 1024
[  590.552954][ T5824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.615881][T10701] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  590.999599][  T978] hid-generic 0005:04F3:1012.000B: item fetching failed at offset 0/1
[  591.015700][  T978] hid-generic 0005:04F3:1012.000B: probe with driver hid-generic failed with error -22
[  591.277184][T10717] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  591.277184][T10717]    program syz.5.1436 not setting count and/or reply_len properly
[  591.407418][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  591.884217][T10721] loop4: detected capacity change from 0 to 64
[  591.884953][T10720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1442'.
[  591.936363][T10721] hfs: get root inode failed
[  592.289984][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1447'.
[  592.373043][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1447'.
[  592.403887][T10736] loop5: detected capacity change from 0 to 1024
[  592.454523][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  592.508859][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  592.657915][ T5912] usb 5-1: Using ep0 maxpacket: 32
[  592.683072][ T5912] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  592.741836][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.055326][ T5912] gspca_main: nw80x-2.14.0 probing 055f:d001
[  593.619158][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  593.725406][ T5912] gspca_nw80x: reg_w err -110
[  593.731587][ T5912] nw80x 5-1:3.0: probe with driver nw80x failed with error -110
[  594.005959][T10747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  594.396153][T10751] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  594.396153][T10751]    program syz.2.1453 not setting count and/or reply_len properly
[  594.730392][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  594.913005][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  594.921892][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  594.940851][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  594.978080][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  594.998730][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  595.015124][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  595.035424][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  595.069830][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  595.079810][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  595.091522][ T5883] hid-generic 0103:0004:0000.000C: unknown main item tag 0x0
[  595.119117][ T5883] hid-generic 0103:0004:0000.000C: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  595.167663][T10767] infiniband: Added to hash: ib_dev=ffff88804e76c000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  595.179536][T10767] siw: device registration error -23
[  595.184950][T10767] infiniband: Removed from hash: ib_dev=ffff88804e76c000 (0)() ndev=ffff88805ab9a000 (18)(virt_wifi0)
[  595.211715][  T978] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  595.385522][  T978] usb 3-1: Using ep0 maxpacket: 16
[  595.401989][  T978] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  595.452682][  T978] usb 3-1: config 0 has no interface number 0
[  595.460842][T10765] fido_id[10765]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  595.474434][T10769] loop5: detected capacity change from 0 to 2048
[  595.495805][  T978] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  595.512986][ T5883] usb 5-1: USB disconnect, device number 15
[  595.522147][T10769] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  595.548309][  T978] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  595.588411][  T978] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  595.590147][ T5873] udevd[5873]: incorrect nilfs2 checksum on /dev/loop5
[  595.605876][T10772] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  595.622107][  T978] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  595.648749][  T978] usb 3-1: Product: syz
[  595.664794][  T978] usb 3-1: SerialNumber: syz
[  595.690493][  T978] usb 3-1: config 0 descriptor??
[  595.724948][  T978] cm109 3-1:0.8: invalid payload size 0, expected 4
[  595.824842][  T978] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9
[  595.841603][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  595.876204][T10776] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  595.876204][T10776]    program syz.4.1461 not setting count and/or reply_len properly
[  595.950446][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  595.950830][ T5912] usb 3-1: USB disconnect, device number 17
[  595.958806][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  596.051607][ T5912] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  596.337258][T10789] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  596.337258][T10789]    program syz.5.1466 not setting count and/or reply_len properly
[  596.952822][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  596.983105][T10798] lo speed is unknown, defaulting to 1000
[  596.995159][T10798] virt_wifi0 speed is unknown, defaulting to 1000
[  597.208345][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1473'.
[  597.283996][ T5826] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  597.565269][T10810] infiniband: Added to hash: ib_dev=ffff888079890000 (0)() ndev=ffff888034316000 (16)(virt_wifi0)
[  597.717321][ T5826] usb 3-1: Using ep0 maxpacket: 8
[  597.748101][ T5826] usb 3-1: config 0 has no interfaces?
[  597.768741][ T5826] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  597.796913][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.836668][ T5826] usb 3-1: config 0 descriptor??
[  597.842929][T10810] siw: device registration error -23
[  597.848876][T10810] infiniband: Removed from hash: ib_dev=ffff888079890000 (0)() ndev=ffff888034316000 (16)(virt_wifi0)
[  598.064076][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  598.151151][ T5883] usb 3-1: USB disconnect, device number 18
[  598.401797][T10819] loop5: detected capacity change from 0 to 4096
[  598.416310][T10819] EXT4-fs: inline encryption not supported
[  598.458700][T10819] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  598.490735][T10819] fs-verity (loop5, inode 13): Unsupported log_blocksize: 13
[  598.559185][ T9567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.820197][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805db62000 (5)(erspan0) start
[  598.880499][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805db62000 (4)(erspan0) end
[  598.921674][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805903e000 (4)(gretap0) start
[  598.990494][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805903e000 (3)(gretap0) end
[  599.041451][T10832] program syz.5.1482 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  599.185979][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  599.309216][T10833] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  599.309216][T10833]    program syz.4.1481 not setting count and/or reply_len properly
[  599.602056][   T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  599.994557][   T24] usb 3-1: Using ep0 maxpacket: 8
[  600.009237][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  600.040547][   T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  600.286536][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  600.705673][   T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  600.884908][   T24] usb 3-1: Product: syz
[  600.889464][   T24] usb 3-1: Manufacturer: syz
[  600.940904][   T24] usb 3-1: SerialNumber: syz
[  601.180973][T10855] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  601.180973][T10855]    program syz.4.1491 not setting count and/or reply_len properly
[  601.198430][   T24] usb 3-1: Handspring Visor / Palm OS: No valid connect info available
[  601.198479][   T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  601.198500][   T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  601.198519][   T24] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  601.388953][T10857] lo speed is unknown, defaulting to 1000
[  601.397995][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  601.411074][T10857] virt_wifi0 speed is unknown, defaulting to 1000
[  601.420746][   T24] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[  601.522007][   T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  602.033151][   T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  602.065988][   T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  602.095965][   T24] usb 3-1: USB disconnect, device number 19
[  602.154856][   T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  602.257580][   T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  602.341419][   T24] visor 3-1:1.0: device disconnected
[  602.508958][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  602.660791][T10871] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  602.660791][T10871]    program syz.2.1495 not setting count and/or reply_len properly
[  603.630908][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  603.876586][   T51] Bluetooth: hci1: command 0x0405 tx timeout
[  604.072187][T10879] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  604.072187][T10879]    program syz.0.1497 not setting count and/or reply_len properly
[  604.469719][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1498'.
[  604.518732][T10881] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1498'.
[  604.731842][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  605.853346][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  606.588297][T10899] loop5: detected capacity change from 0 to 256
[  606.696758][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c0a6000 (11)(erspan0) start
[  606.788969][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff88805c0a6000 (4)(erspan0) end
[  606.842889][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880321f8000 (4)(gretap0) start
[  606.888121][ T8275] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888036660000 (13)(syz2) rdma_ndev=ffff88805b126000 (28)(veth1_to_team) cookie=ffff8880321f8000 (4)(gretap0) end
[  606.953900][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  607.313133][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'.
[  608.065116][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  608.215584][T10919] loop5: detected capacity change from 0 to 1764
[  608.335222][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'.
[  608.355159][T10918] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1513'.
[  609.176369][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  610.287963][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  611.398805][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  612.115218][T10960] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  612.115218][T10960]    program syz.5.1527 not setting count and/or reply_len properly
[  612.157744][ T5912] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  612.510040][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  612.532331][ T5912] usb 3-1: Using ep0 maxpacket: 16
[  612.554121][T10962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1528'.
[  612.584609][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0
[  612.591534][ T5912] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  612.680454][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'.
[  612.706737][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.725145][ T5912] usb 3-1: config 0 descriptor??
[  612.872934][T10944] loop4: detected capacity change from 0 to 32768
[  613.033944][T10944] (syz.4.1520,10944,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  613.065163][T10966] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in;
[  613.065163][T10966]    program syz.5.1529 not setting count and/or reply_len properly
[  613.099932][T10944] (syz.4.1520,10944,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  613.172376][    C1] hrtimer: interrupt took 47625 ns
[  613.192079][T10944] JBD2: Ignoring recovery information on journal
[  613.246148][ T5912] hid (null): unknown global tag 0xd
[  613.302162][ T5912] hid (null): unknown global tag 0xe
[  613.395227][T10944] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  613.477095][ T5912] usb 3-1: USB disconnect, device number 20
[  613.531030][T10944] 
[  613.533616][T10944] ======================================================
[  613.541112][T10944] WARNING: possible circular locking dependency detected
[  613.548593][T10944] syzkaller #0 Tainted: G             L     
[  613.554762][T10944] ------------------------------------------------------
[  613.561431][T10977] program syz.0.1533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  613.562234][T10944] syz.4.1520/10944 is trying to acquire lock:
[  613.578714][T10944] ffff88805aedd100 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1da/0x290
[  613.591907][T10944] 
[  613.591907][T10944] but task is already holding lock:
[  613.599643][T10944] ffff88805a75f4e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  613.610639][T10944] 
[  613.610639][T10944] which lock already depends on the new lock.
[  613.610639][T10944] 
[  613.622738][T10944] 
[  613.622738][T10944] the existing dependency chain (in reverse order) is:
[  613.632616][T10944] 
[  613.632616][T10944] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  613.641855][T10944]        down_read+0x47/0x2e0
[  613.646550][T10944]        ocfs2_start_trans+0x3ab/0x700
[  613.652304][T10944]        ocfs2_reserve_local_alloc_bits+0xb43/0x26f0
[  613.659189][T10944]        ocfs2_reserve_clusters_with_limit+0x1b9/0xc20
[  613.666754][T10944]        ocfs2_mknod+0x111f/0x2290
[  613.671975][T10944]        ocfs2_mkdir+0x181/0x490
[  613.677314][T10944]        vfs_mkdir+0x413/0x630
[  613.682347][T10944]        filename_mkdirat+0x285/0x510
[  613.687815][T10944]        __se_sys_mkdirat+0x35/0x150
[  613.693634][T10944]        do_syscall_64+0x14d/0xf80
[  613.698759][T10944]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.705272][T10944] 
[  613.705272][T10944] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  613.713192][T10944]        ocfs2_start_trans+0x2ac/0x700
[  613.719288][T10944]        ocfs2_write_info+0x118/0x360
[  613.725637][T10944]        quota_setinfo+0x316/0x320
[  613.731227][T10944]        __se_sys_quotactl+0x2cd/0x9e0
[  613.737248][T10944]        do_syscall_64+0x14d/0xf80
[  613.743179][T10944]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.750233][T10944] 
[  613.750233][T10944] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  613.759928][T10944]        down_write+0x96/0x200
[  613.765166][T10944]        ocfs2_lock_global_qf+0x201/0x290
[  613.771439][T10944]        ocfs2_write_info+0xd1/0x360
[  613.777460][T10944]        quota_setinfo+0x316/0x320
[  613.783584][T10944]        __se_sys_quotactl+0x2cd/0x9e0
[  613.789233][T10944]        do_syscall_64+0x14d/0xf80
[  613.794627][T10944]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.801128][T10944] 
[  613.801128][T10944] -> #0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  613.812709][T10944]        __lock_acquire+0x15a5/0x2cf0
[  613.818218][T10944]        lock_acquire+0xf0/0x2e0
[  613.823254][T10944]        down_write+0x96/0x200
[  613.828558][T10944]        ocfs2_lock_global_qf+0x1da/0x290
[  613.834518][T10944]        ocfs2_acquire_dquot+0x3fa/0xb30
[  613.840453][T10944]        dqget+0x7b1/0xf10
[  613.845187][T10944]        __dquot_initialize+0x3ba/0xd30
[  613.851222][T10944]        ocfs2_get_init_inode+0x147/0x1c0
[  613.858268][T10944]        ocfs2_mknod+0xa67/0x2290
[  613.863854][T10944]        ocfs2_mkdir+0x181/0x490
[  613.869112][T10944]        vfs_mkdir+0x413/0x630
[  613.874256][T10944]        filename_mkdirat+0x285/0x510
[  613.879822][T10944]        __se_sys_mkdirat+0x35/0x150
[  613.885820][T10944]        do_syscall_64+0x14d/0xf80
[  613.891161][T10944]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.897773][T10944] 
[  613.897773][T10944] other info that might help us debug this:
[  613.897773][T10944] 
[  613.908551][T10944] Chain exists of:
[  613.908551][T10944]   &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> sb_internal#4 --> &journal->j_trans_barrier
[  613.908551][T10944] 
[  613.926402][T10944]  Possible unsafe locking scenario:
[  613.926402][T10944] 
[  613.934695][T10944]        CPU0                    CPU1
[  613.940645][T10944]        ----                    ----
[  613.946559][T10944]   rlock(&journal->j_trans_barrier);
[  613.952503][T10944]                                lock(sb_internal#4);
[  613.959818][T10944]                                lock(&journal->j_trans_barrier);
[  613.969553][T10944]   lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  613.978512][T10944] 
[  613.978512][T10944]  *** DEADLOCK ***
[  613.978512][T10944] 
[  613.989292][T10944] 7 locks held by syz.4.1520/10944:
[  613.996001][T10944]  #0: ffff8880374b2420 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  614.006037][T10944]  #1: ffff88805ae4d100 (&type->i_mutex_dir_key#14/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  614.017114][T10944]  #2: ffff88805aed89c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  614.032322][T10944]  #3: ffff88807eb416a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x271/0xb30
[  614.044250][T10944]  #4: ffff8880374b2610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x3d5/0xb30
[  614.055770][T10944]  #5: ffff88805a75f4e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  614.067253][T10944]  #6: ffff88804e948950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290
[  614.078624][T10944] 
[  614.078624][T10944] stack backtrace:
[  614.085327][T10944] CPU: 1 UID: 0 PID: 10944 Comm: syz.4.1520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  614.085360][T10944] Tainted: [L]=SOFTLOCKUP
[  614.085366][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  614.085375][T10944] Call Trace:
[  614.085385][T10944]  <TASK>
[  614.085392][T10944]  dump_stack_lvl+0xe8/0x150
[  614.085416][T10944]  print_circular_bug+0x2e1/0x300
[  614.085441][T10944]  check_noncircular+0x12e/0x150
[  614.085465][T10944]  __lock_acquire+0x15a5/0x2cf0
[  614.085491][T10944]  lock_acquire+0xf0/0x2e0
[  614.085508][T10944]  ? ocfs2_lock_global_qf+0x1da/0x290
[  614.085531][T10944]  down_write+0x96/0x200
[  614.085549][T10944]  ? ocfs2_lock_global_qf+0x1da/0x290
[  614.085568][T10944]  ? __pfx_down_write+0x10/0x10
[  614.085586][T10944]  ? do_raw_spin_unlock+0xf5/0x210
[  614.085602][T10944]  ocfs2_lock_global_qf+0x1da/0x290
[  614.085622][T10944]  ? __pfx_ocfs2_lock_global_qf+0x10/0x10
[  614.085640][T10944]  ? dqget+0x732/0xf10
[  614.085656][T10944]  ocfs2_acquire_dquot+0x3fa/0xb30
[  614.085678][T10944]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  614.085700][T10944]  dqget+0x7b1/0xf10
[  614.085717][T10944]  __dquot_initialize+0x3ba/0xd30
[  614.085734][T10944]  ? __pfx___dquot_initialize+0x10/0x10
[  614.085748][T10944]  ? do_raw_spin_unlock+0xf5/0x210
[  614.085761][T10944]  ? from_vfsgid+0x72/0xa0
[  614.085777][T10944]  ? inode_init_owner+0x1ed/0x390
[  614.085793][T10944]  ocfs2_get_init_inode+0x147/0x1c0
[  614.085811][T10944]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  614.085829][T10944]  ocfs2_mknod+0xa67/0x2290
[  614.085845][T10944]  ? kasan_save_track+0x4f/0x80
[  614.085860][T10944]  ? kfree+0x1c1/0x630
[  614.085878][T10944]  ? tomoyo_path_number_perm+0x501/0x630
[  614.085899][T10944]  ? __pfx_ocfs2_mknod+0x10/0x10
[  614.085916][T10944]  ? do_raw_spin_unlock+0xf5/0x210
[  614.085931][T10944]  ? _raw_spin_unlock+0x28/0x50
[  614.085944][T10944]  ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0
[  614.085965][T10944]  ? __lock_acquire+0x6b5/0x2cf0
[  614.085985][T10944]  ? kasan_quarantine_put+0xbb/0x1f0
[  614.086009][T10944]  ? __lock_acquire+0x6b5/0x2cf0
[  614.086029][T10944]  ? do_raw_spin_unlock+0xf5/0x210
[  614.086046][T10944]  ? do_raw_spin_lock+0x12b/0x2f0
[  614.086062][T10944]  ? do_raw_spin_unlock+0xf5/0x210
[  614.086078][T10944]  ? put_pid+0xe9/0x130
[  614.086100][T10944]  ocfs2_mkdir+0x181/0x490
[  614.086116][T10944]  ? __pfx_from_kgid+0x10/0x10
[  614.086138][T10944]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  614.086155][T10944]  ? inode_permission+0x346/0x5f0
[  614.086173][T10944]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  614.086190][T10944]  vfs_mkdir+0x413/0x630
[  614.086288][T10944]  filename_mkdirat+0x285/0x510
[  614.086305][T10944]  ? __pfx_filename_mkdirat+0x10/0x10
[  614.086322][T10944]  ? do_getname+0x151/0x250
[  614.086339][T10944]  __se_sys_mkdirat+0x35/0x150
[  614.086356][T10944]  do_syscall_64+0x14d/0xf80
[  614.086372][T10944]  ? trace_irq_disable+0x3b/0x150
[  614.086392][T10944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.086407][T10944]  ? clear_bhb_loop+0x40/0x90
[  614.086423][T10944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.086438][T10944] RIP: 0033:0x7f5116199d97
[  614.086454][T10944] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  614.086468][T10944] RSP: 002b:00007f511700fe58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  614.086487][T10944] RAX: ffffffffffffffda RBX: 00007f511700fee0 RCX: 00007f5116199d97
[  614.086499][T10944] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c
[  614.086509][T10944] RBP: 0000200000000000 R08: 0000200000000040 R09: 0000000000000000
[  614.086519][T10944] R10: 0000200000000000 R11: 0000000000000246 R12: 0000200000000040
[  614.086529][T10944] R13: 00007f511700fea0 R14: 0000000000000000 R15: 0000000000000000
[  614.086544][T10944]  </TASK>
[  614.486013][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  614.569492][ T5824] ocfs2: Unmounting device (7,4) on (node local)
[  614.626209][ T5883] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  614.796525][ T5883] usb 6-1: Using ep0 maxpacket: 8
[  614.803750][ T5883] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  614.813487][ T5883] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  614.823482][ T5883] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  614.833699][ T5883] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  614.844608][ T5883] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  614.859258][ T5883] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  614.869012][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.099042][ T5883] usb 6-1: GET_CAPABILITIES returned 0
[  615.104775][ T5883] usbtmc 6-1:16.0: can't read capabilities
[  615.330163][ T5912] usb 6-1: USB disconnect, device number 5
[  615.587599][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  616.698621][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  617.820776][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  618.921239][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  620.032560][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  621.143755][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  622.254939][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  623.376682][    C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available