last executing test programs:

6m56.894060918s ago: executing program 3 (id=44):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)

6m56.638625561s ago: executing program 3 (id=48):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

6m56.475465406s ago: executing program 3 (id=50):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, 0x0}, 0x20)

6m56.361846386s ago: executing program 3 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104)

6m56.020107756s ago: executing program 3 (id=55):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

6m55.600574714s ago: executing program 3 (id=59):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x80000000)
ppoll(&(0x7f0000000280)=[{r0, 0x10}, {r0, 0x1020}], 0x2, 0x0, 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x19ceef4b, 0xffff, 0x9, 0x802, 0xd, "a7aab3ef4909b9687813fbbcece7f9295d70c4"})

6m55.223009788s ago: executing program 32 (id=59):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x80000000)
ppoll(&(0x7f0000000280)=[{r0, 0x10}, {r0, 0x1020}], 0x2, 0x0, 0x0, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x19ceef4b, 0xffff, 0x9, 0x802, 0xd, "a7aab3ef4909b9687813fbbcece7f9295d70c4"})

6m13.534964291s ago: executing program 1 (id=464):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newchain={0xe88, 0x64, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x3}, {0xfff3, 0xb}}, [@f_tcindex={{0xc}, {0xe58, 0x2, [@TCA_TCINDEX_ACT={0xe54, 0x7, [@m_pedit={0xe50, 0x8, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x18000, 0x5, 0x1, 0x7fffffff, 0x6}, 0x0, 0x8}, [{0xd, 0x10001, 0x2, 0x8, 0xd93e, 0x1}, {0x7, 0x80000000, 0xfff, 0x7a7, 0x8f1, 0xf88}, {0x2, 0x7fff, 0x1, 0x87bf, 0xfffffff8, 0x5}, {0x1, 0x1, 0x6, 0x4, 0x4, 0xa7}, {0x9, 0x0, 0x0, 0xfff, 0x2, 0x4}, {0x5, 0x2, 0x9, 0x4, 0xa, 0x6}, {0xc0, 0x3, 0x101, 0xbecc, 0x1, 0xe62}, {0x5, 0x6, 0x75, 0xd, 0xd854, 0x2}, {0x800, 0x8, 0x8, 0x8, 0x43a, 0x4}, {0x8, 0xe, 0x7f, 0xffff, 0x2, 0x9}, {0xa, 0x5, 0x48, 0x3, 0x2, 0x7ff}, {0x9, 0x0, 0x15, 0x6, 0x1, 0x1}, {0x3, 0x2, 0x7, 0x80000001, 0x4f0, 0x80000000}, {0x2, 0x8, 0x9, 0x4, 0x3, 0x9}, {0x7000000, 0xd4b, 0x1, 0x0, 0x8, 0xc0000000}, {0x3, 0x0, 0x7ff, 0x8, 0x3, 0x38000}, {0x0, 0x400, 0x10001, 0x3, 0x1, 0x1ff}, {0x2, 0x9d6d, 0x9, 0x800, 0x7fffffff, 0x9}, {0x7, 0x1ae7, 0x7, 0xe7, 0x9}, {0x101, 0x9, 0xff, 0x0, 0x87c, 0x7}, {0x80000001, 0x4, 0x3, 0x6, 0x423a, 0x4}, {0x2, 0xd, 0x4, 0xf, 0x155, 0x2}, {0x44, 0x1000, 0x3, 0x3, 0x3, 0x40}, {0x9, 0x3, 0xfffffffd, 0x8, 0x8, 0x1}, {0xffffffff, 0xf, 0x31, 0xd4c6, 0x8001, 0x2}, {0xae7f, 0x2, 0x8001, 0x7, 0xff}, {0x0, 0xe6, 0xfffff038, 0x6, 0x9, 0x9}, {0x84, 0x3, 0x10001, 0x1, 0x7, 0xff}, {0x10001, 0x5, 0x5, 0x7, 0x7, 0x9}, {0x6, 0x6, 0xc3a, 0xf2e2cb7, 0x8, 0xc6d}, {0x9, 0xfae1, 0x6, 0x7, 0xe7, 0x7}, {0x8, 0x3, 0x8, 0x0, 0xfd, 0x4bb93451}, {0x6, 0xffff, 0x7, 0xffffffff, 0x2, 0xf}, {0x3, 0x6, 0x2, 0x7, 0x9d6, 0x8}, {0x1, 0x2, 0x7, 0xffffd09e, 0x0, 0x5}, {0x9, 0xe73f, 0x1, 0x6, 0x2, 0x7}, {0x3, 0x22, 0x5, 0x89, 0x4, 0x6}, {0x4, 0x677, 0xe060, 0x0, 0xffffffff, 0x8001}, {0x7, 0x1ff, 0x6, 0x7ff, 0x7, 0xfffffffa}, {0xf, 0xfffff084, 0x5, 0x2, 0x3, 0x7ff}, {0x7ff, 0x6, 0xffff98e4, 0x7, 0x9, 0x4}, {0x5, 0x9, 0x6, 0x7ff, 0xffffff05, 0xdb7}, {0xf, 0x4, 0x5, 0x2, 0x0, 0x6c85}, {0x1, 0x9a31, 0x81, 0x3, 0x3, 0x1}, {0x0, 0x1, 0x4, 0x8, 0xffff, 0x9}, {0x3, 0x3, 0xe270, 0x7654, 0x3, 0x2c8}, {0x3, 0x5, 0x8, 0x8001, 0x4, 0x400}, {0xff, 0x101, 0x7, 0xc, 0xc, 0x81}, {0x1, 0x10000, 0x9c, 0xfffffffd, 0x9, 0x4}, {0xceb, 0x12000, 0x7, 0x400, 0x9e}, {0x0, 0xfffffff7, 0x4, 0x3, 0x10000, 0x5}, {0x9, 0x7, 0x9, 0x7fff, 0x3f80000, 0xffff}, {0x1000, 0xfffffff7, 0x20, 0x1d9e, 0x3, 0x224c}, {0x9c, 0x8000, 0x3de, 0x3}, {0x1ff, 0xc5ae, 0x40, 0x0, 0x8, 0x1}, {0xc, 0x1, 0xe, 0x0, 0x4936, 0xfffffff7}, {0x1, 0xd42, 0x40, 0x7, 0x8, 0x7fff}, {0x6, 0x6, 0xa56b, 0x5, 0x7ff, 0xffffcddb}, {0x4, 0x1ff, 0x3, 0x1, 0x4, 0x9}, {0x6, 0x1d, 0x81, 0x5, 0x4, 0x1}, {0xec, 0x6, 0x2, 0x2, 0x8, 0x80}, {0x2, 0x5, 0x8a9, 0xd, 0x7}, {0x2, 0xff, 0x6, 0x6, 0x40, 0xfffffff7}, {0x9, 0x6c, 0x0, 0x7ff, 0x7, 0x1}, {0xbd0, 0x73c8, 0x101, 0x1, 0x6, 0x2}, {0x4, 0x401, 0x0, 0x0, 0x5000, 0x2}, {0x8, 0x0, 0x5000000, 0x75, 0x3, 0x3a}, {0x7, 0x81, 0x8, 0x5, 0x9, 0x2}, {0x6, 0x5, 0xfffffff9, 0x6, 0x8, 0x6}, {0xfffffc00, 0x5, 0x9, 0x3, 0xfe, 0x1}, {0xff, 0x3, 0x9, 0x7, 0x7ff, 0x1f}, {0xf, 0x2, 0x4, 0xb73b, 0x80000001, 0x4c}, {0x2308, 0x1, 0x5cd44747, 0x6, 0x2, 0x8001}, {0x4, 0x2, 0x381, 0x9, 0x8, 0x6}, {0x9, 0xfffffff2, 0x40, 0x2, 0x315f, 0xf}, {0xec, 0x5, 0xb, 0x7, 0x2}, {0x8, 0x2, 0x4, 0x12, 0xff, 0x4}, {0xc3a9, 0xfffffffc, 0x0, 0x1, 0x7, 0x4}, {0xf7, 0xffffff00, 0x2, 0x5, 0x2, 0xffff}, {0x1, 0x1, 0x6, 0x73, 0x200}, {0x9, 0x4, 0x400, 0x2, 0xcc69, 0x9}, {0x6, 0x764, 0x71d363f1, 0x8540, 0x1, 0x2}, {0x1, 0x9, 0xe, 0x8, 0x85, 0x7}, {0xdd, 0xa, 0x7, 0x5e9, 0xa, 0x6}, {0x10, 0x7fff, 0x43, 0x8, 0x400, 0x3}, {0x5d, 0x1, 0x6, 0x3ff, 0x0, 0x9}, {0xaf2, 0x0, 0x5, 0x1, 0x4, 0x5}, {0x4, 0xde, 0x0, 0x3, 0x8}, {0x870c, 0x1, 0x6, 0x80000000, 0x1, 0x5}, {0x6, 0x7fff, 0x1, 0x4, 0x2, 0xcbb}, {0x800, 0x7fff, 0x7, 0x1, 0x9, 0x1}, {0x0, 0x7, 0x0, 0x3, 0xfffffffd, 0x4}, {0x920, 0x0, 0x5, 0x8990}, {0x8, 0x7, 0xfffffff8, 0x9, 0x8, 0x6}, {0x5, 0x14, 0x9, 0x83, 0x8, 0xc55a}, {0xfffffff9, 0x0, 0x8001, 0x2, 0x7fff, 0x8000}, {0x6, 0xfb, 0x2, 0x7, 0xb9f4, 0x5}, {0x8, 0x5, 0x7fffffff, 0x9, 0x3, 0x90}, {0xfffff7d0, 0x9, 0xbecf, 0x7, 0x1, 0x1f}, {0x40, 0x7ff, 0x6, 0x101, 0x0, 0x4}, {0x7f, 0x1ff, 0x4, 0xf, 0x4, 0x3}, {0x200, 0xfffffffc, 0xd, 0x6978, 0x4, 0x1}, {0x8, 0x2, 0xab47, 0x100, 0xff, 0x3}, {0x8, 0x8, 0x1000, 0x64036df8, 0x400, 0x80}, {0x0, 0x7, 0x400, 0xf02a, 0x8, 0x7}, {0xed, 0x5, 0x1, 0xfffffff8, 0xa, 0xfffffffe}, {0x8b1, 0x0, 0x5, 0x7, 0xf, 0x1}, {0x74, 0xe76, 0x8, 0x5, 0xf, 0x8}, {0xc74a, 0xb, 0x205, 0x7, 0x39, 0x8}, {0x2, 0x4, 0x4, 0x0, 0x7f, 0xec2a}, {0x40, 0x3, 0x8, 0xffff, 0x5, 0xe}, {0x1, 0x66, 0x6462, 0x10001, 0x2, 0x3ff}, {0x9, 0xfff, 0xd541, 0x7fffffff, 0xf, 0x7fff}, {0x0, 0xf, 0x9, 0xb, 0x2, 0x2}, {0xd, 0x4, 0x7ff, 0x3, 0x2, 0x9}, {0x7, 0x4, 0x1, 0x3ff, 0x5ef9, 0x4}, {0x800, 0x5, 0xfffffffb, 0x5, 0xfffff8f3, 0xfffffff5}, {0xfffffff9, 0xff4b, 0x5, 0x1000, 0xff, 0x7fff}, {0x80000000, 0xad1, 0x9, 0x1, 0x1, 0x3}, {0x8, 0x10001, 0x8, 0x9, 0x8, 0x100}, {0x4, 0x2, 0x87a, 0x2, 0x7, 0x3}, {0x7, 0x8da7, 0x400, 0x3, 0x9, 0x3}, {0x3, 0x4, 0x423, 0x80000000, 0x8, 0x7}, {0x1, 0xe48b, 0x4, 0xffffffff, 0x5, 0x3760}, {0xe398, 0x9, 0xff, 0x63, 0x9, 0xaee}, {0x7, 0x3, 0x4, 0x6, 0x7, 0xff}, {0x0, 0x9, 0xffff0000, 0xffffff44, 0x2, 0xffff}, {0x0, 0x1, 0xad, 0x2, 0x6, 0x8f}], [{0x2, 0x1}, {0x7}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x3}, {0x4}, {0x5, 0x1}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x2}, {0x2}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x4}, {0x2}, {0x6, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x0, 0xefeac42781ba8567}, {0x7}, {0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x1}, {0x3}, {0x3, 0xe88b4048e8e9b8ca}, {0x2, 0x1}, {0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4e93f7cf0ebf88fb}, {0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x80}, 0x4000800)

6m13.487738675s ago: executing program 1 (id=465):
socket$inet6(0xa, 0x3, 0xff)
socket$igmp6(0xa, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1, 0xd9, 0x0)

6m13.396083393s ago: executing program 1 (id=467):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x1e, 0x5, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

6m13.231350947s ago: executing program 1 (id=469):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x104)

6m12.946138113s ago: executing program 1 (id=481):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b80)={0x2f})

6m12.676704517s ago: executing program 1 (id=476):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x6d276b17)

6m12.346639716s ago: executing program 33 (id=476):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x6d276b17)

6m0.932505663s ago: executing program 0 (id=549):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='xfrm0\x00', 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73ba1f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0)

6m0.789396935s ago: executing program 0 (id=550):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80000000}, 0x10}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x2c}, 0x10)

6m0.503126731s ago: executing program 0 (id=551):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x0, 0x6}, 0xc)

6m0.273774702s ago: executing program 0 (id=555):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
unlink(&(0x7f00000002c0)='./file1\x00')

6m0.094018888s ago: executing program 0 (id=557):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

5m59.409486659s ago: executing program 0 (id=565):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)

5m58.953155299s ago: executing program 34 (id=565):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)

5m43.625276135s ago: executing program 2 (id=644):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000000000)='\x00', 0x1)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

5m40.42048126s ago: executing program 2 (id=656):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r2, 0x10000}, &(0x7f0000000080)=0x8)

5m40.237555346s ago: executing program 2 (id=657):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000003c0)={0x60000008})

5m40.040501274s ago: executing program 2 (id=659):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

5m39.912816975s ago: executing program 2 (id=661):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m39.420667469s ago: executing program 2 (id=662):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000015000100fdffffff0200000002185400", @ANYRES32=r1, @ANYBLOB="140003007665748530"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

5m39.167422831s ago: executing program 35 (id=662):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000015000100fdffffff0200000002185400", @ANYRES32=r1, @ANYBLOB="140003007665748530"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

2m52.56757675s ago: executing program 6 (id=2383):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)

2m52.100872392s ago: executing program 6 (id=2387):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_init()

2m50.923373906s ago: executing program 6 (id=2395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, r1, 0x5, 0x70b525, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="b2"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4)

2m50.721857024s ago: executing program 6 (id=2397):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_create(0x30d)

2m49.887988148s ago: executing program 6 (id=2403):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x20)
rename(&(0x7f0000000b40)='./file2\x00', &(0x7f0000000b00)='./file1\x00')

2m49.653565559s ago: executing program 6 (id=2407):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0)

2m32.713091718s ago: executing program 36 (id=2407):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x5, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}}}, 0x0)

38.569339725s ago: executing program 8 (id=3317):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000400)='gid\\\r\xc2$\xc0\x84N\xb6\x95\x062\"\xd1\x9br\xc3K4\xd0\x0ej\xde^g\xbe&\xd8m\xd2^\x9f\xd5\x12\xf1\x7f\xd4\xb3\xf4\xf1\x1f\x03R\x05l\x0f\xff\xa6)?\xafdp\xa0\x84\xbd\x8c\xd41S\xe4\\\xf3\xff]Z\x16\x94\xb0\xba7g\x06\xd4\xf3T\xa8\xc5zg\xd8\xfe\x80i\xa9>}\x85s\x12\x83^\x8b\x88V\xb8M@\x8c\xef{M\xda', &(0x7f0000000500)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\xf9\x99\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xfc8\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xcf\xe8\x86\xa9\xcb\xcf\'\x06\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe1\x12v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\x1e?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\x9f\xf1\xd9<\xb9k\x00qT\xda[\x93\b\xec\xa0\x8b\x17F\xf0]&S\xa3j\xf7L\x00=\xef\x969!D\x99\xa7}Y\x93\xb8\x8a\x8a\xc1\xa9\x80G\xdb-\xf0W\xe3\xc2W\x1coo\xc0\xdb\xf0S\xc6\x1cE\x00\xca\xac!$,\xe8\x80\x95M\xa8\xff\xfa\x7f\xf9\x18\xb2\xf3\xaaE\x8a~{\xcb`\xc1J}P\x06\xf4`\xc3\x1a\xf4*\xb2\x8f\x13\xdeY\x8f\xc4\xea-@\xb7\x8a~\x954\xf7\x919\xedc62\xdc\x9d\x816-\xa9KN\xe8\'\xddI-:\xf2e\x18\"\x9c\xd4\x00\xefm$B>o$\xba\xb7L\xb3\xf3\xe9f\xb543V\xe2\x97\a', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

38.388543471s ago: executing program 8 (id=3319):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xe}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0)

38.266333392s ago: executing program 8 (id=3321):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x84}, 0x8)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x4040)

38.1777886s ago: executing program 8 (id=3322):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@nodelalloc}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000440), 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

37.489312812s ago: executing program 8 (id=3327):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd2b, 0x0, {0x7, 0x0, 0x68, r1, 0x940, 0x27025}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048d4}, 0x0)

36.871999836s ago: executing program 8 (id=3330):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d})

36.515004108s ago: executing program 37 (id=3330):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x0, 0x7ffc, 0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x9})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x4, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b2d})

5.966641768s ago: executing program 4 (id=3526):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020)
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./bus\x00', 0x4000000, &(0x7f0000000780), 0x2, 0x9837, &(0x7f0000012f80)="$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")
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0xd, 0x4, 0x10000, 0x4000800, {}, {0x4, 0x0, 0x1, 0x62, 0x0, 0x64, "cb866192"}, 0x80000001, 0x4, {}, 0x40})

4.674520394s ago: executing program 5 (id=3535):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003440)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000000)="f2", 0x1}], 0x1}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x9, @remote, 0x8}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000880)="12", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9, 0x2, 0x7fffffffffffffff, 0x8, 0xffff, 0x6, 0x2c21b611, 0x9625, 0x2, 0x0, 0x2, 0x8, 0x2, 0x81, 0x1868]}, &(0x7f0000000080)=0x100)

4.441013794s ago: executing program 4 (id=3537):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="200c06"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000180)={0x40, 0x21, 0xc, {0xc, 0x2, "967f840766fd66306c4d"}}, 0x0, 0x0, 0x0}, 0x0)

4.222546524s ago: executing program 5 (id=3539):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x40, 0x1, 0x49, "cf6f4b17d222269e064bef2e82e114a2d8e1a0460d108b86166f5dee06b23deda4441e9276340ae067f7e343dfadf3a9478be57306db0121d0b45257ea50d5562350861d0de2ebed1d"}, 0x0, 0x0, 0x0, 0x0})

3.536932985s ago: executing program 9 (id=3546):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@delalloc}]}, 0xff, 0x499, &(0x7f0000000380)="$eJzs3M9PXNUeAPDvvUBb+gteX1/fa1+raDU2/oBCq3bhQo0mLjQx0UVdItBaOy2mYGIbYtGYujRN3BuXJv4F7twYdWFM3Gri0jRplJiUusLcXzDAQIECY5nPJxnmnHvPzDnfe++ZOfce7gTQsnqyP0nE7oj4OSK6iuz8Aj3F0/TUxNDtqYmhJGZmXvs9ycvdmpoYqopWr9tVZo6lEelHSTybLK537PKV84O12silMt83fuGdvrHLV544d2Hw7MjZkYsDp06dPNH/9FMDT65LnFlctw69P3r44EtvXH9l6PT1N7/7MmvWgSPF+vo47uh2g4Aa6Mm22h8zuYXrHl5F2+8Fe+rSSXsTG8KqtEVEtrs68v7fFW0xt/O64sUPm9o4YENl303bl149OQNsYUk0uwVAc1Rf9Nn5b/XYpKHHP8LN5yK2lenpqYmh6dn42yMtl3dsYP09EXF68q/Pskes9joEAMAa5GObxxuN/9I4kD8Xcx17yzmU7oj4V0Tsi4h/R8T+iPhPRF72vxHxv+LFM10rrL9nQX7x+Ce90bDN6yQb/z1TN/abrou/fOpuK3N78vg7kjPnaiPHy21yLDq2Z/n+Zer4+oWfPllqXf34L3tk9VdjwbIBN9oXXKAbHhwfXK+NcPODiEPtjeJPZmcCsiPgYEQcWt1b760S5x794vBShe4c/zLWYZ5p5vOIR4r9Pxnz479alUmWn5/s2xG1keN91VGx2Pc/Xnt1qfrvKv51kO3/nfOP/wUluv5Mivnajqi1j1waW30d1375eMlzmrUe/9uS1/M56x/eKpa9Nzg+fqk/Ylvycp6vzuny5QNzr63yVfks/mNHG/f/feVrsvj/HxHZQXwkIu6LiPvLtj8QEQ9GxNFl4v/2+YfeXib+JJJo6v4fbvj5NzvH3Z3Uz9evIdF2/puvlpoxX9n+PxmT+WdtIf/8u4OVNvAuNx8AAADcE9KI2B1J2luke3ZHmvb2Fv/Dvz92prXRsfHHzoy+e3G4uEegOzrS6kpXV9310P5ksnzHIj9QXiuu1p8orxt/2taZ53uHRmvDTY4dWt2u+f0/qv6f+a2t2a0DNpz7taB1Lez/aZPaAWy+Zb7/Z+ftnQvA1tSg/3c2ox3A5nP+D62rUf+/uiBv/A9b0+L+/2uDn6wDtiLjf2hd+j+0Lv0fWtLd3Ne/9kR1s8Da32fHiu/wb5RINz/kDU9Uv3hRLemMiPWuqzPmlkTa9JBbKJH1mM2tdO43VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO5lfwcAAP//2+jk3Q==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v2={0x2, @aes128, 0x2, '\x00', @b})

3.231115102s ago: executing program 9 (id=3549):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)

2.9182621s ago: executing program 9 (id=3552):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./bus\x00', 0x2000010, &(0x7f0000000200)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x81)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0x71e5b316, 0x3b, 0x7, 0x10000002, 0xfffffffd})

2.622060447s ago: executing program 9 (id=3554):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x901, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000240)={r0, r2, 0x936a, 0x0, 0x0, 0x81, 0x47, 0x6, 0x101, 0x96e8, 0x2, 0xb88a, 'syz1\x00'})

2.517249566s ago: executing program 9 (id=3555):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000640)=ANY=[])
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.191917065s ago: executing program 5 (id=3561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2f, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r0, &(0x7f0000000180), 0x100000000000003c)

2.032020389s ago: executing program 5 (id=3562):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x104, 0x80, 0x0, 0x6a8}, 'syz1\x00', 0x2f})
ioctl$UI_DEV_CREATE(r0, 0x5501)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000002140)=""/183, 0xb7}], 0x1)

1.79840102s ago: executing program 5 (id=3563):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x4000003, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2})
io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0)

1.614699446s ago: executing program 5 (id=3564):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0a0706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

946.502946ms ago: executing program 7 (id=3567):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x13}, @TCA_PIE_ALPHA={0x8, 0x4, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

780.634191ms ago: executing program 4 (id=3568):
syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1e5, &(0x7f0000000480)="$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")
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))

639.140014ms ago: executing program 7 (id=3569):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x9b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

578.910759ms ago: executing program 4 (id=3570):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2a0, 0x30, 0x300, 0x71bd23, 0x25dfdbff, {}, [{0x28c, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x88, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x59, 0x6, "cad084468b1939f9a1d5fc6f8e72233759ec053c00f5e4770759d13bde2014b3ac421bc5405bcadf9cd98d7e6057e3a2f9a28986710a0b7e30a44c4493f3e13c98d2914c99733e4947e20b4ba4ea1405fc6a94ae7c"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_csum={0x120, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0xf1, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426620f308c5e7f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xb4, 0xd, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2b08}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xfffffffd, 0x4, 0x3, 0x4}, 0xb}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xa, 0x3d5, 0x1, 0x4, 0x3ff}, 0x9}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x11, 0x6, "8c7537c88dc5f9f594de6d41eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

434.573011ms ago: executing program 7 (id=3571):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000002c0)={0x2, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x5, 0x0, 0x7}}, {0x3, 0x4, 0x0, 0x0, @adapter={0x51, 0x7, 0x1, 0x1, 0xfff}}]})

280.500945ms ago: executing program 4 (id=3572):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000002"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0)

254.748868ms ago: executing program 9 (id=3573):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xbff4, 0x100000002})

142.911258ms ago: executing program 7 (id=3574):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)

14.535789ms ago: executing program 7 (id=3575):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x8)
getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000003280)=""/85, &(0x7f00000002c0)=0x55)

14.291889ms ago: executing program 4 (id=3576):
unshare(0x20040600)
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

0s ago: executing program 7 (id=3577):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101580, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, 0x0)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x6})

kernel console output (not intermixed with test programs):

n superblock, retrying with spare superblock (blocksize = 1024)
[  348.362779][T12507] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  348.384736][  T967] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  348.398062][T12502] NILFS error (device loop8): nilfs_lookup: deleted inode referenced: 12
[  348.454517][T12502] Remounting filesystem read-only
[  348.495536][T12502] NILFS (loop8): mounting fs with errors
[  348.607115][  T967] usb 8-1: Using ep0 maxpacket: 8
[  348.628946][  T967] usb 8-1: config index 0 descriptor too short (expected 26, got 18)
[  348.649930][  T967] usb 8-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  348.668861][  T967] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.686005][  T967] usb 8-1: Product: syz
[  348.694162][  T967] usb 8-1: Manufacturer: syz
[  348.703589][  T967] usb 8-1: SerialNumber: syz
[  348.724809][  T967] usb 8-1: config 0 descriptor??
[  348.743911][  T967] gspca_main: sq930x-2.14.0 probing 2770:930c
[  349.657133][  T967] gspca_sq930x: ucbus_write failed -71
[  349.678306][  T967] sq930x: probe of 8-1:0.0 failed with error -71
[  349.701601][  T967] usb 8-1: USB disconnect, device number 21
[  350.572644][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2496'.
[  350.597322][ T5807] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  350.801711][ T5807] usb 9-1: Using ep0 maxpacket: 32
[  350.814742][ T5807] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  350.835234][ T5807] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  350.849369][ T5807] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  350.861049][ T5807] usb 9-1: Product: syz
[  350.873030][ T5807] usb 9-1: Manufacturer: syz
[  350.880797][ T5807] usb 9-1: SerialNumber: syz
[  350.892314][ T5807] usb 9-1: config 0 descriptor??
[  350.905195][T12548] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  350.924556][ T5807] hub 9-1:0.0: bad descriptor, ignoring hub
[  350.938851][ T5807] hub: probe of 9-1:0.0 failed with error -5
[  351.035886][  T787] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  351.227927][  T787] usb 5-1: Using ep0 maxpacket: 16
[  351.237823][  T787] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  351.264695][  T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.281583][  T787] usb 5-1: Product: syz
[  351.300304][  T787] usb 5-1: Manufacturer: syz
[  351.315969][  T787] usb 5-1: SerialNumber: syz
[  351.335473][  T787] r8152-cfgselector 5-1: config 0 descriptor??
[  351.351726][ T5807] usb 9-1: USB disconnect, device number 2
[  351.582877][  T787] r8152-cfgselector 5-1: Needed 2 retries to read version
[  351.811512][  T787] r8152-cfgselector 5-1: Unknown version 0x0000
[  351.852208][  T787] r8152-cfgselector 5-1: USB disconnect, device number 33
[  352.444869][T12604] IPv6: addrconf: prefix option has invalid lifetime
[  352.568744][T12607] team0: entered promiscuous mode
[  352.573829][T12607] team_slave_0: entered promiscuous mode
[  352.585090][T12607] team_slave_1: entered promiscuous mode
[  352.652449][T12606] team0: left promiscuous mode
[  352.657265][T12606] team_slave_0: left promiscuous mode
[  352.707852][T12606] team_slave_1: left promiscuous mode
[  352.743435][T12614] netlink: 61211 bytes leftover after parsing attributes in process `syz.5.2510'.
[  354.425690][T12673] vivid-000: disconnect
[  354.437345][T12669] vivid-000: reconnect
[  355.036162][T12685] loop8: detected capacity change from 0 to 4096
[  355.062021][T12685] ntfs: (device loop8): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  355.078131][T12685] ntfs: (device loop8): ntfs_read_locked_inode(): $DATA attribute is missing.
[  355.110280][T12685] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  355.127399][T12685] ntfs: (device loop8): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  355.321520][T12685] ntfs: volume version 3.1.
[  355.460760][T12685] ntfs: (device loop8): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-4.  You might want to try to use the mount option nls=utf8.
[  355.500485][T12700] openvswitch: netlink: Actions may not be safe on all matching packets
[  355.527069][T12685] ntfs: (device loop8): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  355.821797][T12710] overlayfs: invalid origin (0000005e40a88832162e012d21233a2c2826000000ca8a0000000000)
[  356.037250][T12715] vxcan1 speed is unknown, defaulting to 1000
[  356.129328][T12717] loop8: detected capacity change from 0 to 1024
[  356.232209][T12717] EXT4-fs: Ignoring removed oldalloc option
[  356.282820][T12717] EXT4-fs: Ignoring removed bh option
[  356.327523][T12717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  356.391656][T12717] EXT4-fs (loop8): invalid inodes per group: 204800
[  356.391656][T12717] 
[  357.224776][T12749] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2567'.
[  357.291190][T12749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'.
[  357.718725][ T5756] hid-generic 0005:4C4A:5505.0018: item fetching failed at offset 0/1
[  357.730407][ T5756] hid-generic: probe of 0005:4C4A:5505.0018 failed with error -22
[  357.800559][T12767] sp0: Synchronizing with TNC
[  359.070339][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.113145][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.124799][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.135987][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.146178][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.149118][T12794] loop8: detected capacity change from 0 to 4096
[  359.157965][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.173785][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.185810][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.228269][T12798] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  359.239663][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.257396][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.269051][T12791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  359.285468][T12791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  359.306668][T12791] batadv_slave_1: entered promiscuous mode
[  359.366639][T12791] batadv_slave_1: left promiscuous mode
[  359.543010][T12804] loop8: detected capacity change from 0 to 2048
[  359.655139][T12804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.862819][T12841] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  360.869383][T12841] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  360.914956][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2599'.
[  360.974461][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2599'.
[  363.125000][T12916] syz_tun: tun_net_xmit 86
[  364.206481][    C1] syz_tun: tun_net_xmit 86
[  365.029792][  T967] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  365.267633][  T967] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  365.291959][  T967] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  365.318283][    C1] syz_tun: tun_net_xmit 86
[  365.335236][  T967] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  365.354808][  T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.389030][T12959] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  365.408552][  T967] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  365.848464][  T967] usb 6-1: USB disconnect, device number 20
[  366.040022][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'.
[  367.284679][T13034] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2666'.
[  369.198880][    T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  369.265334][T13089] loop4: detected capacity change from 0 to 64
[  369.435166][    T9] usb 9-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  369.476918][    T9] usb 9-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  369.514035][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[  369.552007][    T9] usb 9-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  369.561092][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.618087][    T9] usb 9-1: config 0 descriptor??
[  369.637653][T13077] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  370.238757][    T9] aquacomputer_d5next 0003:0C70:F010.0019: hidraw0: USB HID v0.04 Device [HID 0c70:f010] on usb-dummy_hcd.8-1/input0
[  370.778919][    T9] usb 9-1: USB disconnect, device number 3
[  371.146977][T13134] bridge0: entered allmulticast mode
[  371.347719][    T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  371.572503][    T9] usb 6-1: Using ep0 maxpacket: 8
[  371.587542][    T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  371.604564][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  371.638388][    T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  371.668074][    T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  371.703327][    T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  371.730763][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.002435][    T9] usb 6-1: GET_CAPABILITIES returned 0
[  372.021187][    T9] usbtmc 6-1:16.0: can't read capabilities
[  372.249264][ T5807] usb 6-1: USB disconnect, device number 21
[  372.438340][    T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  372.641176][    T9] usb 8-1: Using ep0 maxpacket: 32
[  372.657061][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  372.690591][    T9] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  372.705078][    T9] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  372.718195][    T9] usb 8-1: Product: syz
[  372.722378][    T9] usb 8-1: Manufacturer: syz
[  372.727353][    T9] usb 8-1: SerialNumber: syz
[  372.735626][    T9] usb 8-1: config 0 descriptor??
[  372.741345][T13171] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  372.994104][   T23] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  373.103893][    T9] usb 8-1: USB disconnect, device number 22
[  373.219302][   T23] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  373.246808][   T23] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  373.275652][   T23] usb 9-1: Product: syz
[  373.279864][   T23] usb 9-1: Manufacturer: syz
[  373.294318][   T23] usb 9-1: SerialNumber: syz
[  373.315948][   T23] usb 9-1: config 0 descriptor??
[  373.341277][   T23] ch341 9-1:0.0: ch341-uart converter detected
[  374.197617][   T23] usb 9-1: failed to send control message: -71
[  374.236800][   T23] ch341-uart: probe of ttyUSB0 failed with error -71
[  374.254052][   T23] usb 9-1: USB disconnect, device number 4
[  374.283333][   T23] ch341 9-1:0.0: device disconnected
[  374.651289][ T5756] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  374.905191][ T5756] usb 8-1: Using ep0 maxpacket: 32
[  374.917104][ T5756] usb 8-1: unable to get BOS descriptor or descriptor too short
[  374.927776][ T5756] usb 8-1: config 4 has an invalid interface number: 136 but max is 0
[  374.941405][ T5756] usb 8-1: config 4 has no interface number 0
[  374.955228][ T5756] usb 8-1: config 4 interface 136 has no altsetting 0
[  374.966698][T13237] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  374.976820][T13237] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  375.042962][ T5756] usb 8-1: string descriptor 0 read error: -22
[  375.051233][ T5756] usb 8-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8
[  375.068293][ T5756] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.107540][ T5756] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state.
[  375.131093][ T5756] dvb-usb: bulk message failed: -22 (4/0)
[  375.159010][ T5756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  375.187198][ T5756] dvb-usb: bulk message failed: -22 (5/0)
[  375.192979][ T5756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  375.231277][ T5756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  375.253527][ T5756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  375.266792][ T5756] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650)
[  375.291031][ T5756] usb 8-1: media controller created
[  375.323723][T13225] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO.
[  375.326324][T13245] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  375.339714][ T5756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  375.357213][   T59] Bluetooth: hci1: Frame reassembly failed (-84)
[  375.364117][T13225] dvb-usb: bulk message failed: -22 (7/0)
[  375.375705][T13225] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[  375.390736][T13225] ttusb2: i2c transfer failed.
[  375.418227][ T5756] ttusb2: set interface to alts=3 failed
[  375.469711][ T5756] DVB: Unable to find symbol tda10023_attach()
[  375.478310][ T5756] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650'
[  375.560000][ T5824] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  375.567832][ T5756] rc_core: IR keymap rc-tt-1500 not found
[  375.574569][ T5756] Registered IR keymap rc-empty
[  375.580608][ T5756] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[  375.593447][ T5756] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input38
[  375.608855][ T5756] dvb-usb: schedule remote query interval to 150 msecs.
[  375.616066][ T5756] dvb-usb: bulk message failed: -22 (4/0)
[  375.621906][ T5756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  375.632209][ T5756] dvb-usb: bulk message failed: -22 (5/0)
[  375.638125][ T5756] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  375.648576][ T5756] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected.
[  375.664419][ T5756] usb 8-1: USB disconnect, device number 23
[  375.703105][ T5756] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected.
[  375.763989][ T5824] usb 9-1: Using ep0 maxpacket: 16
[  375.772557][ T5824] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  375.781783][ T5824] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  375.789926][ T5824] usb 9-1: Product: syz
[  375.794082][ T5824] usb 9-1: Manufacturer: syz
[  375.798799][ T5824] usb 9-1: SerialNumber: syz
[  375.805771][ T5824] usb 9-1: config 0 descriptor??
[  376.065817][ T5756] usb 9-1: USB disconnect, device number 5
[  376.417216][ T5807] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  376.641728][ T5807] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  376.682290][ T5807] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  376.707467][ T5807] usb 6-1: config 0 interface 0 has no altsetting 0
[  376.714141][ T5807] usb 6-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  376.735441][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.760889][ T5807] usb 6-1: config 0 descriptor??
[  376.782307][T13253] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  376.903417][  T787] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  376.914148][  T787] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  376.923602][  T787] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0
[  376.974772][  T787] hid-generic 0006:0004:0009.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  377.051467][ T5807] usbhid 6-1:0.0: can't add hid device: -71
[  377.062345][ T5807] usbhid: probe of 6-1:0.0 failed with error -71
[  377.082553][ T5807] usb 6-1: USB disconnect, device number 22
[  377.085635][T13275] fido_id[13275]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  377.549293][ T5086] Bluetooth: hci1: command 0x1003 tx timeout
[  377.560298][   T51] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  378.050632][ T5756] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  378.289936][ T5756] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  378.312328][ T5756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.331640][ T5756] usb 5-1: Product: syz
[  378.342453][ T5756] usb 5-1: Manufacturer: syz
[  378.353247][ T5756] usb 5-1: SerialNumber: syz
[  378.377815][ T5756] hub 5-1:24.0: bad descriptor, ignoring hub
[  378.404523][ T5756] hub: probe of 5-1:24.0 failed with error -5
[  378.455535][T13316] tmpfs: Bad value for 'mpol'
[  378.575992][   T23] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  378.616635][T13321] overlayfs: upper fs does not support file handles, falling back to index=off.
[  378.622405][ T5756] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  378.627770][T13321] overlayfs: fs on './cgroup' does not support file handles, falling back to xino=off.
[  378.650418][ T5756] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  378.668182][ T5756] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  378.676801][ T5756] usb 5-1: media controller created
[  378.723548][ T5756] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  378.786992][ T5756] DVB: Unable to find symbol dib7000p_attach()
[  378.793277][   T23] usb 8-1: Using ep0 maxpacket: 32
[  378.809876][ T5756] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  378.822650][   T23] usb 8-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  378.853913][   T23] usb 8-1: config 0 interface 0 has no altsetting 0
[  378.879300][   T23] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  378.912271][   T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.941788][   T23] usb 8-1: config 0 descriptor??
[  378.970085][ T5756] rc_core: IR keymap rc-dib0700-rc5 not found
[  378.976444][ T5756] Registered IR keymap rc-empty
[  378.981860][ T5756] dvb-usb: could not initialize remote control.
[  378.992875][ T5756] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  379.033635][ T5756] usb 5-1: USB disconnect, device number 34
[  379.129866][ T5756] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  379.178630][   T23] usbhid 8-1:0.0: can't add hid device: -71
[  379.187086][   T23] usbhid: probe of 8-1:0.0 failed with error -71
[  379.206183][   T23] usb 8-1: USB disconnect, device number 24
[  379.618386][T13336] loop8: detected capacity change from 0 to 256
[  379.667285][   T28] audit: type=1800 audit(1771530628.111:27): pid=13336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2765" name="file0" dev="loop8" ino=1048652 res=0 errno=0
[  379.707650][ T5807] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  379.943373][ T5807] usb 6-1: Using ep0 maxpacket: 16
[  379.955088][ T5807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.990539][ T5807] usb 6-1: config 0 interface 0 has no altsetting 0
[  379.997365][ T1059] block nbd0: Possible stuck request ffff888021e10000: control (read@0,1024B). Runtime 270 seconds
[  380.017803][ T5807] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  380.071431][ T5807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.094723][ T5807] usb 6-1: config 0 descriptor??
[  380.151851][T13347] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2770'.
[  380.376847][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2780'.
[  380.386458][T13352] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2780'.
[  380.579587][ T5807] cougar 0003:060B:500A.001B: unexpected long global item
[  380.598744][ T5807] cougar 0003:060B:500A.001B: parse failed
[  380.604781][ T5807] cougar: probe of 0003:060B:500A.001B failed with error -22
[  380.809517][   T23] usb 6-1: USB disconnect, device number 23
[  381.044095][ T5807] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  381.236605][ T5807] usb 5-1: Using ep0 maxpacket: 8
[  381.252797][ T5807] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  381.272289][ T5807] usb 5-1: config 179 has no interface number 0
[  381.283097][ T5807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  381.308053][ T5807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  381.321193][ T5807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  381.333432][ T5807] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  381.355316][ T5807] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  381.396431][ T5807] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  381.428938][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.463770][T13360] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  381.971034][ T5807] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input40
[  382.329950][  T787] usb 5-1: USB disconnect, device number 35
[  382.330010][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  382.330059][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  382.357670][  T787] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  382.441690][T13375] loop8: detected capacity change from 0 to 32768
[  382.651498][    C1] sd 0:0:1:0: [sda] tag#6498 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  382.661932][    C1] sd 0:0:1:0: [sda] tag#6498 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00
[  383.374605][  T967] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  383.593660][  T967] usb 6-1: Using ep0 maxpacket: 32
[  383.611610][  T967] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  383.623348][  T967] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  383.652505][  T967] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  383.683884][  T967] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  383.699872][  T967] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  383.729145][  T967] usb 6-1: Product: syz
[  383.733354][  T967] usb 6-1: Manufacturer: syz
[  383.748672][  T967] usb 6-1: SerialNumber: syz
[  383.783752][  T967] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input41
[  384.039710][  T967] usb 6-1: USB disconnect, device number 24
[  384.074861][  T967] appletouch 6-1:1.0: input: appletouch disconnected
[  384.166118][  T787] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[  384.395925][  T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  384.418927][  T787] usb 8-1: New USB device found, idVendor=056a, idProduct=0100, bcdDevice= 0.00
[  384.434304][  T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.451722][  T787] usb 8-1: config 0 descriptor??
[  384.458036][T13418] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  384.691405][   T23] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  384.696684][  T787] usbhid 8-1:0.0: can't add hid device: -71
[  384.721794][  T787] usbhid: probe of 8-1:0.0 failed with error -71
[  384.757874][  T787] usb 8-1: USB disconnect, device number 25
[  384.838697][T13431] loop4: detected capacity change from 0 to 40427
[  384.867594][T13431] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  384.875899][T13431] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  384.899939][T13431] F2FS-fs (loop4): Found nat_bits in checkpoint
[  384.914449][   T23] usb 9-1: too many configurations: 9, using maximum allowed: 8
[  384.937099][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.946478][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.978093][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  384.986230][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  384.988458][T13431] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  384.999511][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.011257][T13431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  385.014605][ T5756] usb 6-1: new low-speed USB device number 25 using dummy_hcd
[  385.035874][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.056255][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  385.070322][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.083708][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.095687][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  385.104706][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.111337][T13431] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  385.123796][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.138873][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  385.147805][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.167209][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.175705][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  385.186459][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.197660][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.205686][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  385.214910][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.225834][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.234872][   T23] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9
[  385.243789][   T23] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.255149][   T23] usb 9-1: config 0 interface 0 has no altsetting 0
[  385.264405][ T5756] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  385.276989][   T23] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  385.287765][ T5756] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  385.297827][   T23] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  385.307124][ T5756] usb 6-1: config 0 interface 0 has no altsetting 0
[  385.314248][   T23] usb 9-1: Product: syz
[  385.318429][   T23] usb 9-1: Manufacturer: syz
[  385.323214][ T5756] usb 6-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  385.332466][   T23] usb 9-1: SerialNumber: syz
[  385.339413][ T5756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.348626][   T23] usb 9-1: config 0 descriptor??
[  385.380523][   T23] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0
[  385.396412][ T5756] usb 6-1: config 0 descriptor??
[  385.767041][    C1] usb 9-1: yurex_control_callback - control failed: -71
[  385.767401][  T787] usb 9-1: USB disconnect, device number 6
[  385.791882][  T787] yurex 9-1:0.0: USB YUREX #0 now disconnected
[  385.856289][ T5756] hid (null): report_id 1797255290 is invalid
[  385.864568][ T5756] uclogic 0003:2179:0053.001C: interface is invalid, ignoring
[  386.093061][ T5756] usb 6-1: USB disconnect, device number 25
[  387.319391][  T967] usb 6-1: new low-speed USB device number 26 using dummy_hcd
[  387.327141][T13472] loop8: detected capacity change from 0 to 1024
[  387.550034][   T51] Bluetooth: hci3: Unknown advertising packet type: 0x70
[  387.550158][   T51] Bluetooth: hci3: adv larger than maximum supported
[  387.565468][   T51] Bluetooth: hci3: Malformed LE Event: 0x0d
[  387.605863][  T967] usb 6-1: unable to get BOS descriptor or descriptor too short
[  387.618378][  T967] usb 6-1: too many configurations: 151, using maximum allowed: 8
[  387.641167][  T967] usb 6-1: unable to read config index 0 descriptor/start: -71
[  387.648782][  T967] usb 6-1: can't read configurations, error -71
[  387.771626][T13483] sctp: [Deprecated]: syz.8.2831 (pid 13483) Use of struct sctp_assoc_value in delayed_ack socket option.
[  387.771626][T13483] Use struct sctp_sack_info instead
[  387.791353][T13487] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2832'.
[  387.981568][T13494] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2836'.
[  388.599207][T13511] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.895812][T13511] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.996864][T13525] vivid-000: disconnect
[  389.006819][T13522] vivid-000: reconnect
[  389.043258][T13511] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.206466][T13511] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.536583][T13511] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.565963][T13511] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.621253][T13511] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.678504][T13511] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.889490][T13541] loop8: detected capacity change from 0 to 64
[  389.989448][T13541] syz.8.2855: attempt to access beyond end of device
[  389.989448][T13541] loop8: rw=0, sector=1024, nr_sectors = 2 limit=64
[  390.014834][T13541] buffer_io_error: 10 callbacks suppressed
[  390.014848][T13541] Buffer I/O error on dev loop8, logical block 512, async page read
[  390.087138][T13541] syz.8.2855: attempt to access beyond end of device
[  390.087138][T13541] loop8: rw=0, sector=113152, nr_sectors = 2 limit=64
[  390.127984][T13541] Buffer I/O error on dev loop8, logical block 56576, async page read
[  391.859780][T13575] loop4: detected capacity change from 0 to 32768
[  391.964023][T13575] jfs_rename did not expect dtDelete to return rc = -2
[  391.994860][T13575] ERROR: (device loop4): jfs_rename: 
[  391.994860][T13575] 
[  392.589864][ T5807] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  392.803910][ T5807] usb 6-1: Using ep0 maxpacket: 8
[  392.816605][ T5807] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  392.835948][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.846701][ T5807] usb 6-1: Product: syz
[  392.850891][ T5807] usb 6-1: Manufacturer: syz
[  392.863581][ T5807] usb 6-1: SerialNumber: syz
[  392.872587][ T5807] usb 6-1: config 0 descriptor??
[  392.887527][ T5807] gspca_main: se401-2.14.0 probing 047d:5003
[  392.951073][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  392.957630][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  393.081698][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  393.274127][    T9] usb 5-1: Using ep0 maxpacket: 16
[  393.280803][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  393.288521][    T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  393.297767][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.308893][    T9] usb 5-1: config 0 descriptor??
[  393.321405][ T5807] gspca_se401: Frame size: 0x0 1/16th janggu
[  393.327627][ T5807] gspca_se401: Frame size: 0x0 1/16th janggu
[  393.334216][ T5807] gspca_se401: Frame size: 0x0 1/16th janggu
[  393.340545][ T7430] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  393.538723][ T5807] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input42
[  393.553582][ T7430] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  393.568901][ T7430] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  393.582285][ T5807] usb 6-1: USB disconnect, device number 28
[  393.589187][ T7430] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  393.598566][ T7430] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.618692][T13611] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  393.670896][ T7430] usb 9-1: Quirk or no altest; falling back to MIDI 1.0
[  393.763820][    T9] hid (null): unknown global tag 0xe
[  393.770328][    T9] hid (null): nested delimiters
[  393.863989][ T7430] usb 9-1: USB disconnect, device number 7
[  393.965539][ T5756] usb 5-1: USB disconnect, device number 36
[  394.310151][T13620] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  394.330588][T13620] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  394.345826][T13620] overlayfs: failed to set uuid (496/file0, err=-13); falling back to uuid=null.
[  394.495653][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2892'.
[  395.034163][T13639] loop8: detected capacity change from 0 to 512
[  395.063523][T13639] EXT4-fs: Ignoring removed i_version option
[  395.092041][T13639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  395.195136][T13639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  395.220556][T13639] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  395.381651][T12255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.719777][T13652] loop4: detected capacity change from 0 to 256
[  395.823759][   T28] audit: type=1800 audit(1771530899.221:28): pid=13652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2911" name="file1" dev="loop4" ino=1048653 res=0 errno=0
[  395.842420][T13652] FAT-fs (loop4): error, clusters badly computed (0 != 128)
[  395.877247][T13652] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  395.977474][T13652] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  396.577867][ T7430] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  396.674522][ T5807] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  396.743324][T13683] loop8: detected capacity change from 0 to 1024
[  396.787243][T13683] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.815982][ T7430] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  396.827480][ T7430] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  396.840659][ T7430] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  396.850362][ T7430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.858434][ T7430] usb 6-1: Product: syz
[  396.862807][ T7430] usb 6-1: Manufacturer: syz
[  396.867577][ T7430] usb 6-1: SerialNumber: syz
[  396.877038][ T5807] usb 5-1: Using ep0 maxpacket: 8
[  396.885405][ T5807] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  396.895542][    T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  396.904033][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  396.916301][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  396.927282][ T5807] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  396.941418][ T5807] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  396.948791][T12255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.950817][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.145072][    T9] usb 8-1: config 0 has an invalid interface number: 255 but max is 0
[  397.153466][    T9] usb 8-1: config 0 has no interface number 0
[  397.164657][    T9] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  397.170109][T13666] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  397.176566][    T9] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  397.196984][    T9] usb 8-1: config 0 interface 255 has no altsetting 0
[  397.204082][    T9] usb 8-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  397.213273][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.221629][ T5807] usb 5-1: GET_CAPABILITIES returned 0
[  397.227134][ T5807] usbtmc 5-1:16.0: can't read capabilities
[  397.236166][    T9] usb 8-1: config 0 descriptor??
[  397.253853][    T9] ums-realtek 8-1:0.255: USB Mass Storage device detected
[  397.463271][   T23] usb 5-1: USB disconnect, device number 37
[  397.518037][  T967] usb 8-1: USB disconnect, device number 26
[  397.855930][ T7430] cdc_ncm 6-1:1.0: SET_CRC_MODE failed
[  397.866438][ T7430] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed
[  397.893631][ T7430] cdc_ncm 6-1:1.0: bind() failure
[  397.901362][ T7430] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  397.908873][ T7430] cdc_ncm 6-1:1.1: bind() failure
[  397.918252][ T7430] usb 6-1: USB disconnect, device number 29
[  398.189672][T13697] openvswitch: netlink: Actions may not be safe on all matching packets
[  398.769179][    T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  398.853848][T13711] syz_tun: tun_net_xmit 86
[  398.972271][    T9] usb 8-1: Using ep0 maxpacket: 32
[  398.988575][    T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[  399.005436][    T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  399.032929][    T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[  399.057343][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  399.086920][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  399.110039][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  399.131012][    T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  399.149762][T13701] loop4: detected capacity change from 0 to 32768
[  399.156562][    T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  399.181807][    T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  399.199523][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.236557][T13701] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.239076][    T9] usb 8-1: config 0 descriptor??
[  399.497475][T13701] XFS (loop4): Ending clean mount
[  399.519534][T13701] XFS (loop4): Quotacheck needed: Please wait.
[  399.527470][T13726] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2931'.
[  399.566762][    T9] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  399.570888][T13705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.604386][T13705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.637791][T13701] XFS (loop4): Quotacheck: Done.
[  399.713009][    T9] usb 8-1: USB disconnect, device number 27
[  399.774353][    T9] usblp0: removed
[  399.883267][ T5976] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  399.966634][    C0] syz_tun: tun_net_xmit 86
[  401.067747][    C0] syz_tun: tun_net_xmit 86
[  401.876164][T13756] loop8: detected capacity change from 0 to 32768
[  401.886273][T13756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.2945 (13756)
[  401.958818][T13756] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  401.989815][T13756] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[  402.011418][T13756] BTRFS info (device loop8): setting nodatacow, compression disabled
[  402.029905][T13756] BTRFS info (device loop8): force clearing of disk cache
[  402.037198][T13756] BTRFS info (device loop8): enabling ssd optimizations
[  402.051721][T13756] BTRFS info (device loop8): using spread ssd allocation scheme
[  402.059420][T13756] BTRFS info (device loop8): turning off barriers
[  402.087490][T13756] BTRFS info (device loop8): disabling free space tree
[  402.116211][    T9] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  402.132832][T13756] BTRFS info (device loop8): not using ssd optimizations
[  402.158145][T13756] BTRFS info (device loop8): not using spread ssd allocation scheme
[  402.231880][T13756] BTRFS info (device loop8): rebuilding free space tree
[  402.276369][T13756] BTRFS info (device loop8): disabling free space tree
[  402.294265][T13756] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  402.317180][T13771] loop4: detected capacity change from 0 to 32768
[  402.324122][T13756] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  402.335157][    T9] usb 6-1: Using ep0 maxpacket: 32
[  402.342748][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.354439][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.371818][    T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  402.380895][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.392369][   T28] audit: type=1800 audit(1771530905.357:29): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2950" name="file1" dev="loop4" ino=4 res=0 errno=0
[  402.402332][    T9] usb 6-1: config 0 descriptor??
[  402.418976][T13771] syz.4.2950: attempt to access beyond end of device
[  402.418976][T13771] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  402.457558][T13771] metapage_write_end_io: I/O error
[  402.463069][T13771] ERROR: (device loop4): diWrite: ixpxd invalid
[  402.463069][T13771] 
[  402.473941][T13771] ERROR: (device loop4): remounting filesystem as read-only
[  402.486016][T13771] ERROR: (device loop4): txCommit: 
[  402.486016][T13771] 
[  402.497886][T13771] blkno = 8ed2c, nblocks = 1
[  402.503849][T13771] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  402.503849][T13771] 
[  402.563542][T13771] ERROR: (device loop4): dbAllocBits: leaf page corrupt
[  402.563542][T13771] 
[  402.615844][T12255] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  402.618167][T13771] syz.4.2950: attempt to access beyond end of device
[  402.618167][T13771] loop4: rw=34817, sector=4683776, nr_sectors = 4 limit=32768
[  402.689425][T13771] syz.4.2950: attempt to access beyond end of device
[  402.689425][T13771] loop4: rw=34817, sector=4683780, nr_sectors = 2048 limit=32768
[  402.740966][T13771] syz.4.2950: attempt to access beyond end of device
[  402.740966][T13771] loop4: rw=34817, sector=4685828, nr_sectors = 516 limit=32768
[  402.814213][  T112] blkno = 8ed2c, nblocks = 4
[  402.818880][  T112] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  402.818880][  T112] 
[  402.844601][  T112] blkno = 8ef00, nblocks = 141
[  402.849443][  T112] ERROR: (device loop4): dbFree: block to be freed is outside the map
[  402.849443][  T112] 
[  402.898257][    T9] koneplus 0003:1E7D:2D51.001E: unknown main item tag 0x0
[  402.905472][    T9] koneplus 0003:1E7D:2D51.001E: unknown main item tag 0x0
[  402.938339][    T9] koneplus 0003:1E7D:2D51.001E: item fetching failed at offset 2/5
[  402.964507][    T9] koneplus 0003:1E7D:2D51.001E: parse failed
[  402.987569][    T9] koneplus: probe of 0003:1E7D:2D51.001E failed with error -22
[  403.235017][ T5807] usb 6-1: USB disconnect, device number 30
[  403.673980][T13813] loop8: detected capacity change from 0 to 128
[  404.445775][  T967] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  404.645044][T13819] loop8: detected capacity change from 0 to 32768
[  404.678895][T13819] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10
[  404.680642][  T967] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  404.757041][  T967] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  404.802560][  T967] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  404.841837][  T967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  404.869011][  T967] usb 8-1: SerialNumber: syz
[  404.890718][ T6258] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10
[  405.143816][  T967] usb 8-1: 0:2 : does not exist
[  405.148792][  T967] usb 8-1: unit 255 not found!
[  405.194639][ T5807] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  405.217595][  T967] usb 8-1: USB disconnect, device number 28
[  405.275944][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.421352][ T5807] usb 5-1: unable to get BOS descriptor set
[  405.431975][ T5807] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  405.461474][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.483303][ T5807] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  405.495608][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.527378][ T5807] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  405.544016][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.556298][T13848] syz_tun: tun_net_xmit 86
[  405.565353][ T5807] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  405.579341][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.600837][ T5807] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  405.612414][    T9] usb 9-1: new full-speed USB device number 8 using dummy_hcd
[  405.623209][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.645799][ T5807] usb 5-1: string descriptor 0 read error: -22
[  405.652355][ T5807] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  405.669665][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.701193][ T5807] usb 5-1: invalid UAC_HEADER (v1)
[  405.742232][ T5807] snd-usb-audio: probe of 5-1:1.0 failed with error -22
[  405.750801][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  405.826629][    T9] usb 9-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  405.837138][    T9] usb 9-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  405.850332][    T9] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  405.881882][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.046140][T13855] loop6: detected capacity change from 0 to 524287999
[  406.064492][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.073703][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.082572][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.091735][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.104429][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.113667][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.123696][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.133017][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.158066][ T5807] usb 5-1: USB disconnect, device number 38
[  406.165643][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.174921][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.183051][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.192239][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.203276][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.212510][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.225750][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.234978][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.242944][ T5761] ldm_validate_partition_table(): Disk read failed.
[  406.262774][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.272183][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.280342][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  406.289597][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  406.311416][ T5761] Dev loop6: unable to read RDB block 0
[  406.318325][ T5761]  loop6: unable to read partition table
[  406.333292][T13855] ldm_validate_partition_table(): Disk read failed.
[  406.350181][T13855] Dev loop6: unable to read RDB block 0
[  406.357990][T13855]  loop6: unable to read partition table
[  406.364751][T13855] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  406.381404][T13856] ldm_validate_partition_table(): Disk read failed.
[  406.388905][T13856] Dev loop6: unable to read RDB block 0
[  406.399459][    T9] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1
[  406.411075][T13856]  loop6: unable to read partition table
[  406.420610][T13856] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  406.431592][    T9] usb 9-1: USB disconnect, device number 8
[  406.627088][    C1] syz_tun: tun_net_xmit 86
[  407.738599][    C1] syz_tun: tun_net_xmit 86
[  407.875741][T13881] loop6: detected capacity change from 0 to 524287999
[  407.897158][T13881] ldm_validate_partition_table(): Disk read failed.
[  407.904614][T13881] Dev loop6: unable to read RDB block 0
[  407.920157][T13881]  loop6: unable to read partition table
[  407.926685][T13881] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  408.000560][T13882] ldm_validate_partition_table(): Disk read failed.
[  408.009026][T13882] Dev loop6: unable to read RDB block 0
[  408.015421][T13882]  loop6: unable to read partition table
[  408.024835][T13882] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  408.174570][T13886] loop8: detected capacity change from 0 to 8
[  408.223316][T13886] SQUASHFS error: Failed to read block 0x4de: -5
[  408.229829][T13886] SQUASHFS error: Failed to read block 0x4de: -5
[  408.236751][T13886] SQUASHFS error: Failed to read block 0x4de: -5
[  408.243533][T13886] SQUASHFS error: Failed to read block 0x4de: -5
[  408.257547][T13886] SQUASHFS error: Failed to read block 0x4de: -5
[  408.275297][   T28] audit: type=1800 audit(1771530910.867:30): pid=13886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2995" name="file1" dev="loop8" ino=5 res=0 errno=0
[  408.422941][   T51] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  408.429927][ T5086] Bluetooth: hci1: command 0x1003 tx timeout
[  409.126578][T13908] loop6: detected capacity change from 0 to 524287999
[  409.153590][T13908] ldm_validate_partition_table(): Disk read failed.
[  409.259294][T13908] Dev loop6: unable to read RDB block 0
[  409.281095][T13908]  loop6: unable to read partition table
[  409.296608][T13908] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  409.308993][ T6258] ldm_validate_partition_table(): Disk read failed.
[  409.336148][ T6258] Dev loop6: unable to read RDB block 0
[  409.337204][T13913] netlink: 'syz.5.3007': attribute type 1 has an invalid length.
[  409.361908][ T6258]  loop6: unable to read partition table
[  409.390973][T13913] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.3007'.
[  409.404330][T13911] ldm_validate_partition_table(): Disk read failed.
[  409.444611][T13911] Dev loop6: unable to read RDB block 0
[  409.491333][T13911]  loop6: unable to read partition table
[  409.502691][T13911] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  409.709532][ T3549] Bluetooth: hci1: Frame reassembly failed (-84)
[  410.291684][T13929] Bluetooth: MGMT ver 1.22
[  410.585046][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'.
[  410.623069][T13935] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.726350][T13935] bridge_slave_0 (unregistering): left allmulticast mode
[  410.742566][T13935] bridge_slave_0 (unregistering): left promiscuous mode
[  410.758040][T13935] bridge0: port 1(bridge_slave_0) entered disabled state
[  411.370198][T13943] loop6: detected capacity change from 0 to 524287999
[  411.398869][T13943] ldm_validate_partition_table(): Disk read failed.
[  411.431401][    C0] blk_print_req_error: 144 callbacks suppressed
[  411.431416][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.447120][    C0] buffer_io_error: 139 callbacks suppressed
[  411.447133][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.498008][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.507288][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.516446][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.525646][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.541188][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.550411][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.558583][T13943] Dev loop6: unable to read RDB block 0
[  411.566008][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.575370][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.584301][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.593493][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.602943][    C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.612244][    C0] Buffer I/O error on dev loop6, logical block 3, async page read
[  411.620749][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.629967][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.638013][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.647298][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.662268][T13943]  loop6: unable to read partition table
[  411.689375][T13943] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  411.704838][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  411.714021][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.734062][ T5761] ldm_validate_partition_table(): Disk read failed.
[  411.747868][ T5761] Dev loop6: unable to read RDB block 0
[  411.762388][ T5761]  loop6: unable to read partition table
[  411.780509][T13946] ldm_validate_partition_table(): Disk read failed.
[  411.796355][T13946] Dev loop6: unable to read RDB block 0
[  411.805316][T13946]  loop6: unable to read partition table
[  411.811304][T13946] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  411.843904][ T5086] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  411.850945][   T51] Bluetooth: hci1: command 0x1003 tx timeout
[  412.102119][ T1059] block nbd0: Possible stuck request ffff888021e10000: control (read@0,1024B). Runtime 300 seconds
[  413.113450][T13971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.345416][T13979] netlink: 'syz.5.3042': attribute type 11 has an invalid length.
[  413.379931][T13979] netlink: 184116 bytes leftover after parsing attributes in process `syz.5.3042'.
[  413.395743][T13971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.459327][T13979] debugfs: Directory '!!Ї' with parent 'ieee80211' already present!
[  413.584008][T13971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.827819][T13987] loop6: detected capacity change from 0 to 524287999
[  413.867214][T13987] ldm_validate_partition_table(): Disk read failed.
[  413.899752][T13987] Dev loop6: unable to read RDB block 0
[  413.917849][  T967] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  413.930056][T13987]  loop6: unable to read partition table
[  413.937033][T13987] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  413.937912][T13971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.958426][T10580] ldm_validate_partition_table(): Disk read failed.
[  413.966699][T10580] Dev loop6: unable to read RDB block 0
[  413.976620][T10580]  loop6: unable to read partition table
[  413.988403][T13989] ldm_validate_partition_table(): Disk read failed.
[  414.012331][T13989] Dev loop6: unable to read RDB block 0
[  414.023947][T13989]  loop6: unable to read partition table
[  414.041124][T13989] loop_reread_partitions: partition scan of loop6 (3Я╛x╨ШC╓

) failed (rc=-5)
[  414.124468][  T967] usb 9-1: Using ep0 maxpacket: 32
[  414.156209][  T967] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  414.179463][  T967] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.210949][T13971] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  414.254590][  T967] usb 9-1: config 0 descriptor??
[  414.304516][T13971] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  414.341961][T13971] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  414.409051][T13971] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  414.513224][  T967] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  414.551291][  T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  414.576037][  T967] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  414.595494][  T967] usb 9-1: media controller created
[  414.649882][  T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  414.734046][  T967] az6027: usb out operation failed. (-71)
[  414.754730][  T967] az6027: usb out operation failed. (-71)
[  414.768569][  T967] stb0899_attach: Driver disabled by Kconfig
[  414.794494][  T967] az6027: no front-end attached
[  414.794494][  T967] 
[  414.804431][  T967] az6027: usb out operation failed. (-71)
[  414.815724][  T967] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  414.823982][  T967] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44
[  414.860689][  T967] dvb-usb: schedule remote query interval to 400 msecs.
[  414.867688][  T967] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  414.891407][  T967] usb 9-1: USB disconnect, device number 9
[  415.016014][  T967] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  415.371840][    T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  415.628146][    T8] usb 5-1: Using ep0 maxpacket: 16
[  415.650261][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  415.676931][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  415.700247][    T8] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  415.731057][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.758616][    T8] usb 5-1: config 0 descriptor??
[  416.276195][    T8] cougar 0003:060B:500A.001F: unexpected long global item
[  416.304853][    T8] cougar 0003:060B:500A.001F: parse failed
[  416.323064][    T8] cougar: probe of 0003:060B:500A.001F failed with error -22
[  416.434696][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3057'.
[  416.503253][    T8] usb 5-1: USB disconnect, device number 39
[  417.149441][T14037] netlink: 'syz.8.3067': attribute type 11 has an invalid length.
[  417.179533][T14037] netlink: 184116 bytes leftover after parsing attributes in process `syz.8.3067'.
[  417.217310][T14037] debugfs: Directory '!!Ї' with parent 'ieee80211' already present!
[  417.602039][T14047] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.691406][ T5824] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  417.720226][T14047] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.857751][T14047] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.916080][ T5824] usb 6-1: Using ep0 maxpacket: 32
[  417.923347][ T5824] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  417.939056][ T5824] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  417.958572][ T5824] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  417.990971][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  418.003534][T14047] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.023215][ T5824] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  418.048951][ T5824] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  418.065649][ T5824] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  418.089577][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  418.128864][ T5824] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  418.145986][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.179224][ T5824] usb 6-1: config 0 descriptor??
[  418.285542][T14047] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  418.342404][T14047] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  418.372611][T14047] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  418.437725][T14047] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.462307][T14045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.475418][ T5824] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  418.505506][T14045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.595526][ T5824] usb 6-1: USB disconnect, device number 31
[  418.613278][ T5824] usblp0: removed
[  420.304344][T14083] netlink: 'syz.7.3074': attribute type 11 has an invalid length.
[  420.364103][T14083] netlink: 184116 bytes leftover after parsing attributes in process `syz.7.3074'.
[  420.378223][T14083] debugfs: Directory '!!Ї' with parent 'ieee80211' already present!
[  420.524581][   T23] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  420.738402][   T23] usb 5-1: Using ep0 maxpacket: 8
[  420.750396][   T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  420.765927][T14079] loop8: detected capacity change from 0 to 32768
[  420.770312][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  420.798472][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  420.827362][   T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  420.855817][   T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  420.861140][T14079] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  420.864880][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.015129][T14079] XFS (loop8): Ending clean mount
[  421.037003][T14079] XFS (loop8): Quotacheck needed: Please wait.
[  421.128624][T14079] XFS (loop8): Quotacheck: Done.
[  421.136853][   T23] usb 5-1: GET_CAPABILITIES returned 0
[  421.142358][   T23] usbtmc 5-1:16.0: can't read capabilities
[  421.268895][T12255] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.473712][  T967] usb 5-1: USB disconnect, device number 40
[  421.806562][T14105] loop8: detected capacity change from 0 to 256
[  421.912156][T14105] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  421.991435][   T28] audit: type=1800 audit(1771530923.700:31): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3077" name="file1" dev="loop8" ino=1048654 res=0 errno=0
[  422.053871][   T28] audit: type=1800 audit(1771530923.700:32): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3077" name="file1" dev="loop8" ino=1048654 res=0 errno=0
[  422.391826][   T51] block nbd1: Receive control failed (result -32)
[  422.539654][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  423.635791][T14155] netlink: 'syz.4.3107': attribute type 2 has an invalid length.
[  424.612759][T14179] ALSA: mixer_oss: invalid OSS volume ''
[  425.456508][T14200] loop8: detected capacity change from 0 to 256
[  425.583687][T14200] FAT-fs (loop8): Directory bread(block 64) failed
[  425.616652][T14200] FAT-fs (loop8): Directory bread(block 65) failed
[  425.643122][T14200] FAT-fs (loop8): Directory bread(block 66) failed
[  425.687967][T14200] FAT-fs (loop8): Directory bread(block 67) failed
[  425.694658][T14200] FAT-fs (loop8): Directory bread(block 68) failed
[  425.727103][T14200] FAT-fs (loop8): Directory bread(block 69) failed
[  425.751945][T14200] FAT-fs (loop8): Directory bread(block 70) failed
[  425.773719][T14200] FAT-fs (loop8): Directory bread(block 71) failed
[  425.804613][T14200] FAT-fs (loop8): Directory bread(block 72) failed
[  425.826979][T14200] FAT-fs (loop8): Directory bread(block 73) failed
[  426.666528][T14223] loop8: detected capacity change from 0 to 512
[  426.703084][T14223] FAT-fs (loop8): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1)
[  427.029038][ T3549] FAT-fs (loop8): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1)
[  427.059377][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'.
[  427.179083][T14233] loop8: detected capacity change from 0 to 164
[  428.064116][T14251] loop8: detected capacity change from 0 to 128
[  428.130945][T14251] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  428.166590][T14251] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  428.607190][ T5824] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  428.823653][ T5824] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  428.844546][ T5824] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  428.874680][ T5824] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  428.894913][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.911328][T14258] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  428.923355][ T5824] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  429.066612][ T5756] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  429.291346][ T5756] usb 9-1: Using ep0 maxpacket: 32
[  429.322553][ T5756] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  429.355112][ T5756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.412251][ T5756] usb 9-1: config 0 descriptor??
[  429.433185][ T5756] gspca_main: sq930x-2.14.0 probing 041e:403c
[  429.601208][    T9] usb 5-1: USB disconnect, device number 41
[  429.631801][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3167'.
[  429.655354][ T5824] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  429.901184][ T5824] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  429.910311][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.936249][ T5824] usb 6-1: config 0 descriptor??
[  429.945531][ T5824] cp210x 6-1:0.0: cp210x converter detected
[  430.391942][ T5824] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  430.423944][ T5756] gspca_sq930x: reg_w 0105 bf00 failed -71
[  430.455738][ T5824] usb 6-1: cp210x converter now attached to ttyUSB0
[  430.532647][ T5756] sq930x: probe of 9-1:0.0 failed with error -71
[  430.545829][ T5756] usb 9-1: USB disconnect, device number 10
[  430.727761][    T8] usb 6-1: USB disconnect, device number 32
[  430.756468][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  430.784498][    T8] cp210x 6-1:0.0: device disconnected
[  431.262753][    C1] syz_tun: tun_net_xmit 86
[  431.271950][ T5756] syz_tun: tun_net_xmit 86
[  431.337203][T14313] loop8: detected capacity change from 0 to 64
[  431.464244][T14313] Trying to free block not in datazone
[  431.493044][T14313] Trying to free block not in datazone
[  431.498551][T14313] Trying to free block not in datazone
[  431.547819][T14313] Trying to free block not in datazone
[  431.553323][T14313] Trying to free block not in datazone
[  431.570999][T14318] syz.8.3180: attempt to access beyond end of device
[  431.570999][T14318] loop8: rw=0, sector=8192, nr_sectors = 2 limit=64
[  431.579386][T14313] Trying to free block not in datazone
[  431.655228][T14318] Trying to free block not in datazone
[  431.664021][T14318] Trying to free block not in datazone
[  431.669510][T14318] Trying to free block not in datazone
[  431.669981][T14313] Trying to free block not in datazone
[  431.713357][T14313] Trying to free block not in datazone
[  431.737215][T14313] Trying to free block not in datazone
[  431.777095][T14313] Trying to free block not in datazone
[  431.796795][T14313] Trying to free block not in datazone
[  431.824547][T14313] Trying to free block not in datazone
[  431.830049][T14313] Trying to free block not in datazone
[  431.844685][T14313] Trying to free block not in datazone
[  431.852171][T14313] Trying to free block not in datazone
[  431.871006][T14313] Trying to free block not in datazone
[  431.881458][T14313] Trying to free block not in datazone
[  431.891921][T14313] Trying to free block not in datazone
[  431.899641][T14313] Trying to free block not in datazone
[  431.905932][T14313] Trying to free block not in datazone
[  431.939111][T14313] Trying to free block not in datazone
[  431.960574][T14313] Trying to free block not in datazone
[  431.967949][T14313] Trying to free block not in datazone
[  431.976130][T14313] Trying to free block not in datazone
[  431.987851][T14313] Trying to free block not in datazone
[  431.993558][T14313] Trying to free block not in datazone
[  432.003584][T14313] Trying to free block not in datazone
[  432.026278][T14313] Trying to free block not in datazone
[  432.047574][T14313] Trying to free block not in datazone
[  432.063348][T14313] Trying to free block not in datazone
[  432.077622][T14313] Trying to free block not in datazone
[  432.087777][T14313] Trying to free block not in datazone
[  432.098081][T14313] Trying to free block not in datazone
[  432.108716][T14313] Trying to free block not in datazone
[  432.131588][T14313] Trying to free block not in datazone
[  432.141817][T14313] Trying to free block not in datazone
[  432.153030][T14313] Trying to free block not in datazone
[  432.163096][T14313] Trying to free block not in datazone
[  432.169123][T14313] Trying to free block not in datazone
[  432.174757][T14313] Trying to free block not in datazone
[  432.181349][T14313] Trying to free block not in datazone
[  432.192265][T14313] Trying to free block not in datazone
[  432.201965][T14313] Trying to free block not in datazone
[  432.211316][T14313] Trying to free block not in datazone
[  432.250806][T14313] Trying to free block not in datazone
[  432.262797][T14313] Trying to free block not in datazone
[  432.273631][T14313] Trying to free block not in datazone
[  432.289977][T14313] Trying to free block not in datazone
[  432.309322][T14313] Trying to free block not in datazone
[  432.319177][T14313] Trying to free block not in datazone
[  432.324780][T14313] Trying to free block not in datazone
[  432.334350][T14313] Trying to free block not in datazone
[  432.346130][T14313] Trying to free block not in datazone
[  432.355613][T14313] Trying to free block not in datazone
[  432.362971][T14313] Trying to free block not in datazone
[  432.373955][T14313] Trying to free block not in datazone
[  432.379607][T14313] Trying to free block not in datazone
[  432.385527][    C1] syz_tun: tun_net_xmit 86
[  432.407830][T14313] Trying to free block not in datazone
[  432.414855][T14313] Trying to free block not in datazone
[  432.420419][T14313] Trying to free block not in datazone
[  432.426335][T14313] Trying to free block not in datazone
[  432.431887][T14313] Trying to free block not in datazone
[  432.437739][T14313] Trying to free block not in datazone
[  432.443382][T14313] Trying to free block not in datazone
[  432.449551][T14313] Trying to free block not in datazone
[  432.472195][T14313] Trying to free block not in datazone
[  432.499624][T14313] Trying to free block not in datazone
[  432.505129][T14313] Trying to free block not in datazone
[  432.562776][T14313] Trying to free block not in datazone
[  432.568280][T14313] Trying to free block not in datazone
[  432.608508][T14313] Trying to free block not in datazone
[  432.614023][T14313] Trying to free block not in datazone
[  432.658561][T14313] Trying to free block not in datazone
[  432.664062][T14313] Trying to free block not in datazone
[  432.701024][T14313] Trying to free block not in datazone
[  432.706523][T14313] Trying to free block not in datazone
[  432.717633][T14313] Trying to free block not in datazone
[  432.724564][T14313] Trying to free block not in datazone
[  432.733135][T14313] Trying to free block not in datazone
[  432.739655][T14313] Trying to free block not in datazone
[  432.752624][T14313] Trying to free block not in datazone
[  432.763410][T14313] Trying to free block not in datazone
[  432.770611][T14313] Trying to free block not in datazone
[  432.776456][T14313] Trying to free block not in datazone
[  432.787254][T14313] Trying to free block not in datazone
[  432.792735][T14313] Trying to free block not in datazone
[  432.829479][T14313] Trying to free block not in datazone
[  432.843266][T14313] Trying to free block not in datazone
[  432.863952][T14313] Trying to free block not in datazone
[  432.875342][T14313] Trying to free block not in datazone
[  432.887921][T14313] Trying to free block not in datazone
[  432.895568][T14349] program syz.5.3195 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  432.899334][T14313] Trying to free block not in datazone
[  432.923020][T14313] Trying to free block not in datazone
[  432.946940][T14313] Trying to free block not in datazone
[  432.952443][T14313] Trying to free block not in datazone
[  432.989647][T14313] Trying to free block not in datazone
[  433.006049][T14313] Trying to free block not in datazone
[  433.027596][T14313] Trying to free block not in datazone
[  433.038754][T14313] Trying to free block not in datazone
[  433.049536][T14313] Trying to free block not in datazone
[  433.065101][T14313] Trying to free block not in datazone
[  433.082485][T14313] Trying to free block not in datazone
[  433.093269][T14313] Trying to free block not in datazone
[  433.105558][T14313] Trying to free block not in datazone
[  433.117915][T14313] Trying to free block not in datazone
[  433.123450][T14313] Trying to free block not in datazone
[  433.147493][T14313] Trying to free block not in datazone
[  433.157937][T14313] Trying to free block not in datazone
[  433.163564][T14313] Trying to free block not in datazone
[  433.169126][T14313] Trying to free block not in datazone
[  433.192920][T14313] Trying to free block not in datazone
[  433.212220][T14313] Trying to free block not in datazone
[  433.233769][T14313] Trying to free block not in datazone
[  433.240335][T14313] Trying to free block not in datazone
[  433.256748][T14313] Trying to free block not in datazone
[  433.267533][T14313] Trying to free block not in datazone
[  433.310731][T14313] Trying to free block not in datazone
[  433.322904][T14313] Trying to free block not in datazone
[  433.342428][T14313] Trying to free block not in datazone
[  433.364384][T14313] Trying to free block not in datazone
[  433.369883][T14313] Trying to free block not in datazone
[  433.397499][T14313] Trying to free block not in datazone
[  433.403014][T14313] Trying to free block not in datazone
[  433.419386][T14313] Trying to free block not in datazone
[  433.424890][T14313] Trying to free block not in datazone
[  433.437332][T14313] Trying to free block not in datazone
[  433.443090][T14313] Trying to free block not in datazone
[  433.448625][T14313] Trying to free block not in datazone
[  433.475469][T14313] Trying to free block not in datazone
[  433.481690][    C1] syz_tun: tun_net_xmit 86
[  433.490733][T14313] Trying to free block not in datazone
[  433.503160][T14313] Trying to free block not in datazone
[  433.524206][T14313] Trying to free block not in datazone
[  433.529785][T14313] Trying to free block not in datazone
[  433.563093][T14313] Trying to free block not in datazone
[  433.578475][T14313] Trying to free block not in datazone
[  433.584052][T14313] Trying to free block not in datazone
[  433.594833][T14313] Trying to free block not in datazone
[  433.609810][T14313] Trying to free block not in datazone
[  433.631113][T14313] Trying to free block not in datazone
[  433.636607][T14313] Trying to free block not in datazone
[  433.684841][T14313] Trying to free block not in datazone
[  433.690392][T14313] Trying to free block not in datazone
[  433.748699][T14313] Trying to free block not in datazone
[  433.754203][T14313] Trying to free block not in datazone
[  433.775735][T14357] sp0: Synchronizing with TNC
[  433.802998][T14313] Trying to free block not in datazone
[  433.808519][T14313] Trying to free block not in datazone
[  433.846618][T14313] Trying to free block not in datazone
[  433.852125][T14313] Trying to free block not in datazone
[  433.909060][T14313] Trying to free block not in datazone
[  433.914571][T14313] Trying to free block not in datazone
[  433.952052][T14313] Trying to free block not in datazone
[  433.957640][T14313] Trying to free block not in datazone
[  433.964909][T14313] Trying to free block not in datazone
[  433.970611][T14313] Trying to free block not in datazone
[  433.976151][T14313] Trying to free block not in datazone
[  433.983909][T14313] Trying to free block not in datazone
[  433.989476][T14313] Trying to free block not in datazone
[  434.037404][T14313] Trying to free block not in datazone
[  434.042907][T14313] Trying to free block not in datazone
[  434.049640][T14363] netlink: 'syz.5.3202': attribute type 27 has an invalid length.
[  434.058527][T14363] netlink: 'syz.5.3202': attribute type 1 has an invalid length.
[  434.077368][T14313] Trying to free block not in datazone
[  434.101478][T14313] Trying to free block not in datazone
[  434.118546][T14313] Trying to free block not in datazone
[  434.154908][T14313] Trying to free block not in datazone
[  434.160592][T14313] Trying to free block not in datazone
[  434.195515][T14313] Trying to free block not in datazone
[  434.219120][T14313] Trying to free block not in datazone
[  434.224631][T14313] Trying to free block not in datazone
[  434.241293][T14313] Trying to free block not in datazone
[  434.246915][T14313] Trying to free block not in datazone
[  434.294769][T14313] Trying to free block not in datazone
[  434.300275][T14313] Trying to free block not in datazone
[  434.316908][T14313] Trying to free block not in datazone
[  434.322407][T14313] Trying to free block not in datazone
[  434.336991][T14313] Trying to free block not in datazone
[  434.358092][T14313] Trying to free block not in datazone
[  434.363594][T14313] Trying to free block not in datazone
[  434.379784][T14313] Trying to free block not in datazone
[  434.385546][T14313] Trying to free block not in datazone
[  434.398898][T14313] Trying to free block not in datazone
[  434.406775][T14313] Trying to free block not in datazone
[  434.434356][T14313] Trying to free block not in datazone
[  434.440860][T14313] Trying to free block not in datazone
[  434.455535][T14313] Trying to free block not in datazone
[  434.482313][T14313] Trying to free block not in datazone
[  434.488254][T14313] Trying to free block not in datazone
[  434.495839][T14313] Trying to free block not in datazone
[  434.513032][T14313] Trying to free block not in datazone
[  434.524634][T14313] Trying to free block not in datazone
[  434.534668][T14313] Trying to free block not in datazone
[  434.550590][T14313] Trying to free block not in datazone
[  434.556110][T14313] Trying to free block not in datazone
[  434.578380][T14313] Trying to free block not in datazone
[  434.587295][T14313] Trying to free block not in datazone
[  434.606107][T14313] Trying to free block not in datazone
[  434.611607][T14313] Trying to free block not in datazone
[  434.634695][T14313] Trying to free block not in datazone
[  434.653686][T14313] Trying to free block not in datazone
[  434.672463][T14313] Trying to free block not in datazone
[  434.681826][   T49] kworker/u4:3: attempt to access beyond end of device
[  434.681826][   T49] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  434.697330][T14313] Trying to free block not in datazone
[  434.721121][   T49] metapage_write_end_io: I/O error
[  434.722619][T14313] Trying to free block not in datazone
[  434.737957][T14313] Trying to free block not in datazone
[  434.748735][   T49] JFS: metapage_get_blocks failed
[  434.756663][T14313] Trying to free block not in datazone
[  434.782269][T14313] Trying to free block not in datazone
[  434.799516][T14313] Trying to free block not in datazone
[  434.805031][T14313] Trying to free block not in datazone
[  434.840420][T14313] Trying to free block not in datazone
[  434.847774][T14384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3211'.
[  434.851494][T14313] Trying to free block not in datazone
[  434.862970][T14313] Trying to free block not in datazone
[  434.868445][T14313] Trying to free block not in datazone
[  434.877174][T14313] Trying to free block not in datazone
[  434.882927][T14313] Trying to free block not in datazone
[  434.888513][T14313] Trying to free block not in datazone
[  434.894545][T14313] Trying to free block not in datazone
[  434.900143][T14313] Trying to free block not in datazone
[  434.911646][T14313] Trying to free block not in datazone
[  434.918289][T14313] Trying to free block not in datazone
[  434.923891][T14313] Trying to free block not in datazone
[  434.939535][T14313] Trying to free block not in datazone
[  434.945031][T14313] Trying to free block not in datazone
[  434.967506][T14313] Trying to free block not in datazone
[  434.978883][T14313] Trying to free block not in datazone
[  434.984500][T14313] Trying to free block not in datazone
[  434.990486][T14313] Trying to free block not in datazone
[  434.996013][T14313] Trying to free block not in datazone
[  435.016108][T14313] Trying to free block not in datazone
[  435.024359][T14313] Trying to free block not in datazone
[  435.035585][T14313] Trying to free block not in datazone
[  435.043013][ T5824] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  435.055542][T14313] Trying to free block not in datazone
[  435.061028][T14313] Trying to free block not in datazone
[  435.095794][T14313] Trying to free block not in datazone
[  435.101443][T14313] Trying to free block not in datazone
[  435.128465][T14313] Trying to free block not in datazone
[  435.133982][T14313] Trying to free block not in datazone
[  435.152644][T14313] Trying to free block not in datazone
[  435.158143][T14313] Trying to free block not in datazone
[  435.183103][T14313] Trying to free block not in datazone
[  435.193483][T14313] Trying to free block not in datazone
[  435.199140][T14313] Trying to free block not in datazone
[  435.220989][T14313] Trying to free block not in datazone
[  435.227110][T14313] Trying to free block not in datazone
[  435.233077][T14313] Trying to free block not in datazone
[  435.238697][T14313] Trying to free block not in datazone
[  435.244336][T14313] Trying to free block not in datazone
[  435.250186][T14313] Trying to free block not in datazone
[  435.255698][T14313] Trying to free block not in datazone
[  435.267357][ T5824] usb 8-1: Using ep0 maxpacket: 8
[  435.281735][ T5824] usb 8-1: config 0 has an invalid interface number: 31 but max is 0
[  435.285517][T14313] Trying to free block not in datazone
[  435.300598][T14394] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3214'.
[  435.304638][T14313] Trying to free block not in datazone
[  435.312528][ T5824] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  435.326455][T14313] Trying to free block not in datazone
[  435.341785][T14313] Trying to free block not in datazone
[  435.347420][T14313] Trying to free block not in datazone
[  435.352300][ T5824] usb 8-1: config 0 has no interface number 0
[  435.367865][ T5824] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  435.388075][ T5824] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.391850][T14313] Trying to free block not in datazone
[  435.413328][ T5824] usb 8-1: Product: syz
[  435.418192][T14313] Trying to free block not in datazone
[  435.423801][T14313] Trying to free block not in datazone
[  435.426980][ T5824] usb 8-1: Manufacturer: syz
[  435.445125][T14313] Trying to free block not in datazone
[  435.448275][ T5824] usb 8-1: SerialNumber: syz
[  435.454821][T14313] Trying to free block not in datazone
[  435.478610][ T5824] usb 8-1: config 0 descriptor??
[  435.486691][T14313] Trying to free block not in datazone
[  435.516072][T14313] Trying to free block not in datazone
[  435.814340][    T8] usb 8-1: USB disconnect, device number 29
[  436.110664][    T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[  436.157697][    T9] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  437.379652][T14427] 9pnet: p9_errstr2errno: server reported unknown error     
[  437.482548][T14418] loop8: detected capacity change from 0 to 40427
[  437.500426][T14418] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  437.540987][T14418] F2FS-fs (loop8): invalid crc value
[  437.564965][T14418] F2FS-fs (loop8): Found nat_bits in checkpoint
[  437.774769][T14418] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  437.906172][T14433] vxcan1 speed is unknown, defaulting to 1000
[  437.998714][T12255] syz-executor: attempt to access beyond end of device
[  437.998714][T12255] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  438.062806][T12255] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  440.629227][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3249'.
[  441.339987][T14477] loop8: detected capacity change from 0 to 32768
[  441.363123][T14493] 9p: Unknown uid 00000000004294967295
[  441.413423][T14477] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  441.475842][T14477] XFS (loop8): Ending clean mount
[  441.485912][T14477] XFS (loop8): Quotacheck needed: Please wait.
[  441.644600][T14477] XFS (loop8): Quotacheck: Done.
[  441.992047][T12255] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  442.360200][T14523] netlink: 188 bytes leftover after parsing attributes in process `syz.7.3267'.
[  443.581139][T14539] loop8: detected capacity change from 0 to 1024
[  444.151380][ T3549] hfsplus: b-tree write err: -5, ino 4
[  444.496796][ T1059] block nbd0: Possible stuck request ffff888021e10000: control (read@0,1024B). Runtime 330 seconds
[  445.166420][ T5824] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  445.446005][ T5824] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  445.501184][ T5824] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  445.550041][ T5824] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  445.615265][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  445.644533][ T5824] usb 8-1: SerialNumber: syz
[  445.936492][ T5824] usb 8-1: 0:2 : does not exist
[  446.042193][ T5824] usb 8-1: USB disconnect, device number 30
[  446.142772][ T6258] udevd[6258]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  446.599175][ T5807] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  446.739455][T14581] bridge0: port 2(bridge_slave_1) entered disabled state
[  446.802994][ T5807] usb 6-1: Using ep0 maxpacket: 8
[  446.817016][ T5807] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  446.834717][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.854033][ T5807] usb 6-1: Product: syz
[  446.865338][ T5807] usb 6-1: Manufacturer: syz
[  446.887554][ T5807] usb 6-1: SerialNumber: syz
[  446.907285][ T5807] usb 6-1: config 0 descriptor??
[  446.926583][ T5807] gspca_main: se401-2.14.0 probing 047d:5003
[  447.610605][ T5807] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input45
[  447.881491][ T5824] usb 6-1: USB disconnect, device number 33
[  447.998686][   T28] audit: type=1800 audit(1771530948.021:33): pid=14609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.3303" name="/newroot/633/bus/#3277//deleted" dev="tmpfs" ino=3277 res=0 errno=0
[  448.190287][T14622] tap0: tun_chr_ioctl cmd 2147767507
[  448.914756][T14645] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3319'.
[  448.924145][ T5824] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  449.138389][ T5824] usb 6-1: config 0 interface 0 has no altsetting 0
[  449.159664][ T5824] usb 6-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  449.184936][T14652] loop8: detected capacity change from 0 to 1024
[  449.195037][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.223961][T14652] EXT4-fs: Ignoring removed nomblk_io_submit option
[  449.239723][ T5824] usb 6-1: config 0 descriptor??
[  449.267050][T14652] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  449.324332][T14652] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0003]
[  449.345884][T14652] System zones: 0-1, 3-36
[  449.409741][T14652] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  449.725537][ T5824] playstation 0003:054C:09CC.0021: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.5-1/input0
[  449.886445][T12255] EXT4-fs error (device loop8): ext4_iget_extra_inode:4732: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  449.914359][T12255] EXT4-fs error (device loop8): ext4_iget_extra_inode:4732: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  449.933507][ T5824] playstation 0003:054C:09CC.0021: Invalid byte count transferred, expected 16 got 0
[  449.943580][ T5824] playstation 0003:054C:09CC.0021: Failed to retrieve DualShock4 pairing info: -22
[  449.964813][ T5824] playstation 0003:054C:09CC.0021: Failed to get MAC address from DualShock4
[  449.985943][ T5824] playstation 0003:054C:09CC.0021: Failed to create dualshock4.
[  450.024282][ T5824] playstation: probe of 0003:054C:09CC.0021 failed with error -22
[  450.217121][    T9] usb 6-1: USB disconnect, device number 34
[  450.290370][T12255] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.464437][   T11] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.579160][   T11] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.714093][   T11] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.810661][   T11] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.205124][T14678] tmpfs: Cannot retroactively limit size
[  451.703134][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  451.715622][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  451.746855][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  451.772513][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  451.782186][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  451.790208][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  451.847634][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  451.866296][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  451.883867][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  451.908070][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  451.939686][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  451.949291][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  451.979123][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  452.002274][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  452.029717][T14684] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'.
[  452.253603][T14686] vxcan1 speed is unknown, defaulting to 1000
[  453.302097][T14729] Bluetooth: MGMT ver 1.22
[  453.612191][    T8] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  453.741283][T14742] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  453.804331][    T8] usb 8-1: Using ep0 maxpacket: 16
[  453.812156][    T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  453.840585][    T8] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  453.850288][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.858384][    T8] usb 8-1: Product: syz
[  453.862565][    T8] usb 8-1: Manufacturer: syz
[  453.867399][    T8] usb 8-1: SerialNumber: syz
[  453.874647][    T8] usb 8-1: config 0 descriptor??
[  453.886542][    T8] hub 8-1:0.0: bad descriptor, ignoring hub
[  453.892884][    T8] hub: probe of 8-1:0.0 failed with error -5
[  453.913505][    T8] usb 8-1: Quirk or no altest; falling back to MIDI 1.0
[  454.007994][ T5086] Bluetooth: hci1: command tx timeout
[  454.110758][T14686] chnl_net:caif_netlink_parms(): no params data found
[  454.213641][    T8] usb 8-1: USB disconnect, device number 31
[  454.645795][T14686] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.657357][T14686] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.675228][T14686] bridge_slave_0: entered allmulticast mode
[  454.688067][T14686] bridge_slave_0: entered promiscuous mode
[  454.715012][T14686] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.722380][T14686] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.740144][T14686] bridge_slave_1: entered allmulticast mode
[  454.749088][T14686] bridge_slave_1: entered promiscuous mode
[  454.861660][T14686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.906099][T14773] tipc: Started in network mode
[  454.911097][T14773] tipc: Node identity ac14140f, cluster identity 4711
[  454.941867][T14773] tipc: New replicast peer: 255.255.255.255
[  454.961299][T14773] tipc: Enabled bearer <udp:syz2>, priority 10
[  454.972379][T14686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.150885][T14686] team0: Port device team_slave_0 added
[  455.249439][T14686] team0: Port device team_slave_1 added
[  455.671587][   T11] hsr_slave_0: left promiscuous mode
[  455.767238][   T11] hsr_slave_1: left promiscuous mode
[  455.776185][T14789] syz_tun: tun_net_xmit 86
[  455.796848][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.829128][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.893599][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.938515][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.975609][   T11] bridge_slave_1: left allmulticast mode
[  455.981294][   T11] bridge_slave_1: left promiscuous mode
[  456.025995][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.060867][   T11] bridge_slave_0: left allmulticast mode
[  456.077434][   T11] bridge_slave_0: left promiscuous mode
[  456.103890][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.231641][ T5086] Bluetooth: hci1: command tx timeout
[  456.361072][   T11] veth1_macvtap: left promiscuous mode
[  456.366901][   T11] veth0_macvtap: left promiscuous mode
[  456.390075][   T11] veth1_vlan: left promiscuous mode
[  456.414355][   T11] veth0_vlan: left promiscuous mode
[  456.915417][    C0] syz_tun: tun_net_xmit 86
[  458.027268][    C0] syz_tun: tun_net_xmit 86
[  458.458622][ T5086] Bluetooth: hci1: command tx timeout
[  458.631906][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  458.644415][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  458.945302][   T11] team0 (unregistering): Port device team_slave_1 removed
[  459.050947][   T11] team0 (unregistering): Port device team_slave_0 removed
[  459.112369][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  459.178410][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  459.226071][    T9] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  459.441870][    T9] usb 8-1: Using ep0 maxpacket: 32
[  459.479688][    T9] usb 8-1: config 0 has an invalid interface number: 85 but max is 0
[  459.488082][    T9] usb 8-1: config 0 has no interface number 0
[  459.494671][    T9] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  459.507714][    T9] usb 8-1: config 0 interface 85 has no altsetting 0
[  459.517311][    T9] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  459.526853][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.535269][    T9] usb 8-1: Product: syz
[  459.539462][    T9] usb 8-1: Manufacturer: syz
[  459.544062][    T9] usb 8-1: SerialNumber: syz
[  459.552299][    T9] usb 8-1: config 0 descriptor??
[  459.714884][   T11] bond0 (unregistering): Released all slaves
[  459.854513][T14686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  459.861842][T14686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  459.887725][    C1] vkms_vblank_simulate: vblank timer overrun
[  459.895365][T14686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  459.912291][ T5807] tipc: Node number set to 2886997007
[  459.960740][T14840] tap0: tun_chr_ioctl cmd 1074025681
[  460.017064][T14686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.024253][T14686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.054567][T14686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.279833][T14686] hsr_slave_0: entered promiscuous mode
[  460.351946][T14686] hsr_slave_1: entered promiscuous mode
[  460.392646][T14686] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  460.392844][    T9] appletouch 8-1:0.85: Geyser mode initialized.
[  460.431037][    T9] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.85/input/input46
[  460.441801][T14686] Cannot create hsr debugfs directory
[  460.465839][    C0] appletouch 8-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  460.550463][T14851] syzkaller1: tun_chr_ioctl cmd 1074025694
[  460.678746][ T5086] Bluetooth: hci1: command tx timeout
[  460.717255][    T9] usb 8-1: USB disconnect, device number 32
[  460.818275][    T9] appletouch 8-1:0.85: input: appletouch disconnected
[  461.244371][T14870] netem: change failed
[  461.335329][T14686] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  461.440165][T14686] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  461.550974][T14686] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  461.593351][T14686] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  461.836120][T14884] netlink: 'syz.5.3399': attribute type 32 has an invalid length.
[  461.877534][T14884] __nla_validate_parse: 44 callbacks suppressed
[  461.877662][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3399'.
[  461.928433][T14884] (unnamed net_device) (uninitialized): option coupled_control: invalid value (17)
[  461.945382][ T5807] IPVS: starting estimator thread 0...
[  462.051273][T10137] JFS: metapage_get_blocks failed
[  462.057043][T10137] JFS: metapage_get_blocks failed
[  462.062232][T14686] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.062534][T14887] IPVS: using max 24 ests per chain, 57600 per kthread
[  462.111509][T10137] JFS: metapage_get_blocks failed
[  462.114785][T14686] 8021q: adding VLAN 0 to HW filter on device team0
[  462.167472][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.175036][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.341299][  T135] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.348474][  T135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.676950][   T59] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.876003][   T59] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  462.968573][T14686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.120117][   T59] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  463.238729][   T59] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.264995][T14686] veth0_vlan: entered promiscuous mode
[  464.443463][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  464.458251][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  464.473689][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  464.486661][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  464.505870][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  464.514590][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  464.678434][T14686] veth1_vlan: entered promiscuous mode
[  465.026127][T14940] vxcan1 speed is unknown, defaulting to 1000
[  465.037504][T14686] veth0_macvtap: entered promiscuous mode
[  465.289434][T14686] veth1_macvtap: entered promiscuous mode
[  465.463493][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.521435][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.531311][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.602424][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.628165][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  465.657296][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.687637][T14686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  465.865802][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.924961][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  465.965999][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  465.987680][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.008414][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.024717][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.045360][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.061461][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.077171][T14686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  466.087655][T14686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  466.100310][T14686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.126719][T14971] can0: slcan on ttyS3.
[  466.272304][T14972] can0 (unregistered): slcan off ttyS3.
[  466.296382][T14686] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.318444][T14686] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.344382][T14686] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.353750][T14686] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.758933][ T5086] Bluetooth: hci2: command tx timeout
[  467.150125][T14996] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3426'.
[  467.214788][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.224202][T14996] netlink: 'syz.7.3426': attribute type 12 has an invalid length.
[  467.224995][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.266800][T14996] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3426'.
[  467.392525][   T59] bond0: left promiscuous mode
[  467.402935][   T59] bond_slave_0: left promiscuous mode
[  467.435398][   T59] bond_slave_1: left promiscuous mode
[  467.507216][   T59] batadv_slave_0: left promiscuous mode
[  467.556125][   T59] hsr_slave_0: left promiscuous mode
[  467.687860][   T59] hsr_slave_1: left promiscuous mode
[  467.752057][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  467.765399][   T59] batman_adv: batadv0: Removing interface: batadv_slave_0
[  467.788803][   T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  467.802081][   T59] batman_adv: batadv0: Removing interface: batadv_slave_1
[  467.812498][   T59] bridge_slave_1: left allmulticast mode
[  467.818174][   T59] bridge_slave_1: left promiscuous mode
[  467.839463][   T59] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.953770][   T59] veth1_macvtap: left promiscuous mode
[  467.967345][   T59] veth0_macvtap: left promiscuous mode
[  467.978460][   T59] veth1_vlan: left promiscuous mode
[  468.004467][   T59] veth0_vlan: left promiscuous mode
[  468.287584][   T59] bond1 (unregistering): Released all slaves
[  468.925149][   T59] team0 (unregistering): Port device team_slave_1 removed
[  468.981328][ T5086] Bluetooth: hci2: command tx timeout
[  468.991126][   T59] team0 (unregistering): Port device team_slave_0 removed
[  469.056207][   T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  469.112481][   T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  469.484861][   T59] bond0 (unregistering): Released all slaves
[  469.612598][T14940] chnl_net:caif_netlink_parms(): no params data found
[  469.751596][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.782067][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.001809][T14940] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.008974][T14940] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.041064][T14940] bridge_slave_0: entered allmulticast mode
[  470.056515][T14940] bridge_slave_0: entered promiscuous mode
[  470.083781][T14940] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.106661][T14940] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.150451][T14940] bridge_slave_1: entered allmulticast mode
[  470.157777][T14940] bridge_slave_1: entered promiscuous mode
[  470.288615][T14940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.387693][T14940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.554553][T14940] team0: Port device team_slave_0 added
[  470.586203][T14940] team0: Port device team_slave_1 added
[  470.659238][T14940] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.681044][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.718419][T14940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.752983][T14940] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.770523][T14940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  470.807005][T14940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.955314][T14940] hsr_slave_0: entered promiscuous mode
[  470.964666][T14940] hsr_slave_1: entered promiscuous mode
[  470.972330][T14940] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  471.001182][T14940] Cannot create hsr debugfs directory
[  471.204179][ T5086] Bluetooth: hci2: command tx timeout
[  472.180634][T15058] loop9: detected capacity change from 0 to 32768
[  472.302814][T15058] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  472.318531][T14940] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  472.351277][T14940] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  472.363810][T14940] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  472.367542][T14940] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  472.590188][T14940] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.642356][T14940] 8021q: adding VLAN 0 to HW filter on device team0
[  472.677503][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.677596][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.692360][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.692447][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.761578][T14686] ocfs2: Unmounting device (7,9) on (node local)
[  472.881094][T14940] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  473.230799][T15100] loop9: detected capacity change from 0 to 8
[  473.316090][T15100] SQUASHFS error: xz decompression failed, data probably corrupt
[  473.343714][T15100] SQUASHFS error: Failed to read block 0x108: -5
[  473.356654][T15100] SQUASHFS error: Unable to read metadata cache entry [106]
[  473.367467][T15100] SQUASHFS error: Unable to read inode 0x11f
[  473.414027][T14940] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.430763][ T5086] Bluetooth: hci2: command tx timeout
[  474.244849][  T787] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  474.258615][T14940] veth0_vlan: entered promiscuous mode
[  474.282989][T14940] veth1_vlan: entered promiscuous mode
[  474.357319][T14940] veth0_macvtap: entered promiscuous mode
[  474.368923][T14940] veth1_macvtap: entered promiscuous mode
[  474.411702][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.441522][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.448530][  T787] usb 8-1: Using ep0 maxpacket: 16
[  474.475660][  T787] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.481249][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.501346][  T787] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  474.503522][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.521520][  T787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.553459][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  474.563054][  T787] usb 8-1: config 0 descriptor??
[  474.588148][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.656882][T14940] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.711049][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.733305][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.744522][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.793359][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.812791][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.828858][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.862696][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.895500][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.918489][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3455'.
[  474.937644][T14940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  474.962801][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3455'.
[  474.969088][T14940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  474.991767][T14940] batman_adv: batadv0: Interface activated: batadv_slave_1
[  475.023891][T14940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.063412][T14940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.086032][  T787] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0
[  475.121742][T14940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.130490][T14940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.194044][   T28] audit: type=1326 audit(1771530973.464:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15142 comm="syz.9.3458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2399c629 code=0x0
[  475.499371][  T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.528074][  T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.628949][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.667021][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.683059][ T5824] usb 8-1: USB disconnect, device number 33
[  476.022081][T15158] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  476.030342][T15158] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  476.079833][T15158] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  476.091546][T15158] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  476.109956][T15158] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  476.156403][T15158] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  476.169379][T15158] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  476.208873][T15158] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  477.109020][ T1059] block nbd0: Possible stuck request ffff888021e10000: control (read@0,1024B). Runtime 360 seconds
[  477.616588][   T28] audit: type=1326 audit(1771530975.727:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15207 comm="syz.9.3481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c2399c629 code=0x0
[  477.687165][   T28] audit: type=1326 audit(1771530975.793:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15210 comm="syz.7.3482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc442d9c629 code=0x0
[  478.125906][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  478.154060][T15223] loop4: detected capacity change from 0 to 4096
[  478.172201][T15223] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  478.297496][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout
[  478.303750][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  479.415105][T15253] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  479.449345][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3498'.
[  479.470593][T15253] tipc: Disabling bearer <udp:syz2>
[  479.937355][T15269] loop9: detected capacity change from 0 to 512
[  479.993177][T15269] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  480.064477][T15269] EXT4-fs (loop9): 1 truncate cleaned up
[  480.073033][T15269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.356581][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  480.367222][T14686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.520308][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout
[  480.526660][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  481.941619][T15307] loop9: detected capacity change from 0 to 32768
[  481.994802][T15307] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10
[  482.170392][ T5761] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 10
[  482.388806][T15317] loop4: detected capacity change from 0 to 32768
[  482.478971][T15317] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  482.662714][T15317] XFS (loop4): Ending clean mount
[  482.751050][   T51] Bluetooth: hci1: command 0x0c1a tx timeout
[  482.751064][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout
[  482.814522][T14940] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  482.991539][T15355] loop9: detected capacity change from 0 to 7
[  483.013585][ T5761] Dev loop9: unable to read RDB block 7
[  483.019211][ T5761]  loop9: unable to read partition table
[  483.054067][ T5761] loop9: partition table beyond EOD, truncated
[  483.099756][T15355] Dev loop9: unable to read RDB block 7
[  483.105390][T15355]  loop9: unable to read partition table
[  483.178217][T15355] loop9: partition table beyond EOD, truncated
[  483.205598][T15355] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5)
[  483.462708][ T5824] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  483.529851][T15368] program syz.7.3542 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  483.674831][ T5824] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  483.694421][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.714927][ T5824] usb 6-1: config 0 descriptor??
[  483.741002][ T5824] cp210x 6-1:0.0: cp210x converter detected
[  483.826873][T15378] loop9: detected capacity change from 0 to 512
[  483.876084][T15378] EXT4-fs error (device loop9): ext4_orphan_get:1398: inode #15: comm syz.9.3546: inode has both inline data and extents flags
[  483.911802][T15378] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.3546: couldn't read orphan inode 15 (err -117)
[  483.933567][T15378] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  483.988571][T15378] EXT4-fs warning (device loop9): ext4_empty_dir:3147: inode #2: comm syz.9.3546: directory missing '.'
[  484.031007][T14686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.136613][T15386] loop9: detected capacity change from 0 to 64
[  484.189387][ T5824] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  484.216206][ T5824] usb 6-1: cp210x converter now attached to ttyUSB0
[  484.434728][T15393] loop9: detected capacity change from 0 to 1024
[  484.465951][ T5756] usb 6-1: USB disconnect, device number 35
[  484.498454][ T5756] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  484.518238][ T5756] cp210x 6-1:0.0: device disconnected
[  485.053325][    T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  485.256937][    T9] usb 10-1: Using ep0 maxpacket: 32
[  485.279276][    T9] usb 10-1: config 0 has an invalid interface number: 85 but max is 0
[  485.302894][    T9] usb 10-1: config 0 has no interface number 0
[  485.307294][T15414] input: syz1 as /devices/virtual/input/input47
[  485.316320][    T9] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  485.328559][    T9] usb 10-1: config 0 interface 85 has no altsetting 0
[  485.341365][    T9] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  485.351648][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.360201][    T9] usb 10-1: Product: syz
[  485.364929][    T9] usb 10-1: Manufacturer: syz
[  485.369715][    T9] usb 10-1: SerialNumber: syz
[  485.385163][    T9] usb 10-1: config 0 descriptor??
[  486.036654][ T6056] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  486.065240][    T9] appletouch 10-1:0.85: Geyser mode initialized.
[  486.081178][    T9] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.85/input/input48
[  486.253996][ T6056] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.275136][ T6056] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.293913][ T6056] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  486.324882][ T6056] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.350311][   T23] usb 10-1: USB disconnect, device number 2
[  486.392848][ T6056] usb 6-1: config 0 descriptor??
[  486.446401][   T23] appletouch 10-1:0.85: input: appletouch disconnected
[  486.497573][T15439] loop4: detected capacity change from 0 to 64
[  486.873690][ T6056] sony 0003:054C:024B.0023: unexpected long global item
[  486.892775][ T6056] sony 0003:054C:024B.0023: parse failed
[  486.935037][ T6056] sony: probe of 0003:054C:024B.0023 failed with error -22
[  487.077316][T15457] loop9: detected capacity change from 0 to 128
[  487.125213][ T6056] usb 6-1: USB disconnect, device number 36
[  487.202370][T15457] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  487.320392][T15457] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  487.364552][   T29] INFO: task udevd:5945 blocked for more than 143 seconds.
[  487.374368][   T29]       Not tainted syzkaller #0
[  487.402194][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  487.446133][   T29] task:udevd           state:D stack:24424 pid:5945  ppid:5141   flags:0x00004006
[  487.477177][   T29] Call Trace:
[  487.480735][   T29]  <TASK>
[  487.483701][   T29]  __schedule+0x1553/0x45a0
[  487.501443][   T29]  ? asan.module_dtor+0x20/0x20
[  487.512114][   T29]  ? mark_lock+0x94/0x320
[  487.516504][   T29]  ? lock_chain_count+0x20/0x20
[  487.555146][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[  487.566310][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  487.582779][   T29]  schedule+0xbd/0x170
[  487.588348][   T29]  io_schedule+0x80/0xd0
[  487.597292][   T29]  folio_wait_bit_common+0x714/0xfa0
[  487.608374][   T29]  ? folio_wait_bit+0x30/0x30
[  487.613143][   T29]  ? _compound_head+0x120/0x120
[  487.629217][   T29]  ? filemap_add_folio+0x192/0x3c0
[  487.639730][   T29]  ? __filemap_get_folio+0x704/0xbb0
[  487.649125][   T29]  ? blkdev_writepage+0x30/0x30
[  487.654575][   T29]  do_read_cache_folio+0x1c0/0x7d0
[  487.659796][   T29]  ? blkdev_writepage+0x30/0x30
[  487.665186][   T29]  read_part_sector+0xd2/0x340
[  487.670074][   T29]  adfspart_check_POWERTEC+0x93/0xed0
[  487.676218][   T29]  ? adfspart_check_ADFS+0x620/0x620
[  487.681624][   T29]  ? put_partition+0x370/0x370
[  487.686909][   T29]  ? alloc_pages+0x4dc/0x740
[  487.691932][   T29]  bdev_disk_changed+0x740/0x1420
[  487.699510][   T29]  ? bdev_resize_partition+0xf0/0xf0
[  487.707495][   T29]  ? iput+0x343/0x920
[  487.711632][   T29]  blkdev_get_whole+0x30d/0x390
[  487.717013][   T29]  blkdev_get_by_dev+0x279/0x600
[  487.722006][   T29]  blkdev_open+0x152/0x360
[  487.726914][   T29]  ? blkdev_mmap+0x1b0/0x1b0
[  487.731544][   T29]  do_dentry_open+0x8c6/0x1500
[  487.736799][   T29]  path_openat+0x27f1/0x3230
[  487.741554][   T29]  ? do_sys_openat2+0xda/0x1d0
[  487.746349][   T29]  ? verify_lock_unused+0x140/0x140
[  487.752105][   T29]  ? do_filp_open+0x430/0x430
[  487.756952][   T29]  ? __virt_addr_valid+0x18c/0x540
[  487.762540][   T29]  do_filp_open+0x1f5/0x430
[  487.779368][   T29]  ? vfs_tmpfile+0x490/0x490
[  487.784045][   T29]  ? _raw_spin_unlock+0x28/0x40
[  487.788919][   T29]  ? alloc_fd+0x58f/0x630
[  487.794363][   T29]  do_sys_openat2+0x134/0x1d0
[  487.799082][   T29]  ? do_sys_open+0xe0/0xe0
[  487.821797][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  487.827846][   T29]  ? lock_chain_count+0x20/0x20
[  487.853981][   T29]  __x64_sys_openat+0x139/0x160
[  487.858994][   T29]  do_syscall_64+0x55/0xa0
[  487.863432][   T29]  ? clear_bhb_loop+0x40/0x90
[  487.868760][   T29]  ? clear_bhb_loop+0x40/0x90
[  487.873482][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  487.886080][   T29] RIP: 0033:0x7fd808ca7407
[  487.890554][   T29] RSP: 002b:00007ffd0509b9d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  487.906160][   T29] RAX: ffffffffffffffda RBX: 00007fd809424880 RCX: 00007fd808ca7407
[  487.918580][   T29] RDX: 00000000000a0800 RSI: 000055d5de7f0550 RDI: ffffffffffffff9c
[  487.926668][   T29] RBP: 000055d5de7cf910 R08: 0000000000000000 R09: 0000000000000000
[  487.946473][   T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d5de7e2e20
[  487.956741][   T29] R13: 000055d5de7e7410 R14: 0000000000000000 R15: 000055d5de7e2e20
[  487.965588][   T29]  </TASK>
[  487.968830][   T29] 
[  487.968830][   T29] Showing all locks held in the system:
[  487.980038][T14686] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  487.989781][   T29] 1 lock held by khungtaskd/29:
[  487.995848][   T29]  #0: ffffffff8d131fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  488.080193][   T29] 2 locks held by getty/5527:
[  488.110497][   T29]  #0: ffff88814c9950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  488.120429][   T29]  #1: ffffc900015d72f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[  488.159479][   T29] 2 locks held by kworker/1:5/5824:
[  488.196157][   T29]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  488.217802][   T29]  #1: ffffc90004bcfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[  488.267335][   T29] 1 lock held by udevd/5945:
[  488.272228][   T29]  #0: ffff888021d434c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600
[  488.302125][   T29] 1 lock held by udevd/6258:
[  488.313594][   T29] 4 locks held by sed/15487:
[  488.318235][   T29]  #0: ffff8880b8f3c018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  488.336343][   T29]  #1: ffff8880b8f289c0 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2176/0x45a0
[  488.345148][   T29]  #2: ffff888025d54a78 (&sig->wait_chldexit){....}-{2:2}, at: __wake_up_sync_key+0x101/0x1a0
[  488.357269][   T29]  #3: ffff88802e6bc618 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x60/0x1190
[  488.366687][   T29] 
[  488.370981][   T29] =============================================
[  488.370981][   T29] 
[  488.379843][   T29] NMI backtrace for cpu 0
[  488.384204][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  488.391585][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.401656][   T29] Call Trace:
[  488.405047][   T29]  <TASK>
[  488.407998][   T29]  dump_stack_lvl+0x18c/0x250
[  488.412706][   T29]  ? show_regs_print_info+0x20/0x20
[  488.417933][   T29]  ? load_image+0x400/0x400
[  488.422472][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  488.427442][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  488.433617][   T29]  ? _printk+0xde/0x130
[  488.437894][   T29]  ? load_image+0x400/0x400
[  488.442433][   T29]  ? load_image+0x400/0x400
[  488.446981][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  488.453080][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  488.459305][   T29]  watchdog+0xf3d/0xf80
[  488.463516][   T29]  ? watchdog+0x1e1/0xf80
[  488.467859][   T29]  kthread+0x2fa/0x390
[  488.471932][   T29]  ? hungtask_pm_notify+0x90/0x90
[  488.477232][   T29]  ? kthread_blkcg+0xd0/0xd0
[  488.481817][   T29]  ret_from_fork+0x48/0x80
[  488.486315][   T29]  ? kthread_blkcg+0xd0/0xd0
[  488.490899][   T29]  ret_from_fork_asm+0x11/0x20
[  488.495673][   T29]  </TASK>
[  488.499871][   T29] Sending NMI from CPU 0 to CPUs 1:
[  488.505169][    C1] NMI backtrace for cpu 1
[  488.505178][    C1] CPU: 1 PID: 6056 Comm: kworker/1:6 Not tainted syzkaller #0
[  488.505192][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.505201][    C1] Workqueue: events free_obj_work
[  488.505224][    C1] RIP: 0010:unwind_next_frame+0x27/0x2970
[  488.505242][    C1] Code: 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec 98 00 00 00 49 89 fc 49 bd 00 00 00 00 00 fc ff df e8 c9 de 4b 00 <49> 8d 5c 24 48 48 89 d8 48 c1 e8 03 48 89 44 24 40 42 80 3c 28 00
[  488.505253][    C1] RSP: 0018:ffffc900050af578 EFLAGS: 00000293
[  488.505264][    C1] RAX: ffffffff813b3647 RBX: ffffc900050af700 RCX: ffff88802bc89e00
[  488.505274][    C1] RDX: 0000000000000000 RSI: ffffffff81def360 RDI: ffffc900050af648
[  488.505284][    C1] RBP: ffffc900050af6d0 R08: ffffc900050af710 R09: 0000000000000003
[  488.505294][    C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffc900050af648
[  488.505303][    C1] R13: dffffc0000000000 R14: ffffffff8175b740 R15: ffffc900050af648
[  488.505313][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  488.505324][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  488.505334][    C1] CR2: 00007f307baa3000 CR3: 000000007d929000 CR4: 00000000003506e0
[  488.505347][    C1] Call Trace:
[  488.505352][    C1]  <TASK>
[  488.505362][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  488.505378][    C1]  ? __kernel_text_address+0xd/0x30
[  488.505398][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  488.505410][    C1]  ? stack_trace_save+0x100/0x100
[  488.505428][    C1]  arch_stack_walk+0x144/0x190
[  488.505445][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  488.505461][    C1]  stack_trace_save+0xaa/0x100
[  488.505477][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  488.505494][    C1]  ? __stack_depot_save+0x1f/0x630
[  488.505510][    C1]  kasan_set_track+0x4e/0x70
[  488.505524][    C1]  ? kasan_set_track+0x4e/0x70
[  488.505538][    C1]  ? kasan_save_free_info+0x2e/0x50
[  488.505557][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  488.505571][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  488.505609][    C1]  ? kmem_cache_free+0xf8/0x270
[  488.505629][    C1]  kasan_save_free_info+0x2e/0x50
[  488.505649][    C1]  ____kasan_slab_free+0x126/0x1e0
[  488.505668][    C1]  slab_free_freelist_hook+0x130/0x1a0
[  488.505683][    C1]  ? free_obj_work+0x436/0x5a0
[  488.505703][    C1]  kmem_cache_free+0xf8/0x270
[  488.505725][    C1]  free_obj_work+0x436/0x5a0
[  488.505747][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  488.505764][    C1]  ? __free_object+0xa70/0xa70
[  488.505785][    C1]  ? read_lock_is_recursive+0x20/0x20
[  488.505804][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  488.505819][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  488.505837][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  488.505854][    C1]  process_scheduled_works+0xa5d/0x15d0
[  488.505888][    C1]  ? assign_work+0x430/0x430
[  488.505907][    C1]  ? assign_work+0x3d0/0x430
[  488.505927][    C1]  worker_thread+0xa55/0xfc0
[  488.505945][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  488.505958][    C1]  ? _raw_spin_unlock+0x40/0x40
[  488.505971][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  488.505999][    C1]  kthread+0x2fa/0x390
[  488.506013][    C1]  ? pr_cont_work+0x560/0x560
[  488.506031][    C1]  ? kthread_blkcg+0xd0/0xd0
[  488.506046][    C1]  ret_from_fork+0x48/0x80
[  488.506064][    C1]  ? kthread_blkcg+0xd0/0xd0
[  488.506079][    C1]  ret_from_fork_asm+0x11/0x20
[  488.506108][    C1]  </TASK>
[  488.840314][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  488.847448][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  488.854760][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  488.864829][   T29] Call Trace:
[  488.868121][   T29]  <TASK>
[  488.871070][   T29]  dump_stack_lvl+0x18c/0x250
[  488.875777][   T29]  ? show_regs_print_info+0x20/0x20
[  488.881006][   T29]  ? load_image+0x400/0x400
[  488.885541][   T29]  panic+0x2dc/0x730
[  488.889455][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  488.895113][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  488.899642][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  488.905633][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  488.911819][   T29]  watchdog+0xf7c/0xf80
[  488.916028][   T29]  ? watchdog+0x1e1/0xf80
[  488.920390][   T29]  kthread+0x2fa/0x390
[  488.924468][   T29]  ? hungtask_pm_notify+0x90/0x90
[  488.929519][   T29]  ? kthread_blkcg+0xd0/0xd0
[  488.934163][   T29]  ret_from_fork+0x48/0x80
[  488.938570][   T29]  ? kthread_blkcg+0xd0/0xd0
[  488.943157][   T29]  ret_from_fork_asm+0x11/0x20
[  488.947931][   T29]  </TASK>
[  488.951339][   T29] Kernel Offset: disabled
[  488.955746][   T29] Rebooting in 86400 seconds..