last executing test programs:

8m4.720216197s ago: executing program 3 (id=2325):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x4800)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xfffff)
prctl$PR_SET_IO_FLUSHER(0x41, 0x3)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0)

8m3.356538584s ago: executing program 3 (id=2329):
r0 = socket(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff46}, 0x0, 0x2121, 0x0, {0x6}})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

8m2.96853315s ago: executing program 3 (id=2333):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
read(r0, 0x0, 0x0)

8m1.832790424s ago: executing program 3 (id=2336):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

8m1.095387679s ago: executing program 3 (id=2338):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
chdir(&(0x7f0000000100)='./file0\x00')
syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000680)={@remote, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@llc={0x4, {@llc={0x80, 0x0, "e2fc"}}}}}, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x109, 0x86b, 0x254]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0)
setrlimit(0x6, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

7m56.868960631s ago: executing program 3 (id=2346):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

7m41.331597102s ago: executing program 32 (id=2346):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000})

11.484749068s ago: executing program 4 (id=3652):
r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0)

9.769102503s ago: executing program 4 (id=3661):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

8.804565491s ago: executing program 1 (id=3665):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffff8001}, 0x862})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

8.638615204s ago: executing program 5 (id=3667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x4a0, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x474, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x14b9}, @TCA_TBF_PBURST={0x8, 0x7, 0xa64}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xff9d, 0x84d, 0x9, 0x7fff}, {0x1, 0x0, 0xa660, 0xfffd, 0x7, 0xfffffffa}, 0x6, 0xfffffffb, 0x1798}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x55673cfc4de2c680}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x3, 0x0, 0x9, 0x5}, {0x2, 0x0, 0x1, 0x5, 0x80, 0xc7d}, 0x4, 0x4, 0x1414}}, @TCA_TBF_PTAB={0x404, 0x3, [0xdb90, 0x0, 0x1000, 0x2ee, 0xcf, 0x6, 0xde5d, 0x3, 0x1, 0x3ff, 0x4, 0x6, 0x3ff, 0x4, 0x8, 0x1f4, 0xb, 0x4, 0x7, 0xffffff80, 0x200, 0x239, 0x0, 0x0, 0x1, 0x7, 0x3f0d, 0x1, 0x7, 0x3, 0x8000000, 0x3a, 0x0, 0x9000, 0x9, 0xa58, 0x4131, 0x0, 0xfffffff9, 0x3, 0x6, 0x1, 0x7, 0xe5d6, 0x400, 0x2, 0xfffffffe, 0x1, 0x7fff, 0x80, 0x7, 0x10001, 0x8c3, 0x148, 0x6, 0x1000, 0x6fea, 0x8, 0xdc2, 0xfffffffc, 0x800, 0x0, 0x3, 0x1, 0x4, 0x400, 0x7, 0x401, 0x1, 0x3, 0x0, 0x6c, 0x40, 0x5, 0x5, 0x9e, 0x0, 0x80000000, 0xff, 0x101, 0x7, 0x2, 0x9, 0x401, 0x4, 0x6, 0x8ea2, 0x1, 0x9, 0x7, 0x5, 0x5, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x2, 0x7, 0x2, 0x6, 0x5, 0x7fc00000, 0x527c09d8, 0x8, 0x3, 0x400, 0x6, 0xfffffffc, 0x80, 0x4, 0x20091, 0x1, 0x8, 0x1ff, 0x3, 0x226, 0x9, 0x3, 0x4, 0x101, 0x2, 0x7, 0xffff9a41, 0x10, 0x7, 0xc, 0x7fff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x8000, 0x7, 0x4, 0xf, 0x82, 0x6, 0x2, 0xfffffffc, 0x3, 0x7, 0x100, 0x2, 0x1, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0x8001, 0x8, 0x8, 0x81, 0x401, 0x5, 0x5, 0x8, 0x0, 0xffffff51, 0x80000001, 0x7, 0x5, 0x8, 0x8, 0xd4, 0x48000000, 0x6, 0x10000, 0x3, 0x3, 0x8, 0x8, 0x5, 0xf1f, 0x6, 0x4, 0x9, 0x4c34, 0x0, 0x0, 0x1, 0x1, 0x60bd, 0x8, 0x7, 0x9, 0x80000000, 0x8, 0x2, 0x7, 0x2, 0xfffffffc, 0x7f, 0x2, 0x8e5, 0xfffffffb, 0x8, 0xd4, 0x1000, 0xffff, 0x6, 0x79, 0x7, 0x0, 0xf2, 0x9b, 0xe6, 0x3, 0x1, 0xfffffff8, 0x8d7, 0xf4f, 0x7ff, 0x80000000, 0x4, 0x6, 0x101, 0x658, 0x5, 0x4, 0x3, 0x4, 0xd6, 0x0, 0xc11, 0x1000, 0x80000000, 0x5, 0x8, 0x8000, 0x2a0, 0x9, 0x2a86, 0xc4, 0x1000, 0x4, 0x7, 0x3ff, 0x2, 0xffffffff, 0x1, 0x4, 0x7ff, 0x2, 0x5, 0xa, 0x8, 0x74f2, 0x9, 0x0, 0x10, 0xd6, 0x13]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000f40)=""/127, 0x7f, <r5=>0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
fcntl$dupfd(r7, 0x0, r6)
bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1d, 0x1a, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000400000000000000ff0f00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b79ea2a1ca6cd6fc3d3e03000002000000850000000600000085200000040000006d8240000c000000b708003832fe9c0ee24400000000007b8af8ff00000000b708000010d19ce0d97f96e300000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x7d, &(0x7f0000000340)=""/125, 0x41100, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x7, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000002000)=[r6, 0x1], 0x0, 0x10, 0xc}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180)=<r11=>0x0, &(0x7f00000001c0)=<r12=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000003c0)=0x2)
readv(r13, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(r13, 0x5437, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r10, 0x2ded, 0xef92, 0x0, 0x0, 0x0)

7.93540858s ago: executing program 5 (id=3669):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

7.06502384s ago: executing program 4 (id=3672):
r0 = syz_mount_image$btrfs(&(0x7f00000023c0), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@datacow}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, 0x0)

5.73842627s ago: executing program 5 (id=3675):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x3, 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0)
setrlimit(0x6, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000280)=0x8)

5.481181953s ago: executing program 5 (id=3676):
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
ioctl$BLKGETDISKSEQ(r0, 0x80081280, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000fcffffffffffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
read$msr(r1, &(0x7f00000004c0)=""/226, 0xe2)

4.943000096s ago: executing program 0 (id=3678):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x8c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x8c}}, 0x0)

4.709158818s ago: executing program 0 (id=3679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x4a0, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x474, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x14b9}, @TCA_TBF_PBURST={0x8, 0x7, 0xa64}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xff9d, 0x84d, 0x9, 0x7fff}, {0x1, 0x0, 0xa660, 0xfffd, 0x7, 0xfffffffa}, 0x6, 0xfffffffb, 0x1798}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x55673cfc4de2c680}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x3, 0x0, 0x9, 0x5}, {0x2, 0x0, 0x1, 0x5, 0x80, 0xc7d}, 0x4, 0x4, 0x1414}}, @TCA_TBF_PTAB={0x404, 0x3, [0xdb90, 0x0, 0x1000, 0x2ee, 0xcf, 0x6, 0xde5d, 0x3, 0x1, 0x3ff, 0x4, 0x6, 0x3ff, 0x4, 0x8, 0x1f4, 0xb, 0x4, 0x7, 0xffffff80, 0x200, 0x239, 0x0, 0x0, 0x1, 0x7, 0x3f0d, 0x1, 0x7, 0x3, 0x8000000, 0x3a, 0x0, 0x9000, 0x9, 0xa58, 0x4131, 0x0, 0xfffffff9, 0x3, 0x6, 0x1, 0x7, 0xe5d6, 0x400, 0x2, 0xfffffffe, 0x1, 0x7fff, 0x80, 0x7, 0x10001, 0x8c3, 0x148, 0x6, 0x1000, 0x6fea, 0x8, 0xdc2, 0xfffffffc, 0x800, 0x0, 0x3, 0x1, 0x4, 0x400, 0x7, 0x401, 0x1, 0x3, 0x0, 0x6c, 0x40, 0x5, 0x5, 0x9e, 0x0, 0x80000000, 0xff, 0x101, 0x7, 0x2, 0x9, 0x401, 0x4, 0x6, 0x8ea2, 0x1, 0x9, 0x7, 0x5, 0x5, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x2, 0x7, 0x2, 0x6, 0x5, 0x7fc00000, 0x527c09d8, 0x8, 0x3, 0x400, 0x6, 0xfffffffc, 0x80, 0x4, 0x20091, 0x1, 0x8, 0x1ff, 0x3, 0x226, 0x9, 0x3, 0x4, 0x101, 0x2, 0x7, 0xffff9a41, 0x10, 0x7, 0xc, 0x7fff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x8000, 0x7, 0x4, 0xf, 0x82, 0x6, 0x2, 0xfffffffc, 0x3, 0x7, 0x100, 0x2, 0x1, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0x8001, 0x8, 0x8, 0x81, 0x401, 0x5, 0x5, 0x8, 0x0, 0xffffff51, 0x80000001, 0x7, 0x5, 0x8, 0x8, 0xd4, 0x48000000, 0x6, 0x10000, 0x3, 0x3, 0x8, 0x8, 0x5, 0xf1f, 0x6, 0x4, 0x9, 0x4c34, 0x0, 0x0, 0x1, 0x1, 0x60bd, 0x8, 0x7, 0x9, 0x80000000, 0x8, 0x2, 0x7, 0x2, 0xfffffffc, 0x7f, 0x2, 0x8e5, 0xfffffffb, 0x8, 0xd4, 0x1000, 0xffff, 0x6, 0x79, 0x7, 0x0, 0xf2, 0x9b, 0xe6, 0x3, 0x1, 0xfffffff8, 0x8d7, 0xf4f, 0x7ff, 0x80000000, 0x4, 0x6, 0x101, 0x658, 0x5, 0x4, 0x3, 0x4, 0xd6, 0x0, 0xc11, 0x1000, 0x80000000, 0x5, 0x8, 0x8000, 0x2a0, 0x9, 0x2a86, 0xc4, 0x1000, 0x4, 0x7, 0x3ff, 0x2, 0xffffffff, 0x1, 0x4, 0x7ff, 0x2, 0x5, 0xa, 0x8, 0x74f2, 0x9, 0x0, 0x10, 0xd6, 0x13]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000f40)=""/127, 0x7f, <r5=>0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
fcntl$dupfd(r7, 0x0, r6)
bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1d, 0x1a, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000400000000000000ff0f00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b79ea2a1ca6cd6fc3d3e03000002000000850000000600000085200000040000006d8240000c000000b708003832fe9c0ee24400000000007b8af8ff00000000b708000010d19ce0d97f96e300000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x7d, &(0x7f0000000340)=""/125, 0x41100, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x7, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000002000)=[r6, 0x1], 0x0, 0x10, 0xc}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180)=<r11=>0x0, &(0x7f00000001c0)=<r12=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000003c0)=0x2)
readv(r13, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(r13, 0x5437, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r10, 0x2ded, 0xef92, 0x0, 0x0, 0x0)

4.48056588s ago: executing program 2 (id=3680):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='a *:*'], 0x8)

3.927808638s ago: executing program 1 (id=3681):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="65660fc736c4e3c1cec69166baf80cb81c33548eef66bafc0cb804000000ef0fcdb00400000f01f5660f38818f020000000f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e576e04b8200fae77af66bafc0c66b8004066ef66b8296c", 0x72}], 0x1, 0x5e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.889026724s ago: executing program 4 (id=3682):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x8}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x6, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000011}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x0, 0xb}, {0xd, 0x7}}}, 0x24}}, 0x4008004)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

3.88569788s ago: executing program 0 (id=3683):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x5f)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

3.803798528s ago: executing program 2 (id=3684):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69577000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x859, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
futex(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2)

2.8411209s ago: executing program 0 (id=3685):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ftruncate(r0, 0x2ff8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0xe4})

2.704539918s ago: executing program 2 (id=3686):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00'}, 0x10)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x874fd42a7836ef66, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

2.662787102s ago: executing program 1 (id=3687):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.661986636s ago: executing program 2 (id=3688):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001300)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

2.393651688s ago: executing program 0 (id=3689):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000080000000200000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.188458488s ago: executing program 1 (id=3690):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}, 0x48)
r1 = syz_io_uring_setup(0x498, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x125}, 0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

2.094104229s ago: executing program 0 (id=3691):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0xffff8001}, 0x862})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.534818124s ago: executing program 1 (id=3692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="24000000760009ee"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0xc8, 0x7}}}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000000000080000001000000001000200", @ANYRES32, @ANYBLOB=';\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0319000003000000a17ffb6f220000000000000000"], 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}}, 0x0)

1.336276123s ago: executing program 2 (id=3693):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x41})

1.188054325s ago: executing program 4 (id=3694):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x4a0, 0x24, 0xd0f, 0x70bd2d, 0x2000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x474, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x14b9}, @TCA_TBF_PBURST={0x8, 0x7, 0xa64}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xff9d, 0x84d, 0x9, 0x7fff}, {0x1, 0x0, 0xa660, 0xfffd, 0x7, 0xfffffffa}, 0x6, 0xfffffffb, 0x1798}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x55673cfc4de2c680}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x1, 0x3, 0x0, 0x9, 0x5}, {0x2, 0x0, 0x1, 0x5, 0x80, 0xc7d}, 0x4, 0x4, 0x1414}}, @TCA_TBF_PTAB={0x404, 0x3, [0xdb90, 0x0, 0x1000, 0x2ee, 0xcf, 0x6, 0xde5d, 0x3, 0x1, 0x3ff, 0x4, 0x6, 0x3ff, 0x4, 0x8, 0x1f4, 0xb, 0x4, 0x7, 0xffffff80, 0x200, 0x239, 0x0, 0x0, 0x1, 0x7, 0x3f0d, 0x1, 0x7, 0x3, 0x8000000, 0x3a, 0x0, 0x9000, 0x9, 0xa58, 0x4131, 0x0, 0xfffffff9, 0x3, 0x6, 0x1, 0x7, 0xe5d6, 0x400, 0x2, 0xfffffffe, 0x1, 0x7fff, 0x80, 0x7, 0x10001, 0x8c3, 0x148, 0x6, 0x1000, 0x6fea, 0x8, 0xdc2, 0xfffffffc, 0x800, 0x0, 0x3, 0x1, 0x4, 0x400, 0x7, 0x401, 0x1, 0x3, 0x0, 0x6c, 0x40, 0x5, 0x5, 0x9e, 0x0, 0x80000000, 0xff, 0x101, 0x7, 0x2, 0x9, 0x401, 0x4, 0x6, 0x8ea2, 0x1, 0x9, 0x7, 0x5, 0x5, 0x6, 0x1, 0x10001, 0x0, 0x6, 0x2, 0x7, 0x2, 0x6, 0x5, 0x7fc00000, 0x527c09d8, 0x8, 0x3, 0x400, 0x6, 0xfffffffc, 0x80, 0x4, 0x20091, 0x1, 0x8, 0x1ff, 0x3, 0x226, 0x9, 0x3, 0x4, 0x101, 0x2, 0x7, 0xffff9a41, 0x10, 0x7, 0xc, 0x7fff, 0x7, 0x7, 0x0, 0x8001, 0x4, 0x8000, 0x7, 0x4, 0xf, 0x82, 0x6, 0x2, 0xfffffffc, 0x3, 0x7, 0x100, 0x2, 0x1, 0x7, 0x4, 0x3, 0x0, 0x5, 0x5, 0x8001, 0x8, 0x8, 0x81, 0x401, 0x5, 0x5, 0x8, 0x0, 0xffffff51, 0x80000001, 0x7, 0x5, 0x8, 0x8, 0xd4, 0x48000000, 0x6, 0x10000, 0x3, 0x3, 0x8, 0x8, 0x5, 0xf1f, 0x6, 0x4, 0x9, 0x4c34, 0x0, 0x0, 0x1, 0x1, 0x60bd, 0x8, 0x7, 0x9, 0x80000000, 0x8, 0x2, 0x7, 0x2, 0xfffffffc, 0x7f, 0x2, 0x8e5, 0xfffffffb, 0x8, 0xd4, 0x1000, 0xffff, 0x6, 0x79, 0x7, 0x0, 0xf2, 0x9b, 0xe6, 0x3, 0x1, 0xfffffff8, 0x8d7, 0xf4f, 0x7ff, 0x80000000, 0x4, 0x6, 0x101, 0x658, 0x5, 0x4, 0x3, 0x4, 0xd6, 0x0, 0xc11, 0x1000, 0x80000000, 0x5, 0x8, 0x8000, 0x2a0, 0x9, 0x2a86, 0xc4, 0x1000, 0x4, 0x7, 0x3ff, 0x2, 0xffffffff, 0x1, 0x4, 0x7ff, 0x2, 0x5, 0xa, 0x8, 0x74f2, 0x9, 0x0, 0x10, 0xd6, 0x13]}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x80d1}, 0x30008000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, <r4=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001fc0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000f40)=""/127, 0x7f, <r5=>0x0, &(0x7f0000000fc0)=""/4096, 0x1000}}, 0x10)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
fcntl$dupfd(r7, 0x0, r6)
bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x1d, 0x1a, &(0x7f0000002100)=ANY=[@ANYBLOB="180000000400000000000000ff0f00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b79ea2a1ca6cd6fc3d3e03000002000000850000000600000085200000040000006d8240000c000000b708003832fe9c0ee24400000000007b8af8ff00000000b708000010d19ce0d97f96e300000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x4, 0x7d, &(0x7f0000000340)=""/125, 0x41100, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x7, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000002000)=[r6, 0x1], 0x0, 0x10, 0xc}, 0x94)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
r10 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x0, 0x0, r9}, &(0x7f0000000180)=<r11=>0x0, &(0x7f00000001c0)=<r12=>0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r13, 0x5423, &(0x7f00000003c0)=0x2)
readv(r13, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)
ioctl$TIOCVHANGUP(r13, 0x5437, 0x2)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
syz_io_uring_submit(r11, r12, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r8, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r10, 0x2ded, 0xef92, 0x0, 0x0, 0x0)

1.080550587s ago: executing program 5 (id=3695):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0)

136.978798ms ago: executing program 2 (id=3696):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x3, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0)

119.567699ms ago: executing program 4 (id=3697):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)

87.266435ms ago: executing program 1 (id=3698):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f00000000c0)="66b8006800000f23c80f21f86635080000000f23f80f00d166b8519900000f23d00f21f86635000000000f23f80f20e06635400000000f22e02665f30f22e40f0f14a0b806018ed00f0fbd0070bf360f23892e650f32", 0x56}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001b700)=""/102392, 0x18ff8)
r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r6, 0x2285, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x814}, 0x5000)
writev(r6, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f0000000980)=ANY=[@ANYRESDEC], 0xfe8e)
open(&(0x7f0000000000)='./file0\x00', 0x22740, 0x9b)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 5 (id=3699):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0xc1})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x6df7984c01f4e88c, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008805}, 0x4004004)
preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff)

kernel console output (not intermixed with test programs):

.258292][T12954] input: syz0 as /devices/virtual/input/input16
[  790.801599][T12960] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2153'.
[  792.733244][T12984] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  792.740003][T12984] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  792.749166][T12984] vhci_hcd vhci_hcd.0: Device attached
[  792.815443][T12987] netlink: 'syz.2.2159': attribute type 63 has an invalid length.
[  792.825191][T12987] netlink: 'syz.2.2159': attribute type 63 has an invalid length.
[  793.038718][ T1227] usb 36-1: SetAddress Request (2) to port 0
[  793.054355][ T1227] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  793.062047][T12985] vhci_hcd: connection closed
[  793.062347][ T7058] vhci_hcd vhci_hcd.1: stop threads
[  793.072704][ T7058] vhci_hcd vhci_hcd.1: release socket
[  793.080258][ T7058] vhci_hcd vhci_hcd.1: disconnect device
[  796.297860][T13012] bridge0: entered promiscuous mode
[  796.383205][T13012] macvlan2: entered promiscuous mode
[  798.162916][ T1227] usb 36-1: device descriptor read/8, error -110
[  798.553137][ T1227] usb usb36-port1: attempt power cycle
[  799.192742][ T1227] usb usb36-port1: unable to enumerate USB device
[  801.355594][T13054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2180'.
[  802.031739][T13061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[  802.038405][T13061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  802.048646][T13061] vhci_hcd vhci_hcd.0: Device attached
[  802.474850][T13062] vhci_hcd: connection closed
[  802.479526][   T49] vhci_hcd vhci_hcd.3: stop threads
[  802.498588][   T49] vhci_hcd vhci_hcd.3: release socket
[  802.504494][T10248] usb 40-1: SetAddress Request (2) to port 0
[  802.515947][T10248] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  802.526096][   T49] vhci_hcd vhci_hcd.3: disconnect device
[  802.564835][T10248] usb 40-1: enqueue for inactive port 0
[  802.763212][ T1227] kernel write not supported for file /snd/seq (pid: 1227 comm: kworker/0:3)
[  802.993291][T10248] usb usb40-port1: attempt power cycle
[  803.554090][T10248] usb usb40-port1: unable to enumerate USB device
[  806.152772][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2192'.
[  806.362842][T13098] D�\
[  807.351890][T13116] 9pnet_virtio: no channels available for device syz
[  807.838997][T13125] serio: Serial port ttyS3
[  809.451810][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  809.458338][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  811.333794][T13146] random: crng reseeded on system resumption
[  811.396284][T13147] Invalid source name
[  812.814959][T13171] serio: Serial port ttyS3
[  813.631753][T13185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2218'.
[  816.638868][T13192] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  816.657140][T13192] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  816.960402][T12816] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  816.990290][T12816] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  817.020860][T12816] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  817.030390][T12816] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  818.133199][T13231] input: syz0 as /devices/virtual/input/input17
[  818.300622][T13235] serio: Serial port ttyS3
[  818.726906][T13240] 9pnet_virtio: no channels available for device syz
[  818.862578][T13242] comedi comedi3: dac02: I/O port conflict (0x4f27,8)
[  820.034802][T13248] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  820.041387][T13248] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  820.050637][T13248] vhci_hcd vhci_hcd.0: Device attached
[  820.212801][T13249] vhci_hcd: connection closed
[  820.213126][   T13] vhci_hcd vhci_hcd.4: stop threads
[  820.233757][   T13] vhci_hcd vhci_hcd.4: release socket
[  820.260677][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  820.369225][T13254] bridge0: port 2(bridge_slave_1) entered disabled state
[  820.376588][T13254] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.497515][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  820.512111][T13254] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  820.576217][ T5925] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  820.619789][T12816] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  820.636701][T12816] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  820.656785][T12816] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.985469][ T5828] kernel write not supported for file /video36 (pid: 5828 comm: kworker/1:3)
[  822.350103][T13274] (syz.1.2243,13274,0):ocfs2_get_sector:1714 ERROR: status = -5
[  822.357966][T13274] (syz.1.2243,13274,0):ocfs2_sb_probe:753 ERROR: status = -5
[  822.365548][T13274] (syz.1.2243,13274,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  822.374922][T13274] (syz.1.2243,13274,0):ocfs2_fill_super:1177 ERROR: status = -5
[  824.210385][T13299] orangefs_mount: mount request failed with -4
[  824.270784][T13318] 8021q: adding VLAN 0 to HW filter on device team0
[  824.288348][T13318] batman_adv: batadv0: Interface activated: team0
[  824.321574][T13318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  824.646954][T13328] syzkaller0: entered promiscuous mode
[  824.663678][T13328] syzkaller0: entered allmulticast mode
[  825.592817][T13352] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  827.141769][T13360] bridge0: port 2(bridge_slave_1) entered disabled state
[  827.149108][T13360] bridge0: port 1(bridge_slave_0) entered disabled state
[  827.879269][T13360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  828.181317][T13360] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  829.684436][ T1227] wg2 speed is unknown, defaulting to 1000
[  829.690411][T12816] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  829.699651][T12816] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  829.708681][ T1227] syz2: Port: 1 Link DOWN
[  830.145257][ T1227] wg2 speed is unknown, defaulting to 1000
[  830.160909][T12816] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  830.198043][T12816] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  830.563771][T13399] loop9: detected capacity change from 0 to 7
[  830.579348][T13399] Dev loop9: unable to read RDB block 7
[  830.586909][T13399]  loop9: unable to read partition table
[  830.594173][T13399] loop9: partition table beyond EOD, truncated
[  830.600919][T13399] loop_reread_partitions: partition scan of loop9 (�被x�������� ) failed (rc=-5)
[  831.627215][T13410] (syz.3.2286,13410,0):ocfs2_get_sector:1714 ERROR: status = -5
[  831.635314][T13410] (syz.3.2286,13410,0):ocfs2_sb_probe:753 ERROR: status = -5
[  831.642934][T13410] (syz.3.2286,13410,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  831.652016][T13410] (syz.3.2286,13410,0):ocfs2_fill_super:1177 ERROR: status = -5
[  835.596133][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'.
[  835.680788][T13448] macvlan3: entered allmulticast mode
[  835.686299][T13448] veth1_vlan: entered allmulticast mode
[  836.359473][T13449] 9pnet_virtio: no channels available for device syz
[  836.467376][T13454] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  836.473964][T13454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  836.482605][T13454] vhci_hcd vhci_hcd.0: Device attached
[  836.691730][T13455] vhci_hcd: connection closed
[  836.699847][   T12] vhci_hcd vhci_hcd.1: stop threads
[  837.203066][ T5919] usb 36-1: SetAddress Request (6) to port 0
[  837.355484][   T12] vhci_hcd vhci_hcd.1: release socket
[  837.392625][   T12] vhci_hcd vhci_hcd.1: disconnect device
[  837.403961][ T5919] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd
[  837.693861][T13492] (syz.4.2302,13492,0):ocfs2_get_sector:1714 ERROR: status = -5
[  837.701872][T13492] (syz.4.2302,13492,0):ocfs2_sb_probe:753 ERROR: status = -5
[  837.709524][T13492] (syz.4.2302,13492,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  837.718461][T13492] (syz.4.2302,13492,0):ocfs2_fill_super:1177 ERROR: status = -5
[  841.333805][T13519] 9pnet_virtio: no channels available for device syz
[  841.362809][T13522] fuse: Bad value for 'group_id'
[  841.368154][T13522] fuse: Bad value for 'group_id'
[  842.516115][ T5919] usb 36-1: device descriptor read/8, error -110
[  843.264808][ T5919] usb usb36-port1: attempt power cycle
[  845.738302][ T5919] usb usb36-port1: unable to enumerate USB device
[  847.269788][T13563] fuse: Bad value for 'group_id'
[  847.274882][T13563] fuse: Bad value for 'group_id'
[  848.796952][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2330'.
[  850.915679][T13599] 9pnet_virtio: no channels available for device syz
[  855.095924][T13623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2345'.
[  855.930495][T13633] binder: BINDER_SET_CONTEXT_MGR already set
[  855.956490][T13633] binder: 13632:13633 ioctl 4018620d 200000004a80 returned -16
[  856.106468][T13640] ALSA: mixer_oss: invalid OSS volume '�`��ME'
[  856.287563][T13645] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  856.320909][T13645] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  857.105348][ T5919] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  857.865459][ T5919] usb 2-1: Using ep0 maxpacket: 32
[  859.156216][ T5919] usb 2-1: config 0 has an invalid interface number: 59 but max is 0
[  859.202451][ T5919] usb 2-1: config 0 has no interface number 0
[  859.249553][ T5919] usb 2-1: config 0 interface 59 has no altsetting 0
[  859.366231][ T5919] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  859.450919][T13679] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2359'.
[  859.480913][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  859.573074][ T5919] usb 2-1: Product: syz
[  860.433390][ T5919] usb 2-1: Manufacturer: syz
[  860.449312][ T5919] usb 2-1: SerialNumber: syz
[  860.482040][ T5919] usb 2-1: config 0 descriptor??
[  860.855795][T13693] netlink: 'syz.4.2367': attribute type 1 has an invalid length.
[  861.067108][ T5919] usb 2-1: can't set config #0, error -71
[  861.074211][ T5919] usb 2-1: USB disconnect, device number 16
[  861.089009][T13693] smc: adding net device bond0 with user defined pnetid SYZ2
[  861.103134][T13693] bond0: entered promiscuous mode
[  861.109069][T13693] 8021q: adding VLAN 0 to HW filter on device bond0
[  861.141553][T13700] bond0: (slave bridge1): making interface the new active one
[  861.151088][T13700] bridge1: entered promiscuous mode
[  861.165332][T13700] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  862.660481][T13720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2373'.
[  866.034712][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2388'.
[  867.390153][T13800] [U] 
[  867.393217][T13800] [U] 
[  867.395950][T13800] [U] 
[  867.398653][T13800] [U] 
[  867.412011][T13800] [U] 
[  867.414784][T13800] [U] 
[  867.417571][T13800] [U] 
[  867.420269][T13800] [U] 
[  867.444171][T13800] [U] 
[  867.446911][T13800] [U] 
[  867.449641][T13800] [U] 
[  867.452361][T13800] [U] 
[  867.484227][T13800] [U] 
[  867.486983][T13800] [U] 
[  867.489696][T13800] [U] 
[  867.492388][T13800] [U] 
[  867.565155][T13800] [U] 
[  867.567932][T13800] [U] 
[  867.570651][T13800] [U] 
[  867.573372][T13800] [U] 
[  868.065327][T13800] [U] 
[  868.068057][T13800] [U] 
[  868.070745][T13800] [U] 
[  868.073431][T13800] [U] 
[  868.102791][T13800] [U] 
[  868.105539][T13800] [U] 
[  868.108386][T13800] [U] 
[  868.111080][T13800] [U] 
[  868.161198][T13800] [U] 
[  868.163938][T13800] [U] 
[  868.166647][T13800] [U] 
[  868.169331][T13800] [U] 
[  868.253382][T13800] [U] 
[  868.765777][T13817] Invalid source name
[  870.304924][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  870.425797][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  870.977145][T13843] tipc: Enabled bearer <udp:s>, priority 10
[  871.460688][T12420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  871.473774][T12420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  871.482524][T12420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  871.490295][T12420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  871.497924][T12420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  871.787334][T13845] wg2 speed is unknown, defaulting to 1000
[  872.767652][T13857] 9pnet_virtio: no channels available for device syz
[  873.606426][ T5829] Bluetooth: hci5: command tx timeout
[  873.746334][T13863] 9pnet_virtio: no channels available for device syz
[  873.871873][T13867] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  873.871873][T13867]    program syz.4.2418 not setting count and/or reply_len properly
[  873.991232][T13845] chnl_net:caif_netlink_parms(): no params data found
[  874.032175][T13871] bridge_slave_0: left allmulticast mode
[  874.050991][T13871] bridge_slave_0: left promiscuous mode
[  874.076443][T13871] bridge0: port 1(bridge_slave_0) entered disabled state
[  874.234179][T13871] bridge_slave_1: left allmulticast mode
[  874.251274][T13871] bridge_slave_1: left promiscuous mode
[  874.974929][T13871] bridge0: port 2(bridge_slave_1) entered disabled state
[  875.022849][T13871] team0: Port device team_slave_0 removed
[  875.074038][T13871] team0: Port device team_slave_1 removed
[  875.080342][T13871] batman_adv: batadv0: Removing interface: batadv_slave_0
[  875.090796][T13871] batman_adv: batadv0: Removing interface: batadv_slave_1
[  875.107534][T13871] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  875.172037][T13874] team0: No ports can be present during mode change
[  875.215236][T13877] vlan0: entered promiscuous mode
[  875.582705][T13894] netlink: 'syz.2.2422': attribute type 1 has an invalid length.
[  875.657257][T13845] bridge0: port 1(bridge_slave_0) entered blocking state
[  875.673377][ T5829] Bluetooth: hci5: command tx timeout
[  875.692035][T13845] bridge0: port 1(bridge_slave_0) entered disabled state
[  875.711433][T13845] bridge_slave_0: entered allmulticast mode
[  875.732192][T13845] bridge_slave_0: entered promiscuous mode
[  875.818400][T13894] bond0: entered promiscuous mode
[  875.848946][T13894] 8021q: adding VLAN 0 to HW filter on device bond0
[  876.001640][T13895] bond0: (slave bridge2): making interface the new active one
[  876.031607][T13895] bridge2: entered promiscuous mode
[  876.053982][T13895] bond0: (slave bridge2): Enslaving as an active interface with an up link
[  876.106335][T13845] bridge0: port 2(bridge_slave_1) entered blocking state
[  876.124855][T13845] bridge0: port 2(bridge_slave_1) entered disabled state
[  876.143300][T13845] bridge_slave_1: entered allmulticast mode
[  876.151541][T13845] bridge_slave_1: entered promiscuous mode
[  876.519043][T13907] (syz.4.2426,13907,1):ocfs2_get_sector:1714 ERROR: status = -5
[  876.526874][T13907] (syz.4.2426,13907,1):ocfs2_sb_probe:753 ERROR: status = -5
[  876.543886][T13907] (syz.4.2426,13907,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  876.558787][T13907] (syz.4.2426,13907,0):ocfs2_fill_super:1177 ERROR: status = -5
[  876.697687][T13845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  876.718240][T13909] 9pnet_virtio: no channels available for device syz
[  876.730563][T13845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  876.812202][T13845] team0: Port device team_slave_0 added
[  876.824038][T13845] team0: Port device team_slave_1 added
[  877.656840][T13845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  877.664083][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.691227][T13845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  877.707005][T13845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  877.716179][T13845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  877.745983][T13845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  877.763118][ T5829] Bluetooth: hci5: command tx timeout
[  877.816405][T13914] 9pnet_virtio: no channels available for device syz
[  878.026044][T13845] hsr_slave_0: entered promiscuous mode
[  878.048075][T13845] hsr_slave_1: entered promiscuous mode
[  878.074400][T13845] debugfs: 'hsr0' already exists in 'hsr'
[  878.090415][T13845] Cannot create hsr debugfs directory
[  878.915983][T13845] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  878.948556][T13845] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  879.014812][T13845] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  879.155102][T13845] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  879.832812][ T5829] Bluetooth: hci5: command tx timeout
[  881.068948][T13845] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.143365][T13944] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  881.143365][T13944]    program syz.4.2435 not setting count and/or reply_len properly
[  881.187574][T13845] 8021q: adding VLAN 0 to HW filter on device team0
[  881.284004][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  881.291316][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  881.358819][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  881.366026][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  881.487215][T13951] 9pnet_virtio: no channels available for device syz
[  882.659144][T13845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  885.835435][T13982] 9pnet_virtio: no channels available for device syz
[  886.263905][T13845] veth0_vlan: entered promiscuous mode
[  886.288437][T13845] veth1_vlan: entered promiscuous mode
[  886.460464][T13845] veth0_macvtap: entered promiscuous mode
[  886.552623][T13845] veth1_macvtap: entered promiscuous mode
[  886.767809][T13845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.844652][T13845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  886.875943][T12818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  886.943163][T12818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.003511][T12818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.052333][T12818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.165279][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.173608][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.250406][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.268297][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.603425][T14001] 9pnet_virtio: no channels available for device syz
[  890.484641][T14042] 9pnet_virtio: no channels available for device syz
[  891.628160][T14054] 9pnet_virtio: no channels available for device syz
[  892.271297][ T5919] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  893.292726][ T5919] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  893.316228][ T5919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  893.326468][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  893.334719][ T5919] usb 5-1: Product: syz
[  893.339127][ T5919] usb 5-1: Manufacturer: syz
[  893.344026][ T5919] usb 5-1: SerialNumber: syz
[  893.585249][ T5919] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  893.703882][T14085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2475'.
[  894.818820][T14094] 9pnet_virtio: no channels available for device syz
[  896.078571][ T5828] usb 5-1: USB disconnect, device number 13
[  896.090235][ T5828] usblp0: removed
[  898.821589][ T5901] hid_parser_main: 73 callbacks suppressed
[  898.821616][ T5901] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  899.032668][ T5901] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  899.230280][ T5901] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  899.325470][T14141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2495'.
[  899.673574][ T5901] usb 5-1: config 0 has no interfaces?
[  899.717481][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  899.762947][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  899.845196][ T5901] usb 5-1: SerialNumber: syz
[  900.015424][ T5901] usb 5-1: config 0 descriptor??
[  900.280169][ T5901] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  901.678177][ T1227] usb 5-1: USB disconnect, device number 14
[  901.757559][ T5901] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  901.785306][ T5901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  901.799700][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  901.809637][ T5901] usb 6-1: Product: syz
[  901.815171][ T5901] usb 6-1: Manufacturer: syz
[  901.820422][ T5901] usb 6-1: SerialNumber: syz
[  902.045431][ T5901] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  904.231533][ T5828] usb 6-1: USB disconnect, device number 2
[  904.280386][ T5828] usblp0: removed
[  904.479114][T14192] input: syz1 as /devices/virtual/input/input18
[  905.559114][ T5901] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  905.576776][ T5901] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  905.861592][T14213] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  905.861592][T14213]    program syz.4.2505 not setting count and/or reply_len properly
[  906.064054][T14214] overlayfs: overlapping lowerdir path
[  906.132517][T14214] overlayfs: failed to verify upper (480/file0, ino=2583, err=-116)
[  906.181684][T14214] overlayfs: failed to verify index dir 'upper' xattr
[  906.211168][T14214] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  911.111469][ T1227] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  911.178174][ T1227] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  911.948799][ T5901] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  912.260717][ T5901] usb 6-1: config 0 has no interfaces?
[  912.267287][ T5901] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  912.286669][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  912.335116][ T5901] usb 6-1: SerialNumber: syz
[  912.368481][ T5901] usb 6-1: config 0 descriptor??
[  913.580287][T10248] usb 6-1: USB disconnect, device number 3
[  914.278503][T10248] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  914.428684][ T5901] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  914.458478][T10248] usb 5-1: Using ep0 maxpacket: 16
[  914.572196][T10248] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  914.591829][T10248] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  914.618398][T10248] usb 5-1: Product: syz
[  914.633009][T10248] usb 5-1: Manufacturer: syz
[  914.637654][T10248] usb 5-1: SerialNumber: syz
[  914.669612][T10248] usb 5-1: config 0 descriptor??
[  914.730773][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  914.761312][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  914.771715][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  914.785011][ T5901] usb 3-1: Product: syz
[  914.794455][ T5901] usb 3-1: Manufacturer: syz
[  914.799642][ T5901] usb 3-1: SerialNumber: syz
[  914.947506][ T5919] usb 5-1: USB disconnect, device number 15
[  915.160632][ T5901] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  916.277203][T14306] 9pnet_virtio: no channels available for device syz
[  916.590348][ T5828] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  916.615321][ T5828] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  916.838330][ T5901] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  917.017293][ T5901] usb 5-1: config 0 has no interfaces?
[  917.043837][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  917.054316][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  917.063526][ T5901] usb 5-1: SerialNumber: syz
[  917.118553][ T5901] usb 5-1: config 0 descriptor??
[  917.940865][ T5901] usb 3-1: USB disconnect, device number 16
[  918.363866][ T5901] usblp0: removed
[  918.384155][ T5985] usb 5-1: USB disconnect, device number 16
[  921.777552][ T5985] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  921.949621][ T5985] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  921.971083][ T5985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  921.992595][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  922.012110][ T5985] usb 2-1: Product: syz
[  922.021544][ T5985] usb 2-1: Manufacturer: syz
[  922.207549][ T5985] usb 2-1: SerialNumber: syz
[  922.852990][ T5985] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  922.873821][T14366] fuse: Unknown parameter 'group_id00000000000000000000'
[  924.788351][ T5985] usb 2-1: USB disconnect, device number 17
[  924.826613][ T5985] usblp0: removed
[  925.087540][T14382] Invalid source name
[  925.923764][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'.
[  928.567279][ T5919] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  928.775183][ T5919] usb 2-1: device descriptor read/64, error -71
[  929.471844][ T5919] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  929.736616][ T5919] usb 2-1: device descriptor read/64, error -71
[  930.557568][ T5919] usb usb2-port1: attempt power cycle
[  930.596592][ T5828] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  930.832354][ T5828] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  931.004583][ T5919] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  931.033234][ T5919] usb 2-1: device descriptor read/8, error -71
[  931.043347][ T5828] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  931.105310][T14436] overlayfs: overlapping lowerdir path
[  931.162310][T14438] overlayfs: failed to verify upper (501/file0, ino=2704, err=-116)
[  931.170603][T14438] overlayfs: failed to verify index dir 'upper' xattr
[  931.177459][T14438] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  931.343900][T14437] (syz.4.2592,14437,0):ocfs2_get_sector:1714 ERROR: status = -5
[  931.352133][T14437] (syz.4.2592,14437,0):ocfs2_sb_probe:753 ERROR: status = -5
[  931.359882][T14437] (syz.4.2592,14437,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  931.369063][T14437] (syz.4.2592,14437,0):ocfs2_fill_super:1177 ERROR: status = -5
[  931.605644][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  931.693538][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  931.703641][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  931.709472][ T5828] usb 6-1: Product: syz
[  931.734316][ T5828] usb 6-1: Manufacturer: syz
[  931.746417][ T5828] usb 6-1: SerialNumber: syz
[  932.028301][ T5828] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  934.232708][ T5985] usb 6-1: USB disconnect, device number 4
[  934.355554][ T5985] usblp0: removed
[  934.662581][T14469] comedi comedi3: dt2817: I/O port conflict (0x4f27,5)
[  936.456818][T14480] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2604'.
[  936.929725][T14484] (syz.5.2606,14484,1):ocfs2_get_sector:1714 ERROR: status = -5
[  936.966101][T14484] (syz.5.2606,14484,0):ocfs2_sb_probe:753 ERROR: status = -5
[  937.195768][T14484] (syz.5.2606,14484,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  937.229563][T14484] (syz.5.2606,14484,1):ocfs2_fill_super:1177 ERROR: status = -5
[  940.751878][T14527] overlayfs: overlapping lowerdir path
[  940.809369][T14529] overlayfs: failed to verify upper (508/file0, ino=2753, err=-116)
[  940.817482][T14529] overlayfs: failed to verify index dir 'upper' xattr
[  940.824524][T14529] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  947.027796][T14597] 9pnet_virtio: no channels available for device syz
[  951.755986][T14649] x_tables: ip_tables: osf match: only valid for protocol 6
[  954.181688][T14667] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  954.188275][T14667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  954.197610][T14667] vhci_hcd vhci_hcd.0: Device attached
[  954.376229][T14668] vhci_hcd: connection closed
[  954.394627][ T5987] vhci_hcd vhci_hcd.5: stop threads
[  954.423660][ T5987] vhci_hcd vhci_hcd.5: release socket
[  954.441432][ T5987] vhci_hcd vhci_hcd.5: disconnect device
[  956.025054][T14696] x_tables: ip_tables: osf match: only valid for protocol 6
[  956.914802][T14712] Invalid source name
[  958.067831][T10248] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  958.897456][T10248] usb 3-1: config 0 has no interfaces?
[  958.920116][T10248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  958.931287][T14723] input: syz1 as /devices/virtual/input/input19
[  958.952982][T10248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  958.961742][T10248] usb 3-1: SerialNumber: syz
[  958.974043][T10248] usb 3-1: config 0 descriptor??
[  960.262300][T10248] usb 3-1: USB disconnect, device number 17
[  960.812429][T14736] (syz.5.2673,14736,0):ocfs2_get_sector:1714 ERROR: status = -5
[  960.820357][T14736] (syz.5.2673,14736,0):ocfs2_sb_probe:753 ERROR: status = -5
[  960.828065][T14736] (syz.5.2673,14736,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  960.836903][T14736] (syz.5.2673,14736,0):ocfs2_fill_super:1177 ERROR: status = -5
[  961.211238][T14738] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  961.218073][T14738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  961.260090][T14737] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  961.260090][T14737]    program syz.1.2672 not setting count and/or reply_len properly
[  961.994112][T14738] vhci_hcd vhci_hcd.0: Device attached
[  962.291076][ T5901] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  962.416160][T14755] x_tables: ip_tables: osf match: only valid for protocol 6
[  963.083937][T14757] Invalid source name
[  963.959527][ T5985] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  964.918553][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  964.932519][ T5985] usb 6-1: config 0 has no interfaces?
[  964.949866][ T5985] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  964.959077][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.976649][ T5985] usb 6-1: Product: syz
[  964.981005][ T5985] usb 6-1: Manufacturer: syz
[  964.986460][ T5985] usb 6-1: SerialNumber: syz
[  965.005013][ T5985] usb 6-1: config 0 descriptor??
[  965.217845][ T5985] usb 6-1: USB disconnect, device number 5
[  965.253837][T14739] vhci_hcd: connection reset by peer
[  965.267920][   T12] vhci_hcd vhci_hcd.0: stop threads
[  965.277162][   T12] vhci_hcd vhci_hcd.0: release socket
[  965.283374][   T12] vhci_hcd vhci_hcd.0: disconnect device
[  965.511443][T14772] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[  965.518040][T14772] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  965.526744][T14772] vhci_hcd vhci_hcd.0: Device attached
[  965.793081][ T5985] usb 42-1: SetAddress Request (3) to port 0
[  965.802378][ T5985] usb 42-1: new SuperSpeed USB device number 3 using vhci_hcd
[  965.972929][T10248] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  966.007523][T14774] vhci_hcd: connection reset by peer
[  966.013943][ T5925] vhci_hcd vhci_hcd.4: stop threads
[  966.058353][ T5925] vhci_hcd vhci_hcd.4: release socket
[  966.064980][ T5925] vhci_hcd vhci_hcd.4: disconnect device
[  966.184174][T10248] usb 3-1: config 0 has no interfaces?
[  966.191579][T10248] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  966.201301][T10248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  966.211415][T10248] usb 3-1: SerialNumber: syz
[  966.218735][T10248] usb 3-1: config 0 descriptor??
[  967.651448][ T5901] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  968.022639][ T5919] usb 3-1: USB disconnect, device number 18
[  969.365858][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2696'.
[  970.484229][   T30] audit: type=1800 audit(1762129060.718:59): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2701" name="bus" dev="overlay" ino=3202 res=0 errno=0
[  970.607924][T14832] bridge1: entered promiscuous mode
[  970.941958][ T5985] usb 42-1: device descriptor read/8, error -110
[  971.431966][ T5985] usb usb42-port1: attempt power cycle
[  971.675791][T14833] batman_adv: batadv0: Interface deactivated: team0
[  971.834591][T14850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2706'.
[  973.423068][ T5985] usb usb42-port1: unable to enumerate USB device
[  974.032879][T14833] veth1_vlan: left allmulticast mode
[  974.085819][T14840] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2704'.
[  974.108094][T12818] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.134234][T12818] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.188060][T12818] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.206550][T12818] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  975.409645][T14893] lo speed is unknown, defaulting to 1000
[  975.415909][T14893] lo speed is unknown, defaulting to 1000
[  975.422312][T14893] lo speed is unknown, defaulting to 1000
[  975.438677][T14893] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  975.458388][T14893] lo speed is unknown, defaulting to 1000
[  975.465740][T14893] lo speed is unknown, defaulting to 1000
[  975.472726][T14893] lo speed is unknown, defaulting to 1000
[  975.479794][T14893] lo speed is unknown, defaulting to 1000
[  975.486740][T14893] lo speed is unknown, defaulting to 1000
[  975.493701][T14893] lo speed is unknown, defaulting to 1000
[  975.617251][T14901] 9pnet_virtio: no channels available for device syz
[  976.940510][T14844] lo speed is unknown, defaulting to 1000
[  980.764176][T12420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  980.775966][T12420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  980.784824][T12420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  980.800218][T12420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  980.809151][T12420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  980.872084][T14952] wg2 speed is unknown, defaulting to 1000
[  981.855980][T14952] lo speed is unknown, defaulting to 1000
[  982.207180][T14974] input: syz1 as /devices/virtual/input/input20
[  982.644300][T14980] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2741'.
[  982.906533][T12420] Bluetooth: hci3: command tx timeout
[  982.994266][T14952] chnl_net:caif_netlink_parms(): no params data found
[  985.006376][T14952] bridge0: port 1(bridge_slave_0) entered blocking state
[  985.020100][T12420] Bluetooth: hci3: command tx timeout
[  985.056248][T14952] bridge0: port 1(bridge_slave_0) entered disabled state
[  985.080466][T14952] bridge_slave_0: entered allmulticast mode
[  985.104340][T14952] bridge_slave_0: entered promiscuous mode
[  985.128889][T14952] bridge0: port 2(bridge_slave_1) entered blocking state
[  985.140334][T15010] 9pnet_virtio: no channels available for device syz
[  985.158038][T14952] bridge0: port 2(bridge_slave_1) entered disabled state
[  985.180650][T14952] bridge_slave_1: entered allmulticast mode
[  985.206745][T14952] bridge_slave_1: entered promiscuous mode
[  985.345225][T14952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  985.452797][T14952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  985.848439][T14952] team0: Port device team_slave_0 added
[  985.891428][T14952] team0: Port device team_slave_1 added
[  985.976135][T15012] binder: 15003:15012 ioctl 0 200000000040 returned -22
[  986.008588][T15016] random: crng reseeded on system resumption
[  987.259985][T12420] Bluetooth: hci3: command tx timeout
[  987.831220][T14952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  987.838739][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  988.009046][T14952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  988.072203][T14952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  988.079218][T14952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  988.146476][T14952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  989.340846][T12420] Bluetooth: hci3: command tx timeout
[  989.547723][T14952] hsr_slave_0: entered promiscuous mode
[  989.561037][T14952] hsr_slave_1: entered promiscuous mode
[  989.609007][T14952] debugfs: 'hsr0' already exists in 'hsr'
[  989.619725][T14952] Cannot create hsr debugfs directory
[  990.593105][T15053] 9pnet_virtio: no channels available for device syz
[  991.110888][T15061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2766'.
[  991.247579][T15062] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[  991.254622][T15062] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  991.261511][T15062] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  991.268685][T15062] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  991.275787][T15062] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  991.282824][T15062] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  991.290277][T15062] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  991.297032][T15062] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  991.304480][T15062] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  991.311277][T15062] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  991.318006][T15062] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  991.325294][T15062] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  991.332159][T15062] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  991.338748][T15062] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  991.345998][T15062] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  991.354249][T15062] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  993.140854][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  993.265069][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  995.351973][T15094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2776'.
[  997.097075][T14952] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  997.264897][T14952] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  997.361580][T15113] x_tables: ip_tables: osf match: only valid for protocol 6
[  997.920280][T14952] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  997.987515][T14952] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  998.197922][T15112] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  998.204440][T15112] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  998.249105][T15112] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  998.339702][T15112] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  998.784050][T15112] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  998.816191][T15112] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  998.844848][T14952] 8021q: adding VLAN 0 to HW filter on device bond0
[  998.861957][T14952] 8021q: adding VLAN 0 to HW filter on device team0
[  998.899201][T14952] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  998.911452][T15112] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  998.918196][T14952] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  999.047214][T14952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  999.081862][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.089053][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  999.119263][T15112] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  999.144159][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.151407][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state
[  999.162305][T15112] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  999.208549][T15112] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  999.269540][T15112] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  999.279927][T14952] veth0_vlan: entered promiscuous mode
[  999.432378][T14952] veth1_vlan: entered promiscuous mode
[ 1000.132758][T14952] veth0_macvtap: entered promiscuous mode
[ 1000.262838][T14952] veth1_macvtap: entered promiscuous mode
[ 1000.270358][T12420] Bluetooth: hci1: command 0x0406 tx timeout
[ 1000.299505][T12420] Bluetooth: hci4: command 0x0406 tx timeout
[ 1000.415074][T15140] overlayfs: overlapping lowerdir path
[ 1000.496977][T15142] overlayfs: failed to verify upper (66/file0, ino=375, err=-116)
[ 1000.505173][T15142] overlayfs: failed to verify index dir 'upper' xattr
[ 1000.512075][T15142] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1000.888415][T12420] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1001.188271][T12420] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1002.181100][T14952] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1002.256261][T14952] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1002.298603][T12420] Bluetooth: hci1: command 0x0406 tx timeout
[ 1002.378072][T12420] Bluetooth: hci4: command 0x0406 tx timeout
[ 1002.616154][ T5987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1002.938648][T12420] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1003.100937][ T5987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.123513][ T5987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.134279][ T5987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1003.259010][T12420] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1003.387943][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1003.401776][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.452744][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1003.480925][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1004.447839][T12420] Bluetooth: hci1: command 0x0406 tx timeout
[ 1004.780059][T12420] Bluetooth: hci1: unexpected event for opcode 0x0c26
[ 1004.960249][T15173] loop2: detected capacity change from 0 to 7
[ 1005.061461][T12420] Bluetooth: hci5: command 0x0c1a tx timeout
[ 1005.071945][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.081315][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.176912][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.186201][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.367727][T12420] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1005.438547][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.447809][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.457255][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.466595][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.491508][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.500786][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.518726][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.527959][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.538435][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.547630][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.555753][T15173] ldm_validate_partition_table(): Disk read failed.
[ 1005.567661][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.577012][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.587673][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.596876][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.607626][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1005.616910][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1005.627808][T15173] Dev loop2: unable to read RDB block 0
[ 1005.641966][T15173]  loop2: unable to read partition table
[ 1005.650060][T15173] loop2: partition table beyond EOD, truncated
[ 1005.656583][T15173] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1008.325547][T15205] Invalid source name
[ 1012.632324][T15230] block nbd2: shutting down sockets
[ 1012.713188][T15241] Invalid source name
[ 1015.015583][T15270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2821'.
[ 1015.054309][T15272] input: syz1 as /devices/virtual/input/input21
[ 1019.412596][T15289] Invalid source name
[ 1019.962916][T15309] (syz.1.2831,15309,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1019.971209][T15309] (syz.1.2831,15309,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1019.980359][T15309] (syz.1.2831,15309,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1019.989617][T15309] (syz.1.2831,15309,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1021.960388][T15334] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1021.960388][T15334]    program syz.1.2835 not setting count and/or reply_len properly
[ 1022.725135][T15347] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1022.742226][T15347] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1025.614357][T15386] 9pnet_virtio: no channels available for device syz
[ 1026.107604][   T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1026.958929][T15395] overlayfs: overlapping lowerdir path
[ 1027.153342][T15396] overlayfs: failed to verify upper (543/file0, ino=2945, err=-116)
[ 1027.161687][T15396] overlayfs: failed to verify index dir 'upper' xattr
[ 1027.168610][T15396] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1027.744493][   T24] usb 5-1: device descriptor read/64, error -71
[ 1028.015202][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1028.079537][T15408] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1028.102399][T15408] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1028.155417][   T24] usb 5-1: device descriptor read/64, error -71
[ 1028.285578][   T24] usb usb5-port1: attempt power cycle
[ 1028.344294][T15414] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2857'.
[ 1028.655265][   T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1028.765349][T15416] overlayfs: missing 'lowerdir'
[ 1028.800102][   T24] usb 5-1: device descriptor read/8, error -71
[ 1030.072585][T15432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2861'.
[ 1030.100590][T15433] program syz.5.2862 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1030.512294][T15440] overlayfs: overlapping lowerdir path
[ 1030.600500][T15441] overlayfs: failed to verify upper (581/file0, ino=3098, err=-116)
[ 1030.608763][T15441] overlayfs: failed to verify index dir 'upper' xattr
[ 1030.615637][T15441] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1031.148129][T15436] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[ 1031.155535][T15436] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1031.162360][T15436] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1031.169696][T15436] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1031.177027][T15436] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[ 1031.184041][T15436] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1031.191809][T15436] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1031.450700][T15436] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1031.458541][T15436] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1031.471404][T15436] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1031.479045][T15436] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1031.486375][T15436] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1031.493405][T15436] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1031.501496][T15436] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1031.509071][T15436] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1031.517316][T15436] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1033.824657][T15481] fuse: Unknown parameter 'grou00000000000000000000'
[ 1034.540920][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2879'.
[ 1037.959548][T15541] Invalid source name
[ 1038.203732][T15544] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[ 1038.214430][T15544] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1038.221240][T15544] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1038.228139][T15544] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1038.235033][T15544] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[ 1038.241914][T15544] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1038.249244][T15544] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1038.267004][T15544] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1038.274495][T15544] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1038.281577][T15544] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1038.288505][T15544] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1038.296131][T15544] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1038.303216][T15544] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1038.310261][T15544] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1038.317431][T15544] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1038.325555][T15544] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1040.552721][T15576] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2907'.
[ 1040.603707][T15576] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1040.741128][T15583] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1040.741128][T15583]    program syz.0.2906 not setting count and/or reply_len properly
[ 1041.015582][T15588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2911'.
[ 1041.144641][T15590] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[ 1041.151601][T15590] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1041.158332][T15590] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1041.165207][T15590] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1041.172317][T15590] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[ 1041.179625][T15590] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1041.186912][T15590] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1041.193484][T15590] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1041.210360][T15590] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1041.217207][T15590] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1041.224002][T15590] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1041.230758][T15590] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1041.237523][T15590] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1041.244297][T15590] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1041.251193][T15590] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1041.259416][T15590] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1042.138006][T15594] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[ 1042.144660][T15594] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 1042.153365][T15594] vhci_hcd vhci_hcd.0: Device attached
[ 1042.441852][T14844] usb 44-1: SetAddress Request (3) to port 0
[ 1042.461184][T14844] usb 44-1: new SuperSpeed USB device number 3 using vhci_hcd
[ 1042.468830][   T30] audit: type=1326 audit(1762129132.697:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15575 comm="syz.5.2909" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa08378efc9 code=0x0
[ 1042.892391][T15595] vhci_hcd: connection reset by peer
[ 1042.912840][T12816] vhci_hcd vhci_hcd.5: stop threads
[ 1043.063731][T12816] vhci_hcd vhci_hcd.5: release socket
[ 1043.069437][T12816] vhci_hcd vhci_hcd.5: disconnect device
[ 1044.495056][T15623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'.
[ 1044.656137][T15628] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[ 1044.662885][T15628] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1044.669800][T15628] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1044.680111][T15628] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1044.686912][T15628] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[ 1044.693901][T15628] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1044.701185][T15628] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1044.720581][T15628] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1044.728025][T15628] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1044.736050][T15628] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1044.742846][T15628] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1044.750825][T15628] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1044.758075][T15628] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1044.765283][T15628] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1044.772451][T15628] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1044.780970][T15628] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1046.823593][T15649] Invalid source name
[ 1047.575291][T14844] usb 44-1: device descriptor read/8, error -110
[ 1048.213851][T14844] usb usb44-port1: attempt power cycle
[ 1049.156410][T15671] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1049.156410][T15671]    program syz.0.2933 not setting count and/or reply_len properly
[ 1049.322222][T14844] usb usb44-port1: unable to enumerate USB device
[ 1049.344371][T15682] (syz.2.2935,15682,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1049.372744][T15682] (syz.2.2935,15682,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1049.393883][T15682] (syz.2.2935,15682,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1049.548971][T15682] (syz.2.2935,15682,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1049.961281][T15697] binder: 15691:15697 ioctl 0 200000000040 returned -22
[ 1050.035082][T15699] serio: Serial port ttyS3
[ 1053.389376][T15711] Invalid source name
[ 1054.087206][T15720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1054.550079][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.556493][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.582601][T15720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.025183][T15720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.075733][ T7799] bridge_slave_1: left allmulticast mode
[ 1055.081951][ T7799] bridge_slave_1: left promiscuous mode
[ 1055.093629][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1055.156698][ T7799] bridge_slave_0: left allmulticast mode
[ 1055.167616][ T7799] bridge_slave_0: left promiscuous mode
[ 1055.180551][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.827170][T15720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1060.950834][T15761] serio: Serial port ttyS3
[ 1061.052361][T15763] Invalid source name
[ 1061.985401][T15770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2960'.
[ 1062.206414][T15772] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1062.206414][T15772]    program syz.2.2959 not setting count and/or reply_len properly
[ 1063.429800][ T7058] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.012774][ T5925] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.338285][ T5925] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.426395][ T5925] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1065.178026][ T7799] hsr_slave_0: left promiscuous mode
[ 1065.271011][ T7799] hsr_slave_1: left promiscuous mode
[ 1065.277456][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1065.438381][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1065.961818][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1065.980893][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1065.991146][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1066.001965][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1066.019838][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1066.829889][T15815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'.
[ 1067.210354][T15820] loop1: detected capacity change from 0 to 128
[ 1067.273547][T15820] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1067.367491][T15820] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1067.495684][T15820] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[ 1067.671921][T15820] fscrypt: loop1: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[ 1067.826494][T14952] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1067.878586][ T7799] team0 (unregistering): Port device team_slave_1 removed
[ 1068.033739][ T7799] team0 (unregistering): Port device team_slave_0 removed
[ 1068.050634][ T5829] Bluetooth: hci2: command tx timeout
[ 1068.367066][   T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1068.442716][ T7958] smc: removing ib device syz2
[ 1068.538473][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1068.548975][   T24] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[ 1068.561518][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.569684][   T24] usb 2-1: Product: syz
[ 1068.574832][   T24] usb 2-1: Manufacturer: syz
[ 1068.580441][   T24] usb 2-1: SerialNumber: syz
[ 1068.620378][   T24] usb 2-1: config 0 descriptor??
[ 1068.651194][   T24] option 2-1:0.0: GSM modem (1-port) converter detected
[ 1069.152797][T15829] loop4: detected capacity change from 0 to 32768
[ 1069.302568][T15829] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1069.311267][T15829] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1069.486306][T15829] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[ 1069.519278][ T5828] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1069.550762][ T5828] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1069.920463][T15839] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2978'.
[ 1069.949416][T15839] openvswitch: netlink: Flow key attr not present in new flow.
[ 1069.961607][ T5828] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 410ms
[ 1069.983575][T15802] lo speed is unknown, defaulting to 1000
[ 1070.010245][  T117] usb 2-1: USB disconnect, device number 22
[ 1070.020553][ T5828] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1070.130280][ T5829] Bluetooth: hci2: command tx timeout
[ 1070.261304][T15829] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1072.070253][T15839] 9pnet_virtio: no channels available for device syz
[ 1072.080614][T15839] loop6: detected capacity change from 0 to 524287999
[ 1072.088694][T15839] buffer_io_error: 5 callbacks suppressed
[ 1072.088713][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.102605][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.110735][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.118701][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.126749][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.134780][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.144124][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.152268][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.160244][T15839] ldm_validate_partition_table(): Disk read failed.
[ 1072.166917][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.174990][T15839] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1072.183311][T15839] Dev loop6: unable to read RDB block 0
[ 1072.190507][T15839]  loop6: unable to read partition table
[ 1072.196499][T15839] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1072.209953][ T5829] Bluetooth: hci2: command tx timeout
[ 1072.227976][  T117] option 2-1:0.0: device disconnected
[ 1072.270456][T15842] rdma_rxe: rxe_newlink: failed to add ipvlan0
[ 1072.297930][T15839] ldm_validate_partition_table(): Disk read failed.
[ 1072.309400][T15839] Dev loop6: unable to read RDB block 0
[ 1072.317573][T15839]  loop6: unable to read partition table
[ 1072.323517][T15839] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[ 1073.033962][T15802] chnl_net:caif_netlink_parms(): no params data found
[ 1073.666262][T15868] fuse: Bad value for 'fd'
[ 1074.289875][ T5829] Bluetooth: hci2: command tx timeout
[ 1074.755505][T15872] 9pnet_virtio: no channels available for device syz
[ 1074.795739][T15875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2987'.
[ 1074.811509][T15802] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1074.828317][T15802] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1074.846094][T15802] bridge_slave_0: entered allmulticast mode
[ 1074.896299][T15877] comedi comedi3: 8255: I/O port conflict (0x4f27,4)
[ 1074.903632][T15877] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1074.910982][T15877] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1074.917876][T15877] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1074.924651][T15877] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[ 1074.931617][T15877] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1074.938832][T15877] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1074.945527][T15877] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1074.967680][T15877] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1074.974593][T15877] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1074.981381][T15877] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1074.988522][T15877] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1074.995657][T15877] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1075.002555][T15877] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1075.009501][T15877] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1075.025807][T15877] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1075.693603][T15802] bridge_slave_0: entered promiscuous mode
[ 1075.723285][T15802] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.768377][T15802] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.014787][T15802] bridge_slave_1: entered allmulticast mode
[ 1076.023599][T15802] bridge_slave_1: entered promiscuous mode
[ 1076.267926][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1076.313559][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1076.325479][ T7799] IPVS: stop unused estimator thread 0...
[ 1077.377621][T15802] team0: Port device team_slave_0 added
[ 1077.400113][T15802] team0: Port device team_slave_1 added
[ 1077.923900][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1078.256284][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1078.282588][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1078.296251][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1078.306285][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1078.341607][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1078.371336][T15910] loop1: detected capacity change from 0 to 2048
[ 1078.382382][T15910] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1078.574821][T15911] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1078.755268][T15802] hsr_slave_0: entered promiscuous mode
[ 1078.769074][T15802] hsr_slave_1: entered promiscuous mode
[ 1078.817947][T15884] loop2: detected capacity change from 0 to 40427
[ 1078.839052][T15884] F2FS-fs: heap/no_heap options were deprecated
[ 1078.841566][T15802] debugfs: 'hsr0' already exists in 'hsr'
[ 1078.886167][T15802] Cannot create hsr debugfs directory
[ 1078.906744][T15884] F2FS-fs (loop2): build fault injection rate: 19
[ 1078.937752][T15884] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[ 1078.986763][T15911] NILFS (loop1): writing node/leaf block does not appear in b-tree (ino=16) at key=36, level=0
[ 1079.011035][T15911] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=16)
[ 1079.025797][T15884] F2FS-fs (loop2): invalid crc value
[ 1079.074668][T15884] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-4)
[ 1079.124508][T15911] Remounting filesystem read-only
[ 1079.174437][T14952] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[ 1079.489457][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2999'.
[ 1080.415092][T15925] orangefs_devreq_write_iter: total:40: must be at least:8240:
[ 1081.409110][T14844] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1082.568536][T14848] IPVS: starting estimator thread 0...
[ 1082.634932][T14844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.655054][T14844] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1082.668849][T15959] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1082.682133][T15963] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3011'.
[ 1082.712994][T14844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1082.734874][T14844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1083.237105][T14844] usb 2-1: Product: syz
[ 1083.367705][T14844] usb 2-1: Manufacturer: syz
[ 1083.395548][T14844] usb 2-1: SerialNumber: syz
[ 1083.716803][T15970] loop4: detected capacity change from 0 to 64
[ 1083.725985][T15970] minix: Unknown parameter '0000000000000000000000300000000000000000000000'
[ 1083.792375][ T7799] tipc: Disabling bearer <udp:syz2>
[ 1083.799593][ T7799] tipc: Disabling bearer <udp:s>
[ 1083.874265][ T7799] tipc: Left network mode
[ 1084.075662][T15977] atomic_op ffff888048044198 conn xmit_atomic 0000000000000000
[ 1086.424138][T15997] overlayfs: failed to resolve './file1/file0': -2
[ 1086.698946][ T7799] hsr_slave_0: left promiscuous mode
[ 1086.931590][T14861] usb 2-1: USB disconnect, device number 23
[ 1087.046638][ T7799] hsr_slave_1: left promiscuous mode
[ 1087.058544][ T7799] batman_adv: batadv0: Removing interface: team0
[ 1088.163400][T16008] (syz.1.3022,16008,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1088.258254][T16008] (syz.1.3022,16008,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1088.266261][T16008] (syz.1.3022,16008,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1088.276065][T16008] (syz.1.3022,16008,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1089.521445][T16030] loop5: detected capacity change from 0 to 4096
[ 1089.561050][T16030] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1089.701905][T16030] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1089.707832][T16030] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1089.795668][T16030] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1089.801983][T16030] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[ 1091.221051][T14861] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1091.600563][T14861] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1091.617084][T14861] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1091.626832][T14861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1091.647983][T14861] usb 6-1: Product: syz
[ 1091.652235][T14861] usb 6-1: Manufacturer: syz
[ 1091.667408][T14861] usb 6-1: SerialNumber: syz
[ 1091.798560][T16044] Invalid source name
[ 1091.974414][T15802] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1092.117360][T15802] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1092.135197][T15802] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1092.173725][T15802] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1093.561456][T16065] (syz.2.3035,16065,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1093.609626][T16065] (syz.2.3035,16065,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1093.637639][T16065] (syz.2.3035,16065,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1093.646812][T16065] (syz.2.3035,16065,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1093.843781][T15802] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.926220][T15802] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.962283][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1093.969479][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1094.129542][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1094.136832][ T7799] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1094.464074][  T117] usb 6-1: USB disconnect, device number 6
[ 1094.646009][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1094.674974][T16079] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[ 1094.674974][T16079]    program syz.5.3040 not setting count and/or reply_len properly
[ 1094.903442][T15802] veth0_vlan: entered promiscuous mode
[ 1094.942184][T15802] veth1_vlan: entered promiscuous mode
[ 1095.001202][T15802] veth0_macvtap: entered promiscuous mode
[ 1095.040221][T15802] veth1_macvtap: entered promiscuous mode
[ 1095.201153][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1095.213969][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1096.022931][ T7058] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.158996][ T7058] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.215524][ T7058] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.330750][ T7058] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1096.559224][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.586511][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1096.749475][ T5925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1096.784367][ T5925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.720948][T12420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1097.732019][T12420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1097.746059][T12420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1097.762865][T12420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1097.780237][T12420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1097.890758][T16111] serio: Serial port ttyS3
[ 1097.990205][T16108] lo speed is unknown, defaulting to 1000
[ 1099.350556][T16108] chnl_net:caif_netlink_parms(): no params data found
[ 1099.709460][T16108] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1099.717666][T16108] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.725338][T16108] bridge_slave_0: entered allmulticast mode
[ 1099.734028][T16108] bridge_slave_0: entered promiscuous mode
[ 1099.742248][T16108] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.749631][T16108] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.757127][T16108] bridge_slave_1: entered allmulticast mode
[ 1099.764296][T16108] bridge_slave_1: entered promiscuous mode
[ 1099.828552][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3051'.
[ 1099.887054][T12420] Bluetooth: hci0: command tx timeout
[ 1100.135802][T16108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1100.224250][T16108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1101.351179][T16108] team0: Port device team_slave_0 added
[ 1101.388611][T16108] team0: Port device team_slave_1 added
[ 1101.607793][T16108] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1101.614761][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1101.696624][T16108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1101.756152][T16108] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1101.768813][T16108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1101.912173][T16142] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1101.921158][T16142] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1101.932866][T16142] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1101.977600][T16108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1101.999453][T12420] Bluetooth: hci0: command tx timeout
[ 1102.090590][T16136] loop1: detected capacity change from 0 to 32768
[ 1102.610927][T16108] hsr_slave_0: entered promiscuous mode
[ 1102.681787][T16108] hsr_slave_1: entered promiscuous mode
[ 1102.738235][T16136] (syz.1.3053,16136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1102.806306][T16136] (syz.1.3053,16136,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1102.997997][T16136] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Inode 23 has corrupted cl_bpc: ondisk=1 expected=8
[ 1103.087385][T16136] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 1103.132660][T16136] OCFS2: File system is now read-only.
[ 1103.207582][T16136] (syz.1.3053,16136,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[ 1103.234502][T16136] (syz.1.3053,16136,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[ 1103.307990][T16136] (syz.1.3053,16136,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[ 1103.473577][T16136] (syz.1.3053,16136,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[ 1103.473909][T16136] (syz.1.3053,16136,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[ 1104.306820][T12420] Bluetooth: hci0: command tx timeout
[ 1104.326860][T16136] (syz.1.3053,16136,0):ocfs2_initialize_super:2198 ERROR: status = -30
[ 1104.394920][T16136] (syz.1.3053,16136,0):ocfs2_fill_super:1177 ERROR: status = -30
[ 1106.677197][ T5829] Bluetooth: hci0: command tx timeout
[ 1107.070845][T12816] bond0 (unregistering): (slave bridge1): Releasing backup interface
[ 1107.122840][T12816] bridge1 (unregistering): left promiscuous mode
[ 1108.090271][T12816] smc: removing net device bond0 with user defined pnetid SYZ2
[ 1108.115694][T12816] bond0 (unregistering): Released all slaves
[ 1108.362342][T12816] �9: left promiscuous mode
[ 1109.023155][T16196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3067'.
[ 1109.286376][  T117] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1110.047325][  T117] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1110.058418][  T117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1110.084498][  T117] usb 2-1: Product: syz
[ 1110.089711][  T117] usb 2-1: Manufacturer: syz
[ 1110.094555][  T117] usb 2-1: SerialNumber: syz
[ 1110.127421][  T117] usb 2-1: config 0 descriptor??
[ 1110.682271][ T5985] usb 2-1: USB disconnect, device number 24
[ 1111.010539][T16210] serio: Serial port ttyS3
[ 1111.078036][T12816] hsr_slave_0: left promiscuous mode
[ 1111.104956][T12816] hsr_slave_1: left promiscuous mode
[ 1111.255798][T12816] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1111.538365][T12816] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1113.683701][T12816] team0 (unregistering): Port device team_slave_1 removed
[ 1114.611205][T12816] team0 (unregistering): Port device team_slave_0 removed
[ 1116.090658][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.099219][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1118.522738][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3086'.
[ 1118.568765][T16268] serio: Serial port ttyS3
[ 1118.894730][  T117] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1119.174673][  T117] usb 2-1: config 0 has no interfaces?
[ 1119.218467][  T117] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1119.228416][  T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1119.236765][  T117] usb 2-1: SerialNumber: syz
[ 1119.271909][  T117] usb 2-1: config 0 descriptor??
[ 1120.567665][T14848] usb 2-1: USB disconnect, device number 25
[ 1121.058723][T16278] Invalid source name
[ 1122.344063][T16108] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1122.384797][T16108] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1122.410568][T16108] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1122.443834][T16108] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1122.521323][T12816] IPVS: stop unused estimator thread 0...
[ 1122.857806][T16108] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1122.976965][T16108] 8021q: adding VLAN 0 to HW filter on device team0
[ 1123.014730][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1123.021856][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1123.046770][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1123.053968][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1124.235242][T16108] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1124.412514][T16314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3098'.
[ 1126.127234][T16108] veth0_vlan: entered promiscuous mode
[ 1126.294580][T16108] veth1_vlan: entered promiscuous mode
[ 1126.467518][T16108] veth0_macvtap: entered promiscuous mode
[ 1126.612407][T16108] veth1_macvtap: entered promiscuous mode
[ 1126.637182][T16108] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1126.663363][T16108] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1127.048926][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.023750][ T7959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.040093][ T7959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.085332][ T7959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1128.228643][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1128.243765][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1128.311313][T12816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1128.320189][T12816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1130.030618][T16365] serio: Serial port ttyS3
[ 1133.070746][T16391] (syz.4.3121,16391,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1133.078470][T16391] (syz.4.3121,16391,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1133.085889][T16391] (syz.4.3121,16391,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1133.094785][T16391] (syz.4.3121,16391,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1134.603587][T16397] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1134.611183][T16397] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1135.886184][T16397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1135.904164][T16397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1135.913167][T12420] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1135.927904][T12420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1135.937289][T12420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1135.946082][T12420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1135.954494][T12420] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1136.073189][ T5963] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.085580][ T5963] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.112048][ T5963] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1136.130240][ T5963] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1138.042823][ T5829] Bluetooth: hci1: command tx timeout
[ 1138.776888][T16441] Invalid source name
[ 1139.981541][T16457] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.989113][T16457] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1140.132417][ T5829] Bluetooth: hci1: command tx timeout
[ 1140.230981][T16457] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1140.245716][T16457] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1140.587320][ T7958] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.661797][ T7958] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.713903][ T7958] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1140.764321][ T7958] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1141.381758][ T7959] team0: Port device bridge1 removed
[ 1141.426937][ T7959] bond0 (unregistering): (slave bridge2): Releasing backup interface
[ 1141.436161][ T7959] bridge2 (unregistering): left promiscuous mode
[ 1141.544604][ T7959] bond0 (unregistering): Released all slaves
[ 1141.576856][T16415] chnl_net:caif_netlink_parms(): no params data found
[ 1141.744568][ T7959] tipc: Left network mode
[ 1142.155577][T16481] (syz.4.3149,16481,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1142.163356][T16481] (syz.4.3149,16481,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1142.170962][T16481] (syz.4.3149,16481,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1142.179670][T16481] (syz.4.3149,16481,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1142.202010][ T5829] Bluetooth: hci1: command tx timeout
[ 1142.308591][T16415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1142.332812][T16415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1142.352121][T16415] bridge_slave_0: entered allmulticast mode
[ 1142.362148][T16415] bridge_slave_0: entered promiscuous mode
[ 1142.423838][T16415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1142.431098][T16415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1142.454119][T16415] bridge_slave_1: entered allmulticast mode
[ 1142.466080][T16415] bridge_slave_1: entered promiscuous mode
[ 1142.621158][T16415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1142.757316][T16492] Invalid source name
[ 1143.790967][T16415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1144.022552][ T7959] hsr_slave_0: left promiscuous mode
[ 1144.038489][ T7959] hsr_slave_1: left promiscuous mode
[ 1144.282285][ T5829] Bluetooth: hci1: command tx timeout
[ 1144.418144][T16509] (syz.1.3160,16509,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1144.425917][T16509] (syz.1.3160,16509,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1144.433360][T16509] (syz.1.3160,16509,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1144.442126][T16509] (syz.1.3160,16509,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1144.851716][T14848] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1145.716775][T14848] usb 6-1: config 0 has no interfaces?
[ 1145.723565][T14848] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1145.735599][T14848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1145.743786][T14848] usb 6-1: SerialNumber: syz
[ 1145.759676][T14848] usb 6-1: config 0 descriptor??
[ 1147.104437][T14848] usb 6-1: USB disconnect, device number 7
[ 1149.066892][T16558] serio: Serial port ttyS3
[ 1149.187084][T16559] Bluetooth: MGMT ver 1.23
[ 1151.572713][T16415] team0: Port device team_slave_0 added
[ 1151.599275][T16415] team0: Port device team_slave_1 added
[ 1151.696418][T16415] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.704693][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.719151][T16415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1152.798504][T16415] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1152.809745][T16415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.975070][T16415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1153.603942][T16415] hsr_slave_0: entered promiscuous mode
[ 1153.622419][T16415] hsr_slave_1: entered promiscuous mode
[ 1153.642148][T16415] debugfs: 'hsr0' already exists in 'hsr'
[ 1153.653852][T16415] Cannot create hsr debugfs directory
[ 1153.771767][T14844] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1154.367648][T14844] usb 2-1: config 0 has no interfaces?
[ 1154.415671][T14844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1154.463810][T14844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1154.490114][T14844] usb 2-1: SerialNumber: syz
[ 1154.516803][T14844] usb 2-1: config 0 descriptor??
[ 1156.249767][T14844] usb 2-1: USB disconnect, device number 26
[ 1156.782063][T16415] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1156.844352][T16415] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1156.941221][T16415] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1157.070190][T16415] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1157.720018][T16415] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1157.818242][T16415] 8021q: adding VLAN 0 to HW filter on device team0
[ 1157.869485][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1157.876638][ T7799] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1157.959429][T12816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1157.966616][T12816] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1158.845478][T16415] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1158.966998][T16415] veth0_vlan: entered promiscuous mode
[ 1159.042984][T16415] veth1_vlan: entered promiscuous mode
[ 1159.146599][T16415] veth0_macvtap: entered promiscuous mode
[ 1159.220746][T16415] veth1_macvtap: entered promiscuous mode
[ 1159.348575][T16415] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1159.375072][T16415] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1159.751446][T16638] serio: Serial port ttyS3
[ 1160.490204][ T7799] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.499245][ T7799] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.561646][ T7799] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.575359][ T7799] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1160.797046][ T7958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1161.533282][ T7958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1161.672343][ T7958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1161.811932][ T7958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1163.387681][T16672] overlayfs: missing 'lowerdir'
[ 1164.526114][T16658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1164.533716][T16658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.045944][T16658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1165.213563][T16658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1167.653135][ T5963] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.674648][ T5963] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.694547][ T7799] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.709441][ T7799] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.813352][T16752] overlayfs: missing 'lowerdir'
[ 1174.034032][T16767] serio: Serial port ttyS3
[ 1177.057892][T16791] (syz.1.3241,16791,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1177.066131][T16791] (syz.1.3241,16791,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1177.073915][T16791] (syz.1.3241,16791,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1177.083182][T16791] (syz.1.3241,16791,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1177.458635][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.465027][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.740324][T16795] overlayfs: missing 'lowerdir'
[ 1179.394296][T16809] serio: Serial port ttyS3
[ 1182.094588][T16835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1182.103644][T16835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1182.905754][T16828] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1182.913310][T16828] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1183.403458][T16828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1183.595489][T16828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1184.546789][ T1150] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.566616][ T1150] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.585265][ T1150] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.621748][ T1150] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.850270][T16865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3262'.
[ 1185.393041][T16874] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1188.550193][T16907] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3275'.
[ 1189.072910][T16913] (syz.5.3277,16913,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1189.080854][T16913] (syz.5.3277,16913,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1189.088486][T16913] (syz.5.3277,16913,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1189.097520][T16913] (syz.5.3277,16913,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1189.720278][T12420] Bluetooth: hci2: command 0x0406 tx timeout
[ 1190.287367][T16928] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1191.695661][T16938] serio: Serial port ttyS3
[ 1194.647988][T16972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3293'.
[ 1196.915866][T16990] serio: Serial port ttyS3
[ 1198.876242][T17010] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1198.885290][T17010] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1199.736342][T17016] Invalid source name
[ 1201.438125][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3308'.
[ 1202.114222][T17041] serio: Serial port ttyS3
[ 1205.852424][T17078] Invalid source name
[ 1209.602270][T17115] Invalid source name
[ 1211.472942][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'.
[ 1213.896857][T17156] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3347'.
[ 1214.557610][T17174] overlayfs: missing 'lowerdir'
[ 1218.782825][T17201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3359'.
[ 1219.945763][T14432] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1220.003306][T17228] Invalid source name
[ 1220.325307][T14432] usb 3-1: config 0 has no interfaces?
[ 1220.393311][T14432] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1220.413739][T14432] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1220.423836][T14432] usb 3-1: SerialNumber: syz
[ 1220.550231][T12420] Bluetooth: hci0: command 0x0406 tx timeout
[ 1220.806268][T14432] usb 3-1: config 0 descriptor??
[ 1222.414684][T17240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3371'.
[ 1222.431565][T14838] usb 3-1: USB disconnect, device number 19
[ 1222.858604][T17250] serio: Serial port ttyS3
[ 1222.996237][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3375'.
[ 1225.508835][T17274] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3383'.
[ 1226.896346][T17297] serio: Serial port ttyS3
[ 1228.413159][T17312] overlayfs: missing 'workdir'
[ 1230.505858][T17330] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3397'.
[ 1231.635255][T17346] serio: Serial port ttyS3
[ 1233.232611][T14838] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[ 1233.374281][T14838] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1234.244089][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3412'.
[ 1235.604501][T17394] serio: Serial port ttyS3
[ 1236.923100][T17406] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3425'.
[ 1237.134586][T14838] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[ 1237.790436][T14838] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1238.838570][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.850201][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.903314][T17414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3431'.
[ 1240.244339][T17424] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1241.668860][T17424] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1242.112990][T17437] overlayfs: overlapping lowerdir path
[ 1242.181955][T17439] overlayfs: failed to resolve './file0': -2
[ 1243.881429][T14861] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[ 1245.101578][T14861] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1245.425601][T17458] serio: Serial port ttyS3
[ 1245.960459][T14838] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1246.060461][T14844] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1246.144667][T14838] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1246.160416][T14838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1246.179905][T14838] usb 6-1: Product: syz
[ 1246.184296][T14838] usb 6-1: Manufacturer: syz
[ 1246.193772][T14838] usb 6-1: SerialNumber: syz
[ 1246.253077][T14838] usb 6-1: config 0 descriptor??
[ 1246.259023][T14844] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1246.304012][T14844] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1246.340825][T14844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1246.360913][T14844] usb 3-1: Product: syz
[ 1246.370776][T14844] usb 3-1: Manufacturer: syz
[ 1246.381128][T14844] usb 3-1: SerialNumber: syz
[ 1246.496609][T14838] usb 6-1: USB disconnect, device number 8
[ 1246.615459][T14844] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1246.986592][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3443'.
[ 1247.923199][ T5829] Bluetooth: hci2: unexpected event for opcode 0x0c26
[ 1248.810049][T17489] overlayfs: overlapping lowerdir path
[ 1249.004119][T17491] overlayfs: failed to resolve './file0': -2
[ 1249.028341][T14838] usb 3-1: USB disconnect, device number 20
[ 1249.290524][T14838] usblp0: removed
[ 1249.366161][T14844] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[ 1249.990731][T14844] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1250.230027][T14838] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1250.370109][T14838] usb 3-1: device descriptor read/64, error -71
[ 1250.609953][T14838] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1250.673823][T17503] loop5: detected capacity change from 0 to 32768
[ 1250.701020][T17503] btrfs: Deprecated parameter 'usebackuproot'
[ 1250.717828][T17503] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1250.745538][T17503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3456 (17503)
[ 1250.760190][T14838] usb 3-1: device descriptor read/64, error -71
[ 1250.851094][T17503] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1251.002164][T17503] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[ 1251.021744][T17503] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1251.080278][T14838] usb usb3-port1: attempt power cycle
[ 1251.807689][T17505] loop1: detected capacity change from 0 to 40427
[ 1251.816483][T17505] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1251.824439][T17505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1251.920327][T17503] BTRFS info (device loop5): rebuilding free space tree
[ 1252.010382][T14838] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1252.045697][T17503] BTRFS info (device loop5): disabling free space tree
[ 1252.054729][T17505] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1252.055371][T17503] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1252.070203][T14838] usb 3-1: device descriptor read/8, error -71
[ 1252.074309][T17503] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1252.101454][T17505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1252.108561][T17505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1252.136362][T17503] BTRFS info (device loop5): setting nodatasum
[ 1252.143069][T17503] BTRFS info (device loop5): enabling ssd optimizations
[ 1252.150791][T17503] BTRFS info (device loop5): disabling tree log
[ 1252.157275][T17503] BTRFS info (device loop5): turning on flush-on-commit
[ 1252.164422][T17503] BTRFS info (device loop5): enabling disk space caching
[ 1252.171695][T17503] BTRFS info (device loop5): force clearing of disk cache
[ 1252.178983][T17503] BTRFS info (device loop5): trying to use backup root at mount time
[ 1252.339843][T14838] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1252.380399][T14838] usb 3-1: device descriptor read/8, error -71
[ 1252.415214][T13845] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1252.521969][T14838] usb usb3-port1: unable to enumerate USB device
[ 1252.998937][T14838] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 1253.579048][T14838] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1253.602814][T14838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1253.622039][T14838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1253.641728][T14838] usb 3-1: Product: syz
[ 1253.647013][T14838] usb 3-1: Manufacturer: syz
[ 1253.655218][T14838] usb 3-1: SerialNumber: syz
[ 1254.089129][T14838] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1255.086809][T17553] loop4: detected capacity change from 0 to 40427
[ 1255.152772][T17553] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1255.193012][T17553] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1255.238317][T17553] F2FS-fs (loop4): invalid crc value
[ 1256.231433][T14861] usb 3-1: USB disconnect, device number 25
[ 1256.342971][T14861] usblp0: removed
[ 1256.536621][T17578] loop2: detected capacity change from 0 to 2048
[ 1256.545769][T17578] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1256.596308][T17553] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1256.609734][T17582] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1256.653617][T14838] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[ 1256.693521][T17553] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1256.701190][T14838] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1256.727487][T17578] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952
[ 1256.738581][T17553] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1256.755313][T17578] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15)
[ 1256.808924][T17578] Remounting filesystem read-only
[ 1256.834916][T17578] NILFS (loop2): error -5 truncating bmap (ino=15)
[ 1256.899448][T14838] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1257.039227][T14838] usb 2-1: device descriptor read/64, error -71
[ 1257.258735][T16415] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[ 1257.307199][T14838] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1257.509453][T14838] usb 2-1: device descriptor read/64, error -71
[ 1257.619532][T14838] usb usb2-port1: attempt power cycle
[ 1258.065040][T14838] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1258.089864][T14838] usb 2-1: device descriptor read/8, error -71
[ 1258.329089][T14838] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1258.385155][T14838] usb 2-1: device descriptor read/8, error -71
[ 1258.517327][T14838] usb usb2-port1: unable to enumerate USB device
[ 1261.002886][T17629] loop5: detected capacity change from 0 to 32768
[ 1261.041742][T17629] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3491 (17629)
[ 1261.060644][T17622] loop1: detected capacity change from 0 to 32768
[ 1261.132823][T17629] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1261.208902][T17629] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[ 1261.324250][T17632] Cannot find add_set index 65532 as target
[ 1261.724615][ T5829] Bluetooth: hci1: command 0x0406 tx timeout
[ 1262.603043][T17629] BTRFS info (device loop5): enabling ssd optimizations
[ 1262.628647][T17629] BTRFS info (device loop5): turning on async discard
[ 1262.656145][T17629] BTRFS info (device loop5): enabling free space tree
[ 1263.010231][T17654] loop1: detected capacity change from 0 to 65
[ 1263.220399][T17654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3492'.
[ 1264.007821][T13845] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1264.578772][T17665] loop2: detected capacity change from 0 to 4096
[ 1264.590277][T17665] ntfs3: Unknown parameter '����18446744073709551615000000000000000000000x0000000000000007'
[ 1265.055882][T17664] loop1: detected capacity change from 0 to 2048
[ 1265.184212][T17664] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[ 1266.093733][T17676] loop5: detected capacity change from 0 to 512
[ 1266.161654][T17676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1266.205640][T17676] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3495: iget: bad i_size value: 38620345925642
[ 1266.418358][T17676] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3495: couldn't read orphan inode 15 (err -117)
[ 1266.475471][T17676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1267.628322][T17681] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1267.783345][T13845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1269.851073][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3505'.
[ 1272.850421][T17719] loop2: detected capacity change from 0 to 256
[ 1273.999793][T17719] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1274.756367][T17719] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[ 1275.363410][T17719] exFAT-fs (loop2): Filesystem has been set read-only
[ 1275.584059][T17742] serio: Serial port ttyS3
[ 1275.908911][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3518'.
[ 1276.590511][T17756] loop2: detected capacity change from 0 to 128
[ 1276.708238][T17756] EXT4-fs: Ignoring removed nobh option
[ 1277.013654][T17756] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1277.027461][T17756] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1277.082471][T17752] loop4: detected capacity change from 0 to 32768
[ 1277.145152][T16415] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1277.268023][T17752] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1277.493406][T14838] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1277.497195][T17752] XFS (loop4): Ending clean mount
[ 1277.547835][T17752] XFS (loop4): Quotacheck needed: Please wait.
[ 1277.645954][T17752] XFS (loop4): Quotacheck: Done.
[ 1277.668201][T14838] usb 6-1: Using ep0 maxpacket: 32
[ 1277.675916][T14838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1277.871107][T14838] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1277.886745][T14838] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1277.901794][   T30] audit: type=1804 audit(1762129368.153:61): pid=17752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3519" name="/newroot/86/file0/bus" dev="loop4" ino=9291 res=1 errno=0
[ 1277.932628][T14838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.961897][T14838] usb 6-1: config 0 descriptor??
[ 1277.971284][T14838] hub 6-1:0.0: USB hub found
[ 1278.174580][T14838] hub 6-1:0.0: 1 port detected
[ 1278.818525][T14848] hub 6-1:0.0: activate --> -90
[ 1279.480936][T14848] usb 6-1: USB disconnect, device number 9
[ 1280.295085][T16108] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1280.584843][T17803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3530'.
[ 1282.118634][T17821] serio: Serial port ttyS3
[ 1283.666307][T14848] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1284.568070][T14848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1284.579359][T14848] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[ 1284.678903][T14848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.767528][T14848] usb 2-1: config 0 descriptor??
[ 1285.814869][T14848] samsung 0003:0419:0001.0015: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0
[ 1286.584796][T14848] usb 2-1: USB disconnect, device number 31
[ 1287.764768][T17866] serio: Serial port ttyS3
[ 1289.648436][T17880] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3554'.
[ 1289.890225][T17883] smc: net device bond0 applied user defined pnetid SYZ0
[ 1291.084838][T17872] loop5: detected capacity change from 0 to 32768
[ 1291.147887][T17872] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3551 (17872)
[ 1291.206530][T17872] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1291.245512][T17872] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[ 1291.619704][T17901] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1291.765366][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1291.768230][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1292.796594][T17902] loop2: detected capacity change from 0 to 262144
[ 1292.815525][T17902] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3561 (17902)
[ 1292.831783][T17901] block device autoloading is deprecated and will be removed.
[ 1292.845564][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1292.845930][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1292.895648][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1292.904914][T17902] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[ 1292.915924][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[ 1292.924673][T17902] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1292.935813][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1292.955856][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1293.055547][T17872] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1293.213270][T17872] BTRFS error (device loop5): open_ctree failed: -12
[ 1293.270635][T17902] BTRFS info (device loop2): enabling ssd optimizations
[ 1293.278436][T17902] BTRFS info (device loop2): enabling free space tree
[ 1293.509145][T17935] loop1: detected capacity change from 0 to 1024
[ 1293.737676][T14848] IPVS: starting estimator thread 0...
[ 1293.761024][T17935] hfsplus: bad catalog entry type
[ 1293.937061][T17938] IPVS: using max 22 ests per chain, 52800 per kthread
[ 1293.963902][ T7799] hfsplus: b-tree write err: -5, ino 4
[ 1294.185795][T16415] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[ 1296.175552][T17970] tmpfs: Bad value for 'nr_blocks'
[ 1297.201942][T17982] loop1: detected capacity change from 0 to 128
[ 1297.209333][T17982] EXT4-fs: Ignoring removed nobh option
[ 1297.256911][T17982] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1297.298207][T17980] loop5: detected capacity change from 0 to 2048
[ 1297.336463][T17982] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1297.364808][T17980] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1297.374681][T17980] NILFS (loop5): mounting unchecked fs
[ 1297.416515][T14952] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1297.439313][T17980] NILFS (loop5): recovery complete
[ 1297.467979][T17985] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1297.509329][   T30] audit: type=1800 audit(1762129387.785:62): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3579" name="file1" dev="loop5" ino=12 res=0 errno=0
[ 1297.531338][   T30] audit: type=1800 audit(1762129387.785:63): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3579" name="file0" dev="loop5" ino=13 res=0 errno=0
[ 1300.272007][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.278569][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.740615][T18017] loop4: detected capacity change from 0 to 512
[ 1300.747624][T18017] EXT4-fs: Ignoring removed oldalloc option
[ 1300.787405][T18017] EXT4-fs (loop4): 1 truncate cleaned up
[ 1300.801591][T18017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1301.836567][T18007] loop5: detected capacity change from 0 to 32768
[ 1301.968677][T16108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1302.008412][T18007] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1302.291449][T18007] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop5": -EINTR
[ 1302.299814][T18007] XFS (loop5): log mount failed
[ 1302.345497][T18035] loop4: detected capacity change from 0 to 128
[ 1302.610970][T18035] EXT4-fs: Ignoring removed nobh option
[ 1302.721752][T18035] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1302.805822][T18035] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1303.078667][T16108] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1304.139011][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3595'.
[ 1305.599377][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3603'.
[ 1307.080192][T18080] serio: Serial port ttyS3
[ 1308.526985][T18105] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1311.614755][T18125] loop5: detected capacity change from 0 to 1024
[ 1311.739361][T18125] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[ 1311.860504][T18125] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3623: Invalid block bitmap block 0 in block_group 0
[ 1311.880272][T18125] Quota error (device loop5): write_blk: dquota write failed
[ 1311.888767][T18125] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[ 1311.899027][T18125] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3623: Failed to acquire dquot type 0
[ 1311.914494][T18125] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.3623: Freeing blocks not in datazone - block = 0, count = 4096
[ 1311.939353][T18125] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.3623: Invalid inode bitmap blk 0 in block_group 0
[ 1311.955374][T18125] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[ 1311.978731][T12818] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-7
[ 1312.019617][T18125] EXT4-fs (loop5): 1 orphan inode deleted
[ 1312.034342][T18130] serio: Serial port ttyS3
[ 1312.483552][T12818] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:15: Failed to release dquot type 0
[ 1312.514329][T18125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1314.231979][T13845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1314.479100][T18151] binder: 18147:18151 ioctl 0 200000000040 returned -22
[ 1315.536281][T18155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3632'.
[ 1317.424082][T18172] loop4: detected capacity change from 0 to 32768
[ 1317.434670][T18172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3636 (18172)
[ 1317.458303][T18172] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1317.470978][T18172] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 1317.547970][T18181] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1317.573763][T18181] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1317.573781][T18172] BTRFS info (device loop4): turning off barriers
[ 1317.588944][T18172] BTRFS info (device loop4): enabling free space tree
[ 1317.595861][T18172] BTRFS info (device loop4): use zstd compression, level 3
[ 1317.723086][T14848] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1317.910207][T14848] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1317.956011][T14848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1317.966750][T16108] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1317.977830][T14848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1317.993191][T14848] usb 2-1: Product: syz
[ 1318.002661][T14848] usb 2-1: Manufacturer: syz
[ 1318.007316][T14848] usb 2-1: SerialNumber: syz
[ 1318.229403][T14848] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1318.418574][T18215] serio: Serial port ttyS3
[ 1318.931115][T18224] loop4: detected capacity change from 0 to 256
[ 1319.205125][T18224] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65db40a, utbl_chksum : 0x7319d30d)
[ 1320.460076][T14848] usb 2-1: USB disconnect, device number 32
[ 1320.496064][T14848] usblp0: removed
[ 1320.670646][T18244] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1320.703187][T18244] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1321.555947][T14432] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1321.638850][T18241] loop4: detected capacity change from 0 to 32768
[ 1321.654422][T18241] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3652 (18241)
[ 1321.690176][T18241] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1321.709607][T18241] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1321.744535][T14432] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1321.765402][T14432] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1321.791114][T14432] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1321.818621][T14432] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1321.828174][T14432] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.856522][T14432] usb 3-1: Product: syz
[ 1321.868924][T14432] usb 3-1: Manufacturer: syz
[ 1321.880117][T18241] BTRFS info (device loop4): turning off barriers
[ 1321.889407][T14432] usb 3-1: SerialNumber: syz
[ 1321.900959][T18241] BTRFS info (device loop4): enabling free space tree
[ 1321.911476][T14432] usb 3-1: config 0 descriptor??
[ 1321.919135][T18247] loop5: detected capacity change from 0 to 40427
[ 1321.927176][T18258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1321.941695][T18258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1321.955731][T18247] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[ 1321.966070][T14432] usb 3-1: ucan: probing device on interface #0
[ 1321.972466][T18247] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 1321.990661][T18247] F2FS-fs (loop5): invalid crc value
[ 1321.998591][T18247] F2FS-fs (loop5): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1
[ 1322.016069][T16108] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1322.044370][T18247] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117)
[ 1322.137497][T18301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3662'.
[ 1322.808913][T14432] ucan 3-1:0.0 can0: registered device
[ 1323.001210][T14432] ucan 3-1:0.0 can0: firmware string: YJ
[ 1323.257638][T18319] serio: Serial port ttyS3
[ 1323.326918][T14848] usb 3-1: USB disconnect, device number 26
[ 1323.572450][T14838] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1323.715851][T18331] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1323.724864][T18331] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1323.863938][T14838] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1323.891221][T14838] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1324.334746][T18335] loop5: detected capacity change from 0 to 512
[ 1324.572391][T18335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1324.622321][T18335] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.3669: iget: bad i_size value: 38620345925642
[ 1324.679144][T18335] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3669: couldn't read orphan inode 15 (err -117)
[ 1324.695935][T14838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1324.704254][T14838] usb 2-1: Product: syz
[ 1324.708451][T14838] usb 2-1: Manufacturer: syz
[ 1324.713120][T14838] usb 2-1: SerialNumber: syz
[ 1324.876009][T18335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1325.831586][T18339] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1325.894632][T14838] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1326.079254][T13845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1326.918513][T18345] loop4: detected capacity change from 0 to 32768
[ 1326.982406][T18345] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3672 (18345)
[ 1327.038206][T18345] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1327.071770][T18345] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1327.230729][T18345] BTRFS info (device loop4): turning off barriers
[ 1327.333216][T18345] BTRFS info (device loop4): enabling free space tree
[ 1327.342081][T18399] serio: Serial port ttyS3
[ 1327.472925][T14432] usb 2-1: USB disconnect, device number 33
[ 1327.685848][T14432] usblp0: removed
[ 1327.920954][T16108] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[ 1329.209269][T18424] loop2: detected capacity change from 0 to 512
[ 1329.273550][T18424] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1329.409642][T18424] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.3688: iget: bad i_size value: 38620345925642
[ 1329.581176][T18424] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3688: couldn't read orphan inode 15 (err -117)
[ 1329.694092][T18424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1330.159520][T18430] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[ 1330.183138][T18440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1330.207015][T18440] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[ 1330.346340][T18448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3692'.
[ 1330.452214][T16415] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1330.869124][T18456] serio: Serial port ttyS3
[ 1331.875262][T18469] ==================================================================
[ 1331.883398][T18469] BUG: KASAN: global-out-of-bounds in io_uring_show_fdinfo+0x86d/0x1830
[ 1331.891769][T18469] Read of size 2 at addr ffffffff8bbe2c30 by task syz.5.3699/18469
[ 1331.899687][T18469] 
[ 1331.902039][T18469] CPU: 0 UID: 0 PID: 18469 Comm: syz.5.3699 Not tainted syzkaller #0 PREEMPT(full) 
[ 1331.902068][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1331.902081][T18469] Call Trace:
[ 1331.902090][T18469]  <TASK>
[ 1331.902099][T18469]  dump_stack_lvl+0x189/0x250
[ 1331.902134][T18469]  ? rcu_is_watching+0x15/0xb0
[ 1331.902161][T18469]  ? __kasan_check_byte+0x12/0x40
[ 1331.902191][T18469]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1331.902220][T18469]  ? rcu_is_watching+0x15/0xb0
[ 1331.902246][T18469]  ? lock_release+0x4b/0x3e0
[ 1331.902271][T18469]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1331.902303][T18469]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1331.902335][T18469]  print_report+0xca/0x240
[ 1331.902363][T18469]  ? io_uring_show_fdinfo+0x86d/0x1830
[ 1331.902394][T18469]  kasan_report+0x118/0x150
[ 1331.902423][T18469]  ? io_uring_show_fdinfo+0x86d/0x1830
[ 1331.902450][T18469]  io_uring_show_fdinfo+0x86d/0x1830
[ 1331.902479][T18469]  ? do_raw_spin_unlock+0x122/0x240
[ 1331.902510][T18469]  ? __pfx_io_uring_show_fdinfo+0x10/0x10
[ 1331.902534][T18469]  seq_show+0x5bc/0x730
[ 1331.902565][T18469]  traverse+0x1ee/0x580
[ 1331.902600][T18469]  seq_read_iter+0xd08/0xe20
[ 1331.902634][T18469]  ? __asan_memset+0x22/0x50
[ 1331.902658][T18469]  seq_read+0x369/0x480
[ 1331.902690][T18469]  ? __pfx_seq_read+0x10/0x10
[ 1331.902724][T18469]  ? rw_verify_area+0x2a6/0x4d0
[ 1331.902756][T18469]  vfs_readv+0x5aa/0x850
[ 1331.902779][T18469]  ? __pfx_seq_read+0x10/0x10
[ 1331.902809][T18469]  ? __pfx_vfs_readv+0x10/0x10
[ 1331.902838][T18469]  ? __fget_files+0x2a/0x420
[ 1331.902862][T18469]  ? __fget_files+0x3a0/0x420
[ 1331.902883][T18469]  ? __fget_files+0x2a/0x420
[ 1331.902909][T18469]  __x64_sys_preadv+0x197/0x2a0
[ 1331.902932][T18469]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 1331.902955][T18469]  ? do_syscall_64+0xbe/0xfa0
[ 1331.902978][T18469]  do_syscall_64+0xfa/0xfa0
[ 1331.902999][T18469]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1331.903020][T18469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1331.903041][T18469]  ? clear_bhb_loop+0x60/0xb0
[ 1331.903064][T18469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1331.903085][T18469] RIP: 0033:0x7fa08378efc9
[ 1331.903105][T18469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1331.903124][T18469] RSP: 002b:00007fa084573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1331.903148][T18469] RAX: ffffffffffffffda RBX: 00007fa0839e5fa0 RCX: 00007fa08378efc9
[ 1331.903164][T18469] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004
[ 1331.903179][T18469] RBP: 00007fa083811f91 R08: 00000000ffffffff R09: 0000000000000000
[ 1331.903193][T18469] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 1331.903206][T18469] R13: 00007fa0839e6038 R14: 00007fa0839e5fa0 R15: 00007fff48ef3328
[ 1331.903230][T18469]  </TASK>
[ 1331.903238][T18469] 
[ 1332.183079][T18469] The buggy address belongs to the variable:
[ 1332.189061][T18469]  .str.15+0x10/0x20
[ 1332.193035][T18469] 
[ 1332.195359][T18469] The buggy address belongs to the physical page:
[ 1332.201777][T18469] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbbe2
[ 1332.210457][T18469] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff)
[ 1332.218356][T18469] raw: 00fff00000002000 ffffea00002ef888 ffffea00002ef888 0000000000000000
[ 1332.226941][T18469] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 1332.235519][T18469] page dumped because: kasan: bad access detected
[ 1332.241923][T18469] page_owner info is not present (never set?)
[ 1332.247976][T18469] 
[ 1332.250299][T18469] Memory state around the buggy address:
[ 1332.255926][T18469]  ffffffff8bbe2b00: 00 01 f9 f9 00 04 f9 f9 00 00 f9 f9 00 f9 f9 f9
[ 1332.263986][T18469]  ffffffff8bbe2b80: 00 f9 f9 f9 00 f9 f9 f9 00 07 f9 f9 07 f9 f9 f9
[ 1332.272050][T18469] >ffffffff8bbe2c00: 00 05 f9 f9 00 05 f9 f9 00 f9 f9 f9 00 02 f9 f9
[ 1332.280108][T18469]                                      ^
[ 1332.285731][T18469]  ffffffff8bbe2c80: 07 f9 f9 f9 06 f9 f9 f9 00 05 f9 f9 06 f9 f9 f9
[ 1332.293790][T18469]  ffffffff8bbe2d00: 05 f9 f9 f9 06 f9 f9 f9 00 f9 f9 f9 00 f9 f9 f9
[ 1332.301846][T18469] ==================================================================
[ 1332.355768][T18469] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1332.363197][T18469] CPU: 1 UID: 0 PID: 18469 Comm: syz.5.3699 Not tainted syzkaller #0 PREEMPT(full) 
[ 1332.372661][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 1332.382758][T18469] Call Trace:
[ 1332.386038][T18469]  <TASK>
[ 1332.388967][T18469]  dump_stack_lvl+0x99/0x250
[ 1332.393557][T18469]  ? __asan_memcpy+0x40/0x70
[ 1332.398141][T18469]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1332.403361][T18469]  ? __pfx__printk+0x10/0x10
[ 1332.407966][T18469]  vpanic+0x237/0x6d0
[ 1332.411950][T18469]  ? __pfx_vpanic+0x10/0x10
[ 1332.416559][T18469]  ? preempt_schedule+0xae/0xc0
[ 1332.421521][T18469]  ? __pfx_preempt_schedule+0x10/0x10
[ 1332.426896][T18469]  panic+0xb9/0xc0
[ 1332.430625][T18469]  ? __pfx_panic+0x10/0x10
[ 1332.435049][T18469]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1332.440957][T18469]  ? io_uring_show_fdinfo+0x86d/0x1830
[ 1332.446412][T18469]  check_panic_on_warn+0x89/0xb0
[ 1332.451344][T18469]  ? io_uring_show_fdinfo+0x86d/0x1830
[ 1332.456799][T18469]  end_report+0x78/0x160
[ 1332.461165][T18469]  kasan_report+0x129/0x150
[ 1332.465648][T18469]  ? io_uring_show_fdinfo+0x86d/0x1830
[ 1332.471095][T18469]  io_uring_show_fdinfo+0x86d/0x1830
[ 1332.476474][T18469]  ? do_raw_spin_unlock+0x122/0x240
[ 1332.481685][T18469]  ? __pfx_io_uring_show_fdinfo+0x10/0x10
[ 1332.487518][T18469]  seq_show+0x5bc/0x730
[ 1332.491678][T18469]  traverse+0x1ee/0x580
[ 1332.495935][T18469]  seq_read_iter+0xd08/0xe20
[ 1332.500520][T18469]  ? __asan_memset+0x22/0x50
[ 1332.505117][T18469]  seq_read+0x369/0x480
[ 1332.509314][T18469]  ? __pfx_seq_read+0x10/0x10
[ 1332.514023][T18469]  ? rw_verify_area+0x2a6/0x4d0
[ 1332.518884][T18469]  vfs_readv+0x5aa/0x850
[ 1332.523132][T18469]  ? __pfx_seq_read+0x10/0x10
[ 1332.527824][T18469]  ? __pfx_vfs_readv+0x10/0x10
[ 1332.532662][T18469]  ? __fget_files+0x2a/0x420
[ 1332.537343][T18469]  ? __fget_files+0x3a0/0x420
[ 1332.542019][T18469]  ? __fget_files+0x2a/0x420
[ 1332.546615][T18469]  __x64_sys_preadv+0x197/0x2a0
[ 1332.551467][T18469]  ? __pfx___x64_sys_preadv+0x10/0x10
[ 1332.556843][T18469]  ? do_syscall_64+0xbe/0xfa0
[ 1332.561513][T18469]  do_syscall_64+0xfa/0xfa0
[ 1332.566001][T18469]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1332.571188][T18469]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1332.577344][T18469]  ? clear_bhb_loop+0x60/0xb0
[ 1332.582018][T18469]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1332.587906][T18469] RIP: 0033:0x7fa08378efc9
[ 1332.592315][T18469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1332.612187][T18469] RSP: 002b:00007fa084573038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[ 1332.620610][T18469] RAX: ffffffffffffffda RBX: 00007fa0839e5fa0 RCX: 00007fa08378efc9
[ 1332.628605][T18469] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000004
[ 1332.636579][T18469] RBP: 00007fa083811f91 R08: 00000000ffffffff R09: 0000000000000000
[ 1332.644541][T18469] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 1332.652497][T18469] R13: 00007fa0839e6038 R14: 00007fa0839e5fa0 R15: 00007fff48ef3328
[ 1332.660477][T18469]  </TASK>
[ 1332.663673][T18469] Kernel Offset: disabled
[ 1332.667999][T18469] Rebooting in 86400 seconds..