last executing test programs:

4m9.153559056s ago: executing program 3 (id=1550):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="e9addd56a390b54288", 0x9}], 0x1)

4m7.044546838s ago: executing program 3 (id=1561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xa, 0x8}, {0xe}, {0xc, 0x1}}}, 0x24}}, 0x45020)

4m6.878418046s ago: executing program 3 (id=1563):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

4m6.652151326s ago: executing program 3 (id=1565):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)

4m6.400859919s ago: executing program 3 (id=1568):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="6a71666d743d76667376312c686561702c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303032332c646973636172642c6e6f636865636b706f696e745f6d657267652c6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f78617474722c6261636b67726f756e645f67633d6f66662c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c003768c6924517a8cb86a418dbafc026c9dd971f90627ac8bb79a03b1e409b8c4d8c247165507579466481caa4f65c32219c090d30ce08d306fb62e926cac2e7e8bab2d6ea6737092f5810c13aa485b063ac135c1bd342b9eb5f1a748a3d70b24ee293bba0516e780af0997e884d0b743d24498b57e1623090bb2e38fc3eca36e360d5568d5647c2187d4768"], 0x3, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')

4m3.910123758s ago: executing program 3 (id=1590):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)='%'})

3m56.498658223s ago: executing program 32 (id=1520):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = inotify_init1(0x0)
inotify_add_watch(r0, 0x0, 0xa4000021)

3m56.074994867s ago: executing program 33 (id=1528):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x5, 0xd, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x7, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x10006, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x4, 0x4, 0xb, 0x4, 0x9, 0xffffffff, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x2, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1000016, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0xfffffffe, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m53.284088733s ago: executing program 2 (id=1666):
unshare(0x2c020400)
r0 = socket$tipc(0x1e, 0x5, 0x0)
fcntl$getown(r0, 0x9)

3m52.963036153s ago: executing program 2 (id=1669):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

3m52.774821202s ago: executing program 2 (id=1672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={0x30, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "8e280752b43fd6aa4ce79d2357688d0445"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

3m52.35346557s ago: executing program 2 (id=1675):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

3m51.613433137s ago: executing program 2 (id=1681):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

3m49.76911579s ago: executing program 2 (id=1689):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)

3m49.288155694s ago: executing program 34 (id=1689):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)

3m48.799134465s ago: executing program 35 (id=1590):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x44, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000005c0)='%'})

2m27.189168128s ago: executing program 6 (id=2327):
unshare(0x26020480)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000480)=0x1, 0x4)

2m26.756831105s ago: executing program 6 (id=2332):
epoll_create(0xaf2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020)

2m26.393146349s ago: executing program 6 (id=2337):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, r0, 0x0, 0x20}, 0x38)

2m26.138169714s ago: executing program 6 (id=2341):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0))

2m25.855949718s ago: executing program 6 (id=2345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x24, 0x4a, 0x3, 0x70bd2c, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x200440d0}, 0x0)

2m25.488272202s ago: executing program 6 (id=2351):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
sync()

2m10.370593884s ago: executing program 36 (id=2351):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148)
sync()

1m7.581554874s ago: executing program 7 (id=3030):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=v', 0xc}], 0x2)

1m7.03166464s ago: executing program 7 (id=3035):
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0xa, 0x6, '\x00', 0x0, 0x2b, 0x1, @remote, @local}}}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

1m6.690992965s ago: executing program 7 (id=3040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x2, 0x80000000, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c055}, 0x0)

1m6.253227767s ago: executing program 7 (id=3043):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@mode={'mode', 0x3d, 0x9}}, {@nojoliet}, {@nojoliet}]}, 0x13, 0x557, &(0x7f0000000540)="$eJzs3EFv29YdAPBHR049DwsKFGtSNwc23SEDVldSFgdGgQEcTdlsZVEg6SI5DcViF8bsbmg7YM0tl2wD9iWK3fYJdto3KnbcsQNFqU0TS46TtA7S3w+w3xP553v/RwvvgTKeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQonSr2+1FYZiP9m7H86VbZbG74PysvX9/p1jQbwhR8xNWVsKV9tCV1749/fPm17VwuX11Oaw0xUq499PXX33vtc7S7PoFCf0AlqfJHu1/ujgwCl9HP1RS34+dk251J97ORnlV5LvJdhbnVRFvbmx0390ZVPEgH2bVnarOduO0E5K6KOPr6S/j3ubmjThbv1Psjba3kmE2O3jrnX63uxG/vz7OkrIqRu++v16lO/lwmI+2JzHN6SbmVvNG/CCv4zpLduP44PBo/8ZpuTdBvScJ6p8W1O/2+71ev9/buLl581a323nsQPcR4bGI837Tct6e4+wNz2a2/gMAAAAvr2jyGXvz/L88+Rw+CoN8mHXPOy0AAADgOZr85//yP6Pm+T+EcCVEnv8BAADgZfO3U/fYVeNXov/8N5TlcnR/fPsX0XHSxCXHF9rrLjzaYj3oRJemjUyKjc70VZpdjd5og96YRX81LQ5OyyM6QwJrcxII/whrbcza3ba8OzvT9rI6yIfZeloM3+uFJLm0VGe36z9/cviXMBn+30e7l6JwcHi0v/77Px7dneRyv2nl/vF0A8Vj+ygW5PL5N/seHxnxl21Ty00u0bTf1bbf7sPjX2ovXzpDnw/Cm23Mm6ttufrd8a80ffbW541+NfrZZDPdM478Qbjaxly9/nZTvH39hCz6J2Vxcdr4ZLfew1k81b14gixuLLgX4eDwlRDCE2Xxk3lZAJyXg3mr0Dfr/6Prbucp5tpvV/fffI+r+4PwVhvz1tpkYu2snTCjdxfP6LM19v7Fp13d/hWutTHXZsHz1tim3/DqrN92VZ0s/l/O7bca9qPmD3Xh8+M/hdc/++LeO4fHH328//H+J/3+jY3ur7vdm/2wPBnGtFiQKQA/Xln5VbRa/zUqy3z8u97mZi+pd7K4LNIP4jLf2s7ifFRnZbqTjLazeFwWdZEWw6byYb6VVXG1Nx4XZR0PijIeF1V+e/LNL/H0q1+qLPxqVOdpNR5mSZXFaTGqk7SOt/Iqjcd7vx3m1U5WTi6uxlmaD/I0qfNiFHeKvTLN1uO4yrKHAvOtbFTng7ypjuJxme8m5Z34w2K4t5vFW1mVlvm4LtoGZ33lo0FR7iZ1fiGsn/fNBoAXxGdf3PvDR0dH+58+YeV/X7fOctXjvV48j6ECAFOLVmkAAAAAAAAAAAAAAODFcNb9f8+xsjxN4Xx6V1E5tbL0zO10XoBRzK3MJoETY85vTgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAef4fAAD//1ZMmf8=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14a0, &(0x7f00000000c0)=ANY=[], 0x1, 0x0, 0x0)

1m5.449107757s ago: executing program 7 (id=3051):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030328007000000000000a00006a08000300ac"], 0x1c}}, 0x0)

1m4.497349993s ago: executing program 7 (id=3063):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000cc0)={0x40000010})

1m3.737493161s ago: executing program 37 (id=3063):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000cc0)={0x40000010})

3.723751565s ago: executing program 4 (id=3560):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.40831008s ago: executing program 4 (id=3572):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000800000000000000000850000007a0000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.328812925s ago: executing program 0 (id=3574):
unshare(0x22020600)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$setflags(r0, 0x2, 0x0)

2.045546137s ago: executing program 0 (id=3576):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setresuid(0xee01, 0xee01, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, 0x0)

1.911384203s ago: executing program 5 (id=3577):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e25, 0x68, @loopback, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0xffff0001}}], 0x18}, 0x8000)

1.793796837s ago: executing program 8 (id=3578):
r0 = timerfd_create(0x7, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
readv(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000400)=""/141, 0x8d}], 0x2)

1.793623697s ago: executing program 4 (id=3579):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000000000001b0000001800018014000200"], 0x2c}}, 0x0)

1.784708868s ago: executing program 0 (id=3580):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41)

1.679853673s ago: executing program 5 (id=3581):
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x93031, 0xffffffffffffffff, 0x10000000)
mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4005, &(0x7f0000000000)=0x6, 0x9, 0x2)
mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000)

1.61397835s ago: executing program 9 (id=3582):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0xd6, @remote, 0x100}, 0x1c)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)

1.490620784s ago: executing program 0 (id=3583):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='oom_score_adj\x00')
exit(0xffff)
preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/44, 0x2c}], 0x1, 0x5, 0xa)

1.489778881s ago: executing program 8 (id=3584):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0xea, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xb4, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@mcast1]}], {0x4e22, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6eadfc026caa76c1bda522b99b602ecf7e25722717157044602d5e39e0da5774", "7ac925764cdb0c2e072c97fab6347e68e68738a3ef4862aae96386ff2db8a42ee872905a1f4aafb2cae12440097de9b9", "0987b55870f8f9da5c631068d6b2c70c3e2c4aad13f140d03a66187c", {"d959ab8137f728fab4f808948bdda11d", "b179260b9b58204ecd61cd96dc030469"}}}}}}}}, 0x0)

1.462936413s ago: executing program 1 (id=3585):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2060a9, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_blocks=78P'])

1.333972841s ago: executing program 4 (id=3586):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x50, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3f}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844)

1.320549847s ago: executing program 9 (id=3587):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0)

1.27964631s ago: executing program 5 (id=3588):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
setreuid(0xee01, 0xffffffffffffffff)
ioprio_get$uid(0x3, 0xee01)

1.167245344s ago: executing program 8 (id=3589):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x7, 0x0, 0x400000, 0x18, "3eccd8000400000000000010ea0000040100"})

1.109029971s ago: executing program 1 (id=3590):
unshare(0x22020600)
r0 = socket(0x10, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)

1.083466827s ago: executing program 9 (id=3591):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082)
write$P9_RREAD(r0, &(0x7f0000000180)={0xb, 0x75, 0x1}, 0xb)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1.030924025s ago: executing program 5 (id=3592):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

893.008741ms ago: executing program 8 (id=3593):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0)

891.927647ms ago: executing program 1 (id=3605):
r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="a4e47f", 0x3}], 0x1, 0x890, 0x8)
close_range(r0, 0xffffffffffffffff, 0x0)

876.133778ms ago: executing program 4 (id=3594):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0000001800000004", @ANYRES32, @ANYBLOB="86aa4605"], 0x20)

797.920096ms ago: executing program 5 (id=3595):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000002400)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
open(&(0x7f0000000200)='./file1\x00', 0x145142, 0x40)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

735.181367ms ago: executing program 9 (id=3596):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a31000000000900010073797a3000000000090003"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0)

589.834389ms ago: executing program 1 (id=3597):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})

565.090919ms ago: executing program 8 (id=3598):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400000012f142, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x1c3902, 0x0)
sendfile(r0, r1, 0x0, 0x201f00)

465.997911ms ago: executing program 9 (id=3599):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa)

419.453796ms ago: executing program 0 (id=3600):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r1, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x9}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x20f25bcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

380.730327ms ago: executing program 1 (id=3601):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x3000)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)

313.264091ms ago: executing program 5 (id=3602):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x2512, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)

154.580827ms ago: executing program 0 (id=3603):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)

152.92013ms ago: executing program 8 (id=3604):
unshare(0x20040400)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
fadvise64(r0, 0x58ce241d, 0x4000000000000, 0x2)

133.928246ms ago: executing program 9 (id=3606):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]})
r0 = io_uring_setup(0x7fe7, &(0x7f0000000380)={0x0, 0x0, 0x3000})
poll(&(0x7f0000000000)=[{r0, 0x11000}], 0x1, 0x7)

39.89063ms ago: executing program 4 (id=3607):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="9917b1ad3d06a27855d01141e914353e8c663ed1065e32301b8acd1815ed897020c9092fe19ef95bd3c69397d675e3c19835f4c930a9bcbd49c4d872b7679a32e22015d7df39001b2d750fe2484101ef67cb628910e4cde2d8285b9017f55e84b67b72840813a8d080b71200f197d5b65f243ac4ac17d0cba3d08c98ceedf43365fc78aa0f52585ef7d8d525c049e1ae193a110f2dcfce4e6114b15de04b2720d6bd946506004cf479e742dcf73534e370150d97a55b559b5a1bedbc9290cbcac428f960e016fb88cfc21d86da2974ec3f2632992a27a4e5864623e05722eb07d27139b45171ec0cefa44e98f05dd4ff957056265edbacd81a611e4dfacb2b4879517e00c52e84728b1de1193bc88e509860ff143fc216c5100c41667a3ba5b157db616145a6d5ddb592e6b9589cdc93e3e8ef63da3cb4033d9f676cec3dcbb003ae54940e30203e1dc7b939c9c32029ad645b46ee269892e7a786bd36c2f7d962aad3b8d6e9d946adfa984a52cf7d35c5b2f492ab267c1ca948a5c0323d628364a612004c1c7feb2671a984f4dc05330a968e4b8cbe9200f111597c8ecc7ea7681ec281e168edbadc83d98de2b0dda7b187f509e487d63300932f3c76a1b66b4e01dffb07b4c80b5f5273a84b3cb0732b691738bba87517d53cf2b88b481cb325b8b912f54cee9d2546f2fdb96931bda2821eb66554abd4a21a8281c3c461df633a97f5cb3cf924fb324782399df0dc72d18d22b320e605dddf1123417dffc6452835a63fca230fbb002fd9c204b0819c56c4ce398423518b59dc8220bbf0c8b66f54c8009f1170f4c5582bfc703938bdf4d88ffe3eb87f4d2a62d442bb08ba405e11984c919fed63f9e86fd16c00843fa07cd9170919f4d07a12ad38db3f9effcfe1d631a48150e33ce07b3516fefab9587043a908dac8b0ffe361ec8e0fe7531f6d6d858cdabf7600f3a2bd90bce672cba7d366ae4ac6e33813f18340349422230cfe1d8c5757eb139321d44b57159089c68c13d7806cdbebeb42953f6f1670a313278a13076defab61b2016cf636ed37c7e7e1c49a4fb1d6a3d249e189087b37e724b6b24824bce4f77ab6f8a8d2f571d23c5120d75440e8eeda120467b5046b316e39aea9b6c7fa65eb4db56a3fed78c25fcde3afa956dee186fcad0b83f3d50a153f269113f5d9f1ccdff5ba86390c95b3a4ac782cd1121253f728b9b28a3cf59ebd82b0439d2f439e9cd00ca11a3f73515b6256b0faa56063ab761d5860a002c27fede7ce87b6336a4a146f2286ee32bb12e5a8bef04ba8cdb901c602a80eec7e74c947f88f6939ad240db8bc4baf655b941d1fc166fcbd2a64b5691e9145847ebc3ff5f8c07b8265c00176fa4617b6b7249aa801a090d4c65e36cfbbbca28913a892c3a7dd856fdf1f9a7279acfeee9fe51d14f87e4928f07f80145f54afb9a94fce7e76d38b64858327883b8f7141ccac8de649b7eb216d1b6c63f6d4d56dd9f11a2b36a6b3913917c378931e1ba3ec16aec67ef2bab2f1336a6990f7a78ab8acbc81d4ef49dc9bf02e6bae05118c706aeafa332e785ab59140d41ec0d00261ef9dd1735e19954cf1e8042b84185fa8bea4878e22ae53841b9c9752c950e5b21c7e7212b0297f22675cf8baae246e3c46a33e7228633954253add2592dbb7335b24569c834977a53ef23a84f7819deabd2c499422f23e7b682dc7f81b5d47b2ed330b83bb4f6c8f976539a8bf0d1f9b88d534c672d329ba41009f75c928ede7", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f00000001c0)="e4", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4)

0s ago: executing program 1 (id=3608):
unshare(0x400)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)

kernel console output (not intermixed with test programs):

ring recovery information on journal
[  349.244275][T12278] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  349.405372][T12300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2528'.
[  349.447711][T12300] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  349.629046][T12303] loop8: detected capacity change from 0 to 512
[  349.829622][T10035] ocfs2: Unmounting device (7,9) on (node local)
[  349.848311][T12303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.287967][T10028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.511961][ T5840] Bluetooth: hci8: command tx timeout
[  350.880015][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2532'.
[  351.087412][T12342] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2542'.
[  351.772442][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2550'.
[  352.042074][ T5888] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  352.077409][T12367] loop9: detected capacity change from 0 to 16
[  352.104133][T12198] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  352.116976][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2552'.
[  352.156347][T12198] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  352.223209][T12367] erofs (device loop9): mounted with root inode @ nid 36.
[  352.288252][T12198] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  352.301890][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.342298][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.383411][ T5888] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  352.406112][T12198] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  352.441906][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.493594][ T5888] usb 2-1: config 0 descriptor??
[  352.596851][ T5840] Bluetooth: hci8: command tx timeout
[  352.755937][T12198] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.884998][T12198] 8021q: adding VLAN 0 to HW filter on device team0
[  352.903736][T12346] loop8: detected capacity change from 0 to 32768
[  352.915776][ T5888] lg-g15 0003:046D:C222.0022: collection stack underflow
[  352.957241][ T5888] lg-g15 0003:046D:C222.0022: item 0 1 0 12 parsing failed
[  353.004309][T12288] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.011471][T12288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.022428][ T5888] lg-g15 0003:046D:C222.0022: probe with driver lg-g15 failed with error -22
[  353.077290][T12389] loop9: detected capacity change from 0 to 512
[  353.092907][T12346] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  353.180607][ T5888] usb 2-1: USB disconnect, device number 20
[  353.318004][T12355] loop7: detected capacity change from 0 to 40427
[  353.334155][T12355] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  353.368305][T12355] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  353.385211][T12346] XFS (loop8): Ending clean mount
[  353.390310][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.397476][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.438558][T12346] XFS (loop8): Quotacheck needed: Please wait.
[  353.438882][T12355] F2FS-fs (loop7): Image doesn't support compression
[  353.514795][T12355] F2FS-fs (loop7): build fault injection rate: 690
[  353.555137][T12346] XFS (loop8): Quotacheck: Done.
[  353.587977][T12355] F2FS-fs (loop7): build fault injection type: 0x35f7
[  353.647606][T12355] F2FS-fs (loop7): invalid crc value
[  354.058226][T10028] XFS (loop8): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  354.230569][T12355] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  354.256921][T12355] F2FS-fs (loop7): Start checkpoint disabled!
[  354.304396][T12355] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  354.346507][T12355] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  354.401795][T12355] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  354.552228][T12421] xt_HMARK: proto mask must be zero with L3 mode
[  354.624271][T12417] loop9: detected capacity change from 0 to 2048
[  354.910672][T12198] 8021q: adding VLAN 0 to HW filter on device batadv0
[  354.959632][T12417] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  355.062781][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'.
[  356.565706][T12198] veth0_vlan: entered promiscuous mode
[  356.645904][T12198] veth1_vlan: entered promiscuous mode
[  356.735540][T12467] batadv0: entered promiscuous mode
[  356.774387][T12467] macvtap1: entered promiscuous mode
[  356.832614][T12467] macvtap1: entered allmulticast mode
[  356.838023][T12467] batadv0: entered allmulticast mode
[  356.883337][T12467] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  356.942210][T12467] batadv0: left allmulticast mode
[  356.962069][T12467] batadv0: left promiscuous mode
[  357.515683][T12198] veth0_macvtap: entered promiscuous mode
[  357.588008][T12198] veth1_macvtap: entered promiscuous mode
[  357.699542][T12198] batman_adv: batadv0: Interface activated: batadv_slave_0
[  357.790037][T12198] batman_adv: batadv0: Interface activated: batadv_slave_1
[  357.850653][ T1159] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  357.894326][ T1159] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  357.958388][ T1159] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  357.994479][ T1159] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  358.471552][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.522566][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.638336][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  358.656612][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  358.694721][T12520] loop7: detected capacity change from 0 to 512
[  358.744742][T12520] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  358.782690][  T791] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  358.799795][T12520] EXT4-fs (loop7): orphan cleanup on readonly fs
[  358.864432][T12520] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  358.872777][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  358.969194][  T791] usb 9-1: Using ep0 maxpacket: 8
[  358.985031][T12520] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  359.004394][  T791] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  359.034090][T12520] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #13: comm syz.7.2596: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  359.044338][  T791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.061082][    T9] usb 2-1: Using ep0 maxpacket: 8
[  359.091933][  T791] usb 9-1: Product: syz
[  359.110536][    T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  359.141042][  T791] usb 9-1: Manufacturer: syz
[  359.146923][    T9] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  359.149430][T12520] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2596: couldn't read orphan inode 13 (err -117)
[  359.189341][  T791] usb 9-1: SerialNumber: syz
[  359.210900][T12520] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  359.228746][    T9] usb 2-1: config 0 has no interface number 0
[  359.242773][  T791] usb 9-1: config 0 descriptor??
[  359.282565][    T9] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  359.361761][    T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  359.419044][    T9] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  359.429643][T12520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  359.472183][T12520] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended
[  359.496902][  T791] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  359.518689][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  359.527006][T12520] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002]
[  359.540822][  T791] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  359.568503][    T9] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  359.590832][T12520] System zones: 0-2, 18-18, 34-34
[  359.599471][T12520] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  359.603043][    T9] usb 2-1: Product: syz
[  359.631031][  T791] usb 9-1: USB disconnect, device number 8
[  359.722662][    T9] usb 2-1: config 0 descriptor??
[  359.910692][ T9908] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.974998][T12540] overlayfs: workdir and upperdir must be separate subtrees
[  360.395760][    T9] usb 2-1: USB disconnect, device number 21
[  360.788238][T12558] loop5: detected capacity change from 0 to 64
[  361.937559][T12589] loop8: detected capacity change from 0 to 1024
[  362.111470][T12589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  362.140379][T12553] loop7: detected capacity change from 0 to 32768
[  362.232130][T12553] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2606 (12553)
[  362.412103][T12553] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  362.529320][T12553] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  362.574679][T10028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.825875][T12553] BTRFS info (device loop7): rebuilding free space tree
[  362.866406][T12553] BTRFS info (device loop7): disabling free space tree
[  362.898691][T12553] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  362.966854][T12553] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  363.142136][T12553] BTRFS info (device loop7): setting nodatasum
[  363.192003][T12553] BTRFS info (device loop7): setting nodatacow
[  363.233068][T12553] BTRFS info (device loop7): turning off barriers
[  363.270014][T12553] BTRFS info (device loop7): force clearing of disk cache
[  363.532312][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2630'.
[  363.736134][T12644] loop8: detected capacity change from 0 to 512
[  363.762036][ T9908] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  363.829321][T12644] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  363.932120][T12644] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  364.042500][T12644] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  364.050613][T12644] System zones: 0-2, 18-18, 34-35
[  364.107126][T12607] loop5: detected capacity change from 0 to 32768
[  364.154067][T12644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  364.294329][T12607] jfs_lookup: dtSearch returned -5
[  364.604654][ T5832] Bluetooth: hci7: command 0x0406 tx timeout
[  364.604665][ T5835] Bluetooth: hci6: command 0x0406 tx timeout
[  364.690974][T10028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.423504][T12676] loop8: detected capacity change from 0 to 4096
[  365.502117][T12676] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  365.832080][T12676] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[  366.109952][T12695] loop0: detected capacity change from 0 to 128
[  366.203794][T12695] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  366.302268][T12695] hpfs: filesystem error: improperly stopped
[  366.308312][T12695] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  366.403145][T12695] hpfs: You really don't want any checks? You are crazy...
[  366.410982][T12695] hpfs: hpfs_map_sector(): read error
[  366.518195][T12695] hpfs: code page support is disabled
[  366.578857][T12695] hpfs: hpfs_map_4sectors(): unaligned read
[  366.696042][T12695] hpfs: hpfs_map_4sectors(): unaligned read
[  366.742626][T12695] hpfs: filesystem error: unable to find root dir
[  366.876779][T12706] loop8: detected capacity change from 0 to 4096
[  367.032029][ T5888] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  367.247774][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.263937][T12719] loop0: detected capacity change from 0 to 47
[  367.316262][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.414296][ T5888] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  367.481650][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.554847][ T5888] usb 6-1: config 0 descriptor??
[  368.072786][ T5888] hid_parser_main: 91 callbacks suppressed
[  368.072812][ T5888] arvo 0003:1E7D:30D4.0023: unknown main item tag 0x0
[  368.179238][ T5888] arvo 0003:1E7D:30D4.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0
[  368.257769][ T5888] arvo 0003:1E7D:30D4.0023: couldn't init struct arvo_device
[  368.303171][ T5888] arvo 0003:1E7D:30D4.0023: couldn't install keyboard
[  368.370271][T12734] [U] 	
[  368.429088][ T5888] arvo 0003:1E7D:30D4.0023: probe with driver arvo failed with error -71
[  368.492124][ T5888] usb 6-1: USB disconnect, device number 8
[  368.595442][T12733] fido_id[12733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  368.949694][T12745] loop7: detected capacity change from 0 to 512
[  369.061424][T12745] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  369.122107][T12745] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  369.201781][T12752] netlink: 'syz.0.2668': attribute type 1 has an invalid length.
[  369.214591][T12745] EXT4-fs (loop7): 1 truncate cleaned up
[  369.282186][T12752] nbd: error processing sock list
[  369.286555][T12745] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.302010][T12759] netlink: 'syz.9.2671': attribute type 10 has an invalid length.
[  369.485202][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.615141][T12759] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  369.619667][ T9908] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.725090][ T5838] Bluetooth: hci1: command 0x0406 tx timeout
[  370.084226][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'.
[  371.082398][  T908] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  371.271140][  T908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.342015][  T908] usb 6-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  371.376209][  T908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.218013][T12797] loop8: detected capacity change from 0 to 32768
[  372.329778][T12797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2685 (12797)
[  372.460643][  T908] usb 6-1: config 0 descriptor??
[  373.484929][T12797] BTRFS error (device loop8): open_ctree failed: -4
[  373.626294][T12820] loop9: detected capacity change from 0 to 262144
[  373.634995][  T908] input: HID 054c:03d5 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:054C:03D5.0024/input/input8
[  373.686542][T12820] F2FS-fs (loop9): invalid crc value
[  373.829043][T12820] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  373.854205][T12820] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  374.046024][  T908] sony 0003:054C:03D5.0024: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.5-1/input0
[  374.192817][  T908] usb 6-1: USB disconnect, device number 9
[  374.474941][T12855] loop7: detected capacity change from 0 to 256
[  374.509525][T12849] fido_id[12849]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  374.606204][T12855] exfat: Deprecated parameter 'namecase'
[  374.775574][T12855] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  375.397933][   T31] audit: type=1326 audit(1769648848.380:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12879 comm="syz.0.2714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c419aeb9 code=0x0
[  376.951358][ T6001] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  377.179904][ T6001] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  377.221295][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.276516][ T6001] usb 9-1: Product: syz
[  377.304513][ T6001] usb 9-1: Manufacturer: syz
[  377.351733][ T6001] usb 9-1: SerialNumber: syz
[  377.373357][T12895] loop7: detected capacity change from 0 to 32768
[  377.386953][ T6001] usb 9-1: config 0 descriptor??
[  377.409684][ T6001] ch341 9-1:0.0: ch341-uart converter detected
[  377.447486][T12895] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2716 (12895)
[  377.552479][ T5840] Bluetooth: hci8: command tx timeout
[  377.616461][T12895] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  377.662214][T12895] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  377.978843][T12895] BTRFS info (device loop7): enabling ssd optimizations
[  378.054264][ T6001] usb 9-1: failed to send control message: -71
[  378.060602][ T6001] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  378.061650][T12895] BTRFS info (device loop7): turning on async discard
[  378.154109][T12895] BTRFS info (device loop7): enabling free space tree
[  378.172688][ T6001] usb 9-1: USB disconnect, device number 9
[  378.189013][T12969] loop0: detected capacity change from 0 to 1024
[  378.290433][T12969] hfsplus: bad catalog entry type
[  378.385753][ T6001] ch341 9-1:0.0: device disconnected
[  378.431937][T12895] BTRFS info (device loop7): device stats zeroed by syz.7.2716 (12895)
[  378.763034][ T9908] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  378.832303][ T6001] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  379.052748][ T6001] usb 6-1: Using ep0 maxpacket: 8
[  379.101059][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.161685][ T6001] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  379.223887][ T6001] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  379.331785][ T6001] usb 6-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  379.362711][ T6001] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.441092][ T6001] usb 6-1: config 0 descriptor??
[  379.897932][ T6001] nzxt-kraken2 0003:1E71:170E.0025: unknown main item tag 0x0
[  379.973832][ T6001] nzxt-kraken2 0003:1E71:170E.0025: unknown main item tag 0x0
[  379.973872][ T6001] nzxt-kraken2 0003:1E71:170E.0025: unknown main item tag 0x0
[  379.973902][ T6001] nzxt-kraken2 0003:1E71:170E.0025: unknown main item tag 0x0
[  379.973929][ T6001] nzxt-kraken2 0003:1E71:170E.0025: item fetching failed at offset 4/5
[  379.974802][ T6001] nzxt-kraken2 0003:1E71:170E.0025: hid parse failed with -22
[  379.974940][ T6001] nzxt-kraken2 0003:1E71:170E.0025: probe with driver nzxt-kraken2 failed with error -22
[  380.102088][ T6001] usb 6-1: USB disconnect, device number 10
[  380.124913][T13011] netlink: 'syz.7.2750': attribute type 1 has an invalid length.
[  380.124956][T13011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.312441][T13016] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2760'.
[  380.353788][T13016] veth0_macvtap: left promiscuous mode
[  380.971938][ T6007] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  381.162002][ T6007] usb 2-1: Using ep0 maxpacket: 16
[  381.198235][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.231775][ T6007] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  381.276976][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.346047][ T6007] usb 2-1: config 0 descriptor??
[  381.369554][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'.
[  381.428574][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'.
[  381.649719][T13049] rdma_op ffff888053c719f0 conn xmit_rdma 0000000000000000
[  381.689129][T13051] loop8: detected capacity change from 0 to 256
[  381.737598][T13051] exfat: Deprecated parameter 'utf8'
[  381.786606][T13051] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  381.884945][ T6007] hid-picolcd 0003:04D8:C002.0026: No report with id 0x11 found
[  382.044249][ T6007] usb 2-1: USB disconnect, device number 22
[  383.006516][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  383.034802][T13087] loop5: detected capacity change from 0 to 1764
[  383.604023][T13108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2793'.
[  383.897026][ T5834] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  383.917363][T13116] loop7: detected capacity change from 0 to 64
[  384.099460][ T5834] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  384.160179][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.197173][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.273233][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  384.341865][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.351174][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.425526][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  384.454770][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.485310][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.550379][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  384.583307][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.623858][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.669697][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  384.714421][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.746651][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.789788][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  384.838476][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.891300][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  384.930574][T13144] loop8: detected capacity change from 0 to 256
[  384.932089][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  384.963426][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  384.986230][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.035862][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  385.068168][ T5834] usb 10-1: config 64 has 1 interface, different from the descriptor's value: 9
[  385.082181][ T5838] Bluetooth: hci5: command 0x0406 tx timeout
[  385.095326][ T5834] usb 10-1: config 64 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  385.113470][ T5834] usb 10-1: config 64 interface 0 has no altsetting 0
[  385.162470][ T5834] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  385.203810][ T5834] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  385.247690][ T5834] usb 10-1: Product: syz
[  385.266689][T13149] loop5: detected capacity change from 0 to 256
[  385.273138][ T5834] usb 10-1: Manufacturer: syz
[  385.277850][ T5834] usb 10-1: SerialNumber: syz
[  385.347759][T13149] exfat: Deprecated parameter 'utf8'
[  385.383640][ T5834] yurex 10-1:64.0: USB YUREX device now attached to Yurex #0
[  385.401701][T13149] exfat: Deprecated parameter 'utf8'
[  385.407182][T13149] exfat: Deprecated parameter 'utf8'
[  385.571998][T13149] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  385.581831][T13155] IPv6: NLM_F_CREATE should be specified when creating new route
[  385.716058][T13149] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8)
[  385.740712][T13159] exfat: Deprecated parameter 'utf8'
[  385.775475][T13157] loop8: detected capacity change from 0 to 1024
[  385.785294][ T5888] usb 10-1: USB disconnect, device number 3
[  385.790988][T13149] exFAT-fs (loop5): Filesystem has been set read-only
[  385.791692][T13159] exfat: Deprecated parameter 'utf8'
[  385.837391][ T5888] yurex 10-1:64.0: USB YUREX #0 now disconnected
[  385.871092][T13159] exfat: Deprecated parameter 'utf8'
[  386.548113][T13179] loop8: detected capacity change from 0 to 128
[  386.626172][T13179] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  386.656996][T13179] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  386.700866][T13181] loop9: detected capacity change from 0 to 2048
[  387.050054][T10028] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  387.097650][T10289] Alternate GPT is invalid, using primary GPT.
[  387.111885][T10289]  loop9: p1 p2 p3
[  387.119333][T10289] loop9: partition table partially beyond EOD, truncated
[  387.273683][T13169] loop7: detected capacity change from 0 to 32768
[  387.310551][T13181] Alternate GPT is invalid, using primary GPT.
[  387.336696][T13181]  loop9: p1 p2 p3
[  387.367539][T13181] loop9: partition table partially beyond EOD, truncated
[  387.383991][T13169] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  387.706225][T13169] XFS (loop7): Ending clean mount
[  387.829790][T12872] udevd[12872]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  387.844861][T12871] udevd[12871]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  387.874543][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  387.956888][ T9908] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  388.044710][T12872] udevd[12872]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  388.070011][T10397] udevd[10397]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  388.122692][T10289] udevd[10289]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  389.137815][T13212] loop9: detected capacity change from 0 to 32768
[  389.215505][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2852'.
[  389.256461][T13245] loop5: detected capacity change from 0 to 512
[  389.272986][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2852'.
[  389.300643][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2852'.
[  389.313541][T13245] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  389.348928][T13243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2852'.
[  389.384380][T13245] EXT4-fs (loop5): 1 truncate cleaned up
[  389.450884][T13243] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2852'.
[  389.466342][T13245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.743196][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  389.753860][T13252] netlink: 652 bytes leftover after parsing attributes in process `syz.1.2856'.
[  389.802262][T13252] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2856'.
[  389.878320][T13254] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  390.398064][T13232] loop0: detected capacity change from 0 to 32768
[  390.799257][T13270] loop7: detected capacity change from 0 to 4096
[  390.869590][T13270] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  391.085486][T13270] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[  391.229884][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2872'.
[  391.245037][T13282] loop0: detected capacity change from 0 to 512
[  391.293033][T13282] EXT4-fs: Ignoring removed orlov option
[  391.331856][T13282] EXT4-fs: Mount option(s) incompatible with ext2
[  392.453638][T13320] netlink: 'syz.5.2887': attribute type 6 has an invalid length.
[  392.723133][T13329] loop8: detected capacity change from 0 to 256
[  392.767150][T13329] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  392.801225][T13332] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  392.831370][T13332] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  392.873902][T13332] cramfs: wrong magic
[  392.908275][T13329] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff)
[  392.998551][T13329] exFAT-fs (loop8): Filesystem has been set read-only
[  393.058122][T13329] exFAT-fs (loop8): error, invalid access to FAT (entry 0xffffffff)
[  393.703167][T13355] ieee802154 phy0 wpan0: encryption failed: -22
[  394.482491][T13380] loop5: detected capacity change from 0 to 512
[  394.544765][T13380] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  394.626234][T13380] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2916: bg 0: block 104: invalid block bitmap
[  394.660706][T13388] loop0: detected capacity change from 0 to 512
[  394.719305][T13388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  394.749565][T13380] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  394.812483][T13380] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2916: invalid indirect mapped block 1 (level 1)
[  394.848184][T13388] EXT4-fs (loop0): 1 truncate cleaned up
[  394.949267][T13388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.964559][T13380] EXT4-fs (loop5): 1 truncate cleaned up
[  395.062804][T13380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  395.275607][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.459388][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.066946][  T908] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[  396.093982][  T908] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  396.441834][T13432] loop5: detected capacity change from 0 to 128
[  396.469183][T13425] fido_id[13425]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  396.634124][T13432] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  396.712617][T13432] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.918967][T12198] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  397.530128][T13456] loop8: detected capacity change from 0 to 4096
[  399.043904][T13456] loop8: detected capacity change from 0 to 32768
[  399.079662][T13456] XFS (loop8): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  399.108987][T13497] netem: change failed
[  399.369376][T13483] loop5: detected capacity change from 0 to 32768
[  399.426413][T13483] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2962 (13483)
[  399.561707][T13483] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  399.631252][T13483] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  399.744138][T13507] loop0: detected capacity change from 0 to 1024
[  399.842291][ T5888] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  399.916328][T13523] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size.
[  399.972957][T13483] BTRFS info (device loop5): enabling ssd optimizations
[  399.980028][T13483] BTRFS info (device loop5): turning on flush-on-commit
[  400.052194][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  400.072226][T13483] BTRFS info (device loop5): turning on async discard
[  400.079520][T13483] BTRFS info (device loop5): enabling free space tree
[  400.104104][ T3434] hfsplus: b-tree write err: -5, ino 4
[  400.114628][ T5888] usb 10-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  400.134165][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.150610][T13483] BTRFS info (device loop5): force zlib compression, level 3
[  400.191777][T13483] BTRFS info (device loop5): max_inline set to 4096
[  400.206869][ T5888] usb 10-1: config 0 descriptor??
[  400.441820][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2977'.
[  400.530333][T12198] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  400.617687][T13493] loop7: detected capacity change from 0 to 40427
[  400.654843][ T5888] lg-g15 0003:046D:C222.0028: unbalanced collection at end of report description
[  400.657577][T13493] F2FS-fs (loop7): build fault injection type: 0x3b4c63
[  400.715517][T13493] F2FS-fs (loop7): invalid crc value
[  400.745638][ T5888] lg-g15 0003:046D:C222.0028: probe with driver lg-g15 failed with error -22
[  400.867381][  T908] usb 10-1: USB disconnect, device number 4
[  401.210237][T13493] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  401.293081][T13493] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  401.345621][T13545] ieee802154 phy0 wpan0: encryption failed: -126
[  401.685345][ T9908] syz-executor: attempt to access beyond end of device
[  401.685345][ T9908] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  401.762741][T13547] veth3: entered allmulticast mode
[  401.779179][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.779219][ T9908] Tainted: [L]=SOFTLOCKUP
[  401.779228][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  401.779244][ T9908] Call Trace:
[  401.779253][ T9908]  <TASK>
[  401.779264][ T9908]  dump_stack_lvl+0xe8/0x150
[  401.779304][ T9908]  f2fs_handle_critical_error+0x37c/0x540
[  401.779345][ T9908]  f2fs_write_end_io+0xc1d/0xfd0
[  401.779402][ T9908]  __submit_merged_bio+0x256/0x650
[  401.779441][ T9908]  __submit_merged_write_cond+0x269/0x530
[  401.779480][ T9908]  f2fs_write_data_pages+0x2806/0x3360
[  401.779568][ T9908]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  401.779622][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.779651][ T9908]  ? css_rstat_updated+0x23a/0x530
[  401.779720][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.779748][ T9908]  ? rcu_is_watching+0x15/0xb0
[  401.779779][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.779807][ T9908]  ? __lock_acquire+0x6b5/0x2cf0
[  401.779865][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.779893][ T9908]  ? __lock_acquire+0x6b5/0x2cf0
[  401.779942][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.779970][ T9908]  ? do_raw_spin_lock+0x12b/0x2f0
[  401.780008][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780043][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780071][ T9908]  ? do_raw_spin_unlock+0xf5/0x210
[  401.780101][ T9908]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  401.780136][ T9908]  do_writepages+0x32e/0x550
[  401.780178][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780210][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780244][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780272][ T9908]  ? do_raw_spin_unlock+0xf5/0x210
[  401.780309][ T9908]  filemap_fdatawrite+0x1e9/0x2f0
[  401.780351][ T9908]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  401.780441][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780473][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780508][ T9908]  ? do_raw_spin_unlock+0xf5/0x210
[  401.780550][ T9908]  f2fs_sync_dirty_inodes+0x30e/0x810
[  401.780607][ T9908]  f2fs_write_checkpoint+0x9c6/0x2490
[  401.780643][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780670][ T9908]  ? stack_depot_save_flags+0x33/0x810
[  401.780742][ T9908]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  401.780836][ T9908]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  401.780869][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.780898][ T9908]  ? kfree+0x1be/0x650
[  401.780949][ T9908]  kill_f2fs_super+0x308/0x710
[  401.780993][ T9908]  ? __pfx_kill_f2fs_super+0x10/0x10
[  401.781062][ T9908]  deactivate_locked_super+0xbc/0x130
[  401.781099][ T9908]  cleanup_mnt+0x437/0x4d0
[  401.781133][ T9908]  ? _raw_spin_unlock_irq+0x23/0x50
[  401.781179][ T9908]  task_work_run+0x1d9/0x270
[  401.781216][ T9908]  ? __pfx_task_work_run+0x10/0x10
[  401.781248][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.781291][ T9908]  exit_to_user_mode_loop+0xed/0x480
[  401.781326][ T9908]  ? srso_alias_return_thunk+0x5/0xfbef5
[  401.781355][ T9908]  ? rcu_is_watching+0x15/0xb0
[  401.781384][ T9908]  do_syscall_64+0x2b7/0xf80
[  401.781411][ T9908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.781435][ T9908]  ? trace_irq_disable+0x37/0x100
[  401.781468][ T9908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.781493][ T9908] RIP: 0033:0x7f6c1ab9c117
[  401.781515][ T9908] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  401.781536][ T9908] RSP: 002b:00007ffe7b341b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  401.781566][ T9908] RAX: 0000000000000000 RBX: 00007f6c1ac0471f RCX: 00007f6c1ab9c117
[  401.781583][ T9908] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7b341be0
[  401.781599][ T9908] RBP: 00007ffe7b341be0 R08: 00007ffe7b342be0 R09: 00000000ffffffff
[  401.781616][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7b342c70
[  401.781632][ T9908] R13: 00007f6c1ac0471f R14: 0000000000062098 R15: 00007ffe7b342cb0
[  401.781677][ T9908]  </TASK>
[  402.378294][ T9908] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  402.484920][T13528] loop8: detected capacity change from 0 to 32768
[  402.566891][T13528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2976 (13528)
[  402.761792][T13528] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  402.842260][T13528] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  403.172379][T13528] BTRFS info (device loop8): enabling ssd optimizations
[  403.179372][T13528] BTRFS info (device loop8): turning on async discard
[  403.276682][T13528] BTRFS info (device loop8): enabling free space tree
[  403.535688][T10028] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  403.646968][T13591] ieee802154 phy0 wpan0: encryption failed: -126
[  404.074014][T13562] loop0: detected capacity change from 0 to 32768
[  404.157684][T13605] syz.7.2986 (13605): /proc/13604/oom_adj is deprecated, please use /proc/13604/oom_score_adj instead.
[  405.107053][T13625] loop8: detected capacity change from 0 to 256
[  406.439124][T13660] loop8: detected capacity change from 0 to 1024
[  406.479471][T13619] loop9: detected capacity change from 0 to 32768
[  406.559167][T13660] hfsplus: bad catalog entry type
[  406.615211][T13619] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  406.917743][T13619] XFS (loop9): Ending clean mount
[  407.086044][   T31] audit: type=1326 audit(1769648880.080:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  407.135024][T10035] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  407.211668][   T31] audit: type=1326 audit(1769648880.100:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  407.355536][   T31] audit: type=1326 audit(1769648880.140:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  407.495776][T13645] loop0: detected capacity change from 0 to 32768
[  407.502619][   T31] audit: type=1326 audit(1769648880.140:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  407.585580][   T31] audit: type=1326 audit(1769648880.140:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  407.690813][T13690] loop8: detected capacity change from 0 to 1024
[  407.714992][   T31] audit: type=1326 audit(1769648880.150:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  407.893611][T13694] loop7: detected capacity change from 0 to 736
[  407.913742][   T31] audit: type=1326 audit(1769648880.150:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13678 comm="syz.5.3036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff808f9aeb9 code=0x7ffc0000
[  408.055614][ T3434] hfsplus: b-tree write err: -5, ino 4
[  408.446409][T13707] loop5: detected capacity change from 0 to 512
[  408.543881][T13707] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  408.761058][T13707] EXT4-fs (loop5): 1 orphan inode deleted
[  408.821776][T13707] EXT4-fs (loop5): 1 truncate cleaned up
[  408.850346][T13707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  409.262705][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.395825][T13728] loop9: detected capacity change from 0 to 128
[  409.495301][ T5840] Bluetooth: Frame is too long (len 18, expected len 4)
[  409.880789][   T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.064472][   T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.218850][   T31] audit: type=1326 audit(1769648883.210:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.1.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  410.363333][   T31] audit: type=1326 audit(1769648883.210:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.1.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  410.432250][   T31] audit: type=1326 audit(1769648883.250:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13739 comm="syz.1.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  410.482078][ T6001] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  410.553963][   T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.671941][ T6001] usb 9-1: Using ep0 maxpacket: 16
[  410.701497][ T6001] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  410.736808][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  410.759872][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  410.769003][ T6001] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  410.779730][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  410.791401][ T6001] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  410.802957][ T6001] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0
[  410.817059][ T6001] usb 9-1: config 7 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  410.824167][T13757] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3074'.
[  410.830574][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  410.847934][ T6001] usb 9-1: config 7 interface 0 has no altsetting 0
[  410.855222][ T6001] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  410.864698][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  410.872576][ T6001] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.948598][   T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.974885][T13759] loop5: detected capacity change from 0 to 128
[  411.082653][T13759] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  411.159526][T13759] hpfs: filesystem error: improperly stopped
[  411.180163][T13754] lo speed is unknown, defaulting to 1000
[  411.196353][T13759] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  411.271984][T13759] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  411.306533][T13761] loop9: detected capacity change from 0 to 2048
[  411.343509][T13759] hpfs: You really don't want any checks? You are crazy...
[  411.354156][T13761] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  411.369346][ T6001] input: HID 0458:5010 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:7.0/0003:0458:5010.0029/input/input9
[  411.392028][T13759] hpfs: hpfs_map_sector(): read error
[  411.423988][T13759] hpfs: code page support is disabled
[  411.453966][T13764] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  411.462710][T13759] hpfs: hpfs_map_4sectors(): unaligned read
[  411.515937][T13759] hpfs: hpfs_map_4sectors(): unaligned read
[  411.552335][T13759] hpfs: filesystem error: unable to find root dir
[  411.683170][ T6001] kye 0003:0458:5010.0029: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.8-1/input0
[  411.810579][ T6001] usb 9-1: USB disconnect, device number 10
[  412.274381][T13767] fido_id[13767]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  412.337925][   T37] bridge_slave_1: left allmulticast mode
[  412.381698][   T37] bridge_slave_1: left promiscuous mode
[  412.387758][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  412.584416][   T37] bridge_slave_0: left allmulticast mode
[  412.633631][   T37] bridge_slave_0: left promiscuous mode
[  412.650188][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  412.992281][ T5838] Bluetooth: hci7: command tx timeout
[  414.661939][T13824] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  414.942686][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  415.015037][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  415.069794][   T37] bond0 (unregistering): Released all slaves
[  415.076571][ T5838] Bluetooth: hci7: command tx timeout
[  415.108742][   T37] bond1 (unregistering): Released all slaves
[  415.608014][  T791] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  415.816946][  T791] usb 6-1: Using ep0 maxpacket: 8
[  415.852982][  T791] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  415.861269][  T791] usb 6-1: config 179 has no interface number 0
[  415.897978][  T791] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  415.983509][  T791] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  416.051705][  T791] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  416.100910][  T791] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  416.159796][  T791] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  416.204927][  T791] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  416.227322][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.273320][T13834] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  416.457315][T13856] can0: slcan on ttyS3.
[  416.472099][T13754] chnl_net:caif_netlink_parms(): no params data found
[  416.585103][T13834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.650948][T13834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.783651][T13855] can0 (unregistered): slcan off ttyS3.
[  416.930389][  T908] usb 6-1: USB disconnect, device number 11
[  416.930485][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  416.945545][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  417.061865][   T37] hsr_slave_0: left promiscuous mode
[  417.128783][   T37] hsr_slave_1: left promiscuous mode
[  417.154948][ T5838] Bluetooth: hci7: command tx timeout
[  417.162567][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  417.169965][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  417.271192][T13875] loop8: detected capacity change from 0 to 512
[  417.279966][T13844] loop0: detected capacity change from 0 to 32768
[  417.290836][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  417.308419][T13875] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  417.320927][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  417.411888][T13844] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  417.624027][   T37] veth1_macvtap: left promiscuous mode
[  417.631349][   T37] veth0_macvtap: left promiscuous mode
[  417.700057][   T37] veth1_vlan: left promiscuous mode
[  417.728905][   T37] veth0_vlan: left promiscuous mode
[  417.801709][T13844] XFS (loop0): Ending clean mount
[  418.049649][ T5822] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  419.092722][T13920] x_tables: ip6_tables: mh match: only valid for protocol 135
[  419.112605][T13914] loop9: detected capacity change from 0 to 4096
[  419.232260][ T5838] Bluetooth: hci7: command tx timeout
[  419.283373][T13914] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  419.421130][T13914] ntfs3(loop9): Failed to load $Extend (-22).
[  419.442232][T13914] ntfs3(loop9): Failed to initialize $Extend.
[  419.738855][T13926] loop8: detected capacity change from 0 to 4096
[  419.788409][T13926] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[  420.274411][T13932] loop9: detected capacity change from 0 to 4096
[  420.324621][T13932] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  420.733739][T13924] loop5: detected capacity change from 0 to 40427
[  420.780991][T13924] F2FS-fs (loop5): Invalid log blocks per segment (1)
[  420.815712][T13924] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  420.852901][T13924] F2FS-fs (loop5): Image doesn't support compression
[  420.887540][T13924] F2FS-fs (loop5): build fault injection rate: 690
[  420.922665][T13924] F2FS-fs (loop5): build fault injection type: 0x35f7
[  421.012498][T13924] F2FS-fs (loop5): invalid crc value
[  421.362826][T13924] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  421.395641][T13924] F2FS-fs (loop5): Start checkpoint disabled!
[  421.423834][T13924] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  421.447383][T13924] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  421.491894][T13924] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  421.743213][   T50] kworker/u8:3: attempt to access beyond end of device
[  421.743213][   T50] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  421.792732][   T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  421.792771][   T50] Tainted: [L]=SOFTLOCKUP
[  421.792780][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  421.792796][   T50] Workqueue: writeback wb_workfn (flush-7:5)
[  421.792839][   T50] Call Trace:
[  421.792849][   T50]  <TASK>
[  421.792859][   T50]  dump_stack_lvl+0xe8/0x150
[  421.792894][   T50]  f2fs_handle_critical_error+0x37c/0x540
[  421.792931][   T50]  f2fs_write_end_io+0xc1d/0xfd0
[  421.792982][   T50]  __submit_merged_bio+0x256/0x650
[  421.793017][   T50]  __submit_merged_write_cond+0x269/0x530
[  421.793051][   T50]  f2fs_write_data_pages+0x2806/0x3360
[  421.793121][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  421.793169][   T50]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  421.793244][   T50]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  421.793296][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.793402][   T50]  ? __lock_acquire+0x6b5/0x2cf0
[  421.793455][   T50]  ? set_shrinker_bit+0x7c/0x350
[  421.793486][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.793518][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  421.793552][   T50]  do_writepages+0x32e/0x550
[  421.793595][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.793623][   T50]  ? reacquire_held_locks+0x104/0x190
[  421.793647][   T50]  ? writeback_sb_inodes+0x42a/0x1940
[  421.793679][   T50]  __writeback_single_inode+0x133/0x1230
[  421.793706][   T50]  ? do_raw_spin_unlock+0xf5/0x210
[  421.793740][   T50]  writeback_sb_inodes+0x92e/0x1940
[  421.793772][   T50]  ? unwind_next_frame+0xa5/0x23c0
[  421.793821][   T50]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  421.793842][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.793915][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.793944][   T50]  ? rcu_is_watching+0x15/0xb0
[  421.793968][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794007][   T50]  wb_writeback+0x445/0xad0
[  421.794036][   T50]  ? queue_io+0x211/0x450
[  421.794069][   T50]  ? __pfx_wb_writeback+0x10/0x10
[  421.794090][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.794138][   T50]  wb_workfn+0x3f8/0xef0
[  421.794168][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794197][   T50]  ? look_up_lock_class+0x57/0x110
[  421.794244][   T50]  ? __pfx_wb_workfn+0x10/0x10
[  421.794276][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794315][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794342][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.794368][   T50]  ? lock_acquire+0x106/0x330
[  421.794405][   T50]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  421.794437][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794469][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794501][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794536][   T50]  ? process_scheduled_works+0xa0f/0x17a0
[  421.794573][   T50]  ? process_scheduled_works+0xa0f/0x17a0
[  421.794612][   T50]  process_scheduled_works+0xaec/0x17a0
[  421.794684][   T50]  ? __pfx_process_scheduled_works+0x10/0x10
[  421.794719][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.794751][   T50]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  421.794778][   T50]  ? schedule+0x90/0x360
[  421.794804][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794839][   T50]  worker_thread+0xda6/0x1360
[  421.794896][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.794924][   T50]  ? __kthread_parkme+0x19c/0x1f0
[  421.794957][   T50]  kthread+0x726/0x8b0
[  421.794989][   T50]  ? __pfx_worker_thread+0x10/0x10
[  421.795027][   T50]  ? __pfx_kthread+0x10/0x10
[  421.795051][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.795086][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  421.795123][   T50]  ? __pfx_kthread+0x10/0x10
[  421.795153][   T50]  ret_from_fork+0x51b/0xa40
[  421.795195][   T50]  ? __pfx_ret_from_fork+0x10/0x10
[  421.795230][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  421.795258][   T50]  ? __switch_to+0xc82/0x1410
[  421.795303][   T50]  ? __pfx_kthread+0x10/0x10
[  421.795333][   T50]  ret_from_fork_asm+0x1a/0x30
[  421.795391][   T50]  </TASK>
[  421.795401][   T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  422.242764][   T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  422.242803][   T50] Tainted: [L]=SOFTLOCKUP
[  422.242813][   T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  422.242829][   T50] Workqueue: writeback wb_workfn (flush-7:5)
[  422.242874][   T50] Call Trace:
[  422.242883][   T50]  <TASK>
[  422.242893][   T50]  dump_stack_lvl+0xe8/0x150
[  422.242929][   T50]  f2fs_handle_critical_error+0x37c/0x540
[  422.242969][   T50]  f2fs_write_end_io+0xc1d/0xfd0
[  422.243026][   T50]  __submit_merged_bio+0x256/0x650
[  422.243069][   T50]  __submit_merged_write_cond+0x269/0x530
[  422.243108][   T50]  f2fs_write_data_pages+0x2806/0x3360
[  422.243189][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  422.243241][   T50]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  422.243327][   T50]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  422.243384][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.243413][   T50]  ? __lock_acquire+0x6b5/0x2cf0
[  422.243470][   T50]  ? set_shrinker_bit+0x7c/0x350
[  422.243501][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.243534][   T50]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  422.243575][   T50]  do_writepages+0x32e/0x550
[  422.243620][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.243648][   T50]  ? reacquire_held_locks+0x104/0x190
[  422.243671][   T50]  ? writeback_sb_inodes+0x42a/0x1940
[  422.243704][   T50]  __writeback_single_inode+0x133/0x1230
[  422.243732][   T50]  ? do_raw_spin_unlock+0xf5/0x210
[  422.243768][   T50]  writeback_sb_inodes+0x92e/0x1940
[  422.243801][   T50]  ? unwind_next_frame+0xa5/0x23c0
[  422.243854][   T50]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  422.243875][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  422.243956][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.243983][   T50]  ? rcu_is_watching+0x15/0xb0
[  422.244006][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244046][   T50]  wb_writeback+0x445/0xad0
[  422.244076][   T50]  ? queue_io+0x211/0x450
[  422.244110][   T50]  ? __pfx_wb_writeback+0x10/0x10
[  422.244130][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  422.244182][   T50]  wb_workfn+0x3f8/0xef0
[  422.244210][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244236][   T50]  ? look_up_lock_class+0x57/0x110
[  422.244285][   T50]  ? __pfx_wb_workfn+0x10/0x10
[  422.244315][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244348][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244374][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  422.244398][   T50]  ? lock_acquire+0x106/0x330
[  422.244432][   T50]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  422.244465][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244497][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244528][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244571][   T50]  ? process_scheduled_works+0xa0f/0x17a0
[  422.244607][   T50]  ? process_scheduled_works+0xa0f/0x17a0
[  422.244647][   T50]  process_scheduled_works+0xaec/0x17a0
[  422.244728][   T50]  ? __pfx_process_scheduled_works+0x10/0x10
[  422.244763][   T50]  ? do_raw_spin_lock+0x12b/0x2f0
[  422.244797][   T50]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  422.244823][   T50]  ? schedule+0x90/0x360
[  422.244852][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244889][   T50]  worker_thread+0xda6/0x1360
[  422.244950][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.244979][   T50]  ? __kthread_parkme+0x19c/0x1f0
[  422.245016][   T50]  kthread+0x726/0x8b0
[  422.245050][   T50]  ? __pfx_worker_thread+0x10/0x10
[  422.245089][   T50]  ? __pfx_kthread+0x10/0x10
[  422.245114][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.245149][   T50]  ? _raw_spin_unlock_irq+0x23/0x50
[  422.245188][   T50]  ? __pfx_kthread+0x10/0x10
[  422.245218][   T50]  ret_from_fork+0x51b/0xa40
[  422.245262][   T50]  ? __pfx_ret_from_fork+0x10/0x10
[  422.245298][   T50]  ? srso_alias_return_thunk+0x5/0xfbef5
[  422.245325][   T50]  ? __switch_to+0xc82/0x1410
[  422.245367][   T50]  ? __pfx_kthread+0x10/0x10
[  422.245398][   T50]  ret_from_fork_asm+0x1a/0x30
[  422.245458][   T50]  </TASK>
[  422.245468][   T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  422.737633][   T37] team0 (unregistering): Port device team_slave_1 removed
[  422.781817][T13956] loop9: detected capacity change from 0 to 1024
[  422.887219][T13956] hfsplus: bad catalog entry type
[  423.015031][   T50] hfsplus: b-tree write err: -5, ino 4
[  423.043415][   T37] team0 (unregistering): Port device team_slave_0 removed
[  423.105965][  T908] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  423.304579][  T908] usb 9-1: Using ep0 maxpacket: 32
[  423.323753][  T908] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.355488][  T908] usb 9-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  423.411390][  T908] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  423.481724][  T908] usb 9-1: config 0 interface 0 has no altsetting 0
[  423.488388][  T908] usb 9-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00
[  423.531208][  T908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.567671][  T908] usb 9-1: config 0 descriptor??
[  424.034094][  T908] lenovo 0003:17EF:61AE.002A: unknown main item tag 0x0
[  424.071789][  T908] lenovo 0003:17EF:61AE.002A: unknown main item tag 0x0
[  424.078800][  T908] lenovo 0003:17EF:61AE.002A: unknown main item tag 0x0
[  424.126610][  T908] lenovo 0003:17EF:61AE.002A: unknown main item tag 0x0
[  424.151697][  T908] lenovo 0003:17EF:61AE.002A: unknown main item tag 0x0
[  424.179852][  T908] lenovo 0003:17EF:61AE.002A: hidraw0: USB HID v1.6c Device [HID 17ef:61ae] on usb-dummy_hcd.8-1/input0
[  424.269466][  T908] usb 9-1: USB disconnect, device number 11
[  424.397323][T13971] fido_id[13971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  424.665702][T13964] loop9: detected capacity change from 0 to 32768
[  424.734294][T13964] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  424.972744][T13964] XFS (loop9): Ending clean mount
[  425.017488][T13964] XFS (loop9): Quotacheck needed: Please wait.
[  425.139837][T13964] XFS (loop9): Quotacheck: Done.
[  425.210659][T13970] loop5: detected capacity change from 0 to 32768
[  425.268248][T10035] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  425.612669][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3136'.
[  425.639147][T13981] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3155'.
[  425.692073][T13982] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3155'.
[  425.859174][   T31] kauditd_printk_skb: 5 callbacks suppressed
[  425.859194][   T31] audit: type=1326 audit(1769648898.850:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  425.914231][   T31] audit: type=1326 audit(1769648898.900:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  426.129154][   T31] audit: type=1326 audit(1769648898.900:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  426.238971][T13754] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.278144][   T31] audit: type=1326 audit(1769648898.900:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  426.304579][T13754] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.351305][T13754] bridge_slave_0: entered allmulticast mode
[  426.419514][   T31] audit: type=1326 audit(1769648898.900:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13987 comm="syz.1.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d3b9aeb9 code=0x7ffc0000
[  426.464244][T13754] bridge_slave_0: entered promiscuous mode
[  426.506196][T13754] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.561889][T13754] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.582059][T13994] loop5: detected capacity change from 0 to 8192
[  426.607458][T13754] bridge_slave_1: entered allmulticast mode
[  426.658828][T13754] bridge_slave_1: entered promiscuous mode
[  426.933399][T13754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.004112][T13754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.290003][T14024] loop8: detected capacity change from 0 to 16
[  427.345281][T14024] erofs (device loop8): mounted with root inode @ nid 36.
[  427.366172][T13754] team0: Port device team_slave_0 added
[  427.436730][   T31] audit: type=1800 audit(1769648900.430:1397): pid=14024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3171" name="file1" dev="loop8" ino=86 res=0 errno=0
[  427.444826][T13754] team0: Port device team_slave_1 added
[  427.866007][T14038] openvswitch: netlink: Duplicate or invalid key (type 0).
[  427.933554][T14038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  428.002524][T13754] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.009563][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.168097][T13754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.261312][T13754] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.311697][T13754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  428.478666][T13754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.575829][T14057] netlink: 'syz.9.3183': attribute type 9 has an invalid length.
[  428.782316][T14059] loop8: detected capacity change from 0 to 512
[  428.799156][T14061] netlink: 'syz.5.3185': attribute type 1 has an invalid length.
[  428.854443][T14061] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3185'.
[  428.872469][T14059] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  428.898735][T13754] hsr_slave_0: entered promiscuous mode
[  428.907854][T14023] loop0: detected capacity change from 0 to 32768
[  428.916540][T13754] hsr_slave_1: entered promiscuous mode
[  428.940711][T13754] debugfs: 'hsr0' already exists in 'hsr'
[  428.957928][T14059] EXT4-fs (loop8): 1 orphan inode deleted
[  428.962221][T13754] Cannot create hsr debugfs directory
[  429.011715][T14059] EXT4-fs (loop8): 1 truncate cleaned up
[  429.072693][T14023] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  429.103901][T14059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.177132][T14023] JBD2: Ignoring recovery information on journal
[  429.332972][T14023] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  429.454455][T10028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.489071][T14023] (syz.0.3169,14023,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  429.567999][T14023] (syz.0.3169,14023,1):ocfs2_group_add:503 ERROR: Can't read the group descriptor # 2097152 from the device.
[  430.009387][ T5822] ocfs2: Unmounting device (7,0) on (node local)
[  430.156189][T13754] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  430.213276][T14098] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  430.711876][T13754] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.135429][T13754] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.152659][  T908] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  431.218788][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3207'.
[  431.321717][  T908] usb 10-1: Using ep0 maxpacket: 8
[  431.391912][  T908] usb 10-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00
[  431.414193][  T908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.506352][T13754] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  431.512011][  T908] usb 10-1: config 0 descriptor??
[  432.012673][  T908] magicmouse 0003:05AC:0324.002B: hidraw0: USB HID v0.05 Device [HID 05ac:0324] on usb-dummy_hcd.9-1/input0
[  432.170779][T13754] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  432.226021][T13754] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  432.252156][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3216'.
[  432.285546][ T5888] usb 10-1: USB disconnect, device number 5
[  432.312244][T13754] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  432.405898][T13754] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  432.419014][T14150] loop0: detected capacity change from 0 to 256
[  432.470131][T14147] fido_id[14147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  432.538076][T14150] FAT-fs (loop0): Directory bread(block 64) failed
[  432.584291][T14150] FAT-fs (loop0): Directory bread(block 65) failed
[  432.591951][T14150] FAT-fs (loop0): Directory bread(block 66) failed
[  432.598572][T14150] FAT-fs (loop0): Directory bread(block 67) failed
[  432.692501][T14150] FAT-fs (loop0): Directory bread(block 68) failed
[  432.745791][T14150] FAT-fs (loop0): Directory bread(block 69) failed
[  432.812820][T14150] FAT-fs (loop0): Directory bread(block 70) failed
[  432.879760][T14150] FAT-fs (loop0): Directory bread(block 71) failed
[  432.962915][T14150] FAT-fs (loop0): Directory bread(block 72) failed
[  432.969711][T14150] FAT-fs (loop0): Directory bread(block 73) failed
[  433.142895][T13754] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.248105][T13754] 8021q: adding VLAN 0 to HW filter on device team0
[  433.304924][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.312131][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.397272][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state
[  433.404504][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state
[  433.491693][T14169] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  433.557443][T14169] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  433.642232][T14169] bridge_slave_1: invalid flags given to default FDB implementation
[  433.724903][T14145] loop8: detected capacity change from 0 to 32768
[  433.798183][T14145] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3215 (14145)
[  433.903547][T14145] BTRFS info (device loop8): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  433.996324][T14145] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm
[  434.228107][T14195] loop0: detected capacity change from 0 to 256
[  434.252933][T14195] exfat: Deprecated parameter 'namecase'
[  434.412950][T14195] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x75e7409e, utbl_chksum : 0xe619d30d)
[  434.504748][T14145] BTRFS info (device loop8): enabling ssd optimizations
[  434.528375][T14145] BTRFS info (device loop8): turning on async discard
[  434.550498][T14206] netlink: 'syz.9.3229': attribute type 2 has an invalid length.
[  434.600503][T14145] BTRFS info (device loop8): enabling free space tree
[  434.625337][T14210] loop5: detected capacity change from 0 to 64
[  434.838462][T13754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.108982][T10028] BTRFS info (device loop8): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  435.531919][  T791] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  435.743392][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.777580][  T791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  435.850264][  T791] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  435.901837][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.977538][  T791] usb 6-1: config 0 descriptor??
[  436.417397][T13754] veth0_vlan: entered promiscuous mode
[  436.444164][T14248] loop9: detected capacity change from 0 to 4096
[  436.445324][  T791] steelseries 0003:1038:1410.002C: missing HID_OUTPUT_REPORT 0
[  436.488374][T13754] veth1_vlan: entered promiscuous mode
[  436.746062][    T9] usb 6-1: USB disconnect, device number 12
[  436.765346][T13754] veth0_macvtap: entered promiscuous mode
[  436.860223][T13754] veth1_macvtap: entered promiscuous mode
[  436.902006][T14261] tmpfs: Cannot enable quota on remount
[  436.994698][T13754] batman_adv: batadv0: Interface activated: batadv_slave_0
[  437.069281][T13754] batman_adv: batadv0: Interface activated: batadv_slave_1
[  437.133596][T12288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  437.162865][T12288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  437.199240][T14264] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  437.224703][T14268] loop8: detected capacity change from 0 to 16
[  437.263966][T12288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  437.311970][T12288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  437.361803][T14268] erofs (device loop8): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  437.451621][T14268] erofs (device loop8): mounted with root inode @ nid 36.
[  437.679739][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.696130][T14249] loop0: detected capacity change from 0 to 32768
[  437.746102][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.761727][T14249] (syz.0.3245,14249,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  437.831701][ T5888] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  437.868626][T14249] (syz.0.3245,14249,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  437.936265][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.964780][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.004193][ T5888] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  438.024343][ T5888] usb 10-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  438.077469][T14249] JBD2: Ignoring recovery information on journal
[  438.091604][ T5888] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  438.182968][T14249] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  438.190572][ T5888] usb 10-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  438.262567][ T5888] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  438.330787][ T5888] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  438.385633][ T5888] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  438.423450][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  438.461765][ T5888] usb 10-1: Product: syz
[  438.466141][ T5888] usb 10-1: Manufacturer: syz
[  438.507548][T14272] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  438.526511][ T5888] cdc_wdm 10-1:1.0: skipping garbage
[  438.539665][ T5888] cdc_wdm 10-1:1.0: skipping garbage
[  438.545440][ T6007] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  438.572374][T14293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.576179][ T5888] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  438.618019][ T5888] cdc_wdm 10-1:1.0: Unknown control protocol
[  438.639501][ T5822] ocfs2: Unmounting device (7,0) on (node local)
[  438.714774][ T6007] usb 9-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  438.754045][ T6007] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.806952][ T6007] usb 9-1: config 0 descriptor??
[  438.874312][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.881226][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.889307][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.896084][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.902480][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.909193][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.917352][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.924058][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.930866][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.937564][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.944455][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.951230][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.960133][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.966937][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.976040][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.982843][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  438.990844][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  438.997538][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  439.004911][    C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71
[  439.011598][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes
[  439.019357][    C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  439.063879][T14287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.081828][  T791] usb 10-1: USB disconnect, device number 6
[  439.122335][T14287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.143769][ T5838] Bluetooth: hci1: Malformed LE Event: 0x0d
[  439.184625][ T6007] usb 9-1: string descriptor 0 read error: -71
[  439.198327][ T6007] usb-storage 9-1:0.0: USB Mass Storage device detected
[  439.234555][ T6007] usb-storage 9-1:0.0: Quirks match for vid 05ab pid 0060: 2
[  439.334755][ T6007] usb 9-1: USB disconnect, device number 12
[  439.503208][   T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  439.682393][   T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  439.721777][   T24] usb 5-1: config 0 has no interface number 0
[  439.788368][   T24] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  439.835639][T14316] Bluetooth: MGMT ver 1.23
[  439.848195][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.890286][   T24] usb 5-1: config 0 descriptor??
[  439.945907][   T24] usb 5-1: selecting invalid altsetting 1
[  439.996500][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[  440.051005][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  440.086566][T14326] netlink: 'syz.0.3275': attribute type 15 has an invalid length.
[  440.323818][   T24] DVB: Unable to find symbol cx22700_attach()
[  440.472693][   T24] DVB: Unable to find symbol tda10046_attach()
[  440.492235][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  440.541972][   T24] usb 5-1: USB disconnect, device number 6
[  440.784870][T14339] loop9: detected capacity change from 0 to 1024
[  440.843332][T14341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3281'.
[  440.913326][T14339] hfsplus: bad catalog entry type
[  441.118433][ T1159] hfsplus: b-tree write err: -5, ino 4
[  441.195911][T14349] loop8: detected capacity change from 0 to 1024
[  441.362303][   T13] hfsplus: b-tree write err: -5, ino 4
[  441.388248][T14353] loop0: detected capacity change from 0 to 2048
[  441.468659][T14353] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  441.574937][T14363] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  441.758179][T14366] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 2621
[  441.820275][T14368] Invalid source name
[  442.183148][T14378] loop8: detected capacity change from 0 to 1024
[  442.230811][T14378] EXT4-fs: Ignoring removed bh option
[  442.252096][T14378] EXT4-fs: inline encryption not supported
[  442.292792][T14378] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  442.345678][T14378] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  442.467184][T14378] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 2: comm syz.8.3298: lblock 2 mapped to illegal pblock 2 (length 1)
[  442.514527][T14378] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  442.565916][T14378] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 48: comm syz.8.3298: lblock 0 mapped to illegal pblock 48 (length 1)
[  442.638057][T14378] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  442.691924][T14378] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.3298: Failed to acquire dquot type 0
[  442.725268][T14378] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  442.767151][T14378] EXT4-fs error (device loop8): ext4_evict_inode:253: inode #11: comm syz.8.3298: mark_inode_dirty error
[  442.811521][T14378] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -117)
[  442.837982][T14378] EXT4-fs (loop8): 1 orphan inode deleted
[  442.880061][   T12] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  442.913581][T14378] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.971087][   T12] Quota error (device loop8): remove_tree: Can't read quota data block 1
[  443.027048][   T12] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0
[  443.054722][T14378] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #3: block 1: comm syz.8.3298: lblock 1 mapped to illegal pblock 1 (length 1)
[  443.175147][T14378] Quota error (device loop8): find_next_id: Can't read quota tree block 1
[  443.380808][T10028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.439251][T10028] EXT4-fs error (device loop8): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0
[  443.501079][T10028] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6298: Corrupt filesystem
[  443.531954][T10028] EXT4-fs error (device loop8): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error
[  444.327425][T14431] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  444.352827][T14428] tipc: Enabled bearer <udp:syz2>, priority 10
[  444.381789][T14431] ALSA: mixer_oss: invalid index 1374389
[  444.439244][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  444.443379][T14407] loop9: detected capacity change from 0 to 32768
[  444.548809][T14407] 
[  444.548809][T14407]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.548809][T14407] 
[  444.854908][T10035] 
[  444.854908][T10035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.854908][T10035] 
[  444.906131][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3327'.
[  444.926692][T10035] 
[  444.926692][T10035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  444.926692][T10035] 
[  445.149608][T14417] loop8: detected capacity change from 0 to 32768
[  445.211777][T14417] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3314 (14417)
[  445.269151][T14451] loop5: detected capacity change from 0 to 1024
[  445.302694][T14451] EXT4-fs: Ignoring removed orlov option
[  445.392098][T14417] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  445.463650][T14451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  445.496766][T14417] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  445.634928][T14459] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3333'.
[  445.814911][T14417] BTRFS info (device loop8): enabling ssd optimizations
[  445.881732][T14417] BTRFS info (device loop8): turning on flush-on-commit
[  445.888726][T14417] BTRFS info (device loop8): turning on async discard
[  446.011356][T14417] BTRFS info (device loop8): enabling free space tree
[  446.045984][T14417] BTRFS info (device loop8): force zlib compression, level 3
[  446.048174][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.091676][T14417] BTRFS info (device loop8): max_inline set to 4096
[  446.341760][    T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  446.485598][T14496] loop5: detected capacity change from 0 to 512
[  446.518138][T14417] BTRFS info (device loop8): balance: start -d -m
[  446.555819][T14417] BTRFS info (device loop8): balance: canceled
[  446.573757][    T9] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  446.584389][    T9] usb 10-1: config 0 interface 0 has no altsetting 0
[  446.606996][    T9] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  446.617071][T14496] EXT4-fs (loop5): 1 truncate cleaned up
[  446.641869][    T9] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  446.681753][    T9] usb 10-1: Product: syz
[  446.686035][    T9] usb 10-1: Manufacturer: syz
[  446.690710][    T9] usb 10-1: SerialNumber: syz
[  446.723411][T14496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  446.783068][    T9] usb 10-1: config 0 descriptor??
[  446.817389][    T9] usb 10-1: selecting invalid altsetting 0
[  446.868996][   T31] audit: type=1800 audit(1769648919.860:1398): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3338" name="file0" dev="loop5" ino=13 res=0 errno=0
[  446.876234][T14496] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3338: bg 0: block 465: padding at end of block bitmap is not set
[  446.942364][T10028] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  447.003115][T14496] EXT4-fs (loop5): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28
[  447.072949][T14496] EXT4-fs (loop5): This should not happen!! Data will be lost
[  447.072949][T14496] 
[  447.104145][T14496] EXT4-fs (loop5): Total free blocks count 0
[  447.122396][    T9] usb 10-1: USB disconnect, device number 7
[  447.134538][T14496] EXT4-fs (loop5): Free/Dirty block details
[  447.180225][T14496] EXT4-fs (loop5): free_blocks=0
[  447.214874][T14496] EXT4-fs (loop5): dirty_blocks=9
[  447.256748][T14496] EXT4-fs (loop5): Block reservation details
[  447.298410][T14496] EXT4-fs (loop5): i_reserved_data_blocks=9
[  447.778028][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.886949][T14542] loop8: detected capacity change from 0 to 32768
[  449.935654][T14572] vivid-000: disconnect
[  449.993980][T14568] vivid-000: reconnect
[  450.503088][T14556] loop9: detected capacity change from 0 to 32768
[  450.603028][T14556] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  450.980886][T14556] XFS (loop9): Ending clean mount
[  451.085328][T14556] XFS (loop9): Quotacheck needed: Please wait.
[  451.195327][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  451.248320][T14556] XFS (loop9): Quotacheck: Done.
[  451.467997][ T5888] usb 2-1: config 118 interface 0 has no altsetting 0
[  451.509134][ T5888] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  451.518551][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.535177][T10035] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  451.545338][ T5888] usb 2-1: Product: syz
[  451.549717][ T5888] usb 2-1: Manufacturer: syz
[  451.569629][ T5888] usb 2-1: SerialNumber: syz
[  451.855585][ T5888] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state.
[  451.932407][ T5888] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  451.979899][ T5888] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e)
[  452.037642][ T5888] usb 2-1: media controller created
[  452.105681][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  452.458596][ T5888] DVB: Unable to find symbol mt352_attach()
[  452.473997][ T5888] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e'
[  452.536175][ T5888] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  452.609659][ T5888] dvb-usb: schedule remote query interval to 100 msecs.
[  452.655414][ T5888] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected.
[  452.934610][   T24] m920x_read = error: -71
[  452.939437][   T24] dvb-usb: error while querying for an remote control event.
[  452.947317][ T5888] dvb_usb_m920x 2-1:118.0: probe with driver dvb_usb_m920x failed with error -71
[  453.011042][ T5888] usb 2-1: USB disconnect, device number 23
[  453.114798][  T908] m920x_read = error: -19
[  453.135813][  T908] dvb-usb: error while querying for an remote control event.
[  453.152772][T14652] loop9: detected capacity change from 0 to 128
[  453.247412][T14652] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  453.282563][ T6007] m920x_read = error: -19
[  453.286952][ T6007] dvb-usb: error while querying for an remote control event.
[  453.349944][T14652] ext4 filesystem being mounted at /291/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  453.417677][T14622] loop5: detected capacity change from 0 to 32768
[  453.452954][ T6007] m920x_read = error: -19
[  453.473601][ T6007] dvb-usb: error while querying for an remote control event.
[  453.526326][T14622] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  453.611701][ T6007] m920x_read = error: -19
[  453.617725][ T6007] dvb-usb: error while querying for an remote control event.
[  453.678770][T10035] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  453.777925][T14622] XFS (loop5): Ending clean mount
[  453.806495][ T5888] m920x_read = error: -19
[  453.810970][ T5888] dvb-usb: error while querying for an remote control event.
[  453.845221][T14622] XFS (loop5): Quotacheck needed: Please wait.
[  453.986881][T14622] XFS (loop5): Quotacheck: Done.
[  454.004504][ T5888] m920x_read = error: -19
[  454.008897][ T5888] dvb-usb: error while querying for an remote control event.
[  454.251693][  T908] m920x_read = error: -19
[  454.256073][  T908] dvb-usb: error while querying for an remote control event.
[  454.258836][T12198] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  454.401767][T14678] syz.1.3396 (14678) used greatest stack depth: 17592 bytes left
[  454.431748][  T908] m920x_read = error: -19
[  454.441107][  T908] dvb-usb: error while querying for an remote control event.
[  454.604850][  T908] m920x_read = error: -19
[  454.609323][  T908] dvb-usb: error while querying for an remote control event.
[  454.801954][  T908] m920x_read = error: -19
[  454.827334][  T908] dvb-usb: error while querying for an remote control event.
[  454.991936][ T5888] m920x_read = error: -19
[  454.996402][ T5888] dvb-usb: error while querying for an remote control event.
[  455.191714][ T5888] m920x_read = error: -19
[  455.196094][ T5888] dvb-usb: error while querying for an remote control event.
[  455.335206][T14712] usb usb9: usbfs: process 14712 (syz.1.3410) did not claim interface 4 before use
[  455.358350][ T5888] m920x_read = error: -19
[  455.375700][ T5888] dvb-usb: error while querying for an remote control event.
[  455.542034][ T5888] m920x_read = error: -19
[  455.546407][ T5888] dvb-usb: error while querying for an remote control event.
[  455.732408][   T24] m920x_read = error: -19
[  455.736783][   T24] dvb-usb: error while querying for an remote control event.
[  455.809176][T14725] loop9: detected capacity change from 0 to 128
[  455.901957][   T24] m920x_read = error: -19
[  455.906405][   T24] dvb-usb: error while querying for an remote control event.
[  455.961392][T14725] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  456.051835][ T5888] m920x_read = error: -19
[  456.056208][ T5888] dvb-usb: error while querying for an remote control event.
[  456.114838][T14725] ext4 filesystem being mounted at /297/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  456.181733][ T5888] m920x_read = error: -19
[  456.212605][ T5888] dvb-usb: error while querying for an remote control event.
[  456.391755][  T908] m920x_read = error: -19
[  456.396125][  T908] dvb-usb: error while querying for an remote control event.
[  456.562362][  T908] m920x_read = error: -19
[  456.571622][  T908] dvb-usb: error while querying for an remote control event.
[  456.618635][T10035] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  456.711703][ T5888] m920x_read = error: -19
[  456.716103][ T5888] dvb-usb: error while querying for an remote control event.
[  456.838046][  T908] m920x_read = error: -19
[  456.849260][  T908] dvb-usb: error while querying for an remote control event.
[  456.921709][ T5888] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  457.011675][   T24] m920x_read = error: -19
[  457.021097][   T24] dvb-usb: error while querying for an remote control event.
[  457.024613][T14753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.161716][ T5888] usb 9-1: config 0 interface 0 altsetting 146 endpoint 0x81 has invalid wMaxPacketSize 0
[  457.172075][  T908] m920x_read = error: -19
[  457.176447][  T908] dvb-usb: error while querying for an remote control event.
[  457.201294][ T5888] usb 9-1: config 0 interface 0 altsetting 146 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  457.223691][ T5838] Bluetooth: hci7: link tx timeout
[  457.227146][ T5888] usb 9-1: config 0 interface 0 has no altsetting 0
[  457.229236][ T5838] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa
[  457.242846][ T5888] usb 9-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00
[  457.255213][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.271533][T14761] loop5: detected capacity change from 0 to 512
[  457.303796][T14761] EXT4-fs: Ignoring removed i_version option
[  457.342008][   T24] m920x_read = error: -19
[  457.349439][   T24] dvb-usb: error while querying for an remote control event.
[  457.386598][T14761] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  457.408803][ T5888] usb 9-1: config 0 descriptor??
[  457.470418][T14761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e02c, mo2=0002]
[  457.510783][T14761] System zones: 1-12
[  457.521847][   T24] m920x_read = error: -19
[  457.526283][   T24] dvb-usb: error while querying for an remote control event.
[  457.537662][T14769] loop0: detected capacity change from 0 to 64
[  457.548007][T14761] EXT4-fs (loop5): orphan cleanup on readonly fs
[  457.574130][T14761] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3429: invalid indirect mapped block 12 (level 1)
[  457.617543][T14761] EXT4-fs (loop5): Remounting filesystem read-only
[  457.666670][T14761] EXT4-fs (loop5): 1 truncate cleaned up
[  457.672683][   T24] m920x_read = error: -19
[  457.691758][   T24] dvb-usb: error while querying for an remote control event.
[  457.743294][T14761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  457.793487][   T13] kworker/u8:1: attempt to access beyond end of device
[  457.793487][   T13] loop0: rw=8388609, sector=65, nr_sectors = 1 limit=64
[  457.813570][   T24] m920x_read = error: -19
[  457.821363][   T24] dvb-usb: error while querying for an remote control event.
[  457.843540][   T13] Buffer I/O error on dev loop0, logical block 65, lost async page write
[  457.847622][T14761] pvfs2: Unexpected value for 'acl'
[  457.864206][   T13] kworker/u8:1: attempt to access beyond end of device
[  457.864206][   T13] loop0: rw=8388609, sector=66, nr_sectors = 1 limit=64
[  457.908097][   T13] Buffer I/O error on dev loop0, logical block 66, lost async page write
[  457.912992][ T5888] saitek 0003:06A3:0CCD.002D: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.8-1/input0
[  457.941795][   T24] m920x_read = error: -19
[  457.946188][   T24] dvb-usb: error while querying for an remote control event.
[  457.964774][   T13] kworker/u8:1: attempt to access beyond end of device
[  457.964774][   T13] loop0: rw=8388609, sector=67, nr_sectors = 1 limit=64
[  458.022698][   T13] Buffer I/O error on dev loop0, logical block 67, lost async page write
[  458.050256][   T13] kworker/u8:1: attempt to access beyond end of device
[  458.050256][   T13] loop0: rw=8388609, sector=68, nr_sectors = 1 limit=64
[  458.067510][ T5888] usb 9-1: USB disconnect, device number 13
[  458.095421][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  458.112050][   T24] m920x_read = error: -19
[  458.116418][   T24] dvb-usb: error while querying for an remote control event.
[  458.122275][   T13] Buffer I/O error on dev loop0, logical block 68, lost async page write
[  458.180079][   T13] kworker/u8:1: attempt to access beyond end of device
[  458.180079][   T13] loop0: rw=8388609, sector=72, nr_sectors = 1 limit=64
[  458.247464][T14776] fido_id[14776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  458.262700][   T13] Buffer I/O error on dev loop0, logical block 72, lost async page write
[  458.272022][   T24] m920x_read = error: -19
[  458.276481][   T24] dvb-usb: error while querying for an remote control event.
[  458.282225][   T13] kworker/u8:1: attempt to access beyond end of device
[  458.282225][   T13] loop0: rw=8388609, sector=73, nr_sectors = 1 limit=64
[  458.346137][   T13] Buffer I/O error on dev loop0, logical block 73, lost async page write
[  458.394646][   T13] kworker/u8:1: attempt to access beyond end of device
[  458.394646][   T13] loop0: rw=8388609, sector=76, nr_sectors = 1 limit=64
[  458.430590][   T13] Buffer I/O error on dev loop0, logical block 76, lost async page write
[  458.441934][ T5888] m920x_read = error: -19
[  458.446301][ T5888] dvb-usb: error while querying for an remote control event.
[  458.480703][   T13] kworker/u8:1: attempt to access beyond end of device
[  458.480703][   T13] loop0: rw=8388609, sector=77, nr_sectors = 1 limit=64
[  458.517520][   T13] Buffer I/O error on dev loop0, logical block 77, lost async page write
[  458.552223][   T13] kworker/u8:1: attempt to access beyond end of device
[  458.552223][   T13] loop0: rw=1, sector=78, nr_sectors = 24 limit=64
[  458.582087][ T5888] m920x_read = error: -19
[  458.586467][ T5888] dvb-usb: error while querying for an remote control event.
[  458.601840][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  458.752089][ T5888] m920x_read = error: -19
[  458.756471][ T5888] dvb-usb: error while querying for an remote control event.
[  458.823780][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.851635][   T24] usb 6-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  458.883549][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.921802][ T5888] m920x_read = error: -19
[  458.928718][ T5888] dvb-usb: error while querying for an remote control event.
[  458.947584][   T24] usb 6-1: config 0 descriptor??
[  459.087416][ T5888] m920x_read = error: -19
[  459.121802][ T5888] dvb-usb: error while querying for an remote control event.
[  459.235464][ T5888] m920x_read = error: -19
[  459.239886][ T5888] dvb-usb: error while querying for an remote control event.
[  459.315533][ T5838] Bluetooth: hci7: command 0x0406 tx timeout
[  459.410671][ T6007] m920x_read = error: -19
[  459.435421][   T24] itetech 0003:048D:8595.002E: item fetching failed at offset 0/3
[  459.452623][ T6007] dvb-usb: error while querying for an remote control event.
[  459.469798][T14811] loop0: detected capacity change from 0 to 512
[  459.485469][   T24] itetech 0003:048D:8595.002E: probe with driver itetech failed with error -22
[  459.493358][T14811] EXT4-fs: Ignoring removed oldalloc option
[  459.545247][T14811] EXT4-fs (loop0): 1 truncate cleaned up
[  459.572715][   T24] m920x_read = error: -19
[  459.573867][T14811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  459.601346][   T24] dvb-usb: error while querying for an remote control event.
[  459.633649][T14819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3456'.
[  459.634213][ T6007] usb 6-1: USB disconnect, device number 13
[  459.771840][   T24] m920x_read = error: -19
[  459.781644][   T24] dvb-usb: error while querying for an remote control event.
[  459.949676][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  459.971857][ T6007] m920x_read = error: -19
[  459.976311][ T6007] dvb-usb: error while querying for an remote control event.
[  460.131764][ T5888] m920x_read = error: -19
[  460.136135][ T5888] dvb-usb: error while querying for an remote control event.
[  460.294104][ T6007] m920x_read = error: -19
[  460.298513][ T6007] dvb-usb: error while querying for an remote control event.
[  460.308027][T14837] loop9: detected capacity change from 0 to 8
[  460.341223][T14839] use of bytesused == 0 is deprecated and will be removed in the future,
[  460.378222][T14839] use the actual size instead.
[  460.441764][ T6007] m920x_read = error: -19
[  460.453692][ T6007] dvb-usb: error while querying for an remote control event.
[  460.581663][ T6007] m920x_read = error: -19
[  460.582938][ T6001] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  460.586029][ T6007] dvb-usb: error while querying for an remote control event.
[  460.762143][ T6007] m920x_read = error: -19
[  460.767478][ T6007] dvb-usb: error while querying for an remote control event.
[  460.785927][T14849] program syz.8.3469 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  460.823587][ T6001] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  460.861838][ T6001] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  460.901684][ T6007] m920x_read = error: -19
[  460.914085][ T6001] usb 5-1: config 0 has no interface number 0
[  460.929802][ T6007] dvb-usb: error while querying for an remote control event.
[  461.015089][ T6001] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  461.058023][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.093128][ T6001] usb 5-1: Product: syz
[  461.097389][ T6001] usb 5-1: Manufacturer: syz
[  461.113138][ T5888] m920x_read = error: -19
[  461.117583][ T5888] dvb-usb: error while querying for an remote control event.
[  461.144130][ T6001] usb 5-1: SerialNumber: syz
[  461.178933][ T6001] usb 5-1: config 0 descriptor??
[  461.264324][T14855] loop8: detected capacity change from 0 to 4096
[  461.271706][   T24] m920x_read = error: -19
[  461.276059][   T24] dvb-usb: error while querying for an remote control event.
[  461.347543][T14855] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.372719][ T5888] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  461.423990][   T24] m920x_read = error: -19
[  461.428401][   T24] dvb-usb: error while querying for an remote control event.
[  461.567348][T10028] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.611657][ T5888] usb 6-1: Using ep0 maxpacket: 8
[  461.636198][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.648559][  T908] m920x_read = error: -19
[  461.654612][  T908] dvb-usb: error while querying for an remote control event.
[  461.708036][ T6001] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  461.711652][ T5888] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00
[  461.736895][ T6001] uvcvideo 5-1:0.64: No valid video chain found.
[  461.785734][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.812301][  T908] m920x_read = error: -19
[  461.827937][  T908] dvb-usb: error while querying for an remote control event.
[  461.859870][ T5888] usb 6-1: config 0 descriptor??
[  461.876145][ T5840] Bluetooth: hci3: command 0x0406 tx timeout
[  461.971768][  T908] m920x_read = error: -19
[  461.976196][  T908] dvb-usb: error while querying for an remote control event.
[  462.014307][T14880] loop0: detected capacity change from 0 to 512
[  462.077294][T14880] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  462.138762][ T6001] usb 5-1: USB disconnect, device number 7
[  462.151856][   T24] m920x_read = error: -19
[  462.156332][   T24] dvb-usb: error while querying for an remote control event.
[  462.254672][T14880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.301759][  T908] m920x_read = error: -19
[  462.306165][  T908] dvb-usb: error while querying for an remote control event.
[  462.316335][T14880] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  462.352893][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.359788][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.432240][T14880] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.3484: resize_inode disabled but reserved GDT blocks non-zero
[  462.440474][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.501835][  T908] m920x_read = error: -19
[  462.506213][  T908] dvb-usb: error while querying for an remote control event.
[  462.514946][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.554923][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.598493][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.608220][ T5822] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.631670][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.671883][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.682674][  T908] m920x_read = error: -19
[  462.691871][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.708998][  T908] dvb-usb: error while querying for an remote control event.
[  462.734939][ T5888] acrux 0003:1A34:F705.002F: unknown main item tag 0x0
[  462.775468][ T5888] acrux 0003:1A34:F705.002F: hidraw0: USB HID v0.09 Device [HID 1a34:f705] on usb-dummy_hcd.5-1/input0
[  462.821806][ T5888] acrux 0003:1A34:F705.002F: no inputs found
[  462.827843][ T5888] acrux 0003:1A34:F705.002F: Failed to enable force feedback support, error: -19
[  462.871686][  T908] m920x_read = error: -19
[  462.879669][  T908] dvb-usb: error while querying for an remote control event.
[  462.979009][ T5888] usb 6-1: USB disconnect, device number 14
[  463.045433][ T6007] m920x_read = error: -19
[  463.050073][ T6007] dvb-usb: error while querying for an remote control event.
[  463.101705][  T908] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  463.181153][T14903] fido_id[14903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  463.195718][   T24] m920x_read = error: -19
[  463.200066][   T24] dvb-usb: error while querying for an remote control event.
[  463.306053][  T908] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  463.335771][  T908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  463.351694][   T24] m920x_read = error: -19
[  463.356061][   T24] dvb-usb: error while querying for an remote control event.
[  463.402674][  T908] usb 2-1: config 0 descriptor??
[  463.433463][  T908] cp210x 2-1:0.0: cp210x converter detected
[  463.522467][   T24] m920x_read = error: -19
[  463.527085][   T24] dvb-usb: error while querying for an remote control event.
[  463.532377][T14916] loop8: detected capacity change from 0 to 128
[  463.589100][T14920] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1303
[  463.656389][T14919] veth0_virt_wifi: entered promiscuous mode
[  463.891697][   T24] m920x_read = error: -19
[  463.896128][   T24] dvb-usb: error while querying for an remote control event.
[  463.920488][  T908] usb 2-1: cp210x converter now attached to ttyUSB0
[  464.022820][  T908] m920x_read = error: -19
[  464.027196][  T908] dvb-usb: error while querying for an remote control event.
[  464.122192][  T908] usb 2-1: USB disconnect, device number 24
[  464.134534][  T908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  464.181775][   T24] m920x_read = error: -19
[  464.186152][   T24] dvb-usb: error while querying for an remote control event.
[  464.282723][  T908] cp210x 2-1:0.0: device disconnected
[  464.352245][   T24] m920x_read = error: -19
[  464.356627][   T24] dvb-usb: error while querying for an remote control event.
[  464.502527][  T908] m920x_read = error: -19
[  464.506909][  T908] dvb-usb: error while querying for an remote control event.
[  464.608033][T14934] loop0: detected capacity change from 0 to 24
[  464.642769][T14934] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  464.661743][   T24] m920x_read = error: -19
[  464.666095][   T24] dvb-usb: error while querying for an remote control event.
[  464.731739][T14934] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  464.753066][T14936] loop5: detected capacity change from 0 to 512
[  464.813535][T14936] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  464.831820][   T24] m920x_read = error: -19
[  464.836263][   T24] dvb-usb: error while querying for an remote control event.
[  464.883176][T14936] EXT4-fs (loop5): invalid journal inode
[  464.901748][T14936] EXT4-fs (loop5): can't get journal size
[  465.002470][  T908] m920x_read = error: -19
[  465.006868][  T908] dvb-usb: error while querying for an remote control event.
[  465.027134][T14936] EXT4-fs (loop5): 1 truncate cleaned up
[  465.056017][T14936] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  465.142122][  T908] m920x_read = error: -19
[  465.148525][  T908] dvb-usb: error while querying for an remote control event.
[  465.298764][  T908] m920x_read = error: -19
[  465.308819][  T908] dvb-usb: error while querying for an remote control event.
[  465.350215][T12198] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.451805][  T908] m920x_read = error: -19
[  465.461609][  T908] dvb-usb: error while querying for an remote control event.
[  465.487501][T14925] loop8: detected capacity change from 0 to 32768
[  465.555998][T14925] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3503 (14925)
[  465.591022][   T24] m920x_read = error: -19
[  465.608912][   T24] dvb-usb: error while querying for an remote control event.
[  465.641819][T14925] BTRFS info (device loop8): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  465.691739][   T31] audit: type=1400 audit(1769648938.680:1399): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14955 comm="syz.5.3517"
[  465.712727][T14925] BTRFS info (device loop8): using blake2b (blake2b-256-lib) checksum algorithm
[  465.751850][   T24] m920x_read = error: -19
[  465.756225][   T24] dvb-usb: error while querying for an remote control event.
[  465.881628][ T6001] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  465.896785][T14925] BTRFS info (device loop8): enabling ssd optimizations
[  465.904051][   T24] m920x_read = error: -19
[  465.904081][   T24] dvb-usb: error while querying for an remote control event.
[  465.947934][T14925] BTRFS info (device loop8): turning on async discard
[  465.961665][T14925] BTRFS info (device loop8): enabling free space tree
[  466.011682][   T24] m920x_read = error: -19
[  466.027253][   T24] dvb-usb: error while querying for an remote control event.
[  466.081659][ T6001] usb 10-1: Using ep0 maxpacket: 8
[  466.134820][ T6001] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.171707][   T24] m920x_read = error: -19
[  466.177560][ T6001] usb 10-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  466.186456][   T24] dvb-usb: error while querying for an remote control event.
[  466.207426][ T6001] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.255207][ T6001] usb 10-1: config 0 descriptor??
[  466.342164][   T24] m920x_read = error: -19
[  466.361646][   T24] dvb-usb: error while querying for an remote control event.
[  466.401700][ T6007] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  466.411774][T10028] BTRFS info (device loop8): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  466.501823][   T24] m920x_read = error: -19
[  466.524793][   T24] dvb-usb: error while querying for an remote control event.
[  466.602022][ T6007] usb 2-1: Using ep0 maxpacket: 16
[  466.638802][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.668482][   T24] m920x_read = error: -19
[  466.684139][   T24] dvb-usb: error while querying for an remote control event.
[  466.692769][ T6007] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.730769][ T6007] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  466.750008][ T6001] megaworld 0003:07B5:0312.0030: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.9-1/input0
[  466.786980][ T6007] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.804312][ T6001] megaworld 0003:07B5:0312.0030: no inputs found
[  466.834061][   T24] m920x_read = error: -19
[  466.856384][   T24] dvb-usb: error while querying for an remote control event.
[  466.865381][ T6007] usb 2-1: config 0 descriptor??
[  466.928533][ T5928] usb 10-1: USB disconnect, device number 8
[  467.011732][   T24] m920x_read = error: -19
[  467.016143][   T24] dvb-usb: error while querying for an remote control event.
[  467.219418][T14989] fido_id[14989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  467.242018][ T5928] m920x_read = error: -19
[  467.246490][ T5928] dvb-usb: error while querying for an remote control event.
[  467.316491][ T6007] lua 0003:1E7D:2C2E.0031: ignoring exceeding usage max
[  467.365421][ T6007] lua 0003:1E7D:2C2E.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  467.431751][ T5928] m920x_read = error: -19
[  467.436132][ T5928] dvb-usb: error while querying for an remote control event.
[  467.504405][ T6007] usb 2-1: USB disconnect, device number 25
[  467.611737][ T5928] m920x_read = error: -19
[  467.631903][ T5928] dvb-usb: error while querying for an remote control event.
[  467.741844][  T908] m920x_read = error: -19
[  467.761694][  T908] dvb-usb: error while querying for an remote control event.
[  467.800963][T14998] fido_id[14998]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  467.834480][T15005] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  467.845395][T15008] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  467.901739][ T6007] m920x_read = error: -19
[  467.911646][ T6007] dvb-usb: error while querying for an remote control event.
[  468.041785][ T6007] m920x_read = error: -19
[  468.046178][ T6007] dvb-usb: error while querying for an remote control event.
[  468.241790][ T6007] m920x_read = error: -19
[  468.246166][ T6007] dvb-usb: error while querying for an remote control event.
[  468.392167][  T908] m920x_read = error: -19
[  468.396695][  T908] dvb-usb: error while querying for an remote control event.
[  468.638009][T15027] loop0: detected capacity change from 0 to 256
[  468.971669][  T908] m920x_read = error: -19
[  468.977722][  T908] dvb-usb: error while querying for an remote control event.
[  468.988260][T15030] loop5: detected capacity change from 0 to 128
[  469.068845][T15030] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  469.123729][  T908] m920x_read = error: -19
[  469.128098][  T908] dvb-usb: error while querying for an remote control event.
[  469.205617][T15030] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  469.253941][ T5928] m920x_read = error: -19
[  469.258308][ T5928] dvb-usb: error while querying for an remote control event.
[  469.401760][ T5928] m920x_read = error: -19
[  469.406130][ T5928] dvb-usb: error while querying for an remote control event.
[  469.571682][ T5928] m920x_read = error: -19
[  469.576051][ T5928] dvb-usb: error while querying for an remote control event.
[  469.686526][T12198] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  469.699197][T15049] loop9: detected capacity change from 0 to 64
[  469.741701][ T5928] m920x_read = error: -19
[  469.746189][ T5928] dvb-usb: error while querying for an remote control event.
[  469.814979][T15052] loop8: detected capacity change from 0 to 256
[  469.822999][T15049] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  469.861815][ T5928] m920x_read = error: -19
[  469.869876][ T5928] dvb-usb: error while querying for an remote control event.
[  470.032147][ T5928] m920x_read = error: -19
[  470.049498][ T5928] dvb-usb: error while querying for an remote control event.
[  470.058908][T15052] FAT-fs (loop8): Directory bread(block 64) failed
[  470.070444][T15052] FAT-fs (loop8): Directory bread(block 65) failed
[  470.124159][T15052] FAT-fs (loop8): Directory bread(block 66) failed
[  470.130707][T15052] FAT-fs (loop8): Directory bread(block 67) failed
[  470.200564][ T5928] m920x_read = error: -19
[  470.216262][T15052] FAT-fs (loop8): Directory bread(block 68) failed
[  470.236068][ T5928] dvb-usb: error while querying for an remote control event.
[  470.261204][T15052] FAT-fs (loop8): Directory bread(block 69) failed
[  470.327807][T15052] FAT-fs (loop8): Directory bread(block 70) failed
[  470.361904][ T5928] m920x_read = error: -19
[  470.363441][T15052] FAT-fs (loop8): Directory bread(block 71) failed
[  470.373513][ T5928] dvb-usb: error while querying for an remote control event.
[  470.402496][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3561'.
[  470.425187][T15052] FAT-fs (loop8): Directory bread(block 72) failed
[  470.474819][T15052] FAT-fs (loop8): Directory bread(block 73) failed
[  470.535015][ T5928] m920x_read = error: -19
[  470.551315][ T5928] dvb-usb: error while querying for an remote control event.
[  470.602863][T15070] netlink: 340 bytes leftover after parsing attributes in process `syz.9.3563'.
[  470.678190][ T6001] kernel read not supported for file /vcs (pid: 6001 comm: kworker/0:7)
[  470.721677][ T5928] m920x_read = error: -19
[  470.726130][ T5928] dvb-usb: error while querying for an remote control event.
[  470.871764][ T5928] m920x_read = error: -19
[  470.876140][ T5928] dvb-usb: error while querying for an remote control event.
[  471.041695][ T5928] m920x_read = error: -19
[  471.046102][ T5928] dvb-usb: error while querying for an remote control event.
[  471.191854][ T5928] m920x_read = error: -19
[  471.213560][ T5928] dvb-usb: error while querying for an remote control event.
[  471.352385][ T5928] m920x_read = error: -19
[  471.356761][ T5928] dvb-usb: error while querying for an remote control event.
[  471.521864][ T6007] m920x_read = error: -19
[  471.526250][ T6007] dvb-usb: error while querying for an remote control event.
[  471.597452][T15089] loop9: detected capacity change from 0 to 128
[  471.638551][T15089] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  471.668555][T15089] hpfs: filesystem error: improperly stopped
[  471.681774][ T5928] m920x_read = error: -19
[  471.686462][ T5928] dvb-usb: error while querying for an remote control event.
[  471.703508][T15089] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  471.751815][T15089] hpfs: You really don't want any checks? You are crazy...
[  471.775721][T15089] hpfs: hpfs_map_sector(): read error
[  471.797703][T15089] hpfs: code page support is disabled
[  471.815843][T15089] hpfs: hpfs_map_4sectors(): unaligned read
[  471.822107][ T5928] m920x_read = error: -19
[  471.826563][ T5928] dvb-usb: error while querying for an remote control event.
[  471.865115][T15089] hpfs: hpfs_map_4sectors(): unaligned read
[  471.898013][T15089] hpfs: filesystem error: unable to find root dir
[  471.977607][ T6007] m920x_read = error: -19
[  471.982268][ T6007] dvb-usb: error while querying for an remote control event.
[  472.112188][ T5928] m920x_read = error: -19
[  472.121677][ T5928] dvb-usb: error while querying for an remote control event.
[  472.241684][ T6007] m920x_read = error: -19
[  472.246057][ T6007] dvb-usb: error while querying for an remote control event.
[  472.402035][ T6007] m920x_read = error: -19
[  472.406419][ T6007] dvb-usb: error while querying for an remote control event.
[  472.599308][ T6007] m920x_read = error: -19
[  472.606494][ T6007] dvb-usb: error while querying for an remote control event.
[  472.741982][ T6007] m920x_read = error: -19
[  472.753098][ T6007] dvb-usb: error while querying for an remote control event.
[  472.902502][ T6007] m920x_read = error: -19
[  472.914698][ T6007] dvb-usb: error while querying for an remote control event.
[  472.923103][ T5928] kernel read not supported for file /input/mice (pid: 5928 comm: kworker/1:5)
[  473.071841][ T5928] m920x_read = error: -19
[  473.081675][ T5928] dvb-usb: error while querying for an remote control event.
[  473.210848][T15139] loop5: detected capacity change from 0 to 64
[  473.238257][ T5928] m920x_read = error: -19
[  473.260902][ T5928] dvb-usb: error while querying for an remote control event.
[  473.357824][T12872] udevd[12872]: symlink '../../loop5' '/dev/disk/by-diskseq/798.tmp-b7:5' failed: Read-only file system
[  473.403179][ T5928] m920x_read = error: -19
[  473.407577][ T5928] dvb-usb: error while querying for an remote control event.
[  473.530128][T12872] udevd[12872]: symlink '../../loop5' '/dev/disk/by-diskseq/798.tmp-b7:5' failed: Read-only file system
[  473.590497][  T908] m920x_read = error: -19
[  473.607951][  T908] dvb-usb: error while querying for an remote control event.
[  473.690113][T12872] udevd[12872]: symlink '../../loop5' '/dev/disk/by-diskseq/798.tmp-b7:5' failed: Read-only file system
[  473.761803][ T5928] m920x_read = error: -19
[  473.776962][ T5928] dvb-usb: error while querying for an remote control event.
[  473.865716][T12872] udevd[12872]: symlink '../../loop5' '/dev/disk/by-diskseq/798.tmp-b7:5' failed: Read-only file system
[  473.879034][   T32] INFO: task syz.6.2351:11868 blocked for more than 143 seconds.
[  473.909807][   T32]       Tainted: G             L      syzkaller #0
[  473.921726][  T908] m920x_read = error: -19
[  473.937319][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  473.951829][  T908] dvb-usb: error while querying for an remote control event.
[  473.973916][   T32] task:syz.6.2351      state:D stack:28096 pid:11868 tgid:11867 ppid:9900   task_flags:0x400140 flags:0x00080002
[  474.026269][T12872] udevd[12872]: symlink '../../loop5' '/dev/disk/by-diskseq/799.tmp-b7:5' failed: Read-only file system
[  474.058187][   T32] Call Trace:
[  474.061856][  T908] m920x_read = error: -19
[  474.066206][  T908] dvb-usb: error while querying for an remote control event.
[  474.072767][   T32]  <TASK>
[  474.083307][   T32]  __schedule+0x14ea/0x5050
[  474.112868][   T32]  ? __pfx___schedule+0x10/0x10
[  474.132403][   T32]  ? schedule+0x90/0x360
[  474.147890][   T32]  schedule+0x164/0x360
[  474.167388][   T32]  schedule_preempt_disabled+0x13/0x30
[  474.181957][   T32]  rwsem_down_read_slowpath+0x61e/0x920
[  474.189917][   T32]  ? rwsem_down_read_slowpath+0x4d9/0x920
[  474.218115][   T32]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  474.227742][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.231767][  T908] m920x_read = error: -19
[  474.237709][  T908] dvb-usb: error while querying for an remote control event.
[  474.238059][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.259267][   T32]  down_read+0x99/0x2e0
[  474.266621][   T32]  ? super_lock+0x263/0x3d0
[  474.274783][   T32]  super_lock+0x2d6/0x3d0
[  474.282615][   T32]  ? __pfx_super_lock+0x10/0x10
[  474.290926][   T32]  ? do_raw_spin_lock+0x12b/0x2f0
[  474.296611][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.305869][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.311921][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.317647][   T32]  ? do_raw_spin_unlock+0xf5/0x210
[  474.324853][   T32]  __iterate_supers+0x126/0x290
[  474.329879][   T32]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  474.335925][   T32]  ksys_sync+0xa0/0x170
[  474.340154][   T32]  ? __pfx_ksys_sync+0x10/0x10
[  474.345438][   T32]  ? __secure_computing+0xe1/0x2a0
[  474.350635][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.356792][   T32]  __ia32_sys_sync+0xe/0x20
[  474.361382][   T32]  do_syscall_64+0xe2/0xf80
[  474.366461][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.371697][ T5928] m920x_read = error: -19
[  474.374869][   T32]  ? trace_irq_disable+0x37/0x100
[  474.376861][ T5928] dvb-usb: error while querying for an remote control event.
[  474.389899][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.405144][   T32] RIP: 0033:0x7ff56979aeb9
[  474.409648][   T32] RSP: 002b:00007ff56a5ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  474.418573][   T32] RAX: ffffffffffffffda RBX: 00007ff569a15fa0 RCX: 00007ff56979aeb9
[  474.427126][   T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  474.437615][   T32] RBP: 00007ff569a15fa0 R08: 0000000000000000 R09: 0000000000000000
[  474.447491][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  474.456894][   T32] R13: 00007ff569a16038 R14: 00007ff569a15fa0 R15: 00007ffd425f61b8
[  474.466160][   T32]  </TASK>
[  474.469319][   T32] 
[  474.469319][   T32] Showing all locks held in the system:
[  474.479085][   T32] 2 locks held by kworker/u8:1/13:
[  474.486617][   T32]  #0: ffff88801cb1f148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  474.491741][ T5928] m920x_read = error: -19
[  474.511817][ T5928] dvb-usb: error while querying for an remote control event.
[  474.532721][   T32]  #1: ffffc90000127bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  474.546977][   T32] 1 lock held by khungtaskd/32:
[  474.552173][   T32]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  474.563523][   T32] 2 locks held by getty/5577:
[  474.568281][   T32]  #0: ffff88814de120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  474.579535][   T32]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  474.590077][   T32] 3 locks held by syz-executor/5826:
[  474.597631][   T32] 2 locks held by syz-executor/7715:
[  474.612937][   T32] 1 lock held by syz.6.2351/11868:
[  474.618301][   T32]  #0: ffff8880764300e0 (&type->s_umount_key#70){++++}-{4:4}, at: super_lock+0x2d6/0x3d0
[  474.633561][   T32] 
[  474.636053][   T32] =============================================
[  474.636053][   T32] 
[  474.645294][   T32] NMI backtrace for cpu 0
[  474.645313][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.645343][   T32] Tainted: [L]=SOFTLOCKUP
[  474.645351][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  474.645363][   T32] Call Trace:
[  474.645373][   T32]  <TASK>
[  474.645381][   T32]  dump_stack_lvl+0xe8/0x150
[  474.645414][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  474.645442][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.645468][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  474.645514][   T32]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  474.645551][   T32]  sys_info+0x135/0x170
[  474.645576][   T32]  watchdog+0xf90/0xfe0
[  474.645608][   T32]  ? watchdog+0x209/0xfe0
[  474.645638][   T32]  kthread+0x726/0x8b0
[  474.645665][   T32]  ? __pfx_watchdog+0x10/0x10
[  474.645689][   T32]  ? __pfx_kthread+0x10/0x10
[  474.645713][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.645745][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.645780][   T32]  ? __pfx_kthread+0x10/0x10
[  474.645807][   T32]  ret_from_fork+0x51b/0xa40
[  474.645847][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  474.645885][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.645912][   T32]  ? __switch_to+0xc82/0x1410
[  474.645950][   T32]  ? __pfx_kthread+0x10/0x10
[  474.645979][   T32]  ret_from_fork_asm+0x1a/0x30
[  474.646014][ T5928] m920x_read = error: -19
[  474.646032][   T32]  </TASK>
[  474.646067][   T32] Sending NMI from CPU 0 to CPUs 1:
[  474.650363][ T5928] dvb-usb: error while querying for an remote control event.
[  474.661197][    C1] NMI backtrace for cpu 1
[  474.661220][    C1] CPU: 1 UID: 0 PID: 5928 Comm: kworker/1:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.661250][    C1] Tainted: [L]=SOFTLOCKUP
[  474.661257][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  474.661271][    C1] Workqueue: events legacy_dvb_usb_read_remote_control
[  474.661302][    C1] RIP: 0010:debug_check_no_obj_freed+0x1f1/0x550
[  474.661340][    C1] Code: 0f 84 44 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 74 12 48 89 ef e8 2d f3 81 fd 48 ba 00 00 00 00 00 fc ff df 48 8b 45 00 <48> 89 04 24 4c 8d 7d 18 4c 89 f8 48 c1 e8 03 80 3c 10 00 74 12 4c
[  474.661358][    C1] RSP: 0018:ffffc90000a08cd0 EFLAGS: 00000046
[  474.661376][    C1] RAX: ffff88802cf206c8 RBX: 000000000000000c RCX: 0000000000000102
[  474.661391][    C1] RDX: dffffc0000000000 RSI: ffffffff8c073960 RDI: ffffffff8c073920
[  474.661409][    C1] RBP: ffff88802e333038 R08: 0000000000000003 R09: 0000000000000004
[  474.661423][    C1] R10: dffffc0000000000 R11: fffff52000141188 R12: ffff8880330c88a0
[  474.661438][    C1] R13: ffff8880330c8850 R14: 1ffff11005c66607 R15: 1ffff1100a8a24da
[  474.661457][    C1] FS:  0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000
[  474.661475][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  474.661490][    C1] CR2: 00007fb1d3dde2f8 CR3: 000000000e346000 CR4: 0000000000350ef0
[  474.661507][    C1] Call Trace:
[  474.661515][    C1]  <IRQ>
[  474.661538][    C1]  kmem_cache_free+0x10e/0x610
[  474.661564][    C1]  ? rcu_core+0xc9e/0x1750
[  474.661597][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  474.661636][    C1]  ? __pfx_inode_free_by_rcu+0x10/0x10
[  474.661666][    C1]  ? rcu_core+0xc2a/0x1750
[  474.661698][    C1]  rcu_core+0xc9e/0x1750
[  474.661743][    C1]  ? __pfx_rcu_core+0x10/0x10
[  474.661774][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.661801][    C1]  ? sched_clock_cpu+0x74/0x440
[  474.661841][    C1]  handle_softirqs+0x22a/0x7c0
[  474.661863][    C1]  ? __irq_exit_rcu+0x5f/0x150
[  474.661890][    C1]  __irq_exit_rcu+0x5f/0x150
[  474.661909][    C1]  irq_exit_rcu+0x9/0x30
[  474.661928][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  474.661950][    C1]  </IRQ>
[  474.661957][    C1]  <TASK>
[  474.661966][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  474.661989][    C1] RIP: 0010:vprintk_emit+0x45d/0x560
[  474.662011][    C1] Code: 0f 84 44 ff ff ff e8 e2 45 21 00 fb eb 44 e8 da 45 21 00 e8 a5 cd f3 09 4d 85 f6 74 94 e8 cb 45 21 00 fb 48 c7 c7 60 c7 54 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 3b 1b
[  474.662030][    C1] RSP: 0018:ffffc90003fdf800 EFLAGS: 00000293
[  474.662048][    C1] RAX: ffffffff81a33185 RBX: ffffffff81a32fff RCX: ffff888030fb3d00
[  474.662064][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e54c760
[  474.662078][    C1] RBP: ffffc90003fdf8b0 R08: ffffffff8fef1a77 R09: 1ffffffff1fde34e
[  474.662095][    C1] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000000
[  474.662110][    C1] R13: 000000000000003a R14: 0000000000000200 R15: 1ffff920007fbf04
[  474.662128][    C1]  ? vprintk_emit+0x2cf/0x560
[  474.662150][    C1]  ? vprintk_emit+0x455/0x560
[  474.662180][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  474.662210][    C1]  _printk+0xdd/0x130
[  474.662240][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.662270][    C1]  ? __pfx__printk+0x10/0x10
[  474.662306][    C1]  ? m920x_rc_query+0x654/0x830
[  474.662338][    C1]  legacy_dvb_usb_read_remote_control+0x37f/0x450
[  474.662367][    C1]  ? __pfx_legacy_dvb_usb_read_remote_control+0x10/0x10
[  474.662392][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.662421][    C1]  ? process_scheduled_works+0xa0f/0x17a0
[  474.662454][    C1]  ? process_scheduled_works+0xa0f/0x17a0
[  474.662488][    C1]  process_scheduled_works+0xaec/0x17a0
[  474.662541][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  474.662573][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  474.662600][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  474.662624][    C1]  ? schedule+0x90/0x360
[  474.662645][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.662674][    C1]  worker_thread+0xda6/0x1360
[  474.662719][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.662744][    C1]  ? __kthread_parkme+0x19c/0x1f0
[  474.662770][    C1]  kthread+0x726/0x8b0
[  474.662797][    C1]  ? __pfx_worker_thread+0x10/0x10
[  474.662830][    C1]  ? __pfx_kthread+0x10/0x10
[  474.662853][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.662882][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.662915][    C1]  ? __pfx_kthread+0x10/0x10
[  474.662940][    C1]  ret_from_fork+0x51b/0xa40
[  474.662977][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  474.663009][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.663034][    C1]  ? __switch_to+0xc82/0x1410
[  474.663067][    C1]  ? __pfx_kthread+0x10/0x10
[  474.663093][    C1]  ret_from_fork_asm+0x1a/0x30
[  474.663135][    C1]  </TASK>
[  474.686951][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  474.686978][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  474.687011][   T32] Tainted: [L]=SOFTLOCKUP
[  474.687021][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  474.687036][   T32] Call Trace:
[  474.687047][   T32]  <TASK>
[  474.687058][   T32]  vpanic+0x1e0/0x670
[  474.687097][   T32]  panic+0xc5/0xd0
[  474.687128][   T32]  ? __pfx_panic+0x10/0x10
[  474.687157][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.687193][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.687223][   T32]  ? preempt_schedule_thunk+0x16/0x30
[  474.687269][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.687297][   T32]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  474.687339][   T32]  watchdog+0xfda/0xfe0
[  474.687373][   T32]  ? watchdog+0x209/0xfe0
[  474.687408][   T32]  kthread+0x726/0x8b0
[  474.687442][   T32]  ? __pfx_watchdog+0x10/0x10
[  474.687468][   T32]  ? __pfx_kthread+0x10/0x10
[  474.687494][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.687529][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  474.687567][   T32]  ? __pfx_kthread+0x10/0x10
[  474.687603][   T32]  ret_from_fork+0x51b/0xa40
[  474.687645][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  474.687681][   T32]  ? srso_alias_return_thunk+0x5/0xfbef5
[  474.687710][   T32]  ? __switch_to+0xc82/0x1410
[  474.687750][   T32]  ? __pfx_kthread+0x10/0x10
[  474.687780][   T32]  ret_from_fork_asm+0x1a/0x30
[  474.687834][   T32]  </TASK>
[  474.689722][   T32] Kernel Offset: disabled