last executing test programs:

3m39.754485007s ago: executing program 1 (id=5030):
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="63d70514611905058334a261dc565be34e13d85cd93eaf9fbc523780ec3e564cb14a8ed7f752c8aab5ed68d3f7ea48f5d76eb3ab6eff08eb0e42eb2c6d16d1103c6fd44cc2305c5501ff56cdce85646473142f8a522e60ff255b17e43b3a13b630772243e0d8c704d355c42a07a680c32193865a2a3c44f53093dac384fb58b213a8fbf878bbeaa37f1ace33ca1fdec6fbafbb8ba0419100f19f94"], 0x0, 0x2aa, &(0x7f0000000780)="$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")
statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/144)

3m39.551554896s ago: executing program 1 (id=5033):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc)

3m39.136508491s ago: executing program 1 (id=5039):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e00000004fcff", 0x58}], 0x1)

3m38.912407734s ago: executing program 1 (id=5041):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x2004400, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f72746164000000000100003030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32, @ANYBLOB="d1217c443d555f38d78e75b51b60120bacfbce63e6767f0d5d8ab142fc8609f8de6a20112275ee6330540ae66f0e8cf9957ddeee8fbcfb6a9c7ee3079323"], 0x1, 0xa1b, &(0x7f0000001f80)="$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")
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000440)={[{@nr_inodes={'nr_inodes', 0x3d, [0x37]}}, {@inode32}]})

3m38.57666762s ago: executing program 1 (id=5047):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01"], 0x40)

3m37.640931328s ago: executing program 1 (id=5057):
r0 = gettid()
kcmp(r0, r0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)

3m37.12865208s ago: executing program 32 (id=5057):
r0 = gettid()
kcmp(r0, r0, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)

1m46.126491346s ago: executing program 0 (id=6038):
iopl(0x3)
sched_setaffinity(0xffffffffffffffff, 0x0, 0x0)

1m45.537018233s ago: executing program 0 (id=6042):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x1000000, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298)

1m44.644088827s ago: executing program 0 (id=6048):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x560f, 0x0)

1m43.867928234s ago: executing program 0 (id=6051):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,time_offset=0x0000000000000003,fmask=00000000000000000000005,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x1548, &(0x7f0000000380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

1m42.791461926s ago: executing program 0 (id=6058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0)

1m40.807407949s ago: executing program 0 (id=6068):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getuid()

1m39.492878247s ago: executing program 33 (id=6068):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getuid()

36.565676201s ago: executing program 2 (id=6347):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8082)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={"0b77bf38", 0x7, 0x21, 0xbd, 0x632, 0xfffffff7, "309636a3c0e33c7176390d26483622", "c52a38a5", "07c49a32", "0b381ec0", ["1036c6702c1e15808274882c", "d2633918384aa9320c0b3c94", "d8ede5990a5f6fb035f6a9a7", "200992e36ed4171b8f0e4c55"]})

35.455096698s ago: executing program 2 (id=6351):
r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x8, 0x4, "e866e7f2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

32.302672399s ago: executing program 2 (id=6369):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000000))

31.52914695s ago: executing program 2 (id=6372):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {@gid}, {@umask={'umask', 0x3d, 0x10}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@keep_last_dots}, {@utf8}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)

30.257337339s ago: executing program 2 (id=6376):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc600d00030009000100ff3582c137153e370248018010001700d1bd", 0x33fe0}], 0x1}, 0x0)

28.839545945s ago: executing program 2 (id=6382):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

27.370792699s ago: executing program 34 (id=6382):
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0)
fcntl$setstatus(r0, 0x4, 0x0)

24.318294553s ago: executing program 7 (id=6404):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)

23.406696166s ago: executing program 7 (id=6408):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

22.596478082s ago: executing program 7 (id=6411):
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000003a3c00000000000000000000000000ffffffff0000000700000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000024af0000000000000000000000000000000000000000feffffff00"/144]}, 0x108)

21.768372433s ago: executing program 7 (id=6415):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f00000014c0)="a13c4fef10e7b7808d8ade39c6c521aab45d475de9accaa7d4f24dd2d0f8c2e1", 0x20)

21.048666108s ago: executing program 7 (id=6420):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2}}, 0x14)

13.952753906s ago: executing program 7 (id=6437):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0)

11.693990176s ago: executing program 4 (id=6444):
prctl$PR_SET_SECUREBITS(0x1c, 0x30)
prctl$PR_GET_KEEPCAPS(0x7)

11.307648691s ago: executing program 5 (id=6446):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000007600f9"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

10.900917749s ago: executing program 4 (id=6447):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x100000}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x8}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd27}]}, 0xc0}}, 0x0)

10.558335678s ago: executing program 3 (id=6448):
ioperm(0x0, 0x8, 0x400)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0xc26bfe8e8f6baca8}, 0x20)

10.286497396s ago: executing program 5 (id=6449):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x18, 0x18, 0x0, 0x1, [@generic="0bac0f0008ac0f000cac0f0072d01038d2403935"]}]}, 0x2c}], 0x1}, 0x0)

9.827372861s ago: executing program 3 (id=6450):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000200), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000001d00)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xbf9, 0x3a, '\xded\xd4', 0x3a, '\t\x1e,3\xc75\x97\xb2p\xc4l\x05r?\\\xa3\x1d\xf2{uRe\xd8\xbe\xedO\xe2\xba\xf6\xfc\xf8\xea\x02\xc0T\xee(\xba9{\x9a\x90\x05&\x9bF\x15.(}\x87\xfe\xa3\xd5\x00\x99\v&\x90S\xd6PB\x19\xad\x9a\x837|\xc9h.%', 0x3a, './file0'}, 0x73)

9.35785476s ago: executing program 5 (id=6452):
syz_mount_image$minix(&(0x7f00000003c0), &(0x7f0000000000)='./bus\x00', 0x280085e, &(0x7f0000000100)=ANY=[], 0xb, 0x22d, &(0x7f0000000400)="$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")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x2)

9.168490739s ago: executing program 4 (id=6453):
ioperm(0x0, 0x1, 0x1)
modify_ldt$read(0x300, 0x0, 0x0)

8.84834073s ago: executing program 3 (id=6454):
r0 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0)
finit_module(r0, 0x0, 0x0)

8.345188556s ago: executing program 4 (id=6455):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000001000000000000000010000850200000000000000020000000000000000000000da0024107b35d0e9a17c2a3472acbd497d22d9eecb9c71c75b5c74441d6cfd33332c6ba1cb230ea061765707d2768c12e0dad9de2957832f41a65d71fc8969922f6f174be7148ae200ff554c800dd134195ce692a5db2763e4686c035a1a96daee68647212bb50b12c90ff18a9edfd233095ddeac1627d7a50d5bceab9101d004db88566275b233540"], &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1, 0x0, 0x0, @void, @value}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r0, 0x20, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/198, 0xc6}}, 0x10)

8.048046588s ago: executing program 3 (id=6456):
r0 = socket(0x40000000002, 0x3, 0x80000000002)
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2000c054}, 0x4000891)

7.789806259s ago: executing program 4 (id=6457):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

7.749716422s ago: executing program 5 (id=6458):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)

7.475455521s ago: executing program 3 (id=6459):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001, 0x2000a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20010080}, 0x40000)

6.933376142s ago: executing program 5 (id=6461):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x14, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6.759221966s ago: executing program 6 (id=6462):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x74c4, 0xa, 0x0, "9a5ad5e52e05a8b7aee2cc576cb07697d3b7db3aa9e15a5da6e3fd95955f99a1", 0x32314d54})

6.518003592s ago: executing program 5 (id=6463):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x8044)

6.323226849s ago: executing program 6 (id=6464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, 0x1, 0x9, 0x3}, 0x14}}, 0x0)

6.063247274s ago: executing program 6 (id=6465):
r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f026, 0x200000b})

5.754109297s ago: executing program 6 (id=6466):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0)

5.337429176s ago: executing program 6 (id=6467):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x200, 0x20002)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x9f0000, 0x200, 0x5, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990901, 0x2, '\x00', @p_u32=0x0}})

5.0380897s ago: executing program 6 (id=6468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x70bd2c, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

27.800762ms ago: executing program 4 (id=6469):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x75, 0x0, 0x0)

0s ago: executing program 3 (id=6470):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0201000207000000000000000000000003000500000000000200000000000000000000000000000002001800000000ff"], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

sb 3-1: config 0 descriptor??
[  612.800000][ T5837] gspca_main: spca505-2.14.0 probing 041e:401d
[  613.119612][T17626] 8021q: adding VLAN 0 to HW filter on device bond1
[  613.348710][T17639] loop1: detected capacity change from 0 to 1024
[  613.372672][ T5837] gspca_spca505: reg write: error -71
[  613.378317][ T5837] spca505 3-1:0.55: probe with driver spca505 failed with error -5
[  613.388464][ T5837] usb 3-1: USB disconnect, device number 102
[  613.552605][ T5893] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  613.561875][T17639] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  613.583250][   T29] audit: type=1326 audit(1736567284.716:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17645 comm="syz.0.5044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x0
[  613.709689][T17650] loop5: detected capacity change from 0 to 16
[  613.722604][ T5834] UDF-fs: error (device loop1): udf_read_inode: (ino 840) failed !bh
[  613.732872][ T5893] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  613.742175][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  613.755142][ T5834] UDF-fs: error (device loop1): udf_read_inode: (ino 840) failed !bh
[  613.769230][ T5893] usb 4-1: config 0 descriptor??
[  613.774730][T17650] erofs (device loop5): mounted with root inode @ nid 36.
[  613.796397][ T5893] ums-realtek 4-1:0.0: USB Mass Storage device detected
[  613.852433][T17650] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  613.890138][T17650] erofs (device loop5): failed to decompress -57 in[61, 4035] out[1851]
[  613.921922][T17650] erofs (device loop5): read error -117 @ 43 of nid 36
[  614.039682][    T8] usb 4-1: USB disconnect, device number 94
[  614.718067][  T961] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  614.747599][T17663] loop2: detected capacity change from 0 to 32768
[  615.063807][  T961] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.094757][T17652] loop0: detected capacity change from 0 to 32768
[  615.334447][  T961] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.497244][   T29] audit: type=1326 audit(1736567286.616:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc5985d29 code=0x7ffc0000
[  615.511942][T17668] loop4: detected capacity change from 0 to 40427
[  615.535034][ T5837] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  615.605503][T17668] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  615.612753][T17668] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  615.635479][   T29] audit: type=1326 audit(1736567286.616:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7facc5985d29 code=0x7ffc0000
[  615.738967][   T29] audit: type=1326 audit(1736567286.616:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc5985d29 code=0x7ffc0000
[  615.749935][T17668] F2FS-fs (loop4): invalid crc value
[  615.816437][ T5837] usb 6-1: Using ep0 maxpacket: 8
[  615.878759][ T5837] usb 6-1: unable to get BOS descriptor or descriptor too short
[  615.889781][T17668] F2FS-fs (loop4): Found nat_bits in checkpoint
[  615.906030][ T5837] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  615.916008][   T29] audit: type=1326 audit(1736567286.616:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17677 comm="syz.2.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facc5985d29 code=0x7ffc0000
[  615.951044][ T5837] usb 6-1: config 1 interface 0 has no altsetting 0
[  615.995359][  T961] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.057642][ T5837] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  616.068121][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.082275][ T5837] usb 6-1: Product: syz
[  616.086475][ T5837] usb 6-1: Manufacturer: syz
[  616.091092][ T5837] usb 6-1: SerialNumber: syz
[  616.151385][T17675] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  616.172727][T17693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  616.221742][T17693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  616.246179][T17668] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  616.253690][T17668] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  616.257923][T17693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  616.443479][  T961] bridge_slave_1: left allmulticast mode
[  616.443609][ T5837] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8
[  616.450419][  T961] bridge_slave_1: left promiscuous mode
[  616.468845][  T961] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.479117][T17693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  616.561865][T17693] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  616.569416][T17693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  616.579185][ T5837] usb 6-1: USB disconnect, device number 86
[  616.608106][ T5837] usblp0: removed
[  616.653306][  T961] bridge_slave_0: left allmulticast mode
[  616.659184][  T961] bridge_slave_0: left promiscuous mode
[  616.692131][  T961] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.992410][ T5894] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  617.164282][ T5894] usb 3-1: Using ep0 maxpacket: 8
[  617.191573][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  617.231529][ T5894] usb 3-1: config 0 has no interfaces?
[  617.273212][ T5894] usb 3-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c
[  617.332552][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.340638][ T5894] usb 3-1: Product: syz
[  617.367704][ T5894] usb 3-1: Manufacturer: syz
[  617.399734][ T5894] usb 3-1: SerialNumber: syz
[  617.411527][ T5894] apple-mfi-fastcharge 3-1: config 0 descriptor??
[  617.667465][ T5891] apple-mfi-fastcharge 3-1: USB disconnect, device number 103
[  617.808459][T17740] loop4: detected capacity change from 0 to 8
[  617.998408][T17743] loop3: detected capacity change from 0 to 2048
[  618.031616][T17743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  618.681285][ T5830] Bluetooth: hci3: command tx timeout
[  618.774483][  T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  618.814040][T17769] loop5: detected capacity change from 0 to 256
[  618.821168][T17769] exfat: Deprecated parameter 'utf8'
[  618.840934][T17769] exfat: Deprecated parameter 'utf8'
[  618.878805][  T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  618.890624][T17769] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  618.946393][  T961] bond0 (unregistering): Released all slaves
[  619.033081][  T961] bond1 (unregistering): Released all slaves
[  619.240034][T17779] loop5: detected capacity change from 0 to 2048
[  619.352664][ T5891] usb 4-1: new full-speed USB device number 95 using dummy_hcd
[  619.479607][T17779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.584121][T17779] ext4 filesystem being mounted at /896/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  619.673901][ T5891] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  619.682013][ T5891] usb 4-1: config 0 has no interface number 0
[  619.697785][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.737699][ T5891] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  619.755715][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.764724][ T5891] usb 4-1: Product: syz
[  619.768937][ T5891] usb 4-1: Manufacturer: syz
[  619.773678][ T5891] usb 4-1: SerialNumber: syz
[  619.780813][T17796] loop0: detected capacity change from 0 to 256
[  619.785626][ T5891] usb 4-1: config 0 descriptor??
[  619.821100][T17796] MINIX-fs: mounting file system with errors, running fsck is recommended
[  620.017569][ T5891] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  620.032951][ T5891] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  620.232959][ T5893] usb 4-1: USB disconnect, device number 95
[  620.272880][T17810] loop2: detected capacity change from 0 to 1024
[  620.441842][T17810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  620.458741][T17810] EXT4-fs error (device loop2): __ext4_new_inode:1071: comm syz.2.5122: reserved inode found cleared - inode=18
[  620.531636][T17821] loop4: detected capacity change from 0 to 512
[  620.740958][T17821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.763114][ T5830] Bluetooth: hci3: command tx timeout
[  620.800872][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.818184][T17821] ext4 filesystem being mounted at /815/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  620.978678][T17841] loop5: detected capacity change from 0 to 8192
[  621.235676][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.477860][  T961] hsr_slave_0: left promiscuous mode
[  621.507302][T17859] loop4: detected capacity change from 0 to 1024
[  621.725146][  T961] hsr_slave_1: left promiscuous mode
[  621.773298][  T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  621.781007][  T961] batman_adv: batadv0: Removing interface: batadv_slave_0
[  621.858354][T17868] loop5: detected capacity change from 0 to 64
[  621.868007][  T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  621.891277][  T961] batman_adv: batadv0: Removing interface: batadv_slave_1
[  622.009979][T17844] loop2: detected capacity change from 0 to 32768
[  622.012252][  T961] veth1_macvtap: left promiscuous mode
[  622.017822][ T1103] hfsplus: b-tree write err: -5, ino 4
[  622.026887][  T961] veth0_macvtap: left promiscuous mode
[  622.083077][T17868] hfs: request for non-existent node 16777216 in B*Tree
[  622.127423][T17881] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  622.165281][T17868] hfs: request for non-existent node 16777216 in B*Tree
[  622.176319][T17868] hfs: request for non-existent node 16777216 in B*Tree
[  622.185554][T17868] hfs: request for non-existent node 16777216 in B*Tree
[  622.240855][  T961] veth1_vlan: left promiscuous mode
[  622.242464][T17844] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  622.268852][T17844] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  622.277283][T17844] bcachefs (loop2): Version upgrade required:
[  622.277283][T17844] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  622.277283][T17844] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  622.277283][T17844]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  622.322717][  T961] veth0_vlan: left promiscuous mode
[  622.348664][    C0] vkms_vblank_simulate: vblank timer overrun
[  622.400254][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5147'.
[  622.450934][T17844] bcachefs (loop2): dropping and reconstructing all alloc info
[  622.496190][T17844] bcachefs (loop2): check_topology... done
[  622.518213][T17844] bcachefs (loop2): accounting_read...
[  622.537233][   T29] audit: type=1326 audit(1736567293.729:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17893 comm="syz.0.5150" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x0
[  622.594697][T17844]  done
[  622.598042][T17844] bcachefs (loop2): alloc_read... done
[  622.614203][T17844] bcachefs (loop2): stripes_read... done
[  622.635780][T17844] bcachefs (loop2): snapshots_read... done
[  622.668875][T17844] bcachefs (loop2): check_allocations... done
[  622.740586][T17844] bcachefs (loop2): going read-write
[  622.775586][T17844] bcachefs (loop2): done starting filesystem
[  622.842867][ T5830] Bluetooth: hci3: command tx timeout
[  623.116376][ T5831] bcachefs (loop2): shutting down
[  623.121595][ T5831] bcachefs (loop2): going read-only
[  623.144205][T17910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5158'.
[  623.159394][ T5831] bcachefs (loop2): finished waiting for writes to stop
[  623.234411][ T5831] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11
[  623.276131][ T5831] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12
[  623.328158][ T5831] bcachefs (loop2): unshutdown complete, journal seq 13
[  623.337480][ T5831] bcachefs (loop2): done going read-only, filesystem not clean
[  623.445625][ T5831] bcachefs (loop2): shutdown complete
[  623.991031][  T961] team0 (unregistering): Port device team_slave_1 removed
[  624.070658][  T961] team0 (unregistering): Port device team_slave_0 removed
[  624.277532][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  624.284489][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  624.912525][ T5830] Bluetooth: hci3: command tx timeout
[  625.090936][T17939] loop4: detected capacity change from 0 to 256
[  625.121436][T17938] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  625.279916][T17692] chnl_net:caif_netlink_parms(): no params data found
[  625.531620][T17957] loop5: detected capacity change from 0 to 128
[  625.629599][T17692] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.712369][T17692] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.740846][T17692] bridge_slave_0: entered allmulticast mode
[  625.773908][T17692] bridge_slave_0: entered promiscuous mode
[  625.852014][T17692] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.887892][T17692] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.920265][T17692] bridge_slave_1: entered allmulticast mode
[  625.969113][T17692] bridge_slave_1: entered promiscuous mode
[  625.984089][T17973] loop2: detected capacity change from 0 to 16
[  626.019517][T17973] erofs (device loop2): mounted with root inode @ nid 36.
[  626.037729][T17973] syz.2.5180: attempt to access beyond end of device
[  626.037729][T17973] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[  626.053275][T17973] erofs (device loop2): read error -5 @ 0 of nid 36
[  626.537941][T17692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  626.645046][T17692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  626.696355][ T5837] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  626.865378][ T5837] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  626.874560][ T5837] usb 4-1: config 0 has no interface number 0
[  626.880695][ T5837] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  626.921227][ T5837] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  626.967060][ T5837] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  626.982257][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  627.018487][T17692] team0: Port device team_slave_0 added
[  627.033121][ T5837] usb 4-1: Product: syz
[  627.045221][ T5837] usb 4-1: Manufacturer: syz
[  627.093265][ T5837] usb 4-1: SerialNumber: syz
[  627.116537][ T5837] usb 4-1: config 0 descriptor??
[  627.145142][T17979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  627.181056][ T5837] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  627.206348][T17692] team0: Port device team_slave_1 added
[  627.226883][ T5837] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  627.494432][T17692] batman_adv: batadv0: Adding interface: batadv_slave_0
[  627.501502][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.620913][T17692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  627.680409][T17692] batman_adv: batadv0: Adding interface: batadv_slave_1
[  627.710861][T17692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  627.734058][ T5946] usb 4-1: USB disconnect, device number 96
[  627.749374][ T5946] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  627.760697][ T5946] cyberjack 4-1:0.69: device disconnected
[  627.802897][T17692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  627.872796][ T5932] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  627.999058][T17692] hsr_slave_0: entered promiscuous mode
[  628.030476][T17692] hsr_slave_1: entered promiscuous mode
[  628.038367][ T5932] usb 1-1: config 0 has an invalid interface number: 135 but max is 0
[  628.052351][ T5932] usb 1-1: config 0 has no interface number 0
[  628.067297][ T5932] usb 1-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[  628.082451][T17692] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  628.102147][T17692] Cannot create hsr debugfs directory
[  628.108638][ T5932] usb 1-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  628.141410][ T5932] usb 1-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65
[  628.154589][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.192464][ T5932] usb 1-1: Product: syz
[  628.196706][ T5932] usb 1-1: Manufacturer: syz
[  628.201334][ T5932] usb 1-1: SerialNumber: syz
[  628.255367][ T5932] usb 1-1: config 0 descriptor??
[  628.277443][T18025] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  628.298541][T18025] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  628.429699][T18051] netlink: 'syz.3.5207': attribute type 9 has an invalid length.
[  628.538477][T18025] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  628.561878][T18025] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  628.700785][T17692] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  628.764241][T17692] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  628.783557][ T5932] asix 1-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  628.795208][ T5932] asix 1-1:0.135: probe with driver asix failed with error -71
[  628.806047][T17692] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  628.834087][ T5932] usb 1-1: USB disconnect, device number 84
[  628.866911][T17692] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  628.887351][T18055] loop4: detected capacity change from 0 to 4096
[  629.261187][T17692] 8021q: adding VLAN 0 to HW filter on device bond0
[  629.423642][T17692] 8021q: adding VLAN 0 to HW filter on device team0
[  629.562688][  T961] bridge0: port 1(bridge_slave_0) entered blocking state
[  629.569909][  T961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  629.623354][  T961] bridge0: port 2(bridge_slave_1) entered blocking state
[  629.630510][  T961] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.777022][T18088] Timeout policy `syz0' can only be used by L3 protocol number 247
[  629.819192][T18091] loop2: detected capacity change from 0 to 64
[  629.829995][T17692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  630.038404][T18098] loop4: detected capacity change from 0 to 512
[  630.050979][T18098] EXT4-fs: Ignoring removed orlov option
[  630.060414][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5225'.
[  630.202931][T18098] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.5224: Attempting to read directory block (0) that is past i_size (256)
[  630.239568][T18107] loop3: detected capacity change from 0 to 64
[  630.283827][T18098] EXT4-fs (loop4): Remounting filesystem read-only
[  630.290438][T18098] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  630.365454][T18098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.660560][T17692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.672955][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5234'.
[  630.816034][T18131] netlink: 'syz.5.5231': attribute type 2 has an invalid length.
[  631.079917][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.903085][T18179] netlink: 'syz.3.5251': attribute type 32 has an invalid length.
[  631.935933][T18179] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5251'.
[  631.993878][T17692] veth0_vlan: entered promiscuous mode
[  632.084552][T17692] veth1_vlan: entered promiscuous mode
[  632.148797][T17692] veth0_macvtap: entered promiscuous mode
[  632.234720][T17692] veth1_macvtap: entered promiscuous mode
[  632.341906][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.384881][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.414798][T18198] loop2: detected capacity change from 0 to 2048
[  632.453993][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.482312][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.495042][T18198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  632.551509][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.582682][T18206] ecryptfs: Unknown parameter '&@'
[  632.590519][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.653559][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.722435][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.768776][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  632.797187][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  632.829193][T17692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  632.967182][T18217] loop0: detected capacity change from 0 to 1024
[  633.069185][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.174087][T18216] loop4: detected capacity change from 0 to 32768
[  633.183083][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.193313][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.203853][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.213802][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.224885][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.234962][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.245626][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.255525][T17692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.266576][T17692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.278086][T17692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.304307][T17692] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.313401][T17692] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.322495][T17692] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.331696][T17692] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.357137][ T1103] hfsplus: b-tree write err: -5, ino 4
[  633.451812][T18226] Invalid ELF header magic: != ELF
[  633.453399][T18216] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  633.512444][ T5837] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  633.672391][ T5837] usb 3-1: Using ep0 maxpacket: 32
[  633.701328][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  633.710011][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  633.729889][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  633.752384][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  633.778117][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  633.789196][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.836642][ T5827] ocfs2: Unmounting device (7,4) on (node local)
[  633.838995][ T5837] usb 3-1: config 0 descriptor??
[  633.869154][ T5837] hub 3-1:0.0: USB hub found
[  633.897612][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  633.942522][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.026789][T18240] process 'syz.5.5280' launched './file0' with NULL argv: empty string added
[  634.077553][ T5837] hub 3-1:0.0: 12 ports detected
[  634.104627][ T5837] hub 3-1:0.0: insufficient power available to use all downstream ports
[  634.289206][ T5837] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  634.317933][ T5837] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  634.366711][ T5837] usbhid 3-1:0.0: can't add hid device: -71
[  634.393808][ T5837] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  634.468703][ T5837] usb 3-1: USB disconnect, device number 104
[  635.492346][ T5837] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  635.654064][ T5837] usb 7-1: too many endpoints for config 0 interface 0 altsetting 4: 128, using maximum allowed: 30
[  635.682266][ T5837] usb 7-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 128
[  635.762268][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0
[  635.768987][ T5837] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  635.904454][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.961508][ T5837] usb 7-1: config 0 descriptor??
[  636.221213][ T5837] usb 7-1: string descriptor 0 read error: -71
[  636.249097][ T5837] ums-realtek 7-1:0.0: USB Mass Storage device detected
[  636.353766][T18281] loop4: detected capacity change from 0 to 32768
[  636.436877][ T5837] usb 7-1: USB disconnect, device number 2
[  636.476659][T18281] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  636.592682][ T5932] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  636.710817][T18281] XFS (loop4): Ending clean mount
[  636.717314][T18334] trusted_key: encrypted_key: keylen parameter is missing
[  636.772407][ T5932] usb 1-1: Using ep0 maxpacket: 16
[  636.790133][ T5932] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  636.843064][ T5932] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89
[  636.889455][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.913656][ T5827] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  636.915685][ T5932] usb 1-1: Product: syz
[  636.953744][ T5932] usb 1-1: Manufacturer: syz
[  636.958461][ T5932] usb 1-1: SerialNumber: syz
[  637.015549][T18299] loop3: detected capacity change from 0 to 32768
[  637.056116][T18299] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5298 (18299)
[  637.064928][ T5932] usb 1-1: config 0 descriptor??
[  637.130261][T18299] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  637.144525][T18299] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  637.233259][T18299] BTRFS info (device loop3): using free-space-tree
[  637.266542][T18309] loop2: detected capacity change from 0 to 32768
[  637.278627][ T5932] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  637.449421][T18309] (syz.2.5302,18309,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  637.482815][T18309] (syz.2.5302,18309,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  637.658037][ T5932] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  637.667343][ T5932] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  637.692169][T18309] JBD2: Ignoring recovery information on journal
[  637.730444][ T5932] usb 1-1: USB disconnect, device number 85
[  637.819595][T18309] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  638.185468][ T5842] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  638.202079][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[  638.762448][T18386] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5317'.
[  639.100558][T18350] loop6: detected capacity change from 0 to 32768
[  639.124280][T18399] loop2: detected capacity change from 0 to 16
[  639.175660][T18399] erofs (device loop2): mounted with root inode @ nid 36.
[  639.324390][T18404] loop3: detected capacity change from 0 to 1024
[  639.746225][T18419] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  639.782323][T18419] overlayfs: conflicting options: userxattr,redirect_dir=on
[  640.140653][T18432] loop4: detected capacity change from 0 to 1024
[  640.398043][T18442] loop3: detected capacity change from 0 to 512
[  640.466228][T18442] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  640.525751][T18442] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.5339: attempt to clear invalid blocks 2 len 1
[  640.550554][T18432] hfsplus: extend alloc file! (16384,256,150995124)
[  640.608165][T18442] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  640.704471][T18442] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5339: invalid indirect mapped block 1819239214 (level 0)
[  640.707586][T18457] loop5: detected capacity change from 0 to 128
[  640.768871][T18442] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5339: invalid indirect mapped block 1819239214 (level 1)
[  640.883152][T18442] EXT4-fs (loop3): 1 truncate cleaned up
[  640.889880][T18442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  641.380242][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.427369][T18487] loop5: detected capacity change from 0 to 256
[  641.472077][T18489] usb usb1: usbfs: process 18489 (syz.2.5357) did not claim interface 0 before use
[  641.681044][T18497] No such timeout policy "syz0"
[  642.086572][T18512] loop4: detected capacity change from 0 to 256
[  642.187132][T18512] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  642.205273][T18515] overlayfs: disabling nfs_export due to verity=require
[  642.235218][T18515] overlayfs: missing 'lowerdir'
[  642.642644][T18491] loop0: detected capacity change from 0 to 32768
[  643.322597][ T5837] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  643.522339][ T5837] usb 7-1: Using ep0 maxpacket: 16
[  643.529562][ T5837] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  643.538791][ T5837] usb 7-1: config 0 has no interface number 0
[  643.547868][ T5837] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  643.557697][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.571654][T18568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5386'.
[  643.578249][ T5837] usb 7-1: Product: syz
[  643.592267][ T5837] usb 7-1: Manufacturer: syz
[  643.596950][ T5837] usb 7-1: SerialNumber: syz
[  643.673869][ T5837] usb 7-1: config 0 descriptor??
[  644.064551][T18585] loop2: detected capacity change from 0 to 128
[  644.127754][T18585] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  644.245230][T18572] loop3: detected capacity change from 0 to 8
[  644.263955][T18585] FAT-fs (loop2): bogus number of FAT sectors
[  644.270156][T18585] FAT-fs (loop2): Can't find a valid FAT filesystem
[  644.341153][T18585] nfs4: Unexpected value for 'tcp'
[  644.363106][T18572] SQUASHFS error: zlib decompression failed, data probably corrupt
[  644.371359][T18572] SQUASHFS error: Failed to read block 0x9b: -5
[  644.405402][T18572] SQUASHFS error: Unable to read metadata cache entry [99]
[  644.475627][T18572] SQUASHFS error: Unable to read inode 0x127
[  644.599915][T18572] tmpfs: Bad value for 'mpol'
[  645.001490][T18594] loop0: detected capacity change from 0 to 1764
[  645.472592][ T5837] usb 7-1: selecting invalid altsetting 1
[  645.478492][ T5837] speedtch 7-1:0.1: speedtch_bind: setting interface to  1 failed (-22)!
[  645.487091][ T5837] speedtch 7-1:0.1: usbatm_usb_probe: bind failed: -22!
[  645.494168][ T5837] speedtch 7-1:0.1: probe with driver speedtch failed with error -22
[  645.742350][ T5837] usb 7-1: USB disconnect, device number 3
[  646.081467][T18620] loop5: detected capacity change from 0 to 16
[  646.158192][T18625] ipt_REJECT: TCP_RESET invalid for non-tcp
[  646.253793][T18620] erofs (device loop5): mounted with root inode @ nid 36.
[  646.415861][T18635] openvswitch: netlink: IPv4 tunnel dst address is zero
[  646.842344][ T5946] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  647.006007][ T5946] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  647.041704][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.090195][ T5946] usb 4-1: config 0 descriptor??
[  647.117784][ T5946] cp210x 4-1:0.0: cp210x converter detected
[  647.303826][T18666] IPVS: length: 121 != 8
[  647.382623][T18669] netlink: 'syz.4.5429': attribute type 10 has an invalid length.
[  647.440304][T18669] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5429'.
[  647.476611][T18674] loop0: detected capacity change from 0 to 256
[  647.484487][T18669] batman_adv: batadv0: Adding interface: vlan1
[  647.532301][ T5946] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  647.540439][T18669] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  647.582839][ T5946] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  647.590607][ T5946] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  647.602608][T18669] batman_adv: batadv0: Interface activated: vlan1
[  647.648063][ T5946] usb 4-1: cp210x converter now attached to ttyUSB0
[  647.682550][T18674] FAT-fs (loop0): Directory bread(block 64) failed
[  647.692297][ T5946] usb 4-1: USB disconnect, device number 97
[  647.710930][T18679] loop5: detected capacity change from 0 to 64
[  647.723536][T18674] FAT-fs (loop0): Directory bread(block 65) failed
[  647.754931][T18674] FAT-fs (loop0): Directory bread(block 66) failed
[  647.761603][T18674] FAT-fs (loop0): Directory bread(block 67) failed
[  647.768935][ T5946] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  647.806131][ T5946] cp210x 4-1:0.0: device disconnected
[  647.830967][T18674] FAT-fs (loop0): Directory bread(block 68) failed
[  647.872901][T18674] FAT-fs (loop0): Directory bread(block 69) failed
[  647.894989][T18674] FAT-fs (loop0): Directory bread(block 70) failed
[  647.911146][T18674] FAT-fs (loop0): Directory bread(block 71) failed
[  647.927379][T18674] FAT-fs (loop0): Directory bread(block 72) failed
[  647.987225][T18674] FAT-fs (loop0): Directory bread(block 73) failed
[  648.160670][T18638] loop2: detected capacity change from 0 to 32768
[  648.229214][T18638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5417 (18638)
[  648.258742][T18638] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  648.258837][T18638] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  648.258876][T18638] BTRFS info (device loop2): using free-space-tree
[  648.412049][T18713] loop4: detected capacity change from 0 to 64
[  648.418702][T18713] hfs: bad allocation block size 272
[  648.418761][T18713] hfs: can't find a HFS filesystem on dev loop4
[  648.524467][T18715] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5442'.
[  648.524507][T18715] netlink: 'syz.6.5442': attribute type 2 has an invalid length.
[  648.524567][T18715] netlink: 'syz.6.5442': attribute type 1 has an invalid length.
[  648.524587][T18715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5442'.
[  648.782350][T18727] netlink: 'syz.6.5443': attribute type 64 has an invalid length.
[  648.782382][T18727] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5443'.
[  648.842008][ T5831] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  648.873804][T18723] netlink: 604 bytes leftover after parsing attributes in process `syz.5.5441'.
[  649.100537][T18734] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5448'.
[  649.100608][T18734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5448'.
[  649.322590][   T29] audit: type=1326 audit(649.080:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18738 comm="syz.5.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  649.447881][   T29] audit: type=1326 audit(649.080:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18738 comm="syz.5.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  649.586368][   T29] audit: type=1326 audit(649.110:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18738 comm="syz.5.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  649.682295][   T29] audit: type=1326 audit(649.110:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18738 comm="syz.5.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  649.715423][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5453'.
[  649.737888][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5453'.
[  649.752265][   T29] audit: type=1326 audit(649.110:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18738 comm="syz.5.5449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  649.765406][T18752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5453'.
[  649.884908][T18713] loop4: detected capacity change from 0 to 32768
[  649.894416][T18713] JFS: Invalid value of umask
[  650.256879][T18773] loop4: detected capacity change from 0 to 4096
[  650.731986][T18784] netlink: 'syz.0.5465': attribute type 1 has an invalid length.
[  651.743348][T18809] loop4: detected capacity change from 0 to 256
[  651.794015][T18789] loop2: detected capacity change from 0 to 32768
[  651.801898][T18789] XFS: attr2 mount option is deprecated.
[  651.870605][T18776] loop5: detected capacity change from 0 to 32768
[  651.891042][T18776] ERROR: (device loop5): xtTruncate: XT_GETPAGE: xtree page corrupt
[  651.891042][T18776] 
[  651.899681][   T29] audit: type=1800 audit(651.610:87): pid=18809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5475" name="file1" dev="loop4" ino=1048640 res=0 errno=0
[  652.021020][T18822] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 38593 - 0
[  652.042525][T18776] ERROR: (device loop5): remounting filesystem as read-only
[  652.101655][T18822] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 38593 - 0
[  652.136002][T18789] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  652.148925][T18782] loop3: detected capacity change from 0 to 32768
[  652.168198][T18782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5464 (18782)
[  652.181498][T18822] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 38593 - 0
[  652.234608][T18822] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 38593 - 0
[  652.259549][T18822] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 36656 - 0
[  652.303079][T18822] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 36656 - 0
[  652.323941][T18822] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 36656 - 0
[  652.335928][T18782] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  652.352680][T18822] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 36656 - 0
[  652.364558][T18822] geneve2: entered promiscuous mode
[  652.369813][T18822] geneve2: entered allmulticast mode
[  652.453592][T18835] __nla_validate_parse: 3 callbacks suppressed
[  652.453620][T18835] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5480'.
[  652.464891][T18782] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  652.514873][T18782] BTRFS info (device loop3): using free-space-tree
[  652.646586][T18789] XFS (loop2): Quotacheck needed: Please wait.
[  652.665398][T18840] loop5: detected capacity change from 0 to 64
[  653.092345][T18789] XFS (loop2): Quotacheck: Done.
[  653.145616][T18855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5484'.
[  653.230179][T18789] XFS (loop2): syz.2.5468 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  653.342727][ T5831] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  653.682771][T18782] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  653.702601][T18782] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  653.856310][T18782] BTRFS error (device loop3): open_ctree failed
[  654.168492][T18887] loop0: detected capacity change from 0 to 1024
[  654.254973][T18887] hfsplus: catalog name length corrupted
[  654.565229][T18900] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  655.877786][T18951] loop3: detected capacity change from 0 to 256
[  655.970898][T18951] exfat: Deprecated parameter 'namecase'
[  656.042764][T18951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  656.073598][T18954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5516'.
[  656.188495][T18967] netlink: 'syz.5.5522': attribute type 11 has an invalid length.
[  656.197157][T18967] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5522'.
[  656.493425][T18975] loop6: detected capacity change from 0 to 64
[  656.832447][ T5837] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  657.040035][ T5837] usb 7-1: config 0 has an invalid interface number: 147 but max is 0
[  657.051146][ T5837] usb 7-1: config 0 has no interface number 0
[  657.089671][ T5837] usb 7-1: too many endpoints for config 0 interface 147 altsetting 27: 169, using maximum allowed: 30
[  657.089727][ T5837] usb 7-1: config 0 interface 147 altsetting 27 has 0 endpoint descriptors, different from the interface descriptor's value: 169
[  657.089767][ T5837] usb 7-1: config 0 interface 147 has no altsetting 0
[  657.204341][T18965] loop2: detected capacity change from 0 to 40427
[  657.257514][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5534'.
[  657.257787][T19004] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511)
[  657.257850][T19004] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  657.286354][T18965] F2FS-fs (loop2): invalid crc value
[  657.290455][T18965] F2FS-fs (loop2): Found nat_bits in checkpoint
[  657.513683][ T5837] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  657.513730][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.513760][ T5837] usb 7-1: Product: syz
[  657.513782][ T5837] usb 7-1: Manufacturer: syz
[  657.513804][ T5837] usb 7-1: SerialNumber: syz
[  657.559253][ T5837] usb 7-1: config 0 descriptor??
[  657.563515][T18965] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  657.636619][T18965] F2FS-fs (loop2): Corrupted max_depth of 3: 1025
[  657.649605][T18965] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  657.840399][ T5837] usb 7-1: USB disconnect, device number 4
[  658.422433][ T5946] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  658.586296][T19059] loop0: detected capacity change from 0 to 8
[  658.622334][ T5946] usb 6-1: Using ep0 maxpacket: 8
[  658.835633][T19071] loop6: detected capacity change from 0 to 128
[  658.917678][ T5946] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  658.927007][ T5946] usb 6-1: config 179 has no interface number 0
[  658.932769][T19071] VFS: Found a Xenix FS (block size = 1024) on device loop6
[  658.933612][ T5946] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  658.955785][ T5946] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  658.967934][ T5946] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  658.969531][T19071] syz.6.5557: attempt to access beyond end of device
[  658.969531][T19071] loop6: rw=0, sector=6491536, nr_sectors = 2 limit=128
[  658.979978][ T5946] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  659.005163][ T5946] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  659.018807][ T5946] usb 6-1: config 179 interface 65 has no altsetting 0
[  659.025781][ T5946] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  659.034970][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.094577][T19071] Buffer I/O error on dev loop6, logical block 3245768, async page read
[  659.100518][ T5946] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input45
[  659.123765][ T5837] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  659.262427][ T5185] input input45: unable to receive magic message: -110
[  659.285756][ T5837] usb 4-1: Using ep0 maxpacket: 32
[  659.323734][T19079] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  659.354511][ T5837] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  659.365440][ T5185] input input45: unable to receive magic message: -32
[  659.372528][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.0.5560 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  659.375498][T17692] sysv_free_block: flc_count > flc_size
[  659.383318][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  659.383381][T19079] Call Trace:
[  659.383396][T19079]  <TASK>
[  659.383410][T19079]  dump_stack_lvl+0x241/0x360
[  659.383464][T19079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  659.383508][T19079]  ? __pfx__printk+0x10/0x10
[  659.392259][ T5837] usb 4-1: config 0 has no interface number 0
[  659.399557][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.399613][T19079]  ? __kmalloc_cache_noprof+0x243/0x390
[  659.417866][T17692] sysv_free_block: flc_count > flc_size
[  659.420464][T19079]  ? sysfs_warn_dup+0x51/0xa0
[  659.426904][ T5837] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  659.432236][T19079]  sysfs_warn_dup+0x8e/0xa0
[  659.432282][T19079]  sysfs_do_create_link_sd+0xbe/0x110
[  659.432317][T19079]  device_add_class_symlinks+0x1c5/0x250
[  659.432357][T19079]  device_add+0x553/0xbf0
[  659.432402][T19079]  wiphy_register+0x1a58/0x27b0
[  659.432456][T19079]  ? __pfx_wiphy_register+0x10/0x10
[  659.432487][T19079]  ? minstrel_ht_alloc+0x72b/0x860
[  659.432538][T19079]  ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620
[  659.432596][T19079]  ieee80211_register_hw+0x30fb/0x3e10
[  659.432630][T19079]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  659.432695][T19079]  ? ieee80211_register_hw+0x14d1/0x3e10
[  659.516768][T19079]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  659.522639][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.528300][T19079]  ? __asan_memset+0x23/0x50
[  659.533343][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.539000][T19079]  ? __hrtimer_init+0x170/0x250
[  659.543899][T19079]  mac80211_hwsim_new_radio+0x2a9f/0x4a90
[  659.549703][T19079]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  659.555824][T19079]  ? kstrndup+0x5c/0xb0
[  659.560026][T19079]  ? __asan_memcpy+0x40/0x70
[  659.564642][T19079]  hwsim_new_radio_nl+0xece/0x2290
[  659.569791][T19079]  ? __pfx___nla_validate_parse+0x10/0x10
[  659.575543][T19079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  659.581170][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.586850][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.592535][T19079]  genl_rcv_msg+0xb16/0xec0
[  659.597083][T19079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.602172][T19079]  ? __pfx_lock_acquire+0x10/0x10
[  659.607231][T19079]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  659.612822][T19079]  ? __pfx___might_resched+0x10/0x10
[  659.618147][T19079]  netlink_rcv_skb+0x1e5/0x430
[  659.622953][T19079]  ? __pfx_genl_rcv_msg+0x10/0x10
[  659.628189][T19079]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  659.633530][T19079]  genl_rcv+0x28/0x40
[  659.637705][T19079]  netlink_unicast+0x7f8/0x990
[  659.642508][T19079]  ? __pfx_netlink_unicast+0x10/0x10
[  659.647817][T19079]  ? __virt_addr_valid+0x45f/0x530
[  659.652952][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.658685][T19079]  ? __phys_addr_symbol+0x2f/0x70
[  659.663904][T19079]  ? __check_object_size+0x47a/0x730
[  659.669215][T19079]  netlink_sendmsg+0x8e4/0xcb0
[  659.674006][T19079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.679331][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.684985][T19079]  ? aa_sock_msg_perm+0x91/0x160
[  659.689943][T19079]  ? srso_alias_return_thunk+0x5/0xfbef5
[  659.695595][T19079]  ? __pfx_netlink_sendmsg+0x10/0x10
[  659.700898][T19079]  __sock_sendmsg+0x223/0x270
[  659.705608][T19079]  ____sys_sendmsg+0x52a/0x7e0
[  659.710400][T19079]  ? __pfx_____sys_sendmsg+0x10/0x10
[  659.715703][T19079]  ? __fget_files+0x2a/0x410
[  659.720404][T19079]  ? __fget_files+0x2a/0x410
[  659.725025][T19079]  __sys_sendmsg+0x269/0x350
[  659.729638][T19079]  ? __pfx___sys_sendmsg+0x10/0x10
[  659.734811][T19079]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  659.741158][T19079]  ? do_syscall_64+0x100/0x230
[  659.745982][T19079]  ? do_syscall_64+0xb6/0x230
[  659.750867][T19079]  do_syscall_64+0xf3/0x230
[  659.755409][T19079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  659.761503][T19079] RIP: 0033:0x7feb75d85d29
[  659.765929][T19079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  659.785580][T19079] RSP: 002b:00007feb76acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  659.794372][T19079] RAX: ffffffffffffffda RBX: 00007feb75f75fa0 RCX: 00007feb75d85d29
[  659.802354][T19079] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004
[  659.810332][T19079] RBP: 00007feb75e01b08 R08: 0000000000000000 R09: 0000000000000000
[  659.818400][T19079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  659.826472][T19079] R13: 0000000000000000 R14: 00007feb75f75fa0 R15: 00007ffec4dc2b88
[  659.834476][T19079]  </TASK>
[  659.844117][T17692] sysv_free_block: flc_count > flc_size
[  659.849754][T17692] sysv_free_block: flc_count > flc_size
[  659.855461][T17692] sysv_free_block: flc_count > flc_size
[  659.861063][T17692] sysv_free_block: flc_count > flc_size
[  659.882453][T17692] sysv_free_block: flc_count > flc_size
[  659.905113][T17692] sysv_free_block: flc_count > flc_size
[  659.910790][T17692] sysv_free_block: flc_count > flc_size
[  659.952446][T17692] sysv_free_block: flc_count > flc_size
[  659.958711][T17692] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  660.131581][ T5946] usb 6-1: USB disconnect, device number 87
[  660.137663][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  660.233194][ T5946] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  660.270904][ T5837] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=a2.8f
[  660.280229][ T5837] usb 4-1: New USB device strings: Mfr=28, Product=3, SerialNumber=0
[  660.288487][ T5837] usb 4-1: Product: syz
[  660.292763][ T5837] usb 4-1: Manufacturer: syz
[  660.342976][ T5837] usb 4-1: config 0 descriptor??
[  660.374142][ T5837] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  660.392714][ T5837] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  660.425440][T19094] netlink: 'syz.4.5567': attribute type 21 has an invalid length.
[  660.434042][T19094] IPv6: NLM_F_CREATE should be specified when creating new route
[  660.472598][T19094] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  660.479946][T19094] IPv6: NLM_F_CREATE should be set when creating new route
[  660.487284][T19094] IPv6: NLM_F_CREATE should be set when creating new route
[  660.494549][T19094] IPv6: NLM_F_CREATE should be set when creating new route
[  660.562531][ T5837] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  660.786317][ T5837] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71)
[  660.831589][T19103] IPVS: Unknown mcast interface: pim6reg0
[  660.896190][ T5837] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  661.037445][ T5837] usb 4-1: USB disconnect, device number 98
[  661.044535][ T5837] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  661.102742][T19114] binder: 19113:19114 ioctl c00c6211 9999999999999999 returned -14
[  661.561281][T19092] loop6: detected capacity change from 0 to 32768
[  662.151286][T19092] jfs_strtoUCS: char2uni returned -22.
[  662.158379][T19092] charset = ascii, char = 0xc5
[  663.055894][T19196] netlink: 'syz.2.5600': attribute type 11 has an invalid length.
[  663.359038][T19193] loop3: detected capacity change from 0 to 1764
[  663.403326][T19193] iso9660: Corrupted directory entry in block 14 of inode 1920
[  663.449860][T19212] netlink: 'syz.6.5608': attribute type 3 has an invalid length.
[  664.281078][T19153] loop0: detected capacity change from 0 to 32768
[  664.307853][T19153] XFS: attr2 mount option is deprecated.
[  664.478263][T19238] loop4: detected capacity change from 0 to 256
[  664.591388][T19231] loop2: detected capacity change from 0 to 32768
[  664.624292][T19231] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt
[  664.624292][T19231] 
[  664.636141][T19231] xtLookup: xtSearch returned -5
[  664.641123][T19231] add_index: get/read_metapage failed!
[  664.697825][T19153] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  664.708201][T19153] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  664.930617][T19153] XFS (loop0): Ending clean mount
[  664.948102][T19153] XFS (loop0): Quotacheck needed: Please wait.
[  665.181368][T19153] XFS (loop0): Quotacheck: Done.
[  665.252353][T19271] xt_l2tp: invalid flags combination: c
[  665.423944][T19280] No such timeout policy "syz1"
[  665.519578][T19277] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  665.636671][ T5826] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  665.640252][T19277] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  666.035480][T19297] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  666.042082][T19297] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  666.072446][T19297] vhci_hcd vhci_hcd.0: Device attached
[  666.156433][T19307] loop4: detected capacity change from 0 to 512
[  666.233379][T19307] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  666.302644][ T5895] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  666.312344][T14329] usb 45-1: new high-speed USB device number 2 using vhci_hcd
[  666.468629][T19307] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.5641: iget: bad i_size value: -67835469387268086
[  666.493047][ T5895] usb 7-1: Using ep0 maxpacket: 8
[  666.520462][T19307] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5641: couldn't read orphan inode 15 (err -117)
[  666.547798][ T5895] usb 7-1: unable to get BOS descriptor or descriptor too short
[  666.586568][ T5895] usb 7-1: config 4 interface 0 has no altsetting 0
[  666.619569][T19307] EXT4-fs (loop4): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  666.713780][T19327] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  666.725198][T19327] exFAT-fs (nullb0): invalid boot record signature
[  666.731738][T19327] exFAT-fs (nullb0): failed to read boot sector
[  666.738667][T19327] exFAT-fs (nullb0): failed to recognize exfat type
[  666.792499][ T5895] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  666.801614][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.824903][ T5895] usb 7-1: Product: syz
[  666.829152][ T5895] usb 7-1: Manufacturer: syz
[  666.834201][ T5895] usb 7-1: SerialNumber: syz
[  666.880577][T19307] EXT4-fs error (device loop4): ext4_add_entry:2444: inode #2: comm syz.4.5641: Directory hole found for htree leaf block 0
[  667.068878][ T5895] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  667.090242][T19301] vhci_hcd: connection reset by peer
[  667.170884][ T1146] vhci_hcd: stop threads
[  667.175673][ T1146] vhci_hcd: release socket
[  667.210447][ T1146] vhci_hcd: disconnect device
[  667.371228][ T5827] EXT4-fs (loop4): unmounting filesystem f7ff0000-0000-0000-0000-000000000000.
[  667.457982][ T5895] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  667.525339][ T5895] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  667.577152][ T5895] usb 7-1: media controller created
[  667.625115][T19359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5658'.
[  667.644694][T19366] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.672527][T19359] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5658'.
[  667.682677][T19359] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5658'.
[  667.757468][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  667.832505][ T5895] zl10353_read_register: readreg error (reg=127, ret==0)
[  667.863280][ T5932] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  667.993522][ T5895] usb 7-1: USB disconnect, device number 5
[  668.068733][ T5932] usb 3-1: Using ep0 maxpacket: 32
[  668.094343][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  668.131281][ T5932] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01
[  668.172859][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.219751][ T5932] usb 3-1: Product: syz
[  668.225691][ T5932] usb 3-1: Manufacturer: syz
[  668.244999][ T5932] usb 3-1: SerialNumber: syz
[  668.275939][ T5932] usb 3-1: config 0 descriptor??
[  668.502692][ T5932] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  668.542447][ T5895] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  668.711934][ T5837] usb 3-1: USB disconnect, device number 105
[  668.718371][ T5895] usb 7-1: Using ep0 maxpacket: 32
[  668.744571][ T5895] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  668.772878][ T5895] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  668.821981][ T5895] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  668.866497][ T5895] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  668.923641][ T5895] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  668.947645][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  668.966938][ T5895] usb 7-1: Product: syz
[  668.976089][ T5895] usb 7-1: Manufacturer: syz
[  669.005928][ T5895] usb 7-1: SerialNumber: syz
[  669.037947][ T5895] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input46
[  669.211082][T19417] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5680'.
[  669.248594][T19417] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5680'.
[  669.285753][ T5837] usb 7-1: USB disconnect, device number 6
[  669.417959][ T5837] appletouch 7-1:1.0: input: appletouch disconnected
[  669.510134][T19424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5682'.
[  669.527151][T19426] ip6t_REJECT: ECHOREPLY is not supported
[  669.837792][T19438] loop5: detected capacity change from 0 to 256
[  670.221677][T19455] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  670.302321][ T5894] usb 4-1: new low-speed USB device number 99 using dummy_hcd
[  670.309994][ T5837] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  670.502999][ T5894] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  670.545588][ T5894] usb 4-1: config 0 has no interface number 0
[  670.562531][ T5837] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  670.571652][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.590251][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  670.605352][ T5837] usb 7-1: Product: syz
[  670.609557][ T5837] usb 7-1: Manufacturer: syz
[  670.624742][ T5894] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  670.645770][ T5837] usb 7-1: SerialNumber: syz
[  670.673212][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  670.693258][ T5837] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  670.738408][ T5894] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  670.773103][ T5891] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  670.817063][ T5894] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  670.857738][ T5894] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  670.928096][ T5894] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  670.982157][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.086636][ T5894] usb 4-1: config 0 descriptor??
[  671.124624][T19448] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  671.157079][ T5894] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  671.482473][T14329] vhci_hcd: vhci_device speed not set
[  671.561026][T19448] ldusb 4-1:0.55: Couldn't submit interrupt_in_urb -90
[  671.606109][ T5932] usb 4-1: USB disconnect, device number 99
[  671.652740][ T5932] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  672.435611][T19501] loop2: detected capacity change from 0 to 2048
[  672.562956][T19501] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  672.682591][T19501] UDF-fs: Scanning with blocksize 512 failed
[  672.841250][T19501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  673.012819][T19521] netlink: 'syz.5.5718': attribute type 2 has an invalid length.
[  673.101743][T19521] netlink: 'syz.5.5718': attribute type 1 has an invalid length.
[  673.243149][T19524] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  673.384907][ T5891] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  673.392020][ T5891] ath9k_htc: Failed to initialize the device
[  673.976169][T19537] loop5: detected capacity change from 0 to 256
[  674.431986][T19537] FAT-fs (loop5): Directory bread(block 64) failed
[  674.522550][T19537] FAT-fs (loop5): Directory bread(block 65) failed
[  674.615802][T19537] FAT-fs (loop5): Directory bread(block 66) failed
[  674.662456][T19537] FAT-fs (loop5): Directory bread(block 67) failed
[  674.669179][T19537] FAT-fs (loop5): Directory bread(block 68) failed
[  674.842728][T19537] FAT-fs (loop5): Directory bread(block 69) failed
[  674.849497][T19537] FAT-fs (loop5): Directory bread(block 70) failed
[  675.012530][T19537] FAT-fs (loop5): Directory bread(block 71) failed
[  675.072647][T19537] FAT-fs (loop5): Directory bread(block 72) failed
[  675.079271][T19537] FAT-fs (loop5): Directory bread(block 73) failed
[  676.037870][T19571] loop3: detected capacity change from 0 to 256
[  676.351365][T19571] FAT-fs (loop3): Directory bread(block 64) failed
[  676.461210][T19571] FAT-fs (loop3): Directory bread(block 65) failed
[  676.490719][T19576] openvswitch: netlink: Missing key (keys=40, expected=100)
[  676.527973][T19571] FAT-fs (loop3): Directory bread(block 66) failed
[  676.585447][T19571] FAT-fs (loop3): Directory bread(block 67) failed
[  676.683791][T19571] FAT-fs (loop3): Directory bread(block 68) failed
[  676.764646][T19571] FAT-fs (loop3): Directory bread(block 69) failed
[  676.771689][T19571] FAT-fs (loop3): Directory bread(block 70) failed
[  676.916109][T19571] FAT-fs (loop3): Directory bread(block 71) failed
[  676.993922][T19571] FAT-fs (loop3): Directory bread(block 72) failed
[  677.000561][T19571] FAT-fs (loop3): Directory bread(block 73) failed
[  677.281046][T19591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5742'.
[  677.404607][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5744'.
[  679.192522][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'.
[  680.096751][T19632] loop6: detected capacity change from 0 to 256
[  680.259074][T19637] loop0: detected capacity change from 0 to 8
[  680.327683][T19638] loop2: detected capacity change from 0 to 512
[  680.732298][T19638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  681.199753][T19638] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #12: block 31: comm syz.2.5765: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1
[  681.580078][T19638] EXT4-fs (loop2): Remounting filesystem read-only
[  681.644250][T19638] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz.2.5765: directory missing '..'
[  681.844756][T19657] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  681.900329][T19661] nftables ruleset with unbound chain
[  681.926312][T19657] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  681.971519][T19663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5775'.
[  682.113982][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  682.223008][T19663] gre0: entered allmulticast mode
[  685.561381][T19707] loop2: detected capacity change from 0 to 8192
[  685.715638][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  685.722423][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  685.773903][T19707] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  686.076342][T19707] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  686.175255][T19707] FAT-fs (loop2): Filesystem has been set read-only
[  686.282512][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5800'.
[  687.288734][T19750] loop6: detected capacity change from 0 to 512
[  687.412530][ T5932] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  687.458422][T19753] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  687.499249][T19750] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  687.571812][T19750] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  687.665908][T19750] EXT4-fs (loop6): orphan cleanup on readonly fs
[  687.686532][ T5932] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  687.710010][T19757] loop4: detected capacity change from 0 to 1764
[  687.770975][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.796220][T19750] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949761 > max in inode 13
[  687.888403][ T5932] usb 4-1: config 0 descriptor??
[  687.952923][T19750] EXT4-fs warning (device loop6): ext4_block_to_path:107: block 3279949762 > max in inode 13
[  688.083093][T19750] EXT4-fs (loop6): 1 truncate cleaned up
[  688.090163][T19750] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  688.491929][ T5932] ath6kl: Failed to submit usb control message: -71
[  688.517834][T19766] loop5: detected capacity change from 0 to 2048
[  688.583674][ T5932] ath6kl: unable to send the bmi data to the device: -71
[  688.590767][ T5932] ath6kl: Unable to send get target info: -71
[  688.732704][ T5932] ath6kl: Failed to init ath6kl core: -71
[  688.763709][T19766] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  688.811429][ T5932] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  688.950274][ T5932] usb 4-1: USB disconnect, device number 100
[  688.994321][T19772] loop4: detected capacity change from 0 to 256
[  689.330828][T19772] FAT-fs (loop4): Directory bread(block 64) failed
[  689.412422][T19772] FAT-fs (loop4): Directory bread(block 65) failed
[  689.419163][T19772] FAT-fs (loop4): Directory bread(block 66) failed
[  689.517215][T19772] FAT-fs (loop4): Directory bread(block 67) failed
[  689.592632][T19772] FAT-fs (loop4): Directory bread(block 68) failed
[  689.599317][T19772] FAT-fs (loop4): Directory bread(block 69) failed
[  689.639722][T17692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.752780][T19772] FAT-fs (loop4): Directory bread(block 70) failed
[  689.759429][T19772] FAT-fs (loop4): Directory bread(block 71) failed
[  689.936859][T19772] FAT-fs (loop4): Directory bread(block 72) failed
[  690.012370][T19772] FAT-fs (loop4): Directory bread(block 73) failed
[  690.376072][T19791] loop6: detected capacity change from 0 to 764
[  690.539990][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5822'.
[  691.543238][T19808] syz.4.5825 uses old SIOCAX25GETINFO
[  692.062894][T19816] loop0: detected capacity change from 0 to 128
[  692.522178][T19823] loop5: detected capacity change from 0 to 1764
[  692.537439][ T5826] sysv_free_block: flc_count > flc_size
[  692.643765][ T5826] sysv_free_block: flc_count > flc_size
[  692.649445][ T5826] sysv_free_block: flc_count > flc_size
[  692.759936][ T5826] sysv_free_block: flc_count > flc_size
[  692.801086][ T5826] sysv_free_block: flc_count > flc_size
[  692.890515][ T5826] sysv_free_block: flc_count > flc_size
[  692.939430][ T5826] sysv_free_block: flc_count > flc_size
[  693.007582][ T5826] sysv_free_block: flc_count > flc_size
[  693.073979][ T5826] sysv_free_block: flc_count > flc_size
[  693.139261][ T5826] sysv_free_block: flc_count > flc_size
[  693.185219][ T5826] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  693.661128][T19842] loop2: detected capacity change from 0 to 2048
[  693.824846][T19842] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  694.029612][T19847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  694.270090][T19842] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  694.407371][T19842] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16)
[  694.615764][T19842] Remounting filesystem read-only
[  694.683043][T19842] NILFS (loop2): error -5 truncating bmap (ino=16)
[  694.852564][T19856] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  695.003886][T19860] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  695.135222][ T5831] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  695.768262][T19873] xt_HMARK: spi-set and port-set can't be combined
[  697.419737][T19894] syz.3.5856: attempt to access beyond end of device
[  697.419737][T19894] loop3: rw=0, sector=2, nr_sectors = 2 limit=0
[  697.454932][T19896] geneve3: entered promiscuous mode
[  697.555271][T19896] geneve3: entered allmulticast mode
[  697.564753][T19894] syz.3.5856: attempt to access beyond end of device
[  697.564753][T19894] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  697.672068][T19894] syz.3.5856: attempt to access beyond end of device
[  697.672068][T19894] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  697.809207][T19894] syz.3.5856: attempt to access beyond end of device
[  697.809207][T19894] loop3: rw=0, sector=18, nr_sectors = 2 limit=0
[  698.002605][T19894] syz.3.5856: attempt to access beyond end of device
[  698.002605][T19894] loop3: rw=0, sector=30, nr_sectors = 2 limit=0
[  698.142664][T19894] syz.3.5856: attempt to access beyond end of device
[  698.142664][T19894] loop3: rw=0, sector=36, nr_sectors = 2 limit=0
[  698.341330][T19904] loop4: detected capacity change from 0 to 1024
[  698.453041][T19894] VFS: unable to find oldfs superblock on device loop3
[  698.519228][T19904] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  698.609501][T19906] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5862'.
[  698.621821][T19904] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  698.752460][T19904] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  698.904564][T19904] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: inode #5: comm syz.4.5861: unexpected bad inode w/o EXT4_IGET_BAD
[  699.071664][T19904] EXT4-fs (loop4): no journal found
[  699.122391][T19904] EXT4-fs (loop4): can't get journal size
[  699.193848][T19904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  700.033735][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.727654][   T29] audit: type=1326 audit(700.490:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  700.965438][   T29] audit: type=1326 audit(700.490:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  701.259172][   T29] audit: type=1326 audit(700.570:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  701.572472][   T29] audit: type=1326 audit(700.570:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  701.871114][   T29] audit: type=1326 audit(700.570:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19939 comm="syz.4.5871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  703.531193][T19986] loop5: detected capacity change from 0 to 1024
[  703.616994][T19990] loop0: detected capacity change from 0 to 8
[  703.836666][T19986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  703.936500][T19992] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5895'.
[  704.232547][T20001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5897'.
[  704.373080][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5897'.
[  704.623518][ T5836] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.707963][T20035] loop0: detected capacity change from 0 to 4096
[  706.832079][T20035] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  707.216643][T20035] ntfs3(loop0): failed to convert "c46c" to macceltic
[  708.042000][   T29] audit: type=1326 audit(707.800:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20056 comm="syz.0.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  708.101645][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5919'.
[  708.166027][T20060] loop3: detected capacity change from 0 to 16
[  708.232600][T20060] erofs (device loop3): mounted with root inode @ nid 36.
[  708.260434][   T29] audit: type=1326 audit(707.860:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20056 comm="syz.0.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  708.385750][T20060] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  708.491040][   T29] audit: type=1326 audit(707.890:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20056 comm="syz.0.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  708.549237][T20060] erofs (device loop3): failed to decompress -29 in[58, 4038] out[1851]
[  708.635173][T20060] erofs (device loop3): read error -117 @ 43 of nid 36
[  708.702467][T20065] IPv6: NLM_F_CREATE should be specified when creating new route
[  708.765559][   T29] audit: type=1326 audit(707.890:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20056 comm="syz.0.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  709.027134][   T29] audit: type=1326 audit(707.890:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20056 comm="syz.0.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  709.353821][T20072] loop4: detected capacity change from 0 to 764
[  709.595395][T20081] loop5: detected capacity change from 0 to 128
[  709.694023][T20081] EXT4-fs: Ignoring removed bh option
[  709.772367][T14329] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  709.815265][T20081] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  710.002519][T14329] usb 1-1: Using ep0 maxpacket: 16
[  710.104878][T14329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  710.167041][T14329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  710.319418][T14329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  710.420642][ T5836] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  710.437087][T14329] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  710.585266][T14329] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  710.698631][T14329] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  710.790616][T14329] usb 1-1: Product: syz
[  710.849908][T14329] usb 1-1: Manufacturer: syz
[  710.902293][T14329] usb 1-1: SerialNumber: syz
[  710.965313][T14329] usb 1-1: config 0 descriptor??
[  711.027769][T20102] loop3: detected capacity change from 0 to 128
[  711.086713][T14329] usb 1-1: NFC: intf ffff8880575ec000 id ffffffff8f30c8e0
[  711.096744][T20104] netlink: 'syz.5.5934': attribute type 21 has an invalid length.
[  711.190653][T20102] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  711.205587][T20104] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5934'.
[  711.281880][T20104] netlink: 'syz.5.5934': attribute type 5 has an invalid length.
[  711.365053][T14329] nfcmrvl 1-1:0.0: NFC: registered with nci successfully
[  711.388806][T20104] netlink: 'syz.5.5934': attribute type 6 has an invalid length.
[  711.462300][T20102] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.5937: No space for directory leaf checksum. Please run e2fsck -D.
[  711.502661][T14329] usb 1-1: USB disconnect, device number 86
[  711.510970][T20104] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5934'.
[  711.583787][T14329] usb 1-1: NFC: intf ffff8880575ec000
[  711.641579][T20102] EXT4-fs error (device loop3): __ext4_find_entry:1652: inode #2: comm syz.3.5937: checksumming directory block 0
[  712.329700][ T5842] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  712.608721][T20128] loop4: detected capacity change from 0 to 1764
[  712.876527][T20128] iso9660: Corrupted directory entry in block 2 of inode 1920
[  713.349546][T20143] loop0: detected capacity change from 0 to 1024
[  713.859643][   T29] audit: type=1326 audit(713.620:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20152 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  714.173513][  T961] hfsplus: b-tree write err: -5, ino 4
[  714.192650][   T29] audit: type=1326 audit(713.670:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20152 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  714.459274][   T29] audit: type=1326 audit(713.730:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20152 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  714.732433][   T29] audit: type=1326 audit(713.730:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20152 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  715.015428][   T29] audit: type=1326 audit(713.730:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20152 comm="syz.4.5950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  716.094189][T20191] usb usb1: usbfs: process 20191 (syz.4.5968) did not claim interface 0 before use
[  717.475968][T20219] loop2: detected capacity change from 0 to 164
[  718.169346][T20232] x_tables: duplicate underflow at hook 2
[  718.192933][T20233] netlink: 'syz.0.5985': attribute type 21 has an invalid length.
[  718.277841][T20233] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5985'.
[  718.347598][T20233] netlink: 'syz.0.5985': attribute type 5 has an invalid length.
[  718.413193][T20233] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5985'.
[  719.137658][   T29] audit: type=1326 audit(718.890:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20245 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  719.388473][   T29] audit: type=1326 audit(718.890:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20245 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  719.564291][T20254] loop2: detected capacity change from 0 to 8
[  719.629266][   T29] audit: type=1326 audit(718.930:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20245 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  719.721550][T20254] SQUASHFS error: Failed to read block 0x1ec: -5
[  719.845114][T20254] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  719.872909][   T29] audit: type=1326 audit(718.960:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20245 comm="syz.0.5991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb75d85d29 code=0x7ffc0000
[  720.448733][T20266] Cannot find add_set index 4 as target
[  720.515172][   T29] audit: type=1326 audit(720.280:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20268 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  720.742469][   T29] audit: type=1326 audit(720.320:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20268 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  721.008452][   T29] audit: type=1326 audit(720.320:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20268 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  721.236436][   T29] audit: type=1326 audit(720.320:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20268 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  721.260195][T20280] netlink: 'syz.2.6009': attribute type 8 has an invalid length.
[  721.354018][T20282] loop3: detected capacity change from 0 to 1024
[  721.406023][T20280] bridge2: entered allmulticast mode
[  721.566612][   T29] audit: type=1326 audit(720.320:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20268 comm="syz.4.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c95d85d29 code=0x7ffc0000
[  721.777461][T20282] hfsplus: xattr search failed
[  722.126648][T20289] loop4: detected capacity change from 0 to 256
[  722.278647][T20294] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6014'.
[  722.373670][T20289] FAT-fs (loop4): Directory bread(block 64) failed
[  722.380487][T20289] FAT-fs (loop4): Directory bread(block 65) failed
[  722.536413][T20289] FAT-fs (loop4): Directory bread(block 66) failed
[  722.602537][T20289] FAT-fs (loop4): Directory bread(block 67) failed
[  722.640872][T20300] loop0: detected capacity change from 0 to 1024
[  722.690028][T20289] FAT-fs (loop4): Directory bread(block 68) failed
[  722.752535][T20289] FAT-fs (loop4): Directory bread(block 69) failed
[  722.815508][T20289] FAT-fs (loop4): Directory bread(block 70) failed
[  722.843411][T20300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  722.910982][T20289] FAT-fs (loop4): Directory bread(block 71) failed
[  722.985485][T20289] FAT-fs (loop4): Directory bread(block 72) failed
[  722.992097][T20289] FAT-fs (loop4): Directory bread(block 73) failed
[  723.018070][T20308] loop5: detected capacity change from 0 to 16
[  723.138142][T20308] erofs (device loop5): mounted with root inode @ nid 36.
[  723.338293][T20308] erofs (device loop5): bogus lookback distance 0 @ lcn 123 of nid 36
[  723.455778][T20308] erofs (device loop5): bogus lookback distance 0 @ lcn 123 of nid 36
[  723.546794][T20308] erofs (device loop5): read error -117 @ 123 of nid 36
[  723.590998][ T5826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.334460][T20322] netlink: 'syz.2.6023': attribute type 1 has an invalid length.
[  724.443109][T20322] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.6023'.
[  724.983055][T20332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6026'.
[  725.173595][T20336] openvswitch: netlink: IP tunnel dst address not specified
[  725.526929][T20341] netlink: 'syz.4.6031': attribute type 10 has an invalid length.
[  725.863123][T20341] team0: Port device bridge0 added
[  726.597433][T20364] loop4: detected capacity change from 0 to 1024
[  726.748253][T20364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  727.269428][T20373] loop6: detected capacity change from 0 to 2048
[  727.337165][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.424069][T20373] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  727.600590][T20373] syz.6.6043: attempt to access beyond end of device
[  727.600590][T20373] loop6: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  727.644810][T20375] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  728.647055][T20389] loop0: detected capacity change from 0 to 256
[  728.761201][T20389] exfat: Deprecated parameter 'utf8'
[  728.779395][T20352] loop5: detected capacity change from 0 to 32768
[  728.876568][T20389] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  729.101859][T20391] loop4: detected capacity change from 0 to 2048
[  729.290751][T20391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  729.850597][T20398] loop2: detected capacity change from 0 to 1764
[  730.023843][T20398] iso9660: Corrupted directory entry in block 2 of inode 1920
[  730.544320][T20406] loop6: detected capacity change from 0 to 512
[  730.629800][T20406] EXT4-fs: Ignoring removed i_version option
[  730.692715][T20406] EXT4-fs: Ignoring removed mblk_io_submit option
[  730.755675][T20406] EXT4-fs error (device loop6): ext4_orphan_get:1389: comm syz.6.6061: inode #13: comm syz.6.6061: iget: illegal inode #
[  730.879063][T20406] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.6061: couldn't read orphan inode 13 (err -117)
[  731.019848][T20406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  731.639464][T20406] EXT4-fs error (device loop6): ext4_resize_begin:60: comm syz.6.6061: resize_inode disabled but reserved GDT blocks non-zero
[  731.760275][T20423] tmpfs: Bad value for 'mpol'
[  731.842834][T20424] autofs4:pid:20424:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  731.855512][T20425] netlink: 'syz.2.6069': attribute type 2 has an invalid length.
[  732.244968][T17692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  732.288180][   T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.350618][   T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38593 - 0
[  732.441110][   T54] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 36656 - 0
[  733.022020][T20434] netlink: 112 bytes leftover after parsing attributes in process `syz.5.6076'.
[  733.114962][T20434] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6076'.
[  733.164124][   T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.213578][T20434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6076'.
[  733.278284][   T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38593 - 0
[  733.410160][   T54] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 36656 - 0
[  733.673347][T20440] netlink: 'syz.6.6078': attribute type 9 has an invalid length.
[  733.681166][T20440] netlink: 'syz.6.6078': attribute type 7 has an invalid length.
[  733.862457][T20440] netlink: 'syz.6.6078': attribute type 8 has an invalid length.
[  733.967280][T20446] xt_ecn: cannot match TCP bits for non-tcp packets
[  734.163949][   T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  734.290189][   T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38593 - 0
[  734.412547][   T54] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 36656 - 0
[  735.368882][   T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.473719][T17693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  735.487629][T17693] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  735.496060][T17693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  735.504616][T17693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  735.512715][T17693] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  735.520130][T17693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  735.560711][   T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38593 - 0
[  735.636078][   T54] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 36656 - 0
[  737.483533][   T54] bridge_slave_1: left allmulticast mode
[  737.552557][ T5830] Bluetooth: hci0: command tx timeout
[  737.561159][   T54] bridge_slave_1: left promiscuous mode
[  737.613447][   T54] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.707012][ T5932] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  737.784095][   T54] bridge_slave_0: left allmulticast mode
[  737.837170][   T54] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.965952][ T5932] usb 3-1: Using ep0 maxpacket: 32
[  738.037209][ T5932] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  738.142812][ T5932] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  738.226791][ T5932] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  738.321107][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.421161][ T5932] hub 3-1:4.0: USB hub found
[  738.625787][ T5932] hub 3-1:4.0: 10 ports detected
[  738.652908][ T5932] hub 3-1:4.0: insufficient power available to use all downstream ports
[  738.835416][ T5932] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  738.883447][ T5932] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  738.997766][ T5830] Bluetooth: hci3: command 0x0406 tx timeout
[  739.045418][ T5932] usb 3-1: USB disconnect, device number 106
[  739.641564][T17693] Bluetooth: hci0: command tx timeout
[  740.117562][T20521] loop2: detected capacity change from 0 to 256
[  740.240725][T20524] loop3: detected capacity change from 0 to 16
[  740.249975][T20521] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[  740.352671][T20524] erofs (device loop3): mounted with root inode @ nid 36.
[  741.294559][T20533] loop2: detected capacity change from 0 to 512
[  741.353676][T20533] EXT4-fs: Ignoring removed orlov option
[  741.486087][T20533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  741.593702][T20533] EXT4-fs (loop2): orphan cleanup on readonly fs
[  741.631790][T20533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6113: bg 0: block 248: padding at end of block bitmap is not set
[  741.694614][T20533] Quota error (device loop2): write_blk: dquota write failed
[  741.712373][T17693] Bluetooth: hci0: command tx timeout
[  741.743664][T20533] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  741.791445][T20533] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.6113: Failed to acquire dquot type 1
[  741.890626][T20533] EXT4-fs (loop2): 1 truncate cleaned up
[  741.963771][T20533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  742.094410][T20517] loop5: detected capacity change from 0 to 32768
[  742.134282][T20533] EXT4-fs: Ignoring removed orlov option
[  742.180331][T20533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  742.221355][T20517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6107 (20517)
[  742.275812][T20533] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  742.318366][T20517] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  742.380762][T20533] EXT4-fs error (device loop2): __ext4_remount:6749: comm syz.2.6113: Abort forced by user
[  742.404834][T20517] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  742.446987][T20517] BTRFS info (device loop5): using free-space-tree
[  742.492406][T20533] EXT4-fs (loop2): Remounting filesystem read-only
[  742.552370][T20533] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  742.867288][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  742.988889][T20529] loop6: detected capacity change from 0 to 32768
[  743.008582][ T5836] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  743.081334][T20529] BTRFS: device /dev/loop6 (7:6) using temp-fsid fe9816f1-52cc-4e71-a6cd-bd3ef672a60c
[  743.182430][T20529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6111 (20529)
[  743.338375][T20529] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  743.461551][T20529] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm
[  743.545448][T20529] BTRFS info (device loop6): using free-space-tree
[  743.794265][T17693] Bluetooth: hci0: command tx timeout
[  744.431115][T17692] BTRFS info (device loop6): last unmount of filesystem fe9816f1-52cc-4e71-a6cd-bd3ef672a60c
[  745.144925][T20583] dlm: Unknown command passed to DLM device : 32
[  745.144925][T20583] 
[  745.183104][   T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  745.402905][   T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  745.529127][   T54] bond0 (unregistering): Released all slaves
[  745.678915][T20499] netlink: 'syz.4.6103': attribute type 2 has an invalid length.
[  745.868661][T20465] chnl_net:caif_netlink_parms(): no params data found
[  747.192936][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  747.199354][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  747.794778][T20612] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  748.661309][T20465] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.732515][T20465] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.839641][T20465] bridge_slave_0: entered allmulticast mode
[  748.933747][T20465] bridge_slave_0: entered promiscuous mode
[  749.238815][T20633] loop3: detected capacity change from 0 to 2048
[  749.605927][T20633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  749.831089][T20465] bridge0: port 2(bridge_slave_1) entered blocking state
[  749.848237][T20633] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  749.925226][T20465] bridge0: port 2(bridge_slave_1) entered disabled state
[  749.999328][T20465] bridge_slave_1: entered allmulticast mode
[  750.122071][T20465] bridge_slave_1: entered promiscuous mode
[  750.226075][T20636] bridge2: entered promiscuous mode
[  750.434025][ T5842] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  751.092335][   T54] hsr_slave_0: left promiscuous mode
[  751.232747][   T54] hsr_slave_1: left promiscuous mode
[  751.350267][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  751.400591][   T54] batman_adv: batadv0: Removing interface: batadv_slave_0
[  751.474791][T20662] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6150'.
[  751.539036][   T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  751.565580][T20662] netlink: 160 bytes leftover after parsing attributes in process `syz.6.6150'.
[  751.585894][   T54] batman_adv: batadv0: Removing interface: batadv_slave_1
[  751.619868][T20662] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6150'.
[  751.746567][   T54] veth1_macvtap: left promiscuous mode
[  751.785167][   T54] veth0_macvtap: left promiscuous mode
[  751.820134][   T54] veth1_vlan: left promiscuous mode
[  751.855969][   T54] veth0_vlan: left promiscuous mode
[  752.145584][T20670] loop4: detected capacity change from 0 to 2048
[  752.211738][T20670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  755.459680][   T54] team0 (unregistering): Port device team_slave_1 removed
[  755.688704][   T54] team0 (unregistering): Port device team_slave_0 removed
[  759.015051][T20465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  759.130290][T20465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  759.496190][T20668] netlink: 'syz.5.6153': attribute type 15 has an invalid length.
[  759.561355][T20668] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6153'.
[  760.279630][T20465] team0: Port device team_slave_0 added
[  760.430366][T20702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6163'.
[  760.454419][T20465] team0: Port device team_slave_1 added
[  761.370699][T20465] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.462599][T20465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  761.526729][T20714] loop4: detected capacity change from 0 to 1024
[  761.688730][T20465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.703694][T20714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  761.828592][T20465] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.877503][T20465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  761.985252][T20714] EXT4-fs error (device loop4): ext4_get_first_dir_block:3561: inode #11: comm syz.4.6169: directory missing '..'
[  762.117492][T20722] loop5: detected capacity change from 0 to 2048
[  762.124773][T20465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  762.292467][T20722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  762.543683][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.600690][T20725] ieee802154 phy0 wpan0: encryption failed: -22
[  763.197080][T20465] hsr_slave_0: entered promiscuous mode
[  763.483928][T20465] hsr_slave_1: entered promiscuous mode
[  763.646979][T20737] loop5: detected capacity change from 0 to 2048
[  763.808652][T20740] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  764.825002][T20756] 9pnet_fd: p9_fd_create_tcp (20756): problem connecting socket to 127.0.0.1
[  765.716626][T20771] loop4: detected capacity change from 0 to 64
[  766.184498][T20465] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  766.271502][T20465] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  766.417647][T20465] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  766.567400][T20465] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  767.431002][T20465] 8021q: adding VLAN 0 to HW filter on device bond0
[  767.853706][T20465] 8021q: adding VLAN 0 to HW filter on device team0
[  768.024869][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state
[  768.032739][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state
[  768.263970][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state
[  768.271169][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  768.667872][T20465] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  769.164088][T20816] loop4: detected capacity change from 0 to 64
[  770.259275][T20465] 8021q: adding VLAN 0 to HW filter on device batadv0
[  772.201103][T20860] loop2: detected capacity change from 0 to 1024
[  772.341268][T20860] EXT4-fs: Ignoring removed orlov option
[  772.435840][T20860] EXT4-fs: Ignoring removed nomblk_io_submit option
[  772.643555][T20860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  772.899219][T20465] veth0_vlan: entered promiscuous mode
[  773.050703][T20465] veth1_vlan: entered promiscuous mode
[  773.066576][   T29] audit: type=1400 audit(772.830:112): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=20871 comm="syz.6.6221"
[  773.094360][    C0] vkms_vblank_simulate: vblank timer overrun
[  773.418402][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  773.431467][T20465] veth0_macvtap: entered promiscuous mode
[  773.564479][T20465] veth1_macvtap: entered promiscuous mode
[  773.719932][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  773.928896][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.050482][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.167213][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.287984][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.392519][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.491651][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.590784][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.689600][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  774.774424][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  774.853160][T20465] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.013926][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.132355][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.278801][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.382498][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.468108][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.564768][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.676104][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.764154][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  775.854749][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  775.979403][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  776.030929][T20912] loop5: detected capacity change from 0 to 4096
[  776.081535][T20465] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.131481][T20912] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  776.234954][T20465] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.363463][T20465] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.461921][T20465] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.499582][T20912] ntfs3(loop5): failed to convert "c46c" to koi8-u
[  776.556317][T20465] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  777.592715][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  777.600887][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  777.903098][T20939] dlm: no locking on control device
[  778.013851][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.117496][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.614208][T20950] loop4: detected capacity change from 0 to 64
[  779.672531][ T5946] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  780.046852][T20962] loop3: detected capacity change from 0 to 4096
[  780.151025][   T29] audit: type=1326 audit(779.890:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20971 comm="syz.5.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  780.191400][ T5946] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  780.272573][T20974] loop2: detected capacity change from 0 to 16
[  780.298447][ T5946] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  780.362171][T20974] erofs (device loop2): mounted with root inode @ nid 36.
[  780.392356][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  780.434342][   T29] audit: type=1326 audit(779.890:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20971 comm="syz.5.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  780.511023][ T5946] usb 8-1: Product: syz
[  780.570084][ T5946] usb 8-1: Manufacturer: syz
[  780.652504][ T5946] usb 8-1: SerialNumber: syz
[  780.693941][ T5946] usb 8-1: config 0 descriptor??
[  780.716023][   T29] audit: type=1326 audit(779.970:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20971 comm="syz.5.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  780.813979][ T5946] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  781.095682][   T29] audit: type=1326 audit(779.970:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20971 comm="syz.5.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  781.128278][T20962] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  781.141567][ T5946] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[  781.278507][ T5946] usb 8-1: USB disconnect, device number 2
[  781.423074][   T29] audit: type=1326 audit(779.970:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20971 comm="syz.5.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f786cf85d29 code=0x7ffc0000
[  781.674688][T20686] udevd[20686]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  782.489609][T21002] gretap0: entered promiscuous mode
[  782.666823][T21002] netlink: 'syz.4.6271': attribute type 2 has an invalid length.
[  782.733523][T21002] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6271'.
[  782.846858][T21007] xfrm1: entered allmulticast mode
[  783.434360][T21017] loop6: detected capacity change from 0 to 1024
[  783.974889][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6281'.
[  786.071013][T21053] loop5: detected capacity change from 0 to 8
[  787.619031][T21040] loop6: detected capacity change from 0 to 32768
[  787.787757][T21040] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  787.787987][T21040] (syz.6.6285,21040,0):ocfs2_initialize_super:2281 ERROR: status = -12
[  787.992830][T21040] (syz.6.6285,21040,0):ocfs2_fill_super:1178 ERROR: status = -12
[  788.273760][T21088] loop2: detected capacity change from 0 to 24
[  788.400057][T21088] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  788.552403][T21088] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  790.761944][T21115] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.887993][T21115] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.792978][T21139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  791.830881][T21137] loop2: detected capacity change from 0 to 256
[  791.974483][T21137] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  793.762559][T21169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6335'.
[  794.282418][T14329] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  794.571635][T14329] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  794.643539][T14329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.710654][T14329] usb 6-1: Product: syz
[  794.772511][T14329] usb 6-1: Manufacturer: syz
[  794.828601][T14329] usb 6-1: SerialNumber: syz
[  794.909125][T14329] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  795.012546][ T5946] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  796.278360][ T5946] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  796.427066][ T5946] ath9k_htc: Failed to initialize the device
[  796.714721][ T5946] usb 6-1: ath9k_htc: USB layer deinitialized
[  797.194142][T14329] usb 6-1: USB disconnect, device number 88
[  797.384213][ T5893] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  797.665945][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  797.762265][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  797.892843][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  798.015691][ T5893] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  798.191673][ T5893] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  798.282403][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  798.394412][ T5893] usb 3-1: Product: syz
[  798.452643][ T5893] usb 3-1: Manufacturer: syz
[  798.457344][ T5893] usb 3-1: SerialNumber: syz
[  798.586318][ T5893] usb 3-1: config 0 descriptor??
[  798.653510][ T5893] ums-isd200 3-1:0.0: USB Mass Storage device detected
[  799.115370][ T5893] ums-isd200 3-1:0.0: probe with driver ums-isd200 failed with error -22
[  799.259877][ T5893] usb 3-1: USB disconnect, device number 107
[  799.980854][ T5893] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  800.252449][ T5893] usb 4-1: Using ep0 maxpacket: 16
[  800.342438][ T5893] usb 4-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e
[  800.412330][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.502902][ T5893] usb 4-1: Product: syz
[  800.542321][ T5893] usb 4-1: Manufacturer: syz
[  800.547049][ T5893] usb 4-1: SerialNumber: syz
[  800.736448][ T5893] usb 4-1: config 0 descriptor??
[  801.000590][T21267] loop6: detected capacity change from 0 to 64
[  801.134826][ T5946] usb 4-1: USB disconnect, device number 101
[  801.188793][T21269] loop2: detected capacity change from 0 to 256
[  801.290485][T21269] exfat: Deprecated parameter 'utf8'
[  801.407572][T21269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  803.314672][ T5831] syz-executor (5831) used greatest stack depth: 12632 bytes left
[  804.431624][ T1103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.277871][T21300] loop7: detected capacity change from 0 to 512
[  805.300238][ T1103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  805.376674][T21300] EXT4-fs: Ignoring removed bh option
[  805.609539][T21300] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  806.145228][T21300] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.6385: corrupted xattr block 32: bad e_name length
[  806.205524][ T1103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.341959][T21300] EXT4-fs (loop7): Remounting filesystem read-only
[  806.412552][   T29] audit: type=1800 audit(806.170:118): pid=21300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6385" name="file1" dev="loop7" ino=15 res=0 errno=0
[  806.812136][T20465] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  806.987164][ T1103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.999663][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  808.028626][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  808.040514][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  808.064424][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  808.083701][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  808.091213][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  808.443494][ T5946] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  808.597960][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  808.604598][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  808.667168][ T5946] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  808.767492][ T5946] usb 6-1: config 0 has no interface number 0
[  808.780010][ T1103] bridge_slave_1: left allmulticast mode
[  808.832758][ T1103] bridge_slave_1: left promiscuous mode
[  808.838576][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.882359][ T5946] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  808.968637][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  809.039468][ T5946] usb 6-1: Product: syz
[  809.076543][ T5946] usb 6-1: Manufacturer: syz
[  809.109791][ T1103] bridge_slave_0: left allmulticast mode
[  809.149990][ T5946] usb 6-1: SerialNumber: syz
[  809.182087][ T1103] bridge_slave_0: left promiscuous mode
[  809.243846][ T5946] usb 6-1: config 0 descriptor??
[  809.255393][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.275198][T21358] xt_l2tp: wrong L2TP version: 0
[  809.528558][ T5946] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  809.626195][ T5946] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  809.762687][ T5946] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  809.770791][ T5946] usb 6-1: media controller created
[  810.065466][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  810.272503][ T5830] Bluetooth: hci2: command tx timeout
[  810.283151][ T5946] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  810.441856][T21376] loop6: detected capacity change from 0 to 16
[  810.552906][T21376] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  810.624409][ T5946] usb 6-1: USB disconnect, device number 89
[  812.336145][T21400] cgroup: release_agent respecified
[  812.353069][ T5830] Bluetooth: hci2: command tx timeout
[  812.864111][ T1103] dvmrp0 (unregistering): left allmulticast mode
[  813.896268][T21396] loop4: detected capacity change from 0 to 32768
[  814.038257][T21396] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  814.234429][T21396] XFS (loop4): Ending clean mount
[  814.435350][ T5830] Bluetooth: hci2: command tx timeout
[  814.547266][ T5827] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  814.988735][T21404] loop3: detected capacity change from 0 to 32768
[  815.122617][T21404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.6427 (21404)
[  815.225589][T21404] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  815.314381][T21404] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  815.382663][T21404] BTRFS info (device loop3): using free-space-tree
[  815.511226][T21406] loop6: detected capacity change from 0 to 32768
[  815.646982][T21406] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  816.032942][T21406] XFS (loop6): Ending clean mount
[  816.172787][ T5842] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  816.193112][T21406] XFS (loop6): Quotacheck needed: Please wait.
[  816.515040][ T5830] Bluetooth: hci2: command tx timeout
[  816.616771][T21406] XFS (loop6): Quotacheck: Done.
[  816.973789][T17692] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  817.044504][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  817.262949][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  817.425804][ T1103] bond0 (unregistering): Released all slaves
[  817.615210][T21450] loop4: detected capacity change from 0 to 1024
[  817.738429][T21450] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  817.900316][T21390] netlink: 'syz.5.6419': attribute type 21 has an invalid length.
[  817.984374][T21390] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6419'.
[  819.530097][T21470] loop6: detected capacity change from 0 to 256
[  819.623087][T21463] IPv6: Can't replace route, no match found
[  819.832777][T21470] FAT-fs (loop6): Directory bread(block 64) failed
[  819.901809][T21470] FAT-fs (loop6): Directory bread(block 65) failed
[  819.962568][T21470] FAT-fs (loop6): Directory bread(block 66) failed
[  820.090505][T21470] FAT-fs (loop6): Directory bread(block 67) failed
[  820.185462][T21470] FAT-fs (loop6): Directory bread(block 68) failed
[  820.192099][T21470] FAT-fs (loop6): Directory bread(block 69) failed
[  820.339565][T21470] FAT-fs (loop6): Directory bread(block 70) failed
[  820.450022][T21470] FAT-fs (loop6): Directory bread(block 71) failed
[  820.542513][T21470] FAT-fs (loop6): Directory bread(block 72) failed
[  820.612374][T21470] FAT-fs (loop6): Directory bread(block 73) failed
[  821.289073][T21339] chnl_net:caif_netlink_parms(): no params data found
[  821.458165][T21459] infiniband syz1: set active
[  821.493385][T21489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6446'.
[  821.543333][T21459] infiniband syz1: added team_slave_0
[  821.653633][T21459] syz1: rxe_create_cq: returned err = -12
[  821.762859][T21459] infiniband syz1: Couldn't create ib_mad CQ
[  821.851599][T21459] infiniband syz1: Couldn't open port 1
[  822.212462][ T1103] hsr_slave_0: left promiscuous mode
[  822.380210][ T1103] hsr_slave_1: left promiscuous mode
[  822.518039][T21459] RDS/IB: syz1: added
[  822.582134][T21459] smc: adding ib device syz1 with port count 1
[  822.722596][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  822.730171][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  822.737994][T21459] smc:    ib device syz1 port 1 has pnetid 
[  823.011246][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  823.116707][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  823.399178][T21511] loop5: detected capacity change from 0 to 64
[  823.627875][ T1103] veth1_macvtap: left promiscuous mode
[  823.719005][ T1103] veth0_macvtap: left promiscuous mode
[  823.790318][ T1103] veth1_vlan: left promiscuous mode
[  823.812922][T21517] kernel read not supported for file /!selinuxwk1�m�9ɞ*T����#j����Y��mV�vm(p�-QZ#�{�� (pid: 21517 comm: syz.3.6454)
[  823.870439][ T1103] veth0_vlan: left promiscuous mode
[  824.242408][   T29] audit: type=1800 audit(823.980:119): pid=21511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6452" name="file1" dev="loop5" ino=5 res=0 errno=0
[  824.763431][T21523] netlink: 'syz.4.6457': attribute type 10 has an invalid length.
[  825.078450][T21527] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6458'.
[  825.231869][T21529] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  829.182414][ T1103] team0 (unregistering): Port device team_slave_1 removed
[  829.422458][ T1103] team0 (unregistering): Port device team_slave_0 removed
[  831.998055][T21523] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  832.274249][   T30] INFO: task jbd2/sda1-8:5162 blocked for more than 143 seconds.
[  832.282152][   T30]       Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  832.328433][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  832.413764][   T30] task:jbd2/sda1-8     state:D stack:24904 pid:5162  tgid:5162  ppid:2      flags:0x00004000
[  832.501380][   T30] Call Trace:
[  832.508886][   T30]  <TASK>
[  832.511958][   T30]  __schedule+0x1850/0x4c30
[  832.642511][   T30]  ? __pfx___schedule+0x10/0x10
[  832.674454][   T30]  ? __pfx_lock_release+0x10/0x10
[  832.743640][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  832.749767][   T30]  ? schedule+0x90/0x320
[  832.862522][   T30]  schedule+0x14b/0x320
[  832.866815][   T30]  io_schedule+0x8d/0x110
[  832.871206][   T30]  bit_wait_io+0x12/0xd0
[  832.961034][   T30]  __wait_on_bit+0xb2/0x2f0
[  832.997189][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  833.022323][   T30]  out_of_line_wait_on_bit+0x1d5/0x260
[  833.027911][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  833.059954][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  833.071454][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  833.093675][   T30]  jbd2_journal_commit_transaction+0x3d09/0x6560
[  833.100339][   T30]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  833.112343][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  833.117897][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  833.133171][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  833.139174][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  833.152742][   T30]  ? __try_to_del_timer_sync+0x2ad/0x340
[  833.158658][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  833.177285][   T30]  ? __pfx___timer_delete_sync+0x10/0x10
[  833.186921][   T30]  ? __pfx_do_raw_write_lock+0x10/0x10
[  833.197740][   T30]  ? prepare_to_wait+0x186/0x210
[  833.222412][   T30]  ? schedule+0x90/0x320
[  833.226786][   T30]  kjournald2+0x41c/0x7b0
[  833.231166][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  833.249938][   T30]  ? __pfx_kjournald2+0x10/0x10
[  833.262564][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  833.268729][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  833.282628][   T30]  ? __kthread_parkme+0x169/0x1d0
[  833.287727][   T30]  ? __pfx_kjournald2+0x10/0x10
[  833.301975][   T30]  kthread+0x2f2/0x390
[  833.306229][   T30]  ? __pfx_kjournald2+0x10/0x10
[  833.311128][   T30]  ? __pfx_kthread+0x10/0x10
[  833.332431][   T30]  ret_from_fork+0x4d/0x80
[  833.337050][   T30]  ? __pfx_kthread+0x10/0x10
[  833.341692][   T30]  ret_from_fork_asm+0x1a/0x30
[  833.368490][   T30]  </TASK>
[  833.422426][   T30] 
[  833.422426][   T30] Showing all locks held in the system:
[  833.430364][   T30] 2 locks held by kworker/1:0/25:
[  833.502344][   T30] 1 lock held by khungtaskd/30:
[  833.507392][   T30]  #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  833.562700][   T30] 3 locks held by kworker/u8:5/961:
[  833.567999][   T30]  #0: ffff888143aa1948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  833.632746][   T30]  #1: ffffc90003a47d00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  833.681104][   T30]  #2: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xbf/0x610
[  833.719686][   T30] 4 locks held by kworker/u8:6/1103:
[  833.726558][   T30]  #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  833.772363][   T30]  #1: ffffc90003e07d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  833.822020][   T30]  #2: ffffffff8fca6950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50
[  833.831884][   T30]  #3: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x2e0
[  833.912376][   T30] 3 locks held by kworker/u8:7/1146:
[  833.917775][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  833.995421][   T30]  #1: ffffc90003e37d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  834.026401][   T30]  #2: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  834.043398][   T30] 3 locks held by kworker/u8:8/3465:
[  834.048754][   T30]  #0: ffff88814d7f7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  834.078493][   T30]  #1: ffffc9000cd2fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  834.105813][   T30]  #2: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  834.126492][   T30] 2 locks held by dhcpcd/5494:
[  834.131363][   T30]  #0: ffff888057b9b6c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xcb/0xe10
[  834.149674][   T30]  #1: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200
[  834.171892][   T30] 2 locks held by getty/5579:
[  834.191997][   T30]  #0: ffff88814db670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  834.212323][   T30]  #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  834.236352][   T30] 2 locks held by syz-executor/5827:
[  834.241727][   T30]  #0: ffff888032bb0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510
[  834.261128][   T30]  #1: ffff888032bb0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0
[  834.282348][   T30] 2 locks held by kworker/1:5/5891:
[  834.287635][   T30] 4 locks held by kworker/1:6/5894:
[  834.302691][   T30] 2 locks held by syz-executor/21339:
[  834.308154][   T30]  #0: ffffffff9019be70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250
[  834.335406][   T30]  #1: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210
[  834.351837][   T30] 7 locks held by syz.7.6437/21459:
[  834.358832][   T30]  #0: ffffffff9a76b1d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0
[  834.372483][   T30]  #1: ffffffff8fa34ed0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x640
[  834.391806][   T30]  #2: ffffffff8fa27c70 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x12e/0x440
[  834.412849][   T30]  #3: ffffffff8fa27e30 (rdma_nets_rwsem){++++}-{4:4}, at: enable_device_and_get+0x2cd/0x440
[  834.436702][   T30]  #4: ffff88805a4ccf40 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x10d/0x710
[  834.457362][   T30]  #5: ffff88805a4cd238 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x78/0x2c0
[  834.470041][   T30]  #6: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x153/0x800
[  834.490053][   T30] 3 locks held by syz.5.6463/21535:
[  834.495765][   T30]  #0: ffffffff901b6a18 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250
[  834.520461][   T30]  #1: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210
[  834.542360][   T30]  #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830
[  834.567199][   T30] 2 locks held by syz.6.6468/21545:
[  834.581449][   T30]  #0: ffffffff8f439ca0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250
[  834.601271][   T30]  #1: ffffffff8fcb2e08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210
[  834.610966][   T30] 1 lock held by syz.3.6470/21547:
[  834.631144][   T30]  #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830
[  834.659335][T21339] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  834.673009][   T30] 
[  834.767258][   T30] =============================================
[  834.767258][   T30] 
[  834.849837][   T30] NMI backtrace for cpu 0
[  834.854349][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  834.865332][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  834.875425][   T30] Call Trace:
[  834.878733][   T30]  <TASK>
[  834.881686][   T30]  dump_stack_lvl+0x241/0x360
[  834.886419][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  834.891661][   T30]  ? __pfx__printk+0x10/0x10
[  834.896396][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  834.901476][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  834.906975][   T30]  ? _printk+0xd5/0x120
[  834.911175][   T30]  ? __pfx__printk+0x10/0x10
[  834.915817][   T30]  ? __wake_up_klogd+0xcc/0x110
[  834.920705][   T30]  ? __pfx__printk+0x10/0x10
[  834.925340][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  834.931055][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  834.936128][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  834.942144][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  834.948179][   T30]  watchdog+0xff6/0x1040
[  834.952464][   T30]  ? watchdog+0x1ea/0x1040
[  834.956924][   T30]  ? __pfx_watchdog+0x10/0x10
[  834.961643][   T30]  kthread+0x2f2/0x390
[  834.965841][   T30]  ? __pfx_watchdog+0x10/0x10
[  834.970557][   T30]  ? __pfx_kthread+0x10/0x10
[  834.975302][   T30]  ret_from_fork+0x4d/0x80
[  834.979753][   T30]  ? __pfx_kthread+0x10/0x10
[  834.984385][   T30]  ret_from_fork_asm+0x1a/0x30
[  834.989207][   T30]  </TASK>
[  834.993260][   T30] Sending NMI from CPU 0 to CPUs 1:
[  834.998508][    C1] NMI backtrace for cpu 1
[  834.998525][    C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  834.998556][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  834.998574][    C1] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker
[  834.998620][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90
[  834.998655][    C1] Code: 44 0a 20 e9 c5 b8 50 0a 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 00 d6 03 00 65 8b 05 90 4d 64 7e 25 00 01 ff 00 74
[  834.998677][    C1] RSP: 0018:ffffc90000a18800 EFLAGS: 00000013
[  834.998699][    C1] RAX: 1ffff11029a21701 RBX: 0000000000000002 RCX: ffffffff874192e6
[  834.998719][    C1] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000001
[  834.998736][    C1] RBP: ffff888059291298 R08: ffffffff874192fc R09: 1ffff11029a21780
[  834.998757][    C1] R10: dffffc0000000000 R11: ffffed1029a21781 R12: dffffc0000000000
[  834.998778][    C1] R13: ffff88814d10bc28 R14: ffff888146722028 R15: ffff88814d10bc00
[  834.998802][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  834.998825][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  834.998844][    C1] CR2: 0000001b2c913ff8 CR3: 000000000e736000 CR4: 0000000000350ef0
[  834.998866][    C1] Call Trace:
[  834.998876][    C1]  <NMI>
[  834.998886][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  834.998921][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  834.998955][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  834.998987][    C1]  ? nmi_handle+0x2a/0x5a0
[  834.999037][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  834.999063][    C1]  ? nmi_handle+0x151/0x5a0
[  834.999095][    C1]  ? nmi_handle+0x2a/0x5a0
[  834.999128][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  834.999158][    C1]  ? default_do_nmi+0x63/0x160
[  834.999190][    C1]  ? exc_nmi+0x123/0x1f0
[  834.999220][    C1]  ? end_repeat_nmi+0xf/0x53
[  834.999251][    C1]  ? __usb_unanchor_urb+0x15c/0x2e0
[  834.999291][    C1]  ? __usb_unanchor_urb+0x146/0x2e0
[  834.999332][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  834.999363][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  834.999396][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x8/0x90
[  834.999427][    C1]  </NMI>
[  834.999436][    C1]  <IRQ>
[  834.999446][    C1]  __usb_unanchor_urb+0x15c/0x2e0
[  834.999488][    C1]  usb_unanchor_urb+0x7d/0xc0
[  834.999529][    C1]  __usb_hcd_giveback_urb+0x2a6/0x6e0
[  834.999566][    C1]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  834.999603][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  834.999631][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  834.999656][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  834.999690][    C1]  dummy_timer+0x856/0x4620
[  834.999716][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  834.999750][    C1]  ? debug_object_deactivate+0x2d5/0x390
[  834.999807][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  834.999854][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  834.999884][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  834.999910][    C1]  __hrtimer_run_queues+0x59d/0xd30
[  834.999948][    C1]  ? ktime_get_update_offsets_now+0x2d/0x3b0
[  834.999990][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  835.000027][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000076][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000103][    C1]  ? ktime_get_update_offsets_now+0x393/0x3b0
[  835.000139][    C1]  hrtimer_run_softirq+0x19a/0x2c0
[  835.000181][    C1]  handle_softirqs+0x2d6/0x9b0
[  835.000220][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000254][    C1]  ? __irq_exit_rcu+0xf7/0x220
[  835.000295][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  835.000337][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000365][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  835.000400][    C1]  __irq_exit_rcu+0xf7/0x220
[  835.000439][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  835.000482][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000512][    C1]  irq_exit_rcu+0x9/0x30
[  835.000549][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  835.000585][    C1]  </IRQ>
[  835.000594][    C1]  <TASK>
[  835.000604][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  835.000645][    C1] RIP: 0010:__schedule+0x172/0x4c30
[  835.000680][    C1] Code: f6 48 8b 1b 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 e5 2d 3c f6 48 81 3b 9d 6e ac 57 <0f> 85 8a 1e 00 00 83 7c 24 58 00 7f 5e 48 8b 44 24 28 48 8d 58 18
[  835.000702][    C1] RSP: 0018:ffffc900001f7260 EFLAGS: 00000246
[  835.000724][    C1] RAX: 1ffff9200003e000 RBX: ffffc900001f0000 RCX: dffffc0000000000
[  835.000745][    C1] RDX: 0000000000000010 RSI: ffffffff8c5fb080 RDI: ffffffff8c5fb040
[  835.000764][    C1] RBP: ffffc900001f7470 R08: ffffc900001f73ff R09: ffffc900001f73f0
[  835.000785][    C1] R10: dffffc0000000000 R11: fffff5200003ee80 R12: ffffc900001f73f0
[  835.000806][    C1] R13: ffff8880b8700000 R14: dffffc0000000000 R15: dffffc0000000000
[  835.000840][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000868][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  835.000906][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.000933][    C1]  ? mark_lock+0x9a/0x360
[  835.000969][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  835.001003][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  835.001040][    C1]  ? __pfx___schedule+0x10/0x10
[  835.001075][    C1]  ? irqentry_exit+0x63/0x90
[  835.001111][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.001138][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  835.001175][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.001209][    C1]  ? mark_lock+0x9a/0x360
[  835.001245][    C1]  preempt_schedule_irq+0xfb/0x1c0
[  835.001282][    C1]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  835.001318][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  835.001358][    C1]  irqentry_exit+0x5e/0x90
[  835.001393][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  835.001435][    C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200
[  835.001475][    C1] Code: 8c e8 24 34 67 0a 65 66 8b 05 f4 00 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 08 69 45 00 fb 65 8b 05 b8 00 a2 7e <85> c0 75 05 e8 37 82 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c
[  835.001497][    C1] RSP: 0018:ffffc900001f7600 EFLAGS: 00000286
[  835.001519][    C1] RAX: 0000000080000000 RBX: 1ffff9200003eec4 RCX: ffffffff817b378a
[  835.001540][    C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb0a0
[  835.001560][    C1] RBP: ffffc900001f76b0 R08: ffffffff942a5987 R09: 1ffffffff2854b30
[  835.001581][    C1] R10: dffffc0000000000 R11: fffffbfff2854b31 R12: dffffc0000000000
[  835.001602][    C1] R13: 1ffff9200003eec8 R14: ffffc900001f7640 R15: 0000000000000201
[  835.001628][    C1]  ? mark_lock+0x9a/0x360
[  835.001665][    C1]  ? wg_packet_decrypt_worker+0x2a9/0xd80
[  835.001709][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  835.001748][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.001778][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.001806][    C1]  ? wg_packet_decrypt_worker+0xcf/0xd80
[  835.001850][    C1]  wg_packet_decrypt_worker+0x2a9/0xd80
[  835.001902][    C1]  ? __pfx_validate_chain+0x10/0x10
[  835.001939][    C1]  ? __pfx_wg_packet_decrypt_worker+0x10/0x10
[  835.001984][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002016][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002048][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002075][    C1]  ? look_up_lock_class+0x77/0x170
[  835.002113][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002141][    C1]  ? register_lock_class+0x102/0x980
[  835.002171][    C1]  ? try_to_wake_up+0x91b/0x1470
[  835.002207][    C1]  ? do_raw_spin_lock+0x14f/0x370
[  835.002235][    C1]  ? __pfx_lock_release+0x10/0x10
[  835.002269][    C1]  ? __pfx_register_lock_class+0x10/0x10
[  835.002304][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002333][    C1]  ? mark_lock+0x9a/0x360
[  835.002370][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002399][    C1]  ? __lock_acquire+0x1397/0x2100
[  835.002437][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  835.002472][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002509][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  835.002542][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  835.002571][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  835.002607][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  835.002648][    C1]  ? process_scheduled_works+0x976/0x1840
[  835.002679][    C1]  process_scheduled_works+0xa68/0x1840
[  835.002725][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  835.002758][    C1]  ? assign_work+0x364/0x3d0
[  835.002787][    C1]  worker_thread+0x870/0xd30
[  835.002824][    C1]  ? __kthread_parkme+0x169/0x1d0
[  835.002856][    C1]  ? __pfx_worker_thread+0x10/0x10
[  835.002884][    C1]  kthread+0x2f2/0x390
[  835.002916][    C1]  ? __pfx_worker_thread+0x10/0x10
[  835.002943][    C1]  ? __pfx_kthread+0x10/0x10
[  835.002976][    C1]  ret_from_fork+0x4d/0x80
[  835.003002][    C1]  ? __pfx_kthread+0x10/0x10
[  835.003042][    C1]  ret_from_fork_asm+0x1a/0x30
[  835.003078][    C1]  </TASK>
[  836.134496][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  836.141636][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0
[  836.152177][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  836.162262][   T30] Call Trace:
[  836.165579][   T30]  <TASK>
[  836.168534][   T30]  dump_stack_lvl+0x241/0x360
[  836.173270][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  836.178532][   T30]  ? __pfx__printk+0x10/0x10
[  836.183169][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  836.189201][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  836.194873][   T30]  ? vscnprintf+0x5d/0x90
[  836.199367][   T30]  panic+0x349/0x880
[  836.203378][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  836.209105][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  836.215710][   T30]  ? __pfx_panic+0x10/0x10
[  836.220180][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  836.225625][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  836.231312][   T30]  ? __irq_work_queue_local+0x137/0x410
[  836.236915][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  836.242672][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  836.248160][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  836.254384][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  836.260611][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  836.266384][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  836.272606][   T30]  watchdog+0x1035/0x1040
[  836.276997][   T30]  ? watchdog+0x1ea/0x1040
[  836.281471][   T30]  ? __pfx_watchdog+0x10/0x10
[  836.286203][   T30]  kthread+0x2f2/0x390
[  836.290325][   T30]  ? __pfx_watchdog+0x10/0x10
[  836.295141][   T30]  ? __pfx_kthread+0x10/0x10
[  836.300044][   T30]  ret_from_fork+0x4d/0x80
[  836.304502][   T30]  ? __pfx_kthread+0x10/0x10
[  836.309139][   T30]  ret_from_fork_asm+0x1a/0x30
[  836.313957][   T30]  </TASK>
[  836.317885][   T30] Kernel Offset: disabled
[  836.322242][   T30] Rebooting in 86400 seconds..