last executing test programs:

19.498855147s ago: executing program 4 (id=413):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/4066, 0xfe2}, {&(0x7f0000000680)=""/73, 0x49}], 0x2}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

19.128286009s ago: executing program 4 (id=415):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000100)=0x14)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
rt_sigtimedwait(&(0x7f0000000140)={[0x8000000000000000]}, 0x0, 0x0, 0x8)
read(r0, &(0x7f00000019c0)=""/4093, 0xffd)

18.2611122s ago: executing program 4 (id=427):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000))

18.054870331s ago: executing program 4 (id=430):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$cgroup2(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00')

17.806205406s ago: executing program 4 (id=435):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x25, &(0x7f00000000c0))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f00000000c0))
close(r0)

17.538467902s ago: executing program 3 (id=440):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x98, &(0x7f0000001180), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0xfea7)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
ftruncate(r0, 0xf88)

17.091595448s ago: executing program 4 (id=443):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8)

16.837385963s ago: executing program 32 (id=443):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8)

15.85612966s ago: executing program 3 (id=448):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)

15.373850289s ago: executing program 3 (id=454):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48)
close(r0)
socket$netlink(0x10, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

14.984710942s ago: executing program 3 (id=455):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000200), 0x4, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r2, r2], &(0x7f0000000040), 0x0, 0x6})

14.83850741s ago: executing program 3 (id=456):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00')

14.796205423s ago: executing program 3 (id=457):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000580)={[{@noquota}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@data_err_ignore}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffc, 0x6, 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2})

11.058681312s ago: executing program 0 (id=465):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x1, 0x1000100, 0x0, 0x42, 0x9, 0x6, 0x6}, {0x40000001, 0x80000001, 0x0, 0x4, 0x7fffffff, 0x0, 0x8001}]})

10.695595023s ago: executing program 0 (id=466):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, <r2=>0x0], &(0x7f0000000200), 0x4, r1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r2, r2], &(0x7f0000000040), 0x0, 0x6})

10.596519839s ago: executing program 0 (id=468):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

7.443404094s ago: executing program 1 (id=477):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000500)={[0x3, 0x8f, 0x2, 0xfc83714a, 0x7, 0x0, 0x7, 0x401, 0x8, 0x10000, 0xfffffff9, 0x80, 0x5d4e, 0x9, 0x200, 0x77b, 0x6, 0xf, 0x55, 0x3, 0x2, 0x9, 0x3, 0x8, 0xab2, 0x0, 0xfffffc00, 0xb920, 0x2be7, 0x1, 0xb5, 0xfffffffd, 0x6, 0x0, 0x4, 0x3, 0x9, 0x6497, 0x9, 0x9, 0x8, 0x8, 0x0, 0x1, 0x0, 0x7ff, 0x1, 0x8, 0x0, 0x2, 0x4, 0xefa, 0x5c1b, 0x4, 0x9, 0x3ff, 0x3, 0x8, 0xd, 0xb, 0x0, 0x6, 0x9, 0x4, 0x6f, 0xf, 0x9, 0x401, 0xc, 0x5, 0x6, 0x8, 0xffffff50, 0x7, 0x6, 0x712, 0x5, 0x6, 0x1, 0x0, 0x3, 0x8001, 0x1, 0x7, 0x7, 0xd28, 0x4, 0x13, 0xf61, 0x0, 0xffffffff, 0xffff6aaa, 0xc, 0xffff, 0x2, 0x3, 0x3ff, 0x8, 0xc1cb, 0x5, 0x0, 0xb7f, 0x700a, 0x5, 0x2, 0x4, 0x2, 0xf5f4, 0x5, 0x3, 0x0, 0x7, 0x18, 0xffffe4e3, 0xee, 0x1, 0xa, 0x3, 0x9, 0x0, 0x65f314b7, 0x1, 0x8b, 0x7, 0x3387be82, 0x4, 0x4, 0xc23, 0x6cd, 0x8, 0x9, 0x939, 0x7, 0x0, 0x1000, 0x800, 0xffffbb40, 0x401, 0x401, 0xfffffffc, 0x7, 0x4, 0x3a, 0x4, 0x1, 0x400, 0x2c000, 0x6, 0x10000, 0x8001, 0x1, 0x0, 0x5b, 0x4, 0x6f80000, 0x7, 0x2, 0x5, 0x4b3, 0x7, 0x9de, 0xc, 0x5, 0x4, 0x9, 0x3, 0x8, 0x8, 0x100, 0x225, 0xa, 0x1, 0x2b480, 0x4, 0x3, 0x8, 0x1, 0x7, 0x8000, 0xffff, 0x3, 0x1, 0x7f, 0x10001, 0x9, 0x9, 0x7ff, 0x7, 0x0, 0x4, 0x800, 0x0, 0x5, 0x2, 0x800, 0x4, 0x41, 0xa2, 0x1, 0x9, 0x1, 0xffffffae, 0x70, 0x2, 0x800, 0x40, 0x4, 0x4, 0x7, 0x9, 0x3, 0x7, 0xd, 0xa03, 0xb, 0x4, 0x6, 0x8, 0xa, 0x3, 0xa5, 0x6b1a, 0x29, 0x80, 0x200, 0x684, 0x0, 0xff, 0x0, 0x401, 0x7fff, 0x3, 0x3ff, 0x6, 0x0, 0x1, 0x7ff, 0x4, 0x4, 0x1, 0x10001, 0x6, 0x3, 0x9, 0x6, 0x0, 0xfffffff9, 0xbd10, 0x4, 0xd267, 0x3, 0x1, 0xfffffffa, 0x7, 0x10000, 0x4, 0x3, 0xb, 0x7ff, 0x1, 0x2, 0x80000000, 0x6, 0x8, 0x80, 0x7, 0x6, 0x2, 0x3, 0xe4bb, 0x10, 0x3, 0x226e, 0x0, 0x6, 0x9, 0x3e1, 0x2, 0x4, 0x7, 0x3ff, 0x880e13d, 0x9, 0x8, 0x5, 0x401, 0x6, 0x3, 0xfffffffe, 0x7, 0x60000000, 0x80, 0x95, 0x0, 0x5, 0x2a, 0x1, 0x4, 0xff, 0xff, 0x8, 0x40, 0x2, 0x6, 0x9e, 0x4, 0x2, 0x733, 0x7, 0xc0000, 0x1, 0x1c000000, 0x9, 0x49dd5bd, 0xd5, 0xe, 0x13afc3ab, 0x20000, 0x5, 0x1, 0x40, 0x40000, 0xd0000, 0x5, 0x5, 0x18000000, 0xf1, 0x2b56, 0xa54, 0xc, 0x2, 0x3, 0x2, 0xfffffffe, 0xfffffff8, 0x1, 0x1, 0x2, 0x1, 0xffffff20, 0x7d3, 0x10000, 0x2, 0x6, 0x2, 0x373b, 0x3, 0x9c87, 0x1, 0x83, 0x4, 0x7, 0x81, 0x3, 0x7, 0x5, 0x3, 0x7, 0x0, 0x1, 0xc, 0x1, 0xc, 0x6, 0x3, 0x1, 0x8, 0x10001, 0x58bc, 0x6, 0x608, 0xae1, 0x96ac, 0x9, 0x0, 0x1, 0x5, 0xf6, 0xea, 0x80, 0x340a79c2, 0x7, 0x1, 0xff, 0x7, 0x200, 0x4000, 0x8997, 0x11, 0x2a6, 0x2, 0x23f, 0x4, 0x81, 0xfffffffe, 0x3, 0xfff, 0x7f, 0x4, 0x1, 0x200, 0xfdcb, 0x9, 0x10000, 0x3caf, 0x2975, 0x0, 0x4, 0x8, 0x594, 0x9, 0x1bb0, 0x6, 0x1, 0x6, 0x1, 0x80000000, 0x6, 0x8c8, 0x4, 0xfffffff7, 0x2, 0x200, 0x10000, 0x7, 0x727, 0xd, 0xfffffffb, 0x6, 0x8007, 0x353, 0x4, 0x101, 0xa, 0x80, 0xfffffc01, 0xc, 0x3, 0xfffffff7, 0x80, 0xd, 0x1, 0x400, 0xda, 0x0, 0x2, 0xffff7fff, 0x80, 0x2, 0xc, 0x1, 0xd, 0x7fff, 0x2, 0x6, 0x3, 0x26bd, 0x1, 0x101, 0x4, 0x8, 0x8, 0xfffffffa, 0x7a, 0x8, 0xf, 0xb, 0x8, 0x4, 0x3, 0x6, 0x8454, 0xfffffffd, 0x3, 0x5, 0x5, 0x7e10, 0x2, 0xee29, 0x8, 0x4, 0x196, 0x1, 0xfffffff0, 0x1, 0x8000, 0x6, 0x2, 0x5, 0x1000, 0x6b8a, 0xffff, 0x0, 0x7c0, 0x3, 0x6, 0x4, 0x1ff, 0x0, 0x1, 0x1ff, 0x8, 0x1, 0x1, 0x3, 0x3, 0x51c5, 0x5, 0x5, 0x4, 0x401, 0x3, 0x80000001, 0x804, 0x0, 0x7fff, 0xc0, 0x8000, 0x6, 0x3, 0xffffff89, 0x7, 0xffff, 0x8, 0x10000, 0xb9, 0x9, 0x5, 0x6, 0x7, 0x9b, 0x0, 0x7, 0xda, 0x1, 0xffffffff, 0x6, 0x40, 0x4, 0x81, 0xf3d, 0xffff, 0x10, 0x5, 0x6, 0x7ff, 0xffffffce, 0x1, 0x7e0a, 0x4, 0x961, 0xb9b, 0x7e8, 0x9, 0x0, 0x9, 0x51d, 0xffff, 0x2bbe, 0x6, 0x341, 0x3, 0x7c0, 0x1, 0x0, 0x40, 0x4, 0x1, 0x4, 0x7, 0x2, 0x7, 0xfffffffc, 0x7fff, 0x9, 0xdae, 0xdc, 0x3, 0xfff, 0x6, 0xd9c, 0x1, 0x9, 0x7, 0x4, 0x912, 0x0, 0x1, 0x0, 0x9, 0x2, 0x7, 0x2, 0xc, 0x9, 0x2, 0x3, 0x4, 0x1, 0x1, 0x3, 0x7, 0xbfc1, 0x3, 0xffffffff, 0x5, 0x1, 0x0, 0x1, 0x5, 0x5, 0x0, 0x3, 0x3, 0x3, 0x6, 0xffff, 0x3, 0xb214, 0x5, 0x6, 0xff, 0x9, 0x1687, 0x7, 0x4, 0x9, 0x4, 0x4, 0x6, 0x3, 0x4, 0xff, 0xfffff134, 0x10001, 0x4, 0x0, 0x81, 0x7, 0x6, 0x2, 0x9, 0xba, 0x8, 0x1b5, 0xb82a, 0x245, 0xae0ffc69, 0x5, 0x3, 0x7, 0x1, 0x7, 0x5, 0x9, 0x5, 0x5, 0x8b73, 0x4, 0x9, 0x3, 0x7, 0x0, 0xfffffffe, 0x9, 0x1, 0x3, 0x2, 0x6, 0x6, 0xc41e, 0x2, 0xff, 0x417, 0x1, 0x4, 0x6, 0x9, 0x9, 0xffffff7f, 0xbb05, 0x200, 0x7, 0x80000001, 0x0, 0x81, 0x9, 0x4, 0x50, 0x2, 0x587, 0x811, 0x6, 0x3a, 0x7, 0x25, 0x6, 0x2, 0x1, 0xf, 0xd, 0x7, 0x0, 0x400, 0x8001, 0x25ef, 0x6, 0x8f8, 0x0, 0x81, 0x2, 0x6, 0xf, 0x6, 0x1398f717, 0x800, 0x4, 0xd, 0x8, 0x6, 0x25, 0x8, 0xe1db, 0x0, 0x2, 0x0, 0x0, 0x9, 0x1ff, 0xc, 0xff, 0x401, 0x4, 0x780, 0x8, 0x2, 0xfffffff8, 0x2, 0x1, 0x3, 0x1, 0x1, 0xfffffffb, 0x2, 0x8, 0xfffffffa, 0x1, 0x1, 0xfffffff8, 0xfffffffd, 0x73, 0x5b1, 0x4, 0x0, 0x1d, 0x5918, 0x800, 0x8, 0xa7, 0x6, 0x6, 0x2, 0xb64, 0x2, 0x16b, 0x1, 0x6, 0xfffffffe, 0x800, 0x4, 0x0, 0x7fff, 0x3, 0x1, 0x2, 0x101, 0xc83f, 0xce41, 0x1b, 0xeb, 0x7a70, 0x6, 0x0, 0x7, 0x6, 0x4, 0x100, 0x8, 0x3, 0xa, 0x2, 0x1, 0x0, 0x4, 0x0, 0x7b0d, 0x2, 0x1, 0x579b250, 0x3, 0x9, 0x800, 0x2, 0x83, 0x6, 0x5, 0x0, 0x6f23, 0xd2, 0x20000000, 0x5, 0x3b, 0x1, 0x100, 0xc, 0x8, 0x1, 0x4, 0x75da, 0x8, 0x40, 0xf0f3, 0x200, 0x8, 0x101, 0x800, 0x80, 0x1, 0x4, 0x5, 0x7a, 0x8, 0x3, 0x100, 0x10000, 0x7, 0x7, 0xc6, 0x1, 0x6, 0x9, 0xff, 0x5b3, 0xff, 0xfffffffd, 0x4, 0x3, 0x8, 0x3e, 0x80, 0x0, 0xff, 0x9, 0x200, 0x9, 0xfd4, 0x2, 0x8, 0x7, 0x198a, 0x6, 0xff, 0x0, 0x7, 0x2000200, 0x32, 0x9, 0x5, 0x7, 0x7, 0x5, 0x8, 0xffffff01, 0x6, 0x3, 0x200, 0x2, 0x2, 0x1, 0x5d, 0x40, 0x2, 0x4, 0xfffffffc, 0x1000, 0x4, 0x8, 0x4, 0x2, 0x2, 0x2, 0x2, 0x8, 0x6, 0x8, 0x6, 0xffffff73, 0x7, 0x200, 0x3000000, 0x2, 0x5, 0xb, 0x10001, 0x6000000, 0x100, 0x1, 0x7, 0xb1d, 0x2, 0x5, 0x4, 0x9, 0x2, 0x1, 0x2, 0x10000, 0x4, 0x25, 0x8, 0xffffffff, 0x168, 0x1ff, 0x0, 0x4, 0xfffffffa, 0x1, 0x200, 0xffffffff, 0x9196, 0x1, 0x0, 0xffffffff, 0xfff, 0x401, 0x555ab207, 0x0, 0x3, 0x5, 0x8, 0x1, 0x7fffffff, 0x5, 0x40, 0x8, 0x401, 0xbcd, 0x6, 0x12c, 0x3, 0xe9, 0xffffffff, 0x9, 0xc, 0x7ff, 0xa, 0x6, 0x401, 0xff, 0x4, 0x5, 0x0, 0x6fe, 0x4, 0x46, 0x8, 0x81, 0x1, 0x4d76, 0x2, 0xe, 0x6, 0x0, 0xfb, 0x9df, 0xd30, 0xffff, 0x1, 0x2, 0x1, 0x2, 0x2, 0x1, 0x4, 0x7, 0x401, 0xbea8, 0x6, 0x8, 0x2, 0x401, 0x401, 0x6, 0x2, 0x9, 0x4d, 0xd3a, 0x6e3, 0x14, 0x1, 0x9, 0x5, 0x6, 0xffffff29, 0xb, 0x3, 0x1ff, 0x100, 0x5, 0x200, 0x5, 0x6, 0x2, 0x3, 0x5, 0x7ff, 0x22c3bfd4, 0x8, 0x9, 0x9, 0x0, 0x8, 0x6, 0xd]})

6.930133884s ago: executing program 1 (id=478):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000240)={0x0, 0xf, 0x12, {0x5, 0xf, 0x12, 0x2, [@generic={0x3, 0x10, 0xa}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0xc, 0x1}]}}, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000a40)={&(0x7f0000000100)=[{0x1e, 0x6000, 0x0, 0x0}, {0x6, 0x1, 0x0, 0x0}, {0x9, 0x0, 0x0, 0x0}], 0x3})

5.97830512s ago: executing program 2 (id=480):
capset(0x0, &(0x7f0000000040)={0xe2, 0x0, 0x0, 0x81, 0xffdfffff, 0x40000000})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10)
bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x62}, {&(0x7f0000000480)="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", 0x25}], 0x2, 0x0, 0x0, 0x10}, 0x22000000)

5.676593747s ago: executing program 2 (id=481):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file1\x00', 0xa00010, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES64=0x0, @ANYRES64, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

5.188886396s ago: executing program 2 (id=482):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[@ANYBLOB="12011001020000402505a1a44000010203010902e10002011120050904000001020d000009240600014812987e052400df000d240f0101000000000003000580241a0104146e2413ee518feaf0692c135da9476dc0a5eef1567e69a81e949fcd31f4f7d3c3b4a03d43334ecee80f3f7f40ef9a41d4cc3b43f7aa3d305c6fc23775f803abf2a9fa26b1f5b65555ccd23da8bb42fee32af87080a01fb92dc3d08a95ee561798b7881364c756175786ab8d696ff507240a050702800c241b010403"], 0x0)
unshare(0x2c020400)
ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500))

4.475381487s ago: executing program 1 (id=483):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, 0x0)

4.063328942s ago: executing program 2 (id=484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000001c0)='./bus\x00', 0x810, &(0x7f0000000000)=ANY=[], 0xfd, 0x1067a, &(0x7f0000010ac0)="$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")
setxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x0)
llistxattr(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)=""/42, 0x2a)

3.027227482s ago: executing program 0 (id=485):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.496994583s ago: executing program 2 (id=488):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.018128692s ago: executing program 5 (id=490):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.905850708s ago: executing program 1 (id=491):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_SET_NAME_A(r2, 0x40046201, &(0x7f0000000080)='\x00')
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0)

1.751012947s ago: executing program 1 (id=492):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14)
sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14)

1.476331103s ago: executing program 5 (id=493):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4)
recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082)

1.315454083s ago: executing program 5 (id=494):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0xffff, 0x9}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x0, 0xea60}, 0x12, 0x1}, 0x18)

928.244336ms ago: executing program 5 (id=495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd25, 0x10000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x46, 0x10, 0x1, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x845}, 0x24008004)

790.397294ms ago: executing program 1 (id=496):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x3, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [0xffffff00, 0xffffff00], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1000, 0x4, 0x1}, {0x0, 0x3, 0x1}, 0x3ab, 0x6d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfe6f)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file0\x00', 0x1008413, &(0x7f0000000140)={[{@noload}, {@bsdgroups}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noblock_validity}]}, 0x0, 0x525, &(0x7f0000000c00)="$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")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

472.951302ms ago: executing program 2 (id=497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003060101000000000000000002000002080006400000009105000100070000000900020073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)

440.232824ms ago: executing program 0 (id=498):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000023, 0x0)
sendmsg$802154_raw(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)="110000", 0x3}, 0x1, 0x0, 0x0, 0x4008081}, 0x4c0e4)
recvmmsg(r0, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0)

426.472015ms ago: executing program 5 (id=499):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x15, 0x0, &(0x7f0000000200)="c422dd1b44c88937896bfda211327cc6ca26aa1949", 0x0, 0x2, 0x0, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

274.522424ms ago: executing program 5 (id=500):
pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff)

0s ago: executing program 0 (id=501):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="0f", 0x1}], 0x1)
close_range(r1, r1, 0x0)

kernel console output (not intermixed with test programs):

1_to_batadv: link becomes ready
[   74.169594][ T4187] device veth1_macvtap entered promiscuous mode
[   74.185761][ T4193] device veth1_macvtap entered promiscuous mode
[   74.205826][ T1566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.208919][ T4236] Bluetooth: hci2: command 0x040f tx timeout
[   74.220838][ T4236] Bluetooth: hci4: command 0x040f tx timeout
[   74.232353][ T4236] Bluetooth: hci3: command 0x040f tx timeout
[   74.239335][ T4236] Bluetooth: hci1: command 0x040f tx timeout
[   74.248426][ T4236] Bluetooth: hci0: command 0x040f tx timeout
[   74.254812][ T1566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.294518][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.304015][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.325006][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.333581][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.344878][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   74.353413][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   74.364480][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.373539][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.389001][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.400011][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.410590][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.421875][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.434273][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.455730][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.467696][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.488236][ T4185] device veth0_vlan entered promiscuous mode
[   74.512156][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.523520][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.535535][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.546780][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.557939][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.572238][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.589537][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.609624][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.621616][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.632085][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.642858][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.655089][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.662548][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.671758][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.681660][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.691568][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.705456][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.714958][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.724535][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.732482][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.750914][ T4185] device veth1_vlan entered promiscuous mode
[   74.774440][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.789149][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.799355][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.812314][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.825475][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.836401][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.849889][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.871485][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.882536][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.891800][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.901154][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.925805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.936921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.950441][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.960283][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.969796][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.979505][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.037509][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.050466][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.075222][ T4185] device veth0_macvtap entered promiscuous mode
[   75.082658][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.092992][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.102754][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.112011][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.164047][ T1566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.172079][ T1566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.195664][ T4185] device veth1_macvtap entered promiscuous mode
[   75.212611][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.224596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.315953][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.329992][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.338893][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.353595][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.385874][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.399132][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.410440][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.421339][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.432227][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.443786][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.456623][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.472927][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.488280][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.502109][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.526731][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.541852][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.544012][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.564100][ T4243] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.580329][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.583887][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.612187][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.630102][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.641743][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.659533][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.673250][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.691659][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.709414][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.720947][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.733305][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.773207][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.793095][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.803371][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.821232][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.851018][ T4243] usb 1-1: Using ep0 maxpacket: 16
[   75.852844][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.872415][ T1566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.885264][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.893554][ T1566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.921181][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.934847][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.974254][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.003997][ T4243] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   76.025045][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.034057][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.034932][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.058381][ T4243] usb 1-1: config 0 descriptor??
[   76.111516][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.171651][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.188679][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.227974][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.285018][ T4236] Bluetooth: hci0: command 0x0419 tx timeout
[   76.300216][ T4236] Bluetooth: hci1: command 0x0419 tx timeout
[   76.325566][ T4236] Bluetooth: hci3: command 0x0419 tx timeout
[   76.351338][ T4236] Bluetooth: hci4: command 0x0419 tx timeout
[   76.362848][ T4236] Bluetooth: hci2: command 0x0419 tx timeout
[   76.577301][ T4243] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[   76.654623][ T4327] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[   76.733380][ T4327] EXT4-fs (loop4): unable to read superblock
[   76.879254][ T4259] usb 1-1: USB disconnect, device number 2
[   77.089722][ T4312] loop4: detected capacity change from 0 to 32768
[   77.101789][ T4342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'.
[   77.186530][ T4312] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.7 (4312)
[   77.271966][ T4312] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   77.328207][ T4312] BTRFS info (device loop4): using free space tree
[   77.356213][ T4312] BTRFS info (device loop4): has skinny extents
[   77.493995][ T4197] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.675393][ T4312] BTRFS info (device loop4): enabling ssd optimizations
[   77.791476][ T4383] loop1: detected capacity change from 0 to 512
[   77.864212][ T4197] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   77.895574][ T4197] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   77.944028][ T4259] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   77.955471][ T4383] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.24: inode has both inline data and extents flags
[   77.995893][ T4383] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.24: couldn't read orphan inode 15 (err -117)
[   78.008349][ T4197] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   78.015636][ T4383] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   78.017915][ T4197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   78.039536][ T4197] usb 3-1: SerialNumber: syz
[   78.188618][ T4259] usb 1-1: Using ep0 maxpacket: 32
[   78.273532][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'.
[   78.314032][ T4259] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   78.331574][ T4197] usb 3-1: 0:2 : does not exist
[   78.347399][ T4259] usb 1-1: config 0 has no interface number 0
[   78.421157][ T4197] usb 3-1: USB disconnect, device number 2
[   78.534526][ T4259] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   78.553895][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.568425][ T4408] loop4: detected capacity change from 0 to 256
[   78.574397][ T4259] usb 1-1: Product: syz
[   78.580224][ T4259] usb 1-1: Manufacturer: syz
[   78.594031][ T4259] usb 1-1: SerialNumber: syz
[   78.605721][ T4259] usb 1-1: config 0 descriptor??
[   78.655555][ T4259] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   78.746979][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.885501][ T4259] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   78.928989][ T4259] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   79.067942][ T4416] overlayfs: failed to resolve './bus': -2
[   79.358567][ T4174] usb 1-1: USB disconnect, device number 3
[   79.373819][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   79.405369][ T4174] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   79.439679][ T4415] loop2: detected capacity change from 0 to 65536
[   79.471039][ T4174] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   79.562072][ T4174] quatech2 1-1:0.51: device disconnected
[   79.597993][ T4427] process 'syz.4.35' launched './file0' with NULL argv: empty string added
[   79.630992][ T4415] XFS (loop2): Mounting V5 Filesystem
[   79.648076][ T4429] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.728813][ T4415] XFS (loop2): Ending clean mount
[   79.755010][ T4415] XFS (loop2): Quotacheck needed: Please wait.
[   79.860110][ T4415] XFS (loop2): Quotacheck: Done.
[   80.091636][ T4187] XFS (loop2): Unmounting Filesystem
[   80.377717][ T4395] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.673981][ T4395] usb 2-1: Using ep0 maxpacket: 32
[   80.773284][ T4467] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET)
[   80.794349][ T4395] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[   80.812923][ T4395] usb 2-1: config 0 has no interface number 0
[   80.829001][ T4395] usb 2-1: config 0 interface 184 has no altsetting 0
[   81.041647][ T4395] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   81.060822][ T4395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.088196][ T4395] usb 2-1: Product: syz
[   81.105267][ T4395] usb 2-1: Manufacturer: syz
[   81.110081][ T4395] usb 2-1: SerialNumber: syz
[   81.135923][ T4395] usb 2-1: config 0 descriptor??
[   81.141080][ T4477] syz.2.54 (4477) used greatest stack depth: 20528 bytes left
[   81.148917][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'.
[   81.205376][ T4395] smsc75xx v1.0.0
[   81.210255][ T4463] loop3: detected capacity change from 0 to 32768
[   81.217402][ T4243] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   81.236182][ T4463] =======================================================
[   81.236182][ T4463] WARNING: The mand mount option has been deprecated and
[   81.236182][ T4463]          and is ignored by this kernel. Remove the mand
[   81.236182][ T4463]          option from the mount to silence this warning.
[   81.236182][ T4463] =======================================================
[   81.271862][    C0] vkms_vblank_simulate: vblank timer overrun
[   81.340881][ T4463] XFS (loop3): Mounting V5 Filesystem
[   81.447471][ T4463] XFS (loop3): Ending clean mount
[   81.475591][ T4463] XFS (loop3): Quotacheck needed: Please wait.
[   81.514332][ T4243] usb 5-1: Using ep0 maxpacket: 8
[   81.555257][ T4463] XFS (loop3): Quotacheck: Done.
[   81.634159][ T4243] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   81.642736][ T4243] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   81.658648][ T4243] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   81.669170][ T4243] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   81.679633][ T4243] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   81.697510][ T4243] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   81.719496][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.810960][ T4506] loop0: detected capacity change from 0 to 256
[   81.848387][ T4192] XFS (loop3): Unmounting Filesystem
[   81.855280][ T4395] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[   81.872756][ T4395] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   82.143913][ T4395] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   82.165195][ T4395] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   82.199164][ T4395] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   82.230518][ T4395] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   82.255793][ T4395] smsc75xx: probe of 2-1:0.184 failed with error -71
[   82.289542][ T4395] usb 2-1: USB disconnect, device number 2
[   82.331754][ T4504] loop2: detected capacity change from 0 to 32768
[   82.429317][ T4504] XFS (loop2): Mounting V5 Filesystem
[   82.498253][ T4504] XFS (loop2): Ending clean mount
[   82.508981][ T4504] XFS (loop2): Quotacheck needed: Please wait.
[   82.566535][ T4504] XFS (loop2): Quotacheck: Done.
[   82.628512][ T4187] XFS (loop2): Unmounting Filesystem
[   82.654360][ T4525] usbtmc 5-1:16.0: simple usb_control_msg returned 0
[   82.859481][ T4259] usb 5-1: USB disconnect, device number 2
[   82.901398][ T4532] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.231991][ T4522] loop3: detected capacity change from 0 to 32768
[   83.401853][ T4545] loop0: detected capacity change from 0 to 4096
[   83.543128][ T4553] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.019222][ T4552] loop4: detected capacity change from 0 to 32768
[   84.038717][ T4549] loop2: detected capacity change from 0 to 32768
[   84.106617][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   84.280407][ T4560] loop3: detected capacity change from 0 to 32768
[   84.338606][ T4560] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.79 (4560)
[   84.381446][ T4552] XFS (loop4): Mounting V5 Filesystem
[   84.411578][ T4549] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   84.433653][ T4560] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   84.443254][ T4560] BTRFS info (device loop3): using free space tree
[   84.450526][ T4560] BTRFS info (device loop3): has skinny extents
[   84.583573][ T4552] XFS (loop4): Ending clean mount
[   84.609705][ T4552] XFS (loop4): Quotacheck needed: Please wait.
[   84.631212][ T4187] ocfs2: Unmounting device (7,2) on (node local)
[   84.834295][ T4560] BTRFS info (device loop3): enabling ssd optimizations
[   84.889135][ T4552] XFS (loop4): Quotacheck: Done.
[   85.070872][ T4193] XFS (loop4): Unmounting Filesystem
[   85.155595][ T4596] vxcan1: tx drop: invalid sa for name 0x0000000000000004
[   85.667709][ T4568] loop1: detected capacity change from 0 to 32768
[   85.757599][ T4568] XFS (loop1): Mounting V5 Filesystem
[   85.820394][ T4589] loop0: detected capacity change from 0 to 32768
[   85.833957][   T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.898503][ T4253] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   85.945119][ T4568] XFS (loop1): Ending clean mount
[   85.957095][ T4568] XFS (loop1): Quotacheck needed: Please wait.
[   86.062999][ T4568] XFS (loop1): Quotacheck: Done.
[   86.089385][ T4615] loop4: detected capacity change from 0 to 128
[   86.119348][   T21] usb 4-1: Using ep0 maxpacket: 8
[   86.184602][ T4253] usb 3-1: Using ep0 maxpacket: 32
[   86.191948][ T4185] XFS (loop1): Unmounting Filesystem
[   86.241347][ T4618] loop0: detected capacity change from 0 to 1024
[   86.271489][ T4615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   86.282795][   T21] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   86.305593][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.324115][ T4253] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[   86.333335][ T4253] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.358129][ T4615] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   86.403389][ T4618] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   86.414165][ T4253] usb 3-1: config 0 descriptor??
[   86.432240][ T4618] EXT4-fs (loop0): orphan cleanup on readonly fs
[   86.446539][   T21] pvrusb2: Hardware description: Terratec Grabster AV400
[   86.484131][   T21] pvrusb2: **********
[   86.488179][   T21] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   86.499351][ T4618] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.91: Invalid inode table block 0 in block_group 0
[   86.517587][ T4615] fscrypt (loop4, inode 12): Unsupported encryption flags (0x10)
[   86.525011][   T21] pvrusb2: Important functionality might not be entirely working.
[   86.550726][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   86.557882][   T21] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   86.575249][ T4618] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   86.590488][   T21] pvrusb2: **********
[   86.604046][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   86.610613][ T4618] EXT4-fs error (device loop0): ext4_quota_write:6646: inode #3: comm syz.0.91: mark_inode_dirty error
[   86.656382][ T4600] udc-core: couldn't find an available UDC or it's busy
[   86.663400][ T4600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   86.690686][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   86.697599][ T4253] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[   86.719194][ T4618] Quota error (device loop0): write_blk: dquota write failed
[   86.729731][ T2426] pvrusb2: Invalid write control endpoint
[   86.746488][ T4253] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   86.776186][    T7] cfg80211: failed to load regulatory.db
[   86.794148][ T4618] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   86.820461][ T4618] EXT4-fs error (device loop0): ext4_acquire_dquot:6234: comm syz.0.91: Failed to acquire dquot type 0
[   86.855732][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   86.862486][ T4618] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.91: Invalid inode table block 0 in block_group 0
[   86.884413][ T4253] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[   86.934210][ T4253] usb 3-1: media controller created
[   86.984074][ T4600] dib0700: tx buffer length is larger than 4. Not supported.
[   87.023426][    T7] usb 4-1: USB disconnect, device number 2
[   87.033428][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.046283][ T2426] pvrusb2: Invalid write control endpoint
[   87.052360][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   87.073359][ T4618] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   87.094571][ T4253] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.103156][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   87.128943][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.141988][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   87.162138][ T4618] EXT4-fs error (device loop0): ext4_ext_truncate:4456: inode #15: comm syz.0.91: mark_inode_dirty error
[   87.183857][ T2426] pvrusb2: Device being rendered inoperable
[   87.215063][ T2426] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   87.241536][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.254014][ T2426] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   87.262624][ T4618] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.91: Invalid inode table block 0 in block_group 0
[   87.293570][ T4253] DVB: Unable to find symbol dib7000p_attach()
[   87.304310][ T4253] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[   87.330348][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.340501][ T2426] pvrusb2: Attached sub-driver cx25840
[   87.356076][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   87.370440][ T4618] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   87.423076][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   87.442824][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.453153][ T4618] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[   87.486768][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.503850][ T4253] rc_core: IR keymap rc-dib0700-rc5 not found
[   87.514637][ T4253] Registered IR keymap rc-empty
[   87.519893][ T4253] dvb-usb: could not initialize remote control.
[   87.547996][ T4618] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz.0.91: Invalid inode table block 0 in block_group 0
[   87.570606][ T4253] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[   87.624175][ T4253] usb 3-1: USB disconnect, device number 3
[   87.634257][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.686360][ T4618] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   87.754036][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.760652][ T4618] EXT4-fs error (device loop0): ext4_truncate:4279: inode #15: comm syz.0.91: mark_inode_dirty error
[   87.785117][ T4253] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[   87.850581][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.867001][ T4618] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[   87.911732][ T4618] EXT4-fs (loop0): Remounting filesystem read-only
[   87.969951][ T4618] EXT4-fs (loop0): 1 truncate cleaned up
[   88.014374][ T4618] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000013,stripe=0x0000000000000000,nolazytime,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback.
[   88.379890][ T4645] netlink: 104 bytes leftover after parsing attributes in process `syz.2.100'.
[   88.651414][ T4243] kernel read not supported for file /video7 (pid: 4243 comm: kworker/0:6)
[   88.874461][ T4635] set_capacity_and_notify: 1 callbacks suppressed
[   88.874479][ T4635] loop4: detected capacity change from 0 to 40427
[   88.939027][ T4639] loop1: detected capacity change from 0 to 32768
[   88.959620][ T4635] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[   89.002949][ T4635] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   89.045025][ T4639] XFS: ikeep mount option is deprecated.
[   89.121457][ T4635] F2FS-fs (loop4): Found nat_bits in checkpoint
[   89.184047][ T4639] XFS (loop1): Mounting V5 Filesystem
[   89.242410][ T4635] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   89.255123][ T4635] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   89.600968][ T4193] attempt to access beyond end of device
[   89.600968][ T4193] loop4: rw=2049, want=45104, limit=40427
[   89.629953][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   89.640355][ T4639] XFS (loop1): Ending clean mount
[   89.662311][ T4639] XFS (loop1): Quotacheck needed: Please wait.
[   89.691665][ T4676] team0: Port device bridge1 added
[   89.700826][ T4677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.108'.
[   89.729693][ T4647] loop0: detected capacity change from 0 to 40427
[   89.755201][ T4679] device syzkaller1 entered promiscuous mode
[   89.775261][ T4639] XFS (loop1): Quotacheck: Done.
[   89.816966][ T4647] F2FS-fs (loop0): Invalid segment/section count (458776 != 24 * 1)
[   89.847227][ T4647] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   89.885843][ T4647] F2FS-fs (loop0): invalid crc value
[   89.938406][ T4647] F2FS-fs (loop0): Found nat_bits in checkpoint
[   90.001453][ T4185] XFS (loop1): Unmounting Filesystem
[   90.062733][ T4682] loop2: detected capacity change from 0 to 1024
[   90.096583][ T4647] F2FS-fs (loop0): recover fsync data on readonly fs
[   90.157859][ T4647] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[   90.166832][ T4682] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   90.181326][ T4682] EXT4-fs (loop2): orphan cleanup on readonly fs
[   90.200292][ T4647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   90.251342][ T4682] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.111: Invalid inode table block 0 in block_group 0
[   90.315085][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.321635][ T4682] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   90.336310][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.342983][ T4682] EXT4-fs error (device loop2): ext4_quota_write:6646: inode #3: comm syz.2.111: mark_inode_dirty error
[   90.414775][ T4686] block nbd3: Device being setup by another task
[   90.426594][ T4647] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0
[   90.460093][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.467137][ T4682] Quota error (device loop2): write_blk: dquota write failed
[   90.499569][ T4682] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   90.522000][ T4682] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.111: Failed to acquire dquot type 0
[   90.559612][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.580897][ T4682] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.111: Invalid inode table block 0 in block_group 0
[   90.624025][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.630756][ T4682] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   90.654568][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.661141][ T4682] EXT4-fs error (device loop2): ext4_ext_truncate:4456: inode #15: comm syz.2.111: mark_inode_dirty error
[   90.692114][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.705234][ T4695] bridge0: port 3(syz_tun) entered blocking state
[   90.715072][ T4682] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.111: Invalid inode table block 0 in block_group 0
[   90.749133][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.762516][ T4682] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   90.774556][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.777161][ T4695] bridge0: port 3(syz_tun) entered disabled state
[   90.782256][ T4682] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[   90.804775][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.811354][ T4682] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.111: Invalid inode table block 0 in block_group 0
[   90.830455][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.837137][ T4682] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5854: Corrupt filesystem
[   90.847890][ T4695] device syz_tun entered promiscuous mode
[   90.858536][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.866396][ T4682] EXT4-fs error (device loop2): ext4_truncate:4279: inode #15: comm syz.2.111: mark_inode_dirty error
[   90.870705][ T4695] bridge0: port 3(syz_tun) entered blocking state
[   90.877938][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.884370][ T4695] bridge0: port 3(syz_tun) entered forwarding state
[   90.903229][ T4682] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[   90.913942][ T4682] EXT4-fs (loop2): Remounting filesystem read-only
[   90.920639][ T4682] EXT4-fs (loop2): 1 truncate cleaned up
[   90.940779][ T4682] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000013,stripe=0x0000000000000000,nolazytime,errors=remount-ro,data_err=ignore,noblock_validity,minixdf,min_batch_time=0x0000000000000013,. Quota mode: writeback.
[   90.964020][ T4243] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   91.026292][ T4195] block nbd3: Receive control failed (result -32)
[   91.047318][ T4687] block nbd3: shutting down sockets
[   91.123272][ T4698] netlink: 104 bytes leftover after parsing attributes in process `syz.4.115'.
[   91.184650][ T4702] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   91.354111][ T4243] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.396053][ T4243] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[   91.428295][ T4243] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   91.604346][ T4243] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   91.620587][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.643396][ T4243] usb 2-1: Product: syz
[   91.652109][ T4243] usb 2-1: Manufacturer: syz
[   91.663557][ T4243] usb 2-1: SerialNumber: syz
[   91.824780][ T4726] bridge0: port 3(syz_tun) entered blocking state
[   91.844140][ T4726] bridge0: port 3(syz_tun) entered disabled state
[   91.853162][ T4726] device syz_tun entered promiscuous mode
[   91.868243][ T4726] bridge0: port 3(syz_tun) entered blocking state
[   91.874892][ T4726] bridge0: port 3(syz_tun) entered forwarding state
[   91.928933][ T4694] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   91.989792][ T4732] loop4: detected capacity change from 0 to 2048
[   92.178367][ T4732] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   92.217658][ T4732] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.265529][ T4719] loop3: detected capacity change from 0 to 32768
[   92.344470][ T4719] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   92.532087][ T4744] loop0: detected capacity change from 0 to 32768
[   92.596148][ T4744] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[   92.606110][ T4694] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   92.668732][ T4192] ocfs2: Unmounting device (7,3) on (node local)
[   92.692963][ T4744] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   92.785226][ T4754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'.
[   92.853907][ T4754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.137'.
[   92.855991][   T26] audit: type=1800 audit(1769068352.257:2): pid=4744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.133" name="file1" dev="loop0" ino=17058 res=0 errno=0
[   92.904045][ T4243] cdc_ncm 2-1:1.0: bind() failure
[   92.944057][ T4243] cdc_ncm: probe of 2-1:1.1 failed with error -71
[   92.968787][ T4243] cdc_mbim: probe of 2-1:1.1 failed with error -71
[   93.020505][ T4243] usbtest: probe of 2-1:1.1 failed with error -71
[   93.061971][ T4186] (syz-executor,4186,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[   93.074071][ T4243] usb 2-1: USB disconnect, device number 3
[   93.114837][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[   93.281577][ T4763] devpts: called with bogus options
[   93.407877][ T4766] bridge0: port 3(syz_tun) entered blocking state
[   93.439186][ T4766] bridge0: port 3(syz_tun) entered disabled state
[   93.448412][ T4766] device syz_tun entered promiscuous mode
[   93.469357][ T4768] loop0: detected capacity change from 0 to 128
[   93.481212][ T4766] bridge0: port 3(syz_tun) entered blocking state
[   93.487809][ T4766] bridge0: port 3(syz_tun) entered forwarding state
[   93.524919][ T4755] loop4: detected capacity change from 0 to 32768
[   93.603956][ T4768] EXT4-fs (loop0): Test dummy encryption mode enabled
[   93.631540][ T4777] loop3: detected capacity change from 0 to 512
[   93.654567][ T4768] EXT4-fs (loop0): Test dummy encryption mode enabled
[   93.661639][ T4768] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   93.675307][ T4755] XFS (loop4): Mounting V5 Filesystem
[   93.681268][ T4768] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   93.708115][ T4768] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,nomblk_io_submit,nomblk_io_submit,,errors=continue. Quota mode: none.
[   93.730477][ T4768] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   93.830807][ T4755] XFS (loop4): Ending clean mount
[   93.998978][ T4193] XFS (loop4): Unmounting Filesystem
[   94.164405][ T4764] loop2: detected capacity change from 0 to 32768
[   94.181073][ T4768] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[   94.201842][ T4798] loop3: detected capacity change from 0 to 128
[   94.224403][ T4764] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.141 (4764)
[   94.283827][ T4764] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   94.322104][ T4764] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   94.342856][ T4764] BTRFS info (device loop2): use zstd compression, level 3
[   94.353014][ T4764] BTRFS info (device loop2): using free space tree
[   94.364451][ T4798] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   94.403819][ T4764] BTRFS info (device loop2): has skinny extents
[   94.410200][ T4798] hpfs: filesystem error: improperly stopped
[   94.429472][ T4798] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   94.448042][ T4798] hpfs: You really don't want any checks? You are crazy...
[   94.464291][ T4798] hpfs: hpfs_map_sector(): read error
[   94.473998][ T4798] hpfs: code page support is disabled
[   94.480300][ T4798] hpfs: hpfs_map_4sectors(): unaligned read
[   94.544354][ T4798] hpfs: hpfs_map_4sectors(): unaligned read
[   94.550892][ T4798] hpfs: filesystem error: unable to find root dir
[   94.769242][ T4793] loop1: detected capacity change from 0 to 32768
[   94.797279][ T4764] BTRFS info (device loop2): enabling ssd optimizations
[   94.804444][ T4243] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   94.873988][ T4823] loop3: detected capacity change from 0 to 128
[   94.899939][ T4793] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   95.044215][ T4243] usb 5-1: Using ep0 maxpacket: 8
[   95.149183][ T4185] ocfs2: Unmounting device (7,1) on (node local)
[   95.166864][ T4832] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   95.186980][ T4243] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   95.202154][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.252990][ T4834] bridge0: port 3(syz_tun) entered blocking state
[   95.262302][ T4834] bridge0: port 3(syz_tun) entered disabled state
[   95.271876][ T4243] pvrusb2: Hardware description: Terratec Grabster AV400
[   95.284370][ T4243] pvrusb2: **********
[   95.288535][ T4243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   95.322634][ T4834] device syz_tun entered promiscuous mode
[   95.330759][ T4243] pvrusb2: Important functionality might not be entirely working.
[   95.346821][ T4834] bridge0: port 3(syz_tun) entered blocking state
[   95.353380][ T4834] bridge0: port 3(syz_tun) entered forwarding state
[   95.367783][ T4243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   95.382518][ T4243] pvrusb2: **********
[   95.408811][ T4837] team0: Port device bridge1 added
[   95.441550][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'.
[   95.475238][ T4807] udc-core: couldn't find an available UDC or it's busy
[   95.485466][ T4838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.156'.
[   95.501582][ T4807] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   95.536890][ T2426] pvrusb2: Invalid write control endpoint
[   95.722267][ T2426] pvrusb2: Invalid write control endpoint
[   95.741132][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   95.751228][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   95.785719][ T4843] Â: renamed from pim6reg1
[   95.791549][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   95.812630][ T2426] pvrusb2: Device being rendered inoperable
[   95.850225][ T4807] pvrusb2: Attempted to execute control transfer when device not ok
[   95.859281][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[   95.869513][ T4259] usb 5-1: USB disconnect, device number 3
[   95.876124][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[   95.904760][ T2426] pvrusb2: Attached sub-driver cx25840
[   95.925151][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   96.006792][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   96.502592][ T4864] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[   96.734694][ T4869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'.
[   96.745734][ T4851] loop1: detected capacity change from 0 to 32768
[   96.802792][   T26] audit: type=1800 audit(1769068356.207:3): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.163" name="file1" dev="loop1" ino=4 res=0 errno=0
[   96.965350][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'.
[   96.976746][ T4859] loop0: detected capacity change from 0 to 32768
[   97.007452][ T4873] team0: Port device bridge1 added
[   97.042179][ T4875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.171'.
[   97.104152][ T4859] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   97.345626][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[   97.358697][ T4881] sctp: [Deprecated]: syz.2.173 (pid 4881) Use of int in maxseg socket option.
[   97.358697][ T4881] Use struct sctp_assoc_value instead
[   97.440203][ T4886] sctp: [Deprecated]: syz.2.173 (pid 4886) Use of int in maxseg socket option.
[   97.440203][ T4886] Use struct sctp_assoc_value instead
[   97.507149][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.176'.
[   97.554594][ T4887] tipc: Started in network mode
[   97.588242][ T4887] tipc: Node identity @emory.en, cluster identity 8
[   97.705332][ T4888] loop3: detected capacity change from 0 to 4096
[   97.829770][ T4896] loop4: detected capacity change from 0 to 1024
[   98.025306][ T4896] EXT4-fs (loop4): quotafile must be on filesystem root
[   98.087219][ T4898] loop2: detected capacity change from 0 to 32768
[   98.106247][ T4904] team0: Port device bridge1 added
[   98.152104][ T4898] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.183 (4898)
[   98.169740][ T4898] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   98.180035][ T4898] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   98.190129][ T4898] BTRFS info (device loop2): use zstd compression, level 3
[   98.197868][ T4898] BTRFS info (device loop2): using free space tree
[   98.204673][ T4898] BTRFS info (device loop2): has skinny extents
[   98.345612][ T4918] loop0: detected capacity change from 0 to 4096
[   98.681787][ T4898] BTRFS info (device loop2): enabling ssd optimizations
[   99.497450][ T4920] loop1: detected capacity change from 0 to 32768
[   99.528261][ T4896] loop4: detected capacity change from 0 to 32768
[   99.545597][ T4932] loop3: detected capacity change from 0 to 32768
[   99.683350][ T4920] XFS (loop1): Mounting V5 Filesystem
[   99.709672][ T4932] XFS (loop3): Mounting V5 Filesystem
[   99.797506][ T4896] XFS (loop4): Mounting V5 Filesystem
[   99.860905][ T4920] XFS (loop1): Ending clean mount
[   99.883469][ T4920] XFS (loop1): Quotacheck needed: Please wait.
[   99.981412][ T4932] XFS (loop3): Ending clean mount
[   99.988911][ T4932] XFS (loop3): Quotacheck needed: Please wait.
[  100.049643][ T4920] XFS (loop1): Quotacheck: Done.
[  100.078490][ T4932] XFS (loop3): Quotacheck: Done.
[  100.092418][ T4896] XFS (loop4): Ending clean mount
[  100.218539][ T4193] XFS (loop4): Unmounting Filesystem
[  100.236977][ T4192] XFS (loop3): Unmounting Filesystem
[  100.402177][ T4185] XFS (loop1): Unmounting Filesystem
[  100.501580][ T4186] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  100.522415][ T4186] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  101.527135][ T4966] loop3: detected capacity change from 0 to 32768
[  101.606433][ T4966] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.198 (4966)
[  101.667148][ T4966] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  101.687158][ T4966] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  101.710339][ T4966] BTRFS info (device loop3): use zstd compression, level 3
[  101.727532][ T4966] BTRFS info (device loop3): using free space tree
[  101.751620][ T4966] BTRFS info (device loop3): has skinny extents
[  101.909610][ T4966] BTRFS info (device loop3): enabling ssd optimizations
[  102.085952][ T4993] loop2: detected capacity change from 0 to 32768
[  102.149522][   T26] audit: type=1800 audit(1769068361.557:4): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.204" name="file1" dev="loop2" ino=4 res=0 errno=0
[  102.227786][ T5014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.205'.
[  102.809634][ T5034] loop1: detected capacity change from 0 to 8
[  102.918539][ T5034] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  103.406079][ T5041] loop0: detected capacity change from 0 to 65536
[  103.451853][ T5044] loop3: detected capacity change from 0 to 512
[  103.543526][ T5050] IPVS: sh: SCTP 127.0.0.1:0 - no destination available
[  103.589665][ T5041] XFS (loop0): Mounting V5 Filesystem
[  103.610135][ T5053] capability: warning: `syz.1.213' uses deprecated v2 capabilities in a way that may be insecure
[  103.702911][ T5044] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  103.814470][ T5044] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  103.900901][ T5041] XFS (loop0): Ending clean mount
[  104.080589][ T4186] XFS (loop0): Unmounting Filesystem
[  104.089738][ T5044] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.206: corrupted inode contents
[  104.155671][ T5044] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #2: comm syz.3.206: mark_inode_dirty error
[  104.239346][ T5044] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #2: comm syz.3.206: corrupted inode contents
[  104.283866][ T5044] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.206: mark_inode_dirty error
[  104.451662][ T5079] loop2: detected capacity change from 0 to 4096
[  104.609573][ T5088] loop4: detected capacity change from 0 to 1024
[  105.123128][ T5088] hfsplus: xattr searching failed
[  105.162179][ T5088] hfsplus: xattr searching failed
[  105.700285][ T5086] loop1: detected capacity change from 0 to 32768
[  105.791046][ T5090] loop3: detected capacity change from 0 to 32768
[  105.834359][ T4259] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  105.892443][   T26] audit: type=1800 audit(1769068365.297:5): pid=5090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.223" name="file1" dev="loop3" ino=4 res=0 errno=0
[  105.939629][ T5086] XFS (loop1): Mounting V5 Filesystem
[  106.013918][ T5038] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  106.200636][ T5086] XFS (loop1): Ending clean mount
[  106.207102][ T4259] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  106.229982][ T4259] usb 3-1: config 0 has no interface number 0
[  106.246978][ T4259] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  106.263945][ T5038] usb 1-1: Using ep0 maxpacket: 8
[  106.279782][ T4259] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  106.314175][ T4259] usb 3-1: config 0 interface 255 has no altsetting 0
[  106.331687][ T4259] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  106.352302][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.382126][ T4259] usb 3-1: config 0 descriptor??
[  106.398027][ T5038] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  106.410958][ T5038] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  106.423496][ T5086] XFS (loop1): Quotacheck needed: Please wait.
[  106.435586][ T5102] loop4: detected capacity change from 0 to 32768
[  106.437842][ T4259] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  106.474021][ T5038] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  106.517467][ T5038] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  106.552722][ T5102] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  106.643086][ T5038] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.692761][ T5038] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  106.713594][ T5038] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.765768][ T4259] usb 3-1: USB disconnect, device number 4
[  106.809529][ T4193] ocfs2: Unmounting device (7,4) on (node local)
[  106.850992][ T5086] XFS (loop1): Quotacheck: Done.
[  106.994073][ T5038] usb 1-1: usb_control_msg returned -32
[  107.001258][ T5038] usbtmc 1-1:16.0: can't read capabilities
[  107.044934][ T4185] XFS (loop1): Unmounting Filesystem
[  107.068478][ T5119] loop3: detected capacity change from 0 to 128
[  107.653038][ T4253] usb 1-1: USB disconnect, device number 4
[  107.753439][ T5136] loop1: detected capacity change from 0 to 1024
[  107.844134][ T5136] EXT4-fs (loop1): Ignoring removed bh option
[  107.946478][ T5136] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  108.090247][ T5130] loop2: detected capacity change from 0 to 32768
[  108.267453][ T5130] XFS (loop2): Mounting V5 Filesystem
[  108.701915][ T5130] XFS (loop2): Ending clean mount
[  108.730095][ T5130] XFS (loop2): Quotacheck needed: Please wait.
[  108.920170][ T5130] XFS (loop2): Quotacheck: Done.
[  109.188106][ T5179] loop3: detected capacity change from 0 to 256
[  109.259536][ T5168] loop0: detected capacity change from 0 to 131072
[  109.270848][ T4187] XFS (loop2): Unmounting Filesystem
[  109.318951][ T5179] FAT-fs (loop3): Directory bread(block 64) failed
[  109.361091][ T5151] loop4: detected capacity change from 0 to 32768
[  109.370837][ T5179] FAT-fs (loop3): Directory bread(block 65) failed
[  109.378113][ T5168] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  109.386611][ T5168] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  109.397310][ T5168] F2FS-fs (loop0): invalid crc value
[  109.405264][ T5179] FAT-fs (loop3): Directory bread(block 66) failed
[  109.412337][ T5179] FAT-fs (loop3): Directory bread(block 67) failed
[  109.419288][ T5179] FAT-fs (loop3): Directory bread(block 68) failed
[  109.425980][ T5179] FAT-fs (loop3): Directory bread(block 69) failed
[  109.432867][ T5179] FAT-fs (loop3): Directory bread(block 70) failed
[  109.439724][ T5179] FAT-fs (loop3): Directory bread(block 71) failed
[  109.447309][ T5179] FAT-fs (loop3): Directory bread(block 72) failed
[  109.455559][ T5168] F2FS-fs (loop0): Found nat_bits in checkpoint
[  109.494782][ T5179] FAT-fs (loop3): Directory bread(block 73) failed
[  109.528761][ T5168] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  109.536075][ T5168] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  109.598408][   T26] audit: type=1800 audit(1769068369.007:6): pid=5151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="file1" dev="loop4" ino=4 res=0 errno=0
[  110.322370][ T5197] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  110.374972][ T5201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.261'.
[  110.642991][ T5210] loop4: detected capacity change from 0 to 512
[  111.021857][ T5218] loop1: detected capacity change from 0 to 128
[  111.125806][ T5218] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  111.183659][ T5221] netlink: 3 bytes leftover after parsing attributes in process `syz.4.269'.
[  111.184060][ T5218] hpfs: filesystem error: improperly stopped
[  111.210356][ T5218] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  111.220959][ T5221] 0ªX¹¦À: renamed from caif0
[  111.266754][ T5221] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  111.278844][ T5218] hpfs: You really don't want any checks? You are crazy...
[  111.310579][ T5218] hpfs: hpfs_map_sector(): read error
[  111.330269][ T5218] hpfs: code page support is disabled
[  111.384063][ T5218] hpfs: hpfs_map_4sectors(): unaligned read
[  111.401417][ T5218] hpfs: hpfs_map_4sectors(): unaligned read
[  111.422925][ T5218] hpfs: filesystem error: unable to find root dir
[  111.796220][ T5235] loop1: detected capacity change from 0 to 4096
[  111.834682][ T4397] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  111.851612][ T5237] loop4: detected capacity change from 0 to 4096
[  111.882607][ T5241] loop0: detected capacity change from 0 to 128
[  111.951176][ T5242] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.064818][ T5235] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12
[  112.123878][ T4397] usb 4-1: Using ep0 maxpacket: 32
[  112.138365][ T5235] Remounting filesystem read-only
[  112.260860][ T4185] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  112.280090][ T4397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.319690][ T4397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.363398][ T4397] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  112.398451][ T4397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.439011][ T4397] usb 4-1: config 0 descriptor??
[  112.572361][ T5249] loop1: detected capacity change from 0 to 128
[  112.751852][ T5249] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  112.772343][ T5249] FAT-fs (loop1): Filesystem has been set read-only
[  112.800671][ T5249] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006)
[  112.969091][ T4397] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[  113.180290][ T5244] loop0: detected capacity change from 0 to 32768
[  113.235982][ T5255] loop1: detected capacity change from 0 to 1024
[  113.281038][ T5244] XFS (loop0): Mounting V5 Filesystem
[  113.429365][ T4397] usb 4-1: USB disconnect, device number 3
[  113.480430][ T5244] XFS (loop0): Ending clean mount
[  113.630033][ T5257] fido_id[5257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  113.676875][ T4193] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  113.690955][ T4186] XFS (loop0): Unmounting Filesystem
[  113.718286][ T4193] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  113.735847][ T5265] loop1: detected capacity change from 0 to 1024
[  113.858367][ T5265] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  113.901811][ T5265] EXT4-fs error (device loop1): ext4_get_journal_inode:5185: inode #32: comm syz.1.284: iget: special inode unallocated
[  113.950338][ T5265] EXT4-fs (loop1): no journal found
[  113.996804][ T5265] EXT4-fs (loop1): can't get journal size
[  114.026586][ T5265] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.284: iget: special inode unallocated
[  114.096296][ T5265] EXT4-fs (loop1): failed to initialize system zone (-117)
[  114.114978][ T5265] EXT4-fs (loop1): mount failed
[  114.129149][ T5038] hid-generic 0005:16C0:5505.0003: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  114.301288][ T5275] fido_id[5275]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory
[  114.669403][ T5277] loop4: detected capacity change from 0 to 40427
[  114.724932][ T5277] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  114.733113][ T5277] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  114.766604][ T5277] F2FS-fs (loop4): invalid crc value
[  114.767230][ T5287] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  114.813841][ T5287] hpfs: filesystem error: improperly stopped
[  114.820361][ T5287] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  114.830717][ T5277] F2FS-fs (loop4): Found nat_bits in checkpoint
[  114.879484][ T5287] hpfs: You really don't want any checks? You are crazy...
[  114.894557][ T5287] hpfs: hpfs_map_sector(): read error
[  114.900293][ T5287] hpfs: code page support is disabled
[  114.906993][ T5277] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  114.914118][ T5287] hpfs: hpfs_map_4sectors(): unaligned read
[  114.915852][ T5287] hpfs: hpfs_map_4sectors(): unaligned read
[  114.920076][ T5277] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  114.973955][ T5287] hpfs: filesystem error: unable to find root dir
[  115.033824][ T5038] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  115.048912][   T26] audit: type=1800 audit(1769068374.457:7): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.289" name="file2" dev="loop4" ino=10 res=0 errno=0
[  115.088656][ T5284] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  115.119665][ T5284] REISERFS (device loop1): using ordered data mode
[  115.126995][ T5284] reiserfs: using flush barriers
[  115.136433][ T5284] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  115.285053][ T5284] REISERFS (device loop1): checking transaction log (loop1)
[  115.294099][ T5038] usb 4-1: Using ep0 maxpacket: 32
[  115.427090][ T5038] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  115.456877][ T5038] usb 4-1: config 0 has no interface number 0
[  115.624980][ T5038] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  115.661107][ T5284] REISERFS (device loop1): Using tea hash to sort names
[  115.664020][ T5038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.693311][ T5284] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  115.717960][ T5038] usb 4-1: Product: syz
[  115.722179][ T5038] usb 4-1: Manufacturer: syz
[  115.738194][ T5038] usb 4-1: SerialNumber: syz
[  115.759723][ T5284] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  115.771738][ T5038] usb 4-1: config 0 descriptor??
[  115.815501][ T5038] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  116.003370][ T5302] set_capacity_and_notify: 2 callbacks suppressed
[  116.003387][ T5302] loop0: detected capacity change from 0 to 512
[  116.030562][ T5038] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  116.050208][ T5305] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  116.083696][ T5038] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  116.119316][ T5212] Set syz1 is full, maxelem 65536 reached
[  116.254121][ T5302] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  116.305890][ T5302] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.395750][ T5302] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.298: corrupted inode contents
[  116.428626][ T5302] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.298: mark_inode_dirty error
[  116.472142][ T5302] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.298: corrupted inode contents
[  116.503864][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  116.515297][ T5038] usb 4-1: USB disconnect, device number 4
[  116.526015][ T5315] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.298: corrupted inode contents
[  116.539047][ T5038] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  116.578602][ T5315] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.298: mark_inode_dirty error
[  116.601600][ T5038] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  116.632588][ T5038] quatech2 4-1:0.51: device disconnected
[  116.656429][ T5315] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.298: corrupted inode contents
[  116.706374][ T5315] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.298: mark_inode_dirty error
[  116.728368][ T5315] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.298: corrupted inode contents
[  116.765940][ T5315] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz.0.298: mark_inode_dirty error
[  116.907723][ T5302] EXT4-fs error (device loop0): ext4_do_update_inode:5222: inode #2: comm syz.0.298: corrupted inode contents
[  116.944462][ T5328] netlink: 100 bytes leftover after parsing attributes in process `syz.1.301'.
[  116.965305][ T5331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  117.345873][ T5344] loop0: detected capacity change from 0 to 512
[  117.358186][ T5340] loop3: detected capacity change from 0 to 4096
[  117.390714][ T5351] loop4: detected capacity change from 0 to 1024
[  117.475174][ T5351] EXT4-fs (loop4): Ignoring removed bh option
[  117.510464][ T5340] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  117.523510][ T5344] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  117.539648][ T5351] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  117.593361][ T5360] netlink: 280 bytes leftover after parsing attributes in process `syz.2.320'.
[  117.668481][ T5340] ntfs3: loop3: Failed to load $Extend.
[  117.793806][ T4303] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  118.053160][ T5376] Zero length message leads to an empty skb
[  118.062870][ T4303] usb 2-1: Using ep0 maxpacket: 16
[  118.209964][ T4303] usb 2-1: config 0 has no interfaces?
[  118.364218][ T4303] usb 2-1: New USB device found, idVendor=046d, idProduct=0100, bcdDevice= 0.00
[  118.395384][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  118.418229][ T4303] usb 2-1: Product: syz
[  118.422542][ T4303] usb 2-1: SerialNumber: syz
[  118.464885][ T4303] usb 2-1: config 0 descriptor??
[  118.636203][ T5381] loop4: detected capacity change from 0 to 65536
[  118.748819][ T4303] usb 2-1: USB disconnect, device number 4
[  118.880412][ T5389] loop0: detected capacity change from 0 to 32768
[  119.027924][ T5389] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  119.062958][ T5392] loop3: detected capacity change from 0 to 40427
[  119.072626][ T4243] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.089059][ T5381] XFS (loop4): Mounting V5 Filesystem
[  119.097404][ T5389] JBD2: Ignoring recovery information on journal
[  119.124171][ T5392] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  119.131965][ T5392] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  119.144979][ T5392] F2FS-fs (loop3): invalid crc value
[  119.181766][ T5389] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  119.202010][ T5392] F2FS-fs (loop3): Found nat_bits in checkpoint
[  119.218873][ T5381] XFS (loop4): Ending clean mount
[  119.226701][ T5381] XFS (loop4): Quotacheck needed: Please wait.
[  119.292960][ T5381] XFS (loop4): Quotacheck: Done.
[  119.329930][ T5392] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  119.337159][ T5392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  119.366166][ T4193] XFS (loop4): Unmounting Filesystem
[  119.435481][ T5407] loop1: detected capacity change from 0 to 512
[  119.444226][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.464899][   T26] audit: type=1800 audit(1769068378.877:8): pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.332" name="file2" dev="loop3" ino=10 res=0 errno=0
[  119.517133][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.554119][ T5407] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  119.571704][ T4243] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  119.594778][ T4243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.626169][ T4243] usb 3-1: config 0 descriptor??
[  119.702883][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  120.176143][ T4243] petalynx 0003:18B1:0037.0004: unknown global tag 0xe
[  120.216140][ T4243] petalynx 0003:18B1:0037.0004: item 0 0 1 14 parsing failed
[  120.244486][ T4243] petalynx 0003:18B1:0037.0004: parse failed
[  120.250565][ T4243] petalynx: probe of 0003:18B1:0037.0004 failed with error -22
[  120.383062][ T5418] loop3: detected capacity change from 0 to 1024
[  120.421800][ T4243] usb 3-1: USB disconnect, device number 5
[  120.470502][ T5418] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none.
[  120.492180][ T5418] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.519586][ T5418] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm syz.3.335: lblock 8 mapped to illegal pblock 8 (length 1)
[  120.524070][   T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  120.545695][ T5418] EXT4-fs error (device loop3): ext4_ext_remove_space:2929: inode #15: comm syz.3.335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  120.596497][    T9] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 1)
[  120.646841][    T9] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  120.673810][    T9] EXT4-fs (loop3): This should not happen!! Data will be lost
[  120.673810][    T9] 
[  120.831403][ T5424] loop3: detected capacity change from 0 to 2048
[  120.919022][ T5412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.338 (5412)
[  120.959687][ T5424] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  120.992587][   T26] audit: type=1804 audit(1769068380.397:9): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.340" name="/newroot/69/file0/file1" dev="loop3" ino=15 res=1 errno=0
[  121.040203][ T5412] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  121.064017][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.075339][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.086223][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.100054][   T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.109450][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.118164][ T5412] BTRFS info (device loop1): setting nodatacow, compression disabled
[  121.129880][   T23] usb 1-1: config 0 descriptor??
[  121.138253][ T5412] BTRFS info (device loop1): force zlib compression, level 3
[  121.155763][ T5412] BTRFS info (device loop1): turning off barriers
[  121.172818][ T5412] BTRFS info (device loop1): max_inline at 6
[  121.227319][ T5412] BTRFS info (device loop1): turning on sync discard
[  121.241271][ T5412] BTRFS info (device loop1): setting nodatacow
[  121.271393][ T5412] BTRFS info (device loop1): using free space tree
[  121.290161][ T5412] BTRFS info (device loop1): has skinny extents
[  121.461080][ T5448] set_capacity_and_notify: 1 callbacks suppressed
[  121.461096][ T5448] loop2: detected capacity change from 0 to 256
[  121.502842][ T5422] loop4: detected capacity change from 0 to 40427
[  121.547742][ T5448] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  121.570364][ T5422] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64)
[  121.579805][ T5422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.593859][ T5412] BTRFS info (device loop1): enabling ssd optimizations
[  121.608072][ T5422] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x2
[  121.620195][ T5422] F2FS-fs (loop4): invalid crc value
[  121.629108][   T23] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd
[  121.650249][   T23] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  121.678089][   T23] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  121.690602][ T5422] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  121.823466][ T5412] BTRFS info (device loop1): scrub: started on devid 1
[  121.874982][ T5412] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[  121.952032][ T5422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  121.972796][ T5422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  122.048214][ T4243] usb 1-1: USB disconnect, device number 5
[  122.090993][ T5464] device syzkaller1 entered promiscuous mode
[  122.810137][ T5482] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  123.156840][ T5491] mmap: syz.4.349 (5491) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  123.197140][ T5501] loop0: detected capacity change from 0 to 128
[  123.459852][ T4388] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  123.716594][ T4388] usb 4-1: Using ep0 maxpacket: 32
[  123.875456][ T4388] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.893793][ T4388] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.955052][ T5512] loop4: detected capacity change from 0 to 32768
[  124.047402][ T5512] XFS (loop4): Mounting V5 Filesystem
[  124.054012][ T4388] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  124.063764][ T4388] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  124.072515][ T4388] usb 4-1: Product: syz
[  124.077320][ T4388] usb 4-1: Manufacturer: syz
[  124.109484][ T5512] XFS (loop4): Ending clean mount
[  124.136641][ T4388] hub 4-1:4.0: USB hub found
[  124.169282][ T4193] XFS (loop4): Unmounting Filesystem
[  124.284068][ T4259] Bluetooth: hci4: command 0x0405 tx timeout
[  124.354294][ T4388] hub 4-1:4.0: 2 ports detected
[  124.612422][ T5525] capability: warning: `syz.4.371' uses 32-bit capabilities (legacy support in use)
[  124.808714][ T5537] loop2: detected capacity change from 0 to 128
[  124.924619][ T4393] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  125.025875][ T4388] usb 4-1: USB disconnect, device number 5
[  125.193966][ T4393] usb 1-1: Using ep0 maxpacket: 32
[  125.324684][ T4393] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  125.344388][ T4393] usb 1-1: config 0 interface 0 has no altsetting 0
[  125.351117][ T4393] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  125.360687][ T4393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.378139][ T4393] usb 1-1: config 0 descriptor??
[  125.537123][ T5554] loop2: detected capacity change from 0 to 128
[  125.581507][ T5552] loop4: detected capacity change from 0 to 8192
[  125.717212][ T5554] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  125.746296][ T5552] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  125.814250][ T5552] REISERFS (device loop4): using ordered data mode
[  125.835386][ T1566] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  125.853892][ T5552] reiserfs: using flush barriers
[  125.871074][ T5558] loop3: detected capacity change from 0 to 40427
[  125.892373][ T5552] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.916833][ T5552] REISERFS (device loop4): checking transaction log (loop4)
[  126.019414][ T5558] F2FS-fs (loop3): invalid crc value
[  126.026420][ T4388] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  126.056549][ T5558] F2FS-fs (loop3): Found nat_bits in checkpoint
[  126.110864][ T5558] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[  126.120570][ T5558] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  126.221286][ T5552] REISERFS (device loop4): Using tea hash to sort names
[  126.232463][ T5552] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  126.255000][ T5552] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  126.302483][ T4393] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0
[  126.314252][ T4388] usb 2-1: Using ep0 maxpacket: 8
[  126.438954][ T5571] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  126.474133][ T4388] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  126.483027][ T4388] usb 2-1: config 0 has no interface number 0
[  126.499818][ T4388] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.528807][ T4388] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  126.553208][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.579269][ T4388] usb 2-1: config 0 descriptor??
[  126.643060][ T4388] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  126.698777][ T5573] loop3: detected capacity change from 0 to 16
[  126.707902][ T4393] corsair-psu 0003:1B1C:1C09.0006: unable to query firmware (-71)
[  126.726730][ T4393] corsair-psu: probe of 0003:1B1C:1C09.0006 failed with error -71
[  126.742394][ T4393] usb 1-1: USB disconnect, device number 6
[  126.783467][ T5573] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[  126.863074][ T5575] fido_id[5575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  126.892134][ T4388] usb 2-1: USB disconnect, device number 5
[  126.978582][ T5577] loop4: detected capacity change from 0 to 128
[  127.049051][ T5582] netlink: 60 bytes leftover after parsing attributes in process `syz.2.388'.
[  127.069752][ T5582] netlink: 60 bytes leftover after parsing attributes in process `syz.2.388'.
[  128.078352][ T5603] loop1: detected capacity change from 0 to 512
[  128.123293][ T5603] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  128.178125][ T5603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  128.241613][ T5603] EXT4-fs (loop1): 1 truncate cleaned up
[  128.253920][ T5603] EXT4-fs (loop1): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000008,auto_da_alloc=0x0000000000000003,minixdf,lazytime,jqfmt=vfsv1,noload,data=journal,,errors=continue. Quota mode: none.
[  128.275719][ T5604] loop2: detected capacity change from 0 to 8192
[  128.343222][ T5604] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  128.367012][ T5604] REISERFS (device loop2): using ordered data mode
[  128.430119][ T5604] reiserfs: using flush barriers
[  128.440130][ T5604] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  128.466214][ T5603] syz.1.409 (pid 5603) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  128.514575][ T5612] loop4: detected capacity change from 0 to 512
[  128.525502][ T5604] REISERFS (device loop2): checking transaction log (loop2)
[  128.642762][ T5612] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  128.732144][ T5612] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  128.799625][ T5604] REISERFS (device loop2): Using tea hash to sort names
[  128.807109][ T5604] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  128.824122][ T5612] EXT4-fs (loop4): 1 truncate cleaned up
[  128.827691][ T5604] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  128.829814][ T5612] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,usrquota,abort,debug_want_extra_isize=0x0000000000000080,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  128.874240][ T5612] EXT4-fs (loop4): shut down requested (0)
[  128.996691][ T5604] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  129.145112][ T4388] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  129.463891][ T4388] usb 2-1: Using ep0 maxpacket: 32
[  129.512818][ T5615] loop0: detected capacity change from 0 to 40427
[  129.545932][ T5615] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  129.559192][ T5615] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  129.568195][ T5615] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x2
[  129.580653][ T5615] F2FS-fs (loop0): invalid crc value
[  129.603967][ T4388] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  129.619204][ T5615] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  129.633884][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.655993][ T4388] usb 2-1: config 0 descriptor??
[  129.813970][ T5470] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  129.823233][ T5615] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  129.840666][ T5615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.909452][ T4388] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  129.920508][ T4388] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.991651][ T4388] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  130.019027][ T4388] usb 2-1: media controller created
[  130.036516][ T4388] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.065661][ T5470] usb 3-1: Using ep0 maxpacket: 8
[  130.223373][ T5470] usb 3-1: config 0 has no interfaces?
[  130.414018][ T5470] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  130.423204][ T5470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.451713][ T5470] usb 3-1: Product: syz
[  130.456073][ T5470] usb 3-1: Manufacturer: syz
[  130.460867][ T5470] usb 3-1: SerialNumber: syz
[  130.467944][ T5470] usb 3-1: config 0 descriptor??
[  130.657391][ T5641] netlink: 'syz.4.413': attribute type 29 has an invalid length.
[  130.671104][ T5641] netlink: 'syz.4.413': attribute type 29 has an invalid length.
[  130.682747][ T5641] netlink: 'syz.4.413': attribute type 29 has an invalid length.
[  130.699618][ T5641] netlink: 'syz.4.413': attribute type 29 has an invalid length.
[  130.709923][ T5641] netlink: 'syz.4.413': attribute type 29 has an invalid length.
[  130.760698][ T5625] udc-core: couldn't find an available UDC or it's busy
[  130.771206][ T5625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  130.787353][ T4397] usb 3-1: USB disconnect, device number 6
[  130.883927][ T4388] az6027: usb out operation failed. (-71)
[  130.890235][ T4388] stb0899_attach: Driver disabled by Kconfig
[  130.913809][ T4388] az6027: no front-end attached
[  130.913809][ T4388] 
[  130.933880][ T4388] az6027: usb out operation failed. (-71)
[  130.939685][ T4388] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  130.948813][ T5581] Set syz1 is full, maxelem 65536 reached
[  130.966070][ T4388] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7
[  130.986854][ T4388] dvb-usb: schedule remote query interval to 400 msecs.
[  131.012784][ T4388] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  131.032501][ T4388] usb 2-1: USB disconnect, device number 6
[  131.123171][ T4388] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  131.562129][ T5663] loop2: detected capacity change from 0 to 512
[  131.685638][ T5663] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  131.711479][ T5668] loop3: detected capacity change from 0 to 8
[  131.754362][ T5663] EXT4-fs (loop2): 1 truncate cleaned up
[  131.763838][ T5663] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,usrquota,abort,debug_want_extra_isize=0x0000000000000080,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  131.834648][ T5668] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  131.893177][ T5663] EXT4-fs (loop2): shut down requested (0)
[  132.298769][ T5651] loop0: detected capacity change from 0 to 40427
[  132.350413][ T5691] loop2: detected capacity change from 0 to 256
[  132.361923][ T5651] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  132.375550][ T5651] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  132.441014][ T5651] F2FS-fs (loop0): invalid crc value
[  132.527731][ T5651] F2FS-fs (loop0): Found nat_bits in checkpoint
[  132.666797][ T4193] bridge0: port 3(syz_tun) entered disabled state
[  132.716084][ T4193] device syz_tun left promiscuous mode
[  132.722354][ T4193] bridge0: port 3(syz_tun) entered disabled state
[  132.738916][ T5651] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  132.748642][ T5651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  132.823473][   T26] audit: type=1800 audit(1769068392.227:10): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.416" name="file1" dev="loop0" ino=10 res=0 errno=0
[  132.850647][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.857694][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.867553][ T5704] loop3: detected capacity change from 0 to 8192
[  132.891091][ T5704] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  132.905163][ T5704] REISERFS (device loop3): using ordered data mode
[  132.925040][ T5704] reiserfs: using flush barriers
[  132.955606][ T5704] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  133.033472][ T4186] attempt to access beyond end of device
[  133.033472][ T4186] loop0: rw=2049, want=45104, limit=40427
[  133.077137][ T4286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.107519][ T5704] REISERFS (device loop3): checking transaction log (loop3)
[  133.301987][ T4286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.327827][ T5713] loop2: detected capacity change from 0 to 512
[  133.369925][ T5713] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  133.475770][ T5704] REISERFS (device loop3): Using tea hash to sort names
[  133.516043][ T5713] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.445: Parent and EA inode have the same ino 15
[  133.521214][ T5704] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  133.551176][ T5713] EXT4-fs error (device loop2): ext4_xattr_inode_iget:397: comm syz.2.445: Parent and EA inode have the same ino 15
[  133.577520][ T4286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.592345][ T5713] EXT4-fs (loop2): 1 orphan inode deleted
[  133.600294][ T5713] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,data_err=ignore,sysvgroups,,errors=continue. Quota mode: none.
[  133.632075][ T5704] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  133.651398][ T4286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.893413][ T5717] loop1: detected capacity change from 0 to 32768
[  133.916392][ T5720] loop0: detected capacity change from 0 to 512
[  133.959752][ T5717] 
[  133.959752][ T5717]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  133.959752][ T5717] 
[  133.989623][ T5720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  134.049847][ T5717] 
[  134.049847][ T5717]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.049847][ T5717] 
[  134.061898][ T5717] 
[  134.061898][ T5717]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.061898][ T5717] 
[  134.073767][ T5717] 
[  134.073767][ T5717]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.073767][ T5717] 
[  134.089648][  T278] 
[  134.089648][  T278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.089648][  T278] 
[  134.114392][ T5725] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  134.138118][ T5720] EXT4-fs (loop0): 1 truncate cleaned up
[  134.160052][ T5720] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,usrquota,abort,debug_want_extra_isize=0x0000000000000080,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  134.190109][ T5720] EXT4-fs (loop0): shut down requested (0)
[  134.199435][ T5723] 
[  134.199435][ T5723]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.199435][ T5723] 
[  134.213971][ T5723] 
[  134.213971][ T5723]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.213971][ T5723] 
[  134.247443][ T5723] 
[  134.247443][ T5723]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.247443][ T5723] 
[  134.258952][ T5723] 
[  134.258952][ T5723]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.258952][ T5723] 
[  134.270886][  T278] 
[  134.270886][  T278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.270886][  T278] 
[  134.332147][ T5729] device syzkaller1 entered promiscuous mode
[  134.415636][ T5734] binder: 5733:5734 ioctl c018620c 200000000000 returned -22
[  134.470778][ T5736] loop0: detected capacity change from 0 to 2048
[  134.478433][ T4185] 
[  134.478433][ T4185]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.478433][ T4185] 
[  134.503895][ T4185] 
[  134.503895][ T4185]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  134.503895][ T4185] 
[  134.541938][ T5736] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,i_version,jqfmt=vfsv0,nombcache,,errors=continue. Quota mode: none.
[  134.753975][ T5721] chnl_net:caif_netlink_parms(): no params data found
[  134.886389][ T5470] kernel write not supported for file bpf-prog (pid: 5470 comm: kworker/1:18)
[  135.080482][ T5743] loop2: detected capacity change from 0 to 40427
[  135.167851][ T5743] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  135.175725][ T5743] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  135.198741][ T5743] F2FS-fs (loop2): invalid crc value
[  135.292775][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.307140][ T5743] F2FS-fs (loop2): Found nat_bits in checkpoint
[  135.378688][ T5743] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  135.386144][ T5743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  135.404945][ T4259] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  135.418437][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.444774][ T5721] device bridge_slave_0 entered promiscuous mode
[  135.637743][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.660672][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.681989][ T5721] device bridge_slave_1 entered promiscuous mode
[  135.710054][ T4192] bridge0: port 3(syz_tun) entered disabled state
[  135.741560][ T4192] device syz_tun left promiscuous mode
[  135.751831][ T4192] bridge0: port 3(syz_tun) entered disabled state
[  135.764302][ T4259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  135.801769][ T4259] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  135.833488][ T4259] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  135.870511][ T4259] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  135.976525][ T5721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  136.000503][ T5721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  136.045212][ T4236] Bluetooth: hci4: command 0x0409 tx timeout
[  136.054127][ T4259] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.069232][ T4259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.079117][ T4259] usb 1-1: Product: syz
[  136.083333][ T4259] usb 1-1: Manufacturer: syz
[  136.095634][ T4259] usb 1-1: SerialNumber: syz
[  136.126627][ T5721] team0: Port device team_slave_0 added
[  136.136535][ T5753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.175083][ T4259] cdc_mbim 1-1:1.0: skipping garbage
[  136.204298][ T5721] team0: Port device team_slave_1 added
[  136.267904][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.287549][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.314901][ T5754] loop1: detected capacity change from 0 to 40427
[  136.338570][ T5754] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  136.347426][ T5754] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  136.358276][ T5721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.387233][ T5753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.401327][ T5754] F2FS-fs (loop1): invalid crc value
[  136.411350][ T5754] F2FS-fs (loop1): Found nat_bits in checkpoint
[  136.426550][ T5753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  136.431936][ T5721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.461023][ T5721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.487316][    C1] vkms_vblank_simulate: vblank timer overrun
[  136.533536][ T5754] F2FS-fs (loop1): Start checkpoint disabled!
[  136.535522][ T5721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.572838][ T5754] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  136.638059][ T5721] device hsr_slave_0 entered promiscuous mode
[  136.656286][ T5721] device hsr_slave_1 entered promiscuous mode
[  136.663065][ T5721] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  136.672321][ T5721] Cannot create hsr debugfs directory
[  136.899836][ T5721] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  136.929602][ T5721] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  136.962745][ T5721] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  137.018765][ T5721] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  137.126980][ T5753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.139093][ T5753] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.204268][ T4259] cdc_mbim 1-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  137.212289][ T4259] cdc_mbim 1-1:1.0: setting rx_max = 2048
[  137.259641][ T5721] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.284758][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.293358][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.313304][ T5721] 8021q: adding VLAN 0 to HW filter on device team0
[  137.375855][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  137.392522][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  137.402925][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.410059][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.424109][ T4259] cdc_mbim 1-1:1.0: setting tx_max = 16384
[  137.430205][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  137.439820][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  137.448881][ T4259] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  137.448956][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.462030][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.471271][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  137.480652][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  137.490435][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  137.500915][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  137.510328][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  137.519889][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  137.579083][ T4259] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, be:e6:16:8c:1a:71
[  137.579244][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  137.610685][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  137.633404][ T4259] usb 1-1: USB disconnect, device number 7
[  137.640461][ T4259] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  137.652642][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  137.668132][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  137.709663][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.726197][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.745765][ T5721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.852664][ T4286] device hsr_slave_0 left promiscuous mode
[  137.878778][ T4286] device hsr_slave_1 left promiscuous mode
[  137.894450][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.902314][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.918543][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.926763][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.935780][ T4286] device bridge_slave_1 left promiscuous mode
[  137.944537][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.011094][ T5805] loop1: detected capacity change from 0 to 512
[  138.022593][ T4286] device bridge_slave_0 left promiscuous mode
[  138.041983][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.098855][ T5805] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.126029][ T4259] Bluetooth: hci4: command 0x041b tx timeout
[  138.167749][ T4286] device veth1_macvtap left promiscuous mode
[  138.182810][ T4286] device veth0_macvtap left promiscuous mode
[  138.205333][ T5805] EXT4-fs (loop1): 1 truncate cleaned up
[  138.211251][ T5805] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,usrquota,abort,debug_want_extra_isize=0x0000000000000080,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  138.243863][ T4286] device veth1_vlan left promiscuous mode
[  138.250107][ T4286] device veth0_vlan left promiscuous mode
[  138.264093][ T5805] EXT4-fs (loop1): shut down requested (0)
[  138.294389][ T5811] loop0: detected capacity change from 0 to 8192
[  138.340881][ T5811] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  138.406303][ T5811] REISERFS (device loop0): using ordered data mode
[  138.419875][ T5811] reiserfs: using flush barriers
[  138.444532][ T5811] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  138.462084][ T5811] REISERFS (device loop0): checking transaction log (loop0)
[  138.669814][ T5811] REISERFS (device loop0): Using tea hash to sort names
[  138.704755][ T5811] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  138.774289][ T5811] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  138.968259][ T5811] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  139.036601][ T4286] team0 (unregistering): Port device bridge1 removed
[  139.083378][ T5837] loop2: detected capacity change from 0 to 1024
[  139.396501][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  139.416044][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  139.460989][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.503127][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.608372][ T5847] loop2: detected capacity change from 0 to 512
[  139.660903][ T5847] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  139.678130][ T5847] UDF-fs: Scanning with blocksize 512 failed
[  139.689930][ T5847] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  139.701211][ T5847] UDF-fs: Scanning with blocksize 1024 failed
[  139.713114][ T5847] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  139.727698][ T5847] UDF-fs: Scanning with blocksize 2048 failed
[  139.742438][ T5847] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  139.755974][ T5847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.855005][ T4286] bond0 (unregistering): Released all slaves
[  139.999440][ T5828] device syzkaller1 entered promiscuous mode
[  140.203908][ T4259] Bluetooth: hci4: command 0x040f tx timeout
[  140.274909][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.282498][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.397232][ T5721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.607414][ T5470] Bluetooth: hci3: command 0x0409 tx timeout
[  140.740485][ T5849] loop2: detected capacity change from 0 to 32768
[  140.789948][ T5822] chnl_net:caif_netlink_parms(): no params data found
[  140.885379][ T5849] JBD2: Ignoring recovery information on journal
[  141.104559][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.111691][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.135863][ T5849] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  141.173401][ T5879] loop1: detected capacity change from 0 to 8
[  141.191301][ T5822] device bridge_slave_0 entered promiscuous mode
[  141.229259][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.304188][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.324667][ T5822] device bridge_slave_1 entered promiscuous mode
[  141.417232][ T4187] ocfs2: Unmounting device (7,2) on (node local)
[  141.467845][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.523264][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.560405][ T5885] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  141.691272][ T5822] team0: Port device team_slave_0 added
[  141.844916][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.886166][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.907020][ T5822] team0: Port device team_slave_1 added
[  142.026215][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.033207][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.059157][    C1] vkms_vblank_simulate: vblank timer overrun
[  142.140276][ T5894] loop1: detected capacity change from 0 to 2048
[  142.204360][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.267863][ T5894] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  142.302202][ T4392] Bluetooth: hci4: command 0x0419 tx timeout
[  142.322726][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  142.339687][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.376904][ T5721] device veth0_vlan entered promiscuous mode
[  142.389994][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.402765][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.440711][ T5897] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  142.464447][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.507757][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.524654][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.552286][ T5721] device veth1_vlan entered promiscuous mode
[  142.679434][ T5822] device hsr_slave_0 entered promiscuous mode
[  142.700837][ T4388] Bluetooth: hci3: command 0x041b tx timeout
[  142.725677][ T5822] device hsr_slave_1 entered promiscuous mode
[  142.750693][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.784406][ T5822] Cannot create hsr debugfs directory
[  142.801651][ T5721] device veth0_macvtap entered promiscuous mode
[  142.819255][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.833490][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.875019][ T5721] device veth1_macvtap entered promiscuous mode
[  142.897447][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.925127][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.970526][ T5890] loop2: detected capacity change from 0 to 32768
[  142.986659][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.021926][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.053894][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.088709][ T5890] 
[  143.088709][ T5890]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.088709][ T5890] 
[  143.126180][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.173858][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.235178][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.266398][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.303806][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.345564][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  143.379271][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  143.385144][ T4187] 
[  143.385144][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.385144][ T4187] 
[  143.405748][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  143.431745][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.444409][ T4187] 
[  143.444409][ T4187]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  143.444409][ T4187] 
[  143.459384][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.487950][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.518286][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.548997][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.570586][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.600998][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  143.620313][ T4392] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  143.621979][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.682952][ T5721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  143.711733][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  143.725721][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  143.743176][ T5845] ODEBUG: Out of memory. ODEBUG disabled
[  143.827257][ T5721] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  143.853906][ T5721] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  143.862683][ T5721] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  143.884174][ T4392] usb 2-1: Using ep0 maxpacket: 16
[  143.913787][ T5721] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.183389][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.193984][ T4392] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  144.203217][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.213882][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.243933][ T4392] usb 2-1: Product: syz
[  144.248161][ T4392] usb 2-1: Manufacturer: syz
[  144.273301][ T4392] usb 2-1: SerialNumber: syz
[  144.292765][ T4392] usb 2-1: config 0 descriptor??
[  144.351386][ T5822] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.416172][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.431182][ T5017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.476111][ T5017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.506497][ T5822] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.558682][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.582932][ T5924] loop2: detected capacity change from 0 to 2048
[  144.631896][ T5822] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.742448][ T5924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.768444][ T4393] Bluetooth: hci3: command 0x040f tx timeout
[  144.790413][ T5822] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.794385][ T4392] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  144.847129][ T4392] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  144.919310][ T4392] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  144.932617][ T4392] usb 2-1: media controller created
[  145.001505][ T4392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  145.154944][ T4392] zl10353_read_register: readreg error (reg=127, ret==0)
[  145.162077][ T4392] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  145.213928][ T4392] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  145.257376][ T4392] usb 2-1: USB disconnect, device number 7
[  145.263822][ T4393] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  145.301120][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.395297][ T4392] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  145.445163][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.478273][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.518142][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.535636][ T4393] usb 6-1: Using ep0 maxpacket: 16
[  145.664243][ T4393] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  145.692603][ T4393] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  145.724384][ T4393] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  145.753959][ T4393] usb 6-1: config 1 interface 0 has no altsetting 0
[  145.808986][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[  145.837037][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  145.860029][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  145.891365][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[  145.918421][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  145.934154][ T4393] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  145.943390][ T4393] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.949630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  145.983348][ T4393] usb 6-1: Product: syz
[  145.985539][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.988437][ T4393] usb 6-1: Manufacturer: syz
[  145.994840][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.999957][ T4393] usb 6-1: SerialNumber: syz
[  146.034020][ T5470] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  146.064319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.105607][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.206457][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.261124][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.268329][ T4268] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.294382][ T5470] usb 2-1: Using ep0 maxpacket: 8
[  146.304228][ T4393] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  146.419897][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.428405][ T5470] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  146.454294][ T5470] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.482961][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.503840][ T5470] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.515347][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.576707][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.594167][ T5470] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  146.635984][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.646484][ T5470] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  146.701485][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.723020][ T5470] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  146.759187][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.785640][ T5470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.833916][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.866678][ T4393] usb 6-1: USB disconnect, device number 2
[  146.897876][ T4393] usblp0: removed
[  146.905167][ T5845] Set syz1 is full, maxelem 65536 reached
[  146.967101][ T4388] Bluetooth: hci3: command 0x0419 tx timeout
[  146.980453][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.014982][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.051369][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.083718][    C0] sched: RT throttling activated
[  147.119416][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.141255][ T5954] loop2: detected capacity change from 0 to 131072
[  147.144292][ T5470] usb 2-1: GET_CAPABILITIES returned 0
[  147.153964][ T5470] usbtmc 2-1:16.0: can't read capabilities
[  147.210435][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.233980][ T5954] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  147.240765][ T5954] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  147.276641][ T5971] loop5: detected capacity change from 0 to 512
[  147.277210][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.283136][ T5954] F2FS-fs (loop2): invalid crc value
[  147.313464][ T5954] F2FS-fs (loop2): Found nat_bits in checkpoint
[  147.388623][ T5954] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  147.395854][ T5954] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  147.443988][ T5038] usb 2-1: USB disconnect, device number 8
[  147.488394][ T5971] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000400000,mb_optimize_scan=0x0000000000000000,grpquota,,errors=continue. Quota mode: writeback.
[  147.504158][ T4259] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  147.584652][ T5971] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.765902][ T4259] usb 1-1: Using ep0 maxpacket: 32
[  147.903094][ T4259] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.935665][ T4259] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11
[  147.960608][ T4259] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  148.003859][ T4259] usb 1-1: config 0 interface 0 has no altsetting 0
[  148.018655][ T4259] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  148.048418][ T4259] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.070920][ T4259] usb 1-1: config 0 descriptor??
[  148.154927][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.204763][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.234316][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.300400][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  148.327883][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  148.529698][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  148.551103][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  148.592786][ T5822] device veth0_vlan entered promiscuous mode
[  148.602707][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  148.628338][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  148.661544][ T5822] device veth1_vlan entered promiscuous mode
[  148.808485][ T5822] device veth0_macvtap entered promiscuous mode
[  148.839291][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  148.859105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  148.895738][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  148.926641][ T4259] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  148.941925][ T6011] input: syz1 as /devices/virtual/input/input8
[  148.956880][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.070624][ T5822] device veth1_macvtap entered promiscuous mode
[  149.092863][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  149.124028][ T4259] hid-thrustmaster 0003:044F:B65D.0007: setup data couldn't be sent
[  149.140746][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.148266][    C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71
[  149.166287][ T4259] usb 1-1: USB disconnect, device number 8
[  149.387249][ T6017] fido_id[6017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  149.403484][ T6019] loop1: detected capacity change from 0 to 512
[  149.406994][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.447317][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.461314][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.479413][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.500507][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.513017][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.531640][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.542951][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.562676][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  149.583942][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.604702][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.649750][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.678850][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.702853][ T6019] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  149.728043][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.497'.
[  149.745534][ T6019] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  149.759868][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.785835][ T6019] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  149.796041][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.820266][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.851609][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.862151][ T6019] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  149.872641][ T6019] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000]
[  149.880935][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.891171][ T6019] EXT4-fs (loop1): orphan cleanup on readonly fs
[  149.898279][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.898298][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.898315][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.898344][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  149.898360][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.902054][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.963365][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.972667][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.981468][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.991444][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.133823][ T6019] 
[  150.136225][ T6019] ======================================================
[  150.143297][ T6019] WARNING: possible circular locking dependency detected
[  150.150370][ T6019] syzkaller #0 Not tainted
[  150.154809][ T6019] ------------------------------------------------------
[  150.161885][ T6019] syz.1.496/6019 is trying to acquire lock:
[  150.167804][ T6019] ffff88805ea32a58 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x33c/0x1b30
[  150.177448][ T6019] 
[  150.177448][ T6019] but task is already holding lock:
[  150.184832][ T6019] ffff8880659a0208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110
[  150.194279][ T6019] 
[  150.194279][ T6019] which lock already depends on the new lock.
[  150.194279][ T6019] 
[  150.204864][ T6019] 
[  150.204864][ T6019] the existing dependency chain (in reverse order) is:
[  150.213914][ T6019] 
[  150.213914][ T6019] -> #2 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  150.222038][ T6019]        down_read+0x44/0x2e0
[  150.226854][ T6019]        v2_read_dquot+0x4a/0x110
[  150.232012][ T6019]        dquot_acquire+0x152/0x520
[  150.237250][ T6019]        ext4_acquire_dquot+0x2d9/0x4a0
[  150.242837][ T6019]        dqget+0x778/0xeb0
[  150.247292][ T6019]        __dquot_initialize+0x3c3/0xcd0
[  150.252876][ T6019]        ext4_process_orphan+0x54/0x300
[  150.258456][ T6019]        ext4_orphan_cleanup+0xad2/0x1320
[  150.264218][ T6019]        ext4_fill_super+0x8e25/0x95a0
[  150.269720][ T6019]        mount_bdev+0x287/0x3c0
[  150.274607][ T6019]        legacy_get_tree+0xe6/0x180
[  150.280021][ T6019]        vfs_get_tree+0x88/0x270
[  150.285003][ T6019]        do_new_mount+0x24a/0xa40
[  150.290066][ T6019]        __se_sys_mount+0x2e3/0x3d0
[  150.295299][ T6019]        do_syscall_64+0x4c/0xa0
[  150.300819][ T6019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.307270][ T6019] 
[  150.307270][ T6019] -> #1 (&dquot->dq_lock){+.+.}-{3:3}:
[  150.315055][ T6019]        __mutex_lock_common+0x1e3/0x2400
[  150.320833][ T6019]        mutex_lock_nested+0x17/0x20
[  150.326256][ T6019]        dquot_commit+0x5a/0x410
[  150.331249][ T6019]        ext4_write_dquot+0x1f0/0x360
[  150.336664][ T6019]        mark_all_dquot_dirty+0xf9/0x400
[  150.342342][ T6019]        __dquot_alloc_space+0x5d0/0xe20
[  150.348041][ T6019]        ext4_mb_new_blocks+0xf81/0x4980
[  150.353727][ T6019]        ext4_ext_map_blocks+0x191c/0x6580
[  150.359574][ T6019]        ext4_map_blocks+0x98e/0x1b30
[  150.365001][ T6019]        ext4_getblk+0x176/0x670
[  150.369999][ T6019]        ext4_bread+0x26/0x180
[  150.375004][ T6019]        ext4_append+0x2be/0x560
[  150.379983][ T6019]        ext4_init_new_dir+0x2a2/0x940
[  150.385496][ T6019]        ext4_mkdir+0x4fb/0xce0
[  150.390389][ T6019]        vfs_mkdir+0x387/0x570
[  150.395201][ T6019]        do_mkdirat+0x1df/0x5b0
[  150.400420][ T6019]        __x64_sys_mkdirat+0x85/0x90
[  150.405802][ T6019]        do_syscall_64+0x4c/0xa0
[  150.410790][ T6019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.417254][ T6019] 
[  150.417254][ T6019] -> #0 (&ei->i_data_sem/2){++++}-{3:3}:
[  150.425122][ T6019]        __lock_acquire+0x2c42/0x7d10
[  150.430544][ T6019]        lock_acquire+0x19e/0x400
[  150.435598][ T6019]        down_read+0x44/0x2e0
[  150.440335][ T6019]        ext4_map_blocks+0x33c/0x1b30
[  150.445749][ T6019]        ext4_getblk+0x176/0x670
[  150.450834][ T6019]        ext4_bread+0x26/0x180
[  150.455827][ T6019]        ext4_quota_read+0x1b3/0x3a0
[  150.461202][ T6019]        find_tree_dqentry+0x188/0xb30
[  150.466738][ T6019]        find_tree_dqentry+0x3eb/0xb30
[  150.472280][ T6019]        find_tree_dqentry+0x3eb/0xb30
[  150.477784][ T6019]        find_tree_dqentry+0x3eb/0xb30
[  150.483290][ T6019]        qtree_read_dquot+0x13c/0x680
[  150.488704][ T6019]        v2_read_dquot+0xc0/0x110
[  150.493852][ T6019]        dquot_acquire+0x152/0x520
[  150.499004][ T6019]        ext4_acquire_dquot+0x2d9/0x4a0
[  150.504589][ T6019]        dqget+0x778/0xeb0
[  150.509044][ T6019]        __dquot_initialize+0x333/0xcd0
[  150.514637][ T6019]        ext4_process_orphan+0x54/0x300
[  150.520220][ T6019]        ext4_orphan_cleanup+0xad2/0x1320
[  150.525975][ T6019]        ext4_fill_super+0x8e25/0x95a0
[  150.531476][ T6019]        mount_bdev+0x287/0x3c0
[  150.536486][ T6019]        legacy_get_tree+0xe6/0x180
[  150.541739][ T6019]        vfs_get_tree+0x88/0x270
[  150.546725][ T6019]        do_new_mount+0x24a/0xa40
[  150.551798][ T6019]        __se_sys_mount+0x2e3/0x3d0
[  150.557032][ T6019]        do_syscall_64+0x4c/0xa0
[  150.562161][ T6019]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  150.568724][ T6019] 
[  150.568724][ T6019] other info that might help us debug this:
[  150.568724][ T6019] 
[  150.579093][ T6019] Chain exists of:
[  150.579093][ T6019]   &ei->i_data_sem/2 --> &dquot->dq_lock --> &s->s_dquot.dqio_sem
[  150.579093][ T6019] 
[  150.592794][ T6019]  Possible unsafe locking scenario:
[  150.592794][ T6019] 
[  150.600387][ T6019]        CPU0                    CPU1
[  150.605870][ T6019]        ----                    ----
[  150.611249][ T6019]   lock(&s->s_dquot.dqio_sem);
[  150.616296][ T6019]                                lock(&dquot->dq_lock);
[  150.623393][ T6019]                                lock(&s->s_dquot.dqio_sem);
[  150.630955][ T6019]   lock(&ei->i_data_sem/2);
[  150.635568][ T6019] 
[  150.635568][ T6019]  *** DEADLOCK ***
[  150.635568][ T6019] 
[  150.643733][ T6019] 3 locks held by syz.1.496/6019:
[  150.648778][ T6019]  #0: ffff8880659a00e0 (&type->s_umount_key#28/1){+.+.}-{3:3}, at: alloc_super+0x201/0x950
[  150.659105][ T6019]  #1: ffff88807446e5e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_acquire+0x63/0x520
[  150.668702][ T6019]  #2: ffff8880659a0208 (&s->s_dquot.dqio_sem){++++}-{3:3}, at: v2_read_dquot+0x4a/0x110
[  150.678565][ T6019] 
[  150.678565][ T6019] stack backtrace:
[  150.684497][ T6019] CPU: 0 PID: 6019 Comm: syz.1.496 Not tainted syzkaller #0
[  150.691893][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  150.702066][ T6019] Call Trace:
[  150.705368][ T6019]  <TASK>
[  150.708323][ T6019]  dump_stack_lvl+0x188/0x250
[  150.713022][ T6019]  ? load_image+0x400/0x400
[  150.717541][ T6019]  ? show_regs_print_info+0x20/0x20
[  150.722774][ T6019]  ? print_circular_bug+0x12b/0x1a0
[  150.727988][ T6019]  check_noncircular+0x296/0x330
[  150.732944][ T6019]  ? add_chain_block+0x940/0x940
[  150.737893][ T6019]  ? lockdep_lock+0xf1/0x1f0
[  150.742500][ T6019]  ? mark_lock+0x94/0x320
[  150.746840][ T6019]  ? mark_lock+0x94/0x320
[  150.751180][ T6019]  __lock_acquire+0x2c42/0x7d10
[  150.756061][ T6019]  ? verify_lock_unused+0x140/0x140
[  150.761427][ T6019]  ? stack_trace_save+0xa6/0xf0
[  150.766311][ T6019]  ? verify_lock_unused+0x140/0x140
[  150.771555][ T6019]  ? stack_depot_save+0x404/0x440
[  150.776611][ T6019]  ? save_stack+0x145/0x230
[  150.781133][ T6019]  ? verify_lock_unused+0x140/0x140
[  150.786359][ T6019]  ? __reset_page_owner+0x180/0x180
[  150.791681][ T6019]  ? free_unref_page_prepare+0x637/0x6c0
[  150.797334][ T6019]  lock_acquire+0x19e/0x400
[  150.801857][ T6019]  ? ext4_map_blocks+0x33c/0x1b30
[  150.806900][ T6019]  ? __might_sleep+0xf0/0xf0
[  150.811501][ T6019]  ? read_lock_is_recursive+0x10/0x10
[  150.816891][ T6019]  ? rcu_is_watching+0x11/0xa0
[  150.821674][ T6019]  down_read+0x44/0x2e0
[  150.825844][ T6019]  ? ext4_map_blocks+0x33c/0x1b30
[  150.830884][ T6019]  ext4_map_blocks+0x33c/0x1b30
[  150.835754][ T6019]  ? stack_depot_save+0x418/0x440
[  150.840807][ T6019]  ? ext4_issue_zeroout+0x250/0x250
[  150.846021][ T6019]  ? __kasan_kmalloc+0xcc/0xf0
[  150.850824][ T6019]  ? __kasan_kmalloc+0xb5/0xf0
[  150.855606][ T6019]  ? find_tree_dqentry+0x55/0xb30
[  150.860737][ T6019]  ? find_tree_dqentry+0x3eb/0xb30
[  150.865869][ T6019]  ? find_tree_dqentry+0x3eb/0xb30
[  150.871008][ T6019]  ? find_tree_dqentry+0x3eb/0xb30
[  150.876133][ T6019]  ? qtree_read_dquot+0x13c/0x680
[  150.881172][ T6019]  ? dquot_acquire+0x152/0x520
[  150.886051][ T6019]  ext4_getblk+0x176/0x670
[  150.890491][ T6019]  ? __se_sys_mount+0x2e3/0x3d0
[  150.895353][ T6019]  ? do_syscall_64+0x4c/0xa0
[  150.899964][ T6019]  ? ext4_get_block_unwritten+0x30/0x30
[  150.905526][ T6019]  ext4_bread+0x26/0x180
[  150.909781][ T6019]  ext4_quota_read+0x1b3/0x3a0
[  150.914565][ T6019]  ? ext4_show_options+0x50/0x50
[  150.919516][ T6019]  find_tree_dqentry+0x188/0xb30
[  150.924482][ T6019]  find_tree_dqentry+0x3eb/0xb30
[  150.929445][ T6019]  find_tree_dqentry+0x3eb/0xb30
[  150.934487][ T6019]  find_tree_dqentry+0x3eb/0xb30
[  150.939799][ T6019]  qtree_read_dquot+0x13c/0x680
[  150.944762][ T6019]  ? down_read+0x1aa/0x2e0
[  150.949292][ T6019]  v2_read_dquot+0xc0/0x110
[  150.953889][ T6019]  dquot_acquire+0x152/0x520
[  150.958520][ T6019]  ext4_acquire_dquot+0x2d9/0x4a0
[  150.963578][ T6019]  dqget+0x778/0xeb0
[  150.967497][ T6019]  __dquot_initialize+0x333/0xcd0
[  150.972539][ T6019]  ? dquot_initialize+0x20/0x20
[  150.977422][ T6019]  ? ext4_get_projid+0x140/0x140
[  150.982453][ T6019]  ext4_process_orphan+0x54/0x300
[  150.987495][ T6019]  ext4_orphan_cleanup+0xad2/0x1320
[  150.992715][ T6019]  ? ext4_orphan_del+0xbf0/0xbf0
[  150.997754][ T6019]  ? errseq_check_and_advance+0x62/0x120
[  151.003401][ T6019]  ext4_fill_super+0x8e25/0x95a0
[  151.008369][ T6019]  ? ext4_mount+0x40/0x40
[  151.012719][ T6019]  ? set_blocksize+0x1f3/0x370
[  151.017601][ T6019]  ? sb_set_blocksize+0xa5/0xe0
[  151.022654][ T6019]  mount_bdev+0x287/0x3c0
[  151.027013][ T6019]  ? ext4_mount+0x40/0x40
[  151.031357][ T6019]  legacy_get_tree+0xe6/0x180
[  151.036049][ T6019]  ? ext4_errno_to_code+0x160/0x160
[  151.041262][ T6019]  vfs_get_tree+0x88/0x270
[  151.045701][ T6019]  do_new_mount+0x24a/0xa40
[  151.050308][ T6019]  __se_sys_mount+0x2e3/0x3d0
[  151.055114][ T6019]  ? __x64_sys_mount+0xc0/0xc0
[  151.059894][ T6019]  ? lockdep_hardirqs_on+0x94/0x140
[  151.065102][ T6019]  ? __x64_sys_mount+0x1c/0xc0
[  151.069884][ T6019]  do_syscall_64+0x4c/0xa0
[  151.074311][ T6019]  ? clear_bhb_loop+0x30/0x80
[  151.079023][ T6019]  ? clear_bhb_loop+0x30/0x80
[  151.083812][ T6019]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.089763][ T6019] RIP: 0033:0x7fb8eeaa0f4a
[  151.094206][ T6019] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.113834][ T6019] RSP: 002b:00007fb8eccfae58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  151.122276][ T6019] RAX: ffffffffffffffda RBX: 00007fb8eccfaee0 RCX: 00007fb8eeaa0f4a
[  151.130262][ T6019] RDX: 0000200000000040 RSI: 0000200000000a00 RDI: 00007fb8eccfaea0
[  151.138360][ T6019] RBP: 0000200000000040 R08: 00007fb8eccfaee0 R09: 0000000001008413
[  151.146347][ T6019] R10: 0000000001008413 R11: 0000000000000246 R12: 0000200000000a00
[  151.154335][ T6019] R13: 00007fb8eccfaea0 R14: 0000000000000525 R15: 0000200000000140
[  151.162384][ T6019]  </TASK>
[  151.167176][ T4392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.178531][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.200050][ T6019] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.496: bg 0: block 34: padding at end of block bitmap is not set
[  151.214496][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.221901][ T6019] Quota error (device loop1): write_blk: dquota write failed
[  151.232947][ T6019] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  151.246317][ T6019] EXT4-fs error (device loop1): ext4_acquire_dquot:6234: comm syz.1.496: Failed to acquire dquot type 1
[  151.258391][ T6019] EXT4-fs (loop1): ext4_process_orphan: truncating inode 13 to 1050 bytes
[  151.296592][ T6019] EXT4-fs (loop1): 1 truncate cleaned up
[  151.308501][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback.
[  151.331689][ T5822] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht'
[  151.353840][ T4397] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  151.446840][ T5822] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht'
[  151.455105][ T5017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.463120][ T5017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.484575][ T4243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.503952][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.536531][ T5017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.548205][ T5017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.561466][ T4286] device hsr_slave_0 left promiscuous mode
[  151.595263][ T4286] device hsr_slave_1 left promiscuous mode
[  151.601750][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.609691][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.617724][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.627915][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.644415][ T4286] device bridge_slave_1 left promiscuous mode
[  151.650840][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.662150][ T4286] device bridge_slave_0 left promiscuous mode
[  151.669802][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.684529][ T4286] device veth1_macvtap left promiscuous mode
[  151.690598][ T4286] device veth0_macvtap left promiscuous mode
[  151.697032][ T4286] device veth1_vlan left promiscuous mode
[  151.702845][ T4286] device veth0_vlan left promiscuous mode
[  151.743990][ T4397] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  151.752656][ T4397] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  151.769278][ T4397] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  151.780428][ T4397] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  151.792607][ T4397] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  151.830919][ T4286] team0 (unregistering): Port device bridge1 removed
[  151.912814][ T4286] team0 (unregistering): Port device team_slave_1 removed
[  151.927109][ T4286] team0 (unregistering): Port device team_slave_0 removed
[  151.940269][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.953397][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.954301][ T4397] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  151.974202][ T4397] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  151.982846][ T4397] usb 1-1: Product: syz
[  151.988994][ T4397] usb 1-1: Manufacturer: syz
[  152.031430][ T4286] bond0 (unregistering): Released all slaves
[  152.048912][ T4397] cdc_wdm 1-1:1.0: skipping garbage
[  152.055311][ T4397] cdc_wdm 1-1:1.0: skipping garbage
[  152.062495][ T4397] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  152.069668][ T4397] cdc_wdm 1-1:1.0: Unknown control protocol
[  152.089878][ T1566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.204181][ T4397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.856545][ T5038] usb 1-1: USB disconnect, device number 9
[  153.246845][ T5470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.284088][ T4397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.523967][ T4243] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.614207][ T5470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.325895][ T5470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.366786][ T4397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.524357][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.532647][ T5038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.404329][ T5470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.644983][ T5038] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.804580][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.813152][ T4236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.444377][ T5470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.484333][ T4397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog