last executing test programs:

22.771605601s ago: executing program 3 (id=8460):
r0 = syz_open_procfs(0x0, &(0x7f00000021c0)='net\x00')
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

22.436645993s ago: executing program 4 (id=8462):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r0, 0xc0405668, &(0x7f0000000080)={0x9, 0x0, 0x2, {0x3, 0x300}})

22.26624772s ago: executing program 3 (id=8465):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@dmode={'dmode', 0x3d, 0x2}}, {@nostrict}, {@gid_ignore}, {@undelete}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x3}}, {@uid_ignore}]}, 0x1, 0xc3c, &(0x7f0000000240)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

21.926205989s ago: executing program 4 (id=8468):
setreuid(0xee00, 0x0)
keyctl$session_to_parent(0x12)

21.404458792s ago: executing program 4 (id=8471):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_delrule={0x28, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfffffffffffffffd}]}, 0x28}}, 0x0)

21.240230716s ago: executing program 3 (id=8474):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)="38f8609d87a60a5a9f61ff279b8c31fd755b0e5e86d40fd2453742873ad5a5", 0x1f}}, 0x0)

20.854410382s ago: executing program 4 (id=8478):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00')

20.325129958s ago: executing program 3 (id=8481):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
getpeername(r0, 0x0, 0x0)

20.247828647s ago: executing program 0 (id=8482):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000240)={0x5, "40adce21c339dd8dd5e4cc83428c16a57c0a2cd485e4db3fc89d21027402d095"})

20.234488189s ago: executing program 4 (id=8483):
syz_usb_connect(0x2, 0x2d, &(0x7f00000009c0)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905836dc6"], 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x4000000, 0x0)

19.900767827s ago: executing program 3 (id=8487):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200c840, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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")
unlink(&(0x7f0000000180)='./file1\x00')

19.770032247s ago: executing program 0 (id=8488):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000009a00000004000000000000009500000000000000cc08"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000000000003000000000000000300000004000000030000000000000000000005"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)

19.33455638s ago: executing program 0 (id=8492):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x11, 0x0, &(0x7f0000002000))

18.786946402s ago: executing program 0 (id=8496):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0xf, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}}, 0xa, 0x2}, 0x90)

18.550589186s ago: executing program 5 (id=8498):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0)

18.222374002s ago: executing program 0 (id=8500):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r0, 0x8917, 0x0)

18.191167302s ago: executing program 3 (id=8501):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

17.894532175s ago: executing program 5 (id=8503):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

17.698707469s ago: executing program 0 (id=8505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x3000000}, 0x0)

17.421572582s ago: executing program 4 (id=8507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf802, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x254b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0)

17.408753098s ago: executing program 5 (id=8508):
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000004026093333400000000001090224"], 0x0)

16.414712009s ago: executing program 2 (id=8514):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.313839813s ago: executing program 2 (id=8515):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x681, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x5015, 0x0)

16.182137214s ago: executing program 2 (id=8516):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x541b, 0x0)

16.094724285s ago: executing program 2 (id=8517):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
read(r0, 0x0, 0x0)

16.018067278s ago: executing program 2 (id=8518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x1d, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000100), 0x0}, 0x20)

15.942107746s ago: executing program 2 (id=8519):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000001300010000001f000000000006"], 0x14}], 0x1}, 0x0)

15.660295177s ago: executing program 5 (id=8520):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg(r0, &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000160100000000002010000000000000008400000005"], 0x20}, 0x40000)

15.549430207s ago: executing program 5 (id=8521):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
accept4(r0, 0x0, 0x0, 0x80000)

15.408694875s ago: executing program 5 (id=8522):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89ff, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0})

658.779012ms ago: executing program 1 (id=8573):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x24000)

498.485934ms ago: executing program 1 (id=8574):
r0 = memfd_create(&(0x7f0000000000)='\x00\xc2\xea\x99\xbb\x1c\xdfjw\x97\x05\xa3\xa2\'\xdd\xe4q\xbf\t\x8c\xe0\x19`\x8e\x00\x00\x00\x00\x00\x00\x00\x00\x00\b \xff\x13\x96\xe3?\xdfH\x8c\xe4V\xe2\xfe\v8\x04\xa5\xb9\xc4:\xf3\xf6y_w\xd8\xcf\x90k\x05\x00\xf9\x1e\xe8m\xec\x12\xa015\xc2\xb3u|K\x111\xd4\f8\xeb\x18\xad\xbb!1\x85\x96P\x1b\xa1\x9a\x81\xf8\xb1\xecB)\xe5\xaa7\xfe\xdd,_D\xe5|\xb1j^\xaec}\x1a\xb4\x17\xafP\x85I\xd5\xa0I\xb0\xaf\xb5\x8b\\\x05\xd7g\xcbV\x8e\xd0\xac\x87I7\xbd\xc6\x9bI\x92\xb2\x87.\xb3\x1fs\xe7%\xdd+\r\xb4\x117\xa7ei~\xb8\x16\xd1P\xf2\x84\x89K\x16\xd0F|\xa3\x89\xc9~9\x00'/204, 0xa)
fchmod(r0, 0x0)

400.430053ms ago: executing program 1 (id=8575):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0)

249.30171ms ago: executing program 1 (id=8576):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x14, 0x5e, 0x1, 0x4, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0)

116.305666ms ago: executing program 1 (id=8577):
r0 = socket(0x2b, 0x1, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x20000000)

0s ago: executing program 1 (id=8578):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002600070100bdb00000faff0005"], 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

my_hcd
[  565.664638][ T5396] usb 6-1: USB disconnect, device number 29
[  565.689673][ T5238] ocfs2: Unmounting device (7,2) on (node local)
[  565.760777][ T5283] usb 5-1: Using ep0 maxpacket: 16
[  565.778877][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.849056][ T5283] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  565.866250][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.897194][ T5283] usb 5-1: Product: syz
[  565.903181][ T5283] usb 5-1: Manufacturer: syz
[  565.907810][ T5283] usb 5-1: SerialNumber: syz
[  565.923020][T21639] loop3: detected capacity change from 0 to 8
[  565.943389][ T5283] usb 5-1: config 0 descriptor??
[  565.990106][ T5283] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  566.023515][ T5283] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22)
[  566.090252][T21639] SQUASHFS error: xz decompression failed, data probably corrupt
[  566.120577][T21639] SQUASHFS error: Failed to read block 0x60: -5
[  566.144304][T21639] SQUASHFS error: xz decompression failed, data probably corrupt
[  566.171232][T21639] SQUASHFS error: Failed to read block 0x60: -5
[  566.184277][ T5283] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22
[  566.206661][   T29] audit: type=1800 audit(550.089:232): pid=21639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6875" name="file1" dev="loop3" ino=1 res=0 errno=0
[  566.247283][ T5283] usb 5-1: USB disconnect, device number 23
[  566.519424][T21656] netlink: 'syz.2.6882': attribute type 1 has an invalid length.
[  566.573401][T21656] netlink: 'syz.2.6882': attribute type 2 has an invalid length.
[  566.617308][T21661] loop1: detected capacity change from 0 to 1024
[  566.735901][ T5286] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  566.809756][T21661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  566.909163][ T5286] usb 6-1: Using ep0 maxpacket: 16
[  566.936307][T12463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.029261][ T5286] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  567.039195][ T5286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.048725][ T5286] usb 6-1: Product: syz
[  567.053326][ T5286] usb 6-1: Manufacturer: syz
[  567.057992][ T5286] usb 6-1: SerialNumber: syz
[  567.096378][ T5286] usb 6-1: config 0 descriptor??
[  567.104756][ T5284] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  567.272470][T21684] ieee802154 phy0 wpan0: encryption failed: -90
[  567.298969][ T5284] usb 4-1: Using ep0 maxpacket: 8
[  567.316717][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  567.336712][ T5286] usb 6-1: Limiting number of CPorts to U8_MAX
[  567.352434][ T5286] usb 6-1: Not enough endpoints found in device, aborting!
[  567.360193][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  567.413985][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  567.448730][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  567.525597][ T5284] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  567.548604][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.556682][ T5284] usb 4-1: Product: syz
[  567.567774][ T5283] usb 6-1: USB disconnect, device number 30
[  567.601915][ T5284] usb 4-1: Manufacturer: syz
[  567.607778][ T5284] usb 4-1: SerialNumber: syz
[  567.646712][ T5284] usb 4-1: config 0 descriptor??
[  567.737444][ T5284] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input25
[  567.915248][T21669] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  567.922435][T21669] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  567.994757][T21669] vhci_hcd vhci_hcd.0: Device attached
[  568.032583][T21705] vhci_hcd: connection closed
[  568.052368][ T5284] imon:send_packet: packet tx failed (-71)
[  568.075331][T15054] vhci_hcd: stop threads
[  568.081186][T15054] vhci_hcd: release socket
[  568.087281][T15054] vhci_hcd: disconnect device
[  568.168508][ T5284] imon 4-1:0.0: panel buttons/knobs setup failed
[  568.371962][ T5284] rc_core: IR keymap rc-imon-pad not found
[  568.398464][ T5284] Registered IR keymap rc-empty
[  568.429173][ T5284] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  568.474250][ T5284] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  568.523561][ T5284] imon:send_packet: packet tx failed (-71)
[  568.555998][ T5284] imon 4-1:0.0: remote input dev register failed
[  568.562643][ T5284] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  568.751202][ T5283] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  568.926220][ T5283] usb 6-1: Using ep0 maxpacket: 16
[  568.949071][ T5283] usb 6-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0
[  568.958700][T21738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6920'.
[  568.958799][T21738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6920'.
[  568.989376][ T5284] imon 4-1:0.0: unable to initialize intf0, err 0
[  569.013121][ T5284] imon:imon_probe: failed to initialize context!
[  569.013878][ T5283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.019492][ T5284] imon 4-1:0.0: unable to register, err -19
[  569.041335][ T5284] usb 4-1: USB disconnect, device number 29
[  569.130090][ T5283] usb 6-1: Product: syz
[  569.145615][ T5283] usb 6-1: Manufacturer: syz
[  569.170801][ T5283] usb 6-1: SerialNumber: syz
[  569.206585][T21698] loop1: detected capacity change from 0 to 32768
[  569.220511][ T5283] usb 6-1: config 0 descriptor??
[  569.255723][T21698] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  569.287053][ T5283] ums-freecom 6-1:0.0: USB Mass Storage device detected
[  569.376240][T21698] XFS (loop1): Ending clean mount
[  569.456594][T21741] loop0: detected capacity change from 0 to 4096
[  569.538507][T12463] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  569.539251][ T5283] usb 6-1: USB disconnect, device number 31
[  569.628677][T21741] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  569.771754][T21741] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  570.057792][T21741] ntfs3(loop0): ino=1e, "file1" failed to parse mft record
[  570.073821][T21741] ntfs3(loop0): ino=1e, "file1" attr_set_size
[  570.987335][T21795] loop5: detected capacity change from 0 to 4096
[  571.000187][T21800] netlink: 'syz.1.6944': attribute type 32 has an invalid length.
[  571.014921][T21801] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  571.242412][T21765] loop3: detected capacity change from 0 to 32768
[  571.388009][T21765] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  571.388009][T21765] 
[  571.414789][T21765] ERROR: (device loop3): remounting filesystem as read-only
[  571.444778][T21765] xtLookup: xtSearch returned -5
[  571.500790][T21815] netlink: 'syz.5.6953': attribute type 4 has an invalid length.
[  571.546808][   T79] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  571.773934][   T79] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  571.783085][   T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.807817][   T79] usb 1-1: config 0 descriptor??
[  571.821758][   T79] ums-usbat 1-1:0.0: USB Mass Storage device detected
[  571.893769][   T79] ums-usbat 1-1:0.0: Quirks match for vid 0781 pid 0005: 1
[  571.957482][T21831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6962'.
[  571.967531][T21831] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4)
[  572.065175][T21835] netlink: 'syz.2.6964': attribute type 3 has an invalid length.
[  572.104904][T21835] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6964'.
[  572.107622][   T79] usb 1-1: USB disconnect, device number 21
[  572.553726][ T5287] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  572.676372][T21819] loop4: detected capacity change from 0 to 32768
[  572.739986][T21819] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  572.741582][ T5287] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  572.776962][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.815488][ T5287] usb 4-1: config 0 descriptor??
[  572.822619][T21868] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  572.880191][ T5287] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  572.944304][T21819] XFS (loop4): Ending clean mount
[  573.128280][ T5226] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  573.440741][T21856] loop2: detected capacity change from 0 to 40427
[  573.453565][T21856] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  573.463866][T21856] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  573.520544][ T5287] gspca_stv06xx: I2C: Read error writing address: -71
[  573.531334][ T5287] usb 4-1: USB disconnect, device number 30
[  573.547636][T21885] netlink: 'syz.0.6984': attribute type 1 has an invalid length.
[  573.580115][T21885] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6984'.
[  573.652373][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6984'.
[  573.685082][T21856] F2FS-fs (loop2): Found nat_bits in checkpoint
[  573.983257][T21856] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  574.005800][T21856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  574.050651][T21906] netlink: 'syz.4.6991': attribute type 1 has an invalid length.
[  574.085484][T21906] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6991'.
[  574.192601][T21911] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6993'.
[  574.639966][T21926] loop0: detected capacity change from 0 to 1024
[  574.657876][T21928] tmpfs: Bad value for 'mpol'
[  574.786938][T21926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.811289][T21932] vhci_hcd: invalid port number 0
[  575.047313][T21919] loop4: detected capacity change from 0 to 32768
[  575.073291][T21919] 
[  575.073291][T21919]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.073291][T21919] 
[  575.096418][T21919] 
[  575.096418][T21919]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.096418][T21919] 
[  575.114356][T21919] 
[  575.114356][T21919]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.114356][T21919] 
[  575.142741][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  575.177904][T21919] 
[  575.177904][T21919]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.177904][T21919] 
[  575.295873][  T109] 
[  575.295873][  T109]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.295873][  T109] 
[  575.433732][ T5226] 
[  575.433732][ T5226]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.433732][ T5226] 
[  575.493381][ T5226] 
[  575.493381][ T5226]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  575.493381][ T5226] 
[  575.555904][T21943] loop3: detected capacity change from 0 to 4096
[  575.587639][T21943] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  575.777439][T21966] loop2: detected capacity change from 0 to 4096
[  575.789284][T21966] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  575.802185][T21965] binder: 21960:21965 ioctl c018620c 20000740 returned -22
[  575.901615][ T5284] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  575.937468][T21966] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  575.953958][T21966] ntfs3(loop2): mft corrupted
[  575.974137][T21966] ntfs3(loop2): Failed to load $Extend (-22).
[  575.992254][T21966] ntfs3(loop2): Failed to initialize $Extend.
[  576.111864][ T5284] usb 2-1: Using ep0 maxpacket: 16
[  576.115457][T21943] ntfs3(loop3): failed to convert "c46c" to cp737
[  576.147725][ T5284] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  576.157347][T21966] ntfs3(loop2): ino=1b, "file0" failed to parse mft record
[  576.179543][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.180116][T21972] loop5: detected capacity change from 0 to 1024
[  576.204963][ T5284] usb 2-1: Product: syz
[  576.211942][T21966] ntfs3(loop2): ino=1b, "file0" attr_set_size
[  576.220365][ T5284] usb 2-1: Manufacturer: syz
[  576.233182][ T5284] usb 2-1: SerialNumber: syz
[  576.286172][ T5284] usb 2-1: config 0 descriptor??
[  576.311020][ T5284] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  576.315072][T21972] hfsplus: request for non-existent node 128 in B*Tree
[  576.371365][T21972] hfsplus: request for non-existent node 128 in B*Tree
[  576.663946][ T5284] gp8psk: usb in 128 operation failed.
[  576.683375][ T5284] gp8psk: usb in 137 operation failed.
[  576.688937][ T5284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  576.700386][ T5284] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  576.709883][ T5284] usb 2-1: media controller created
[  576.730199][ T5284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  576.748895][ T5284] gp8psk_fe: Frontend revision 1 attached
[  576.755497][ T5284] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  576.780254][ T5284] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  576.917051][ T5284] gp8psk: usb in 138 operation failed.
[  576.952838][ T5284] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  576.959168][T21995] loop5: detected capacity change from 0 to 256
[  576.978791][ T5284] gp8psk: found Genpix USB device pID = 201 (hex)
[  577.014448][ T5284] usb 2-1: USB disconnect, device number 14
[  577.263872][ T5284] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  577.380734][T21995] FAT-fs (loop5): Directory bread(block 64) failed
[  577.399127][T21995] FAT-fs (loop5): Directory bread(block 65) failed
[  577.405948][T21995] FAT-fs (loop5): Directory bread(block 66) failed
[  577.453531][T21995] FAT-fs (loop5): Directory bread(block 67) failed
[  577.486402][T21995] FAT-fs (loop5): Directory bread(block 68) failed
[  577.493259][T21995] FAT-fs (loop5): Directory bread(block 69) failed
[  577.499050][T22017] loop2: detected capacity change from 0 to 164
[  577.525614][T22017] rock: directory entry would overflow storage
[  577.542260][T21995] FAT-fs (loop5): Directory bread(block 70) failed
[  577.554855][T22017] rock: sig=0x4543, size=28, remaining=18
[  577.559160][T21995] FAT-fs (loop5): Directory bread(block 71) failed
[  577.567294][T21995] FAT-fs (loop5): Directory bread(block 72) failed
[  577.587262][T21995] FAT-fs (loop5): Directory bread(block 73) failed
[  578.489411][T22059] loop1: detected capacity change from 0 to 164
[  578.499489][T22059] Unable to read rock-ridge attributes
[  578.512601][ T5283] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  578.635418][T22059] Unable to read rock-ridge attributes
[  578.797817][ T5283] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  578.807365][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.827287][    T9] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  578.848723][T22074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  578.891018][ T5283] usb 1-1: config 0 descriptor??
[  578.920739][ T5283] cp210x 1-1:0.0: cp210x converter detected
[  578.976632][T22079] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7075'.
[  579.007959][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7075'.
[  579.083730][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  579.108710][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  579.186323][    T9] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 495, setting to 64
[  579.197280][    T9] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  579.210378][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[  579.220979][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40
[  579.232687][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.241614][    T9] usb 5-1: Product: syz
[  579.248346][    T9] usb 5-1: Manufacturer: syz
[  579.262229][    T9] usb 5-1: SerialNumber: syz
[  579.305503][T22055] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  579.311135][T22084] loop3: detected capacity change from 0 to 4096
[  579.323399][T22087] tmpfs: Bad value for 'mpol'
[  579.390706][ T5283] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71
[  579.399728][ T5283] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71
[  579.399769][ T5283] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  579.416469][ T5283] usb 1-1: cp210x converter now attached to ttyUSB0
[  579.425883][ T5283] usb 1-1: USB disconnect, device number 22
[  579.452958][ T5283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  579.453535][ T5283] cp210x 1-1:0.0: device disconnected
[  579.482421][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  579.482484][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  579.530104][   T29] audit: type=1107 audit(562.393:233): pid=22089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  579.562503][    T9] usbhid 5-1:1.0: can't add hid device: -71
[  579.575715][    T9] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  579.602397][    T9] usb 5-1: USB disconnect, device number 24
[  580.158887][T22114] binfmt_misc: register: failed to install interpreter file ./file0/../file0
[  581.152288][T22164] loop1: detected capacity change from 0 to 256
[  581.175589][T22161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7112'.
[  581.362204][T22164] FAT-fs (loop1): Directory bread(block 64) failed
[  581.478212][T22164] FAT-fs (loop1): Directory bread(block 65) failed
[  581.574866][T22164] FAT-fs (loop1): Directory bread(block 66) failed
[  581.581743][T22164] FAT-fs (loop1): Directory bread(block 67) failed
[  581.588420][T22164] FAT-fs (loop1): Directory bread(block 68) failed
[  581.611943][T22164] FAT-fs (loop1): Directory bread(block 69) failed
[  581.619511][T22164] FAT-fs (loop1): Directory bread(block 70) failed
[  581.626680][T22164] FAT-fs (loop1): Directory bread(block 71) failed
[  581.642977][T22164] FAT-fs (loop1): Directory bread(block 72) failed
[  581.649930][T22164] FAT-fs (loop1): Directory bread(block 73) failed
[  581.851018][T22189] xt_cgroup: invalid path, errno=-2
[  582.546874][T22217] xt_CT: You must specify a L4 protocol and not use inversions on it
[  582.750188][T22228] tmpfs: Bad value for 'mpol'
[  582.764683][T22229] openvswitch: netlink: Actions may not be safe on all matching packets
[  582.836800][T22232] loop0: detected capacity change from 0 to 24
[  582.860271][T22232] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  582.911987][T22232] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  583.101341][T22242] loop5: detected capacity change from 0 to 512
[  583.156796][T22242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  583.242152][T22252] loop4: detected capacity change from 0 to 1024
[  583.369329][T22254] loop1: detected capacity change from 0 to 512
[  583.386899][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  583.453638][T22254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  583.509207][T22258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7162'.
[  583.780346][T12463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  583.958492][T22274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7166'.
[  584.016394][T22274] netlink: 'syz.1.7166': attribute type 1 has an invalid length.
[  584.057156][T22274] netlink: 124 bytes leftover after parsing attributes in process `syz.1.7166'.
[  584.328838][T22238] loop2: detected capacity change from 0 to 32768
[  584.330773][T22288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7175'.
[  584.562623][T22293] loop0: detected capacity change from 0 to 256
[  584.653413][T22293] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0aabff0a, utbl_chksum : 0xe619d30d)
[  585.357314][T22315] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7188'.
[  585.400617][T22315] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  585.477661][T22315] 0ªX¹¦Dö»: entered allmulticast mode
[  585.484248][ T5369] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  585.520679][   T29] audit: type=1326 audit(567.922:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22320 comm="syz.5.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9d17dff9 code=0x7ffc0000
[  585.663501][T22323] loop1: detected capacity change from 0 to 512
[  585.671177][   T29] audit: type=1326 audit(567.922:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22320 comm="syz.5.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9d17dff9 code=0x7ffc0000
[  585.719359][   T29] audit: type=1326 audit(567.959:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22320 comm="syz.5.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1d9d17dff9 code=0x7ffc0000
[  585.741573][ T5369] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  585.741635][ T5369] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  585.782420][ T5369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.874588][T22323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.073637][T22284] loop4: detected capacity change from 0 to 32768
[  586.111410][ T5369] gspca_main: stv0680-2.14.0 probing 041e:4007
[  586.202844][   T29] audit: type=1326 audit(567.959:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22320 comm="syz.5.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9d17dff9 code=0x7ffc0000
[  586.226643][   T29] audit: type=1326 audit(567.959:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22320 comm="syz.5.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9d17dff9 code=0x7ffc0000
[  586.233740][T22284] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  586.365361][T22323] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.7192: corrupted xattr block 33: invalid ea_ino
[  586.501311][T22284] XFS (loop4): Ending clean mount
[  586.507385][T12463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.630889][T22284] XFS (loop4): Quotacheck needed: Please wait.
[  586.952612][T22284] XFS (loop4): Quotacheck: Done.
[  587.110494][ T5226] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  587.129455][T22368] netlink: 'syz.2.7210': attribute type 1 has an invalid length.
[  587.137540][T22368] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7210'.
[  587.179733][T22373] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  587.254876][T22374] delete_channel: no stack
[  587.321208][ T5369] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  587.329761][ T5369] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  587.348196][ T5369] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  587.356752][ T5369] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  587.372121][ T5369] usb 4-1: USB disconnect, device number 31
[  587.628596][T22394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7223'.
[  587.786113][T22402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7227'.
[  587.875570][T22406] xt_CT: You must specify a L4 protocol and not use inversions on it
[  588.132932][T22415] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  588.417817][T22430] loop2: detected capacity change from 0 to 128
[  588.766318][T22439] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336)
[  588.776436][T22439] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  588.946196][   T79] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  589.108430][   T79] usb 1-1: Using ep0 maxpacket: 16
[  589.118871][   T79] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  589.144083][   T79] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  589.355856][   T79] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  589.368203][   T79] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.374046][T22413] loop5: detected capacity change from 0 to 32768
[  589.385835][T22413] XFS: noikeep mount option is deprecated.
[  589.399447][   T79] usb 1-1: Product: syz
[  589.421784][T22469] SET target dimension over the limit!
[  589.429024][T22413] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  589.445732][   T79] usb 1-1: Manufacturer: syz
[  589.450395][   T79] usb 1-1: SerialNumber: syz
[  589.483472][   T79] usb 1-1: config 0 descriptor??
[  589.506700][   T79] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  589.591638][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7259'.
[  589.602694][T22478] loop4: detected capacity change from 0 to 512
[  589.661360][T22478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  589.814942][T22413] XFS (loop5): Ending clean mount
[  589.841261][T22478] EXT4-fs error (device loop4): ext4_do_update_inode:5121: inode #2: comm syz.4.7261: corrupted inode contents
[  589.878289][T22413] XFS (loop5): Quotacheck needed: Please wait.
[  589.947598][T22478] EXT4-fs (loop4): Remounting filesystem read-only
[  589.974079][T22413] XFS (loop5): Quotacheck: Done.
[  590.054738][ T5222] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  590.097078][   T79] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  590.123474][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.292792][   T79] usb 2-1: Using ep0 maxpacket: 32
[  590.321606][   T79] usb 2-1: New USB device found, idVendor=2040, idProduct=b700, bcdDevice=46.e3
[  590.392373][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.441146][   T79] usb 2-1: Product: syz
[  590.473608][   T79] usb 2-1: Manufacturer: syz
[  590.478347][   T79] usb 2-1: SerialNumber: syz
[  590.531036][   T79] usb 2-1: config 0 descriptor??
[  590.585096][   T79] usb 2-1: dvb_usb_v2: found a 'Hauppauge 117xxx ATSC+' in warm state
[  590.636996][   T79] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  590.668870][   T79] dvbdev: DVB: registering new adapter (Hauppauge 117xxx ATSC+)
[  590.706309][   T79] usb 2-1: media controller created
[  590.794959][   T79] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  590.884279][   T79] usb 2-1: selecting invalid altsetting 1
[  590.906632][   T79] set interface failed
[  590.927872][   T79] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  590.971992][   T79] error writing reg: 0xff, val: 0x00
[  591.097836][   T79] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  591.178439][   T79] usb 2-1: USB disconnect, device number 15
[  591.410811][T22533] No such timeout policy "syz0"
[  591.473031][T22538] net veth1_virt_wifi : renamed from virt_wifi0
[  591.595317][ T5369] usb 1-1: USB disconnect, device number 23
[  591.688270][T22545] loop1: detected capacity change from 0 to 1024
[  591.762105][T22545] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  592.024245][T22559] netlink: 'syz.4.7298': attribute type 3 has an invalid length.
[  592.055532][T22559] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.7298'.
[  592.089114][   T29] audit: type=1326 audit(573.995:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22560 comm="syz.0.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  592.153308][   T29] audit: type=1326 audit(574.013:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22560 comm="syz.0.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  592.306313][   T29] audit: type=1326 audit(574.023:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22560 comm="syz.0.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  592.396952][   T29] audit: type=1326 audit(574.023:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22560 comm="syz.0.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  592.426874][   T29] audit: type=1326 audit(574.023:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22560 comm="syz.0.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  592.559792][T22577] loop5: detected capacity change from 0 to 16
[  592.617831][T22577] erofs: (device loop5): mounted with root inode @ nid 36.
[  592.786830][T22580] netlink: 'syz.1.7309': attribute type 1 has an invalid length.
[  592.827278][T22580] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7309'.
[  592.890136][T22580] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7309'.
[  593.167930][T22553] loop2: detected capacity change from 0 to 32768
[  593.348963][T22553] ea_get: invalid extended attribute
[  593.361392][T22553] ffff888057f75628: 04 00 00 00                                      ....
[  593.789787][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7328'.
[  593.812708][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7328'.
[  593.865657][T22617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7328'.
[  594.171996][T22635] loop5: detected capacity change from 0 to 256
[  594.190565][T22635] exfat: Deprecated parameter 'utf8'
[  594.249856][T22635] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d)
[  594.351849][T22643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7340'.
[  594.468537][T22645] loop3: detected capacity change from 0 to 256
[  594.682421][T22655] netlink: 384 bytes leftover after parsing attributes in process `syz.5.7344'.
[  594.872457][ T5286] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  595.055681][T22657] ɶƣ0GC¦: entered promiscuous mode
[  595.069856][ T5286] usb 5-1: Using ep0 maxpacket: 8
[  595.101039][ T5286] usb 5-1: config 0 has an invalid interface number: 191 but max is 0
[  595.117793][ T5286] usb 5-1: config 0 has no interface number 0
[  595.141078][ T5286] usb 5-1: config 0 interface 191 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  595.184820][ T5286] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36
[  595.197687][ T5284] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  595.222631][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.240776][ T5286] usb 5-1: Product: syz
[  595.252059][ T5286] usb 5-1: Manufacturer: syz
[  595.256858][ T5286] usb 5-1: SerialNumber: syz
[  595.285227][T22671] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7354'.
[  595.324906][T22674] loop3: detected capacity change from 0 to 1024
[  595.343409][ T5286] usb 5-1: config 0 descriptor??
[  595.353574][T22674] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  595.375131][ T5286] em28xx 5-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191)
[  595.390533][ T5286] em28xx 5-1:0.191: Video interface 191 found:
[  595.403818][ T5284] usb 1-1: Using ep0 maxpacket: 16
[  595.415814][ T5284] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  595.429010][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.444600][T22674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  595.488983][ T5284] usb 1-1: Product: syz
[  595.493565][ T5284] usb 1-1: Manufacturer: syz
[  595.498266][ T5284] usb 1-1: SerialNumber: syz
[  595.573220][T22681] loop2: detected capacity change from 0 to 64
[  595.645467][ T5284] r8152-cfgselector 1-1: Unknown version 0x0000
[  595.652101][ T5284] r8152-cfgselector 1-1: config 0 descriptor??
[  595.746307][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.862601][ T5286] em28xx 5-1:0.191: unknown em28xx chip ID (0)
[  595.999471][ T5286] em28xx 5-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5)
[  596.009318][ T5286] em28xx 5-1:0.191: board has no eeprom
[  596.143543][T22693] loop2: detected capacity change from 0 to 1024
[  596.162143][T22695] trusted_key: encrypted_key: master key parameter '' is invalid
[  596.172589][ T5286] em28xx 5-1:0.191: Identified as Leadtek Winfast USB II (card=7)
[  596.180483][ T5286] em28xx 5-1:0.191: analog set to bulk mode.
[  596.181998][T22693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.233104][ T5284] r8152-cfgselector 1-1: USB disconnect, device number 24
[  596.260033][   T79] em28xx 5-1:0.191: Registering V4L2 extension
[  596.310823][ T5286] usb 5-1: USB disconnect, device number 25
[  596.337461][ T5286] em28xx 5-1:0.191: Disconnecting em28xx
[  596.459325][ T5238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.514439][   T79] em28xx 5-1:0.191: Config register raw data: 0xffffffed
[  596.535644][   T79] em28xx 5-1:0.191: AC97 chip type couldn't be determined
[  596.562359][   T79] em28xx 5-1:0.191: No AC97 audio processor
[  596.620139][   T79] usb 5-1: Decoder not found
[  596.624801][   T79] em28xx 5-1:0.191: failed to create media graph
[  596.631526][   T79] em28xx 5-1:0.191: V4L2 device video71 deregistered
[  596.650987][   T79] em28xx 5-1:0.191: Remote control support is not available for this card.
[  596.662065][ T5286] em28xx 5-1:0.191: Closing input extension
[  596.802759][ T5286] em28xx 5-1:0.191: Freeing device
[  597.438166][T22744] loop0: detected capacity change from 0 to 256
[  597.469747][T22736] loop4: detected capacity change from 0 to 4096
[  597.486563][T22736] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  597.569575][   T29] audit: type=1800 audit(579.044:244): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7385" name="file1" dev="loop0" ino=1048681 res=0 errno=0
[  598.064673][T22759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7392'.
[  598.122493][T22736] ntfs3(loop4): failed to convert "c46c" to euc-jp
[  598.133073][T22752] loop2: detected capacity change from 0 to 32768
[  598.202207][T22752] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7390 (22752)
[  598.255301][T22752] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  598.283174][T22752] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  598.292172][T22752] BTRFS info (device loop2): using free-space-tree
[  598.509720][T22779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7399'.
[  598.520673][T22750] loop1: detected capacity change from 0 to 32768
[  598.557136][T22750] BTRFS: device /dev/loop1 (7:1) using temp-fsid 2513f8cf-6b5e-4465-b172-87fb0690c33c
[  598.567834][T22750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7387 (22750)
[  598.639398][T22764] syz.5.7395: attempt to access beyond end of device
[  598.639398][T22764] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0
[  598.658581][T22764] XFS (nbd5): SB validate failed with error -5.
[  598.686651][T22750] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  598.705575][T22750] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  598.714458][T22750] BTRFS info (device loop1): using free-space-tree
[  598.722646][T22779] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7399'.
[  598.734869][T22779] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check.
[  598.914056][T22794] lo speed is unknown, defaulting to 1000
[  598.939613][T22794] lo speed is unknown, defaulting to 1000
[  598.955155][T22794] lo speed is unknown, defaulting to 1000
[  599.280702][T22825] xt_cgroup: xt_cgroup: no path or classid specified
[  599.425770][T22750] BTRFS error (device loop1): device add not supported on cloned temp-fsid mount
[  599.532168][T22835] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  599.554533][T12463] BTRFS info (device loop1): last unmount of filesystem 2513f8cf-6b5e-4465-b172-87fb0690c33c
[  599.618273][ T5238] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  599.629586][T22794] infiniband syz0: set active
[  599.634648][T22794] infiniband syz0: added lo
[  599.650280][ T5285] lo speed is unknown, defaulting to 1000
[  599.848453][T22794] RDS/IB: syz0: added
[  599.852553][T22794] smc: adding ib device syz0 with port count 1
[  599.859559][T22794] smc:    ib device syz0 port 1 has pnetid 
[  599.870873][T22794] lo speed is unknown, defaulting to 1000
[  599.884736][ T5396] lo speed is unknown, defaulting to 1000
[  600.551753][T22863] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7425'.
[  600.883427][T22869] loop1: detected capacity change from 0 to 32768
[  600.971291][T22869]  loop1: p1 p2 p3 < >
[  600.976016][T22869] loop1: p1 size 242222080 extends beyond EOD, truncated
[  601.031246][T22794] lo speed is unknown, defaulting to 1000
[  601.340495][   T79] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  601.350281][T22882] loop5: detected capacity change from 0 to 64
[  601.395193][T22882] syz.5.7433: attempt to access beyond end of device
[  601.395193][T22882] loop5: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  601.448661][T22882] Buffer I/O error on dev loop5, logical block 8388608, async page read
[  601.525273][T22882] syz.5.7433: attempt to access beyond end of device
[  601.525273][T22882] loop5: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  601.540643][   T79] usb 5-1: Using ep0 maxpacket: 8
[  601.576915][T22794] lo speed is unknown, defaulting to 1000
[  601.584419][   T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  601.590279][T22886] netlink: 'syz.3.7434': attribute type 10 has an invalid length.
[  601.602729][T22882] Buffer I/O error on dev loop5, logical block 8388608, async page read
[  601.635794][   T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  601.703714][   T79] usb 5-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46
[  601.726362][   T79] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.770848][   T79] usb 5-1: Product: syz
[  601.774611][T22886] team0: Port device team_slave_0 removed
[  601.779693][   T79] usb 5-1: Manufacturer: syz
[  601.830654][   T79] usb 5-1: SerialNumber: syz
[  601.874330][   T79] usb 5-1: config 0 descriptor??
[  601.907219][   T79] radio-si470x 5-1:0.0: could not find interrupt in endpoint
[  601.935772][   T79] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  602.012113][   T79] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  602.137721][ T5285] usb 5-1: USB disconnect, device number 26
[  602.329189][T22794] lo speed is unknown, defaulting to 1000
[  602.420368][T22904] loop5: detected capacity change from 0 to 64
[  602.536615][    C1] vkms_vblank_simulate: vblank timer overrun
[  602.628863][    C1] vkms_vblank_simulate: vblank timer overrun
[  602.713838][T22909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7446'.
[  602.753185][T22915] afs: Bad value for 'source'
[  602.803237][T22794] lo speed is unknown, defaulting to 1000
[  602.928175][T22794] lo speed is unknown, defaulting to 1000
[  603.187336][T22926] loop1: detected capacity change from 0 to 8
[  603.282154][T22926] SQUASHFS error: Failed to read block 0x260685: -5
[  603.288904][T22926] SQUASHFS error: Unable to read metadata cache entry [260685]
[  603.324135][T22926] SQUASHFS error: Unable to read directory block [260685:0]
[  603.498820][T22937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7460'.
[  603.862815][T22957] loop0: detected capacity change from 0 to 64
[  603.911360][T22957] syz.0.7470: attempt to access beyond end of device
[  603.911360][T22957] loop0: rw=0, sector=2590, nr_sectors = 2 limit=64
[  603.965065][T22957] Buffer I/O error on dev loop0, logical block 1295, async page read
[  604.023386][T22957] syz.0.7470: attempt to access beyond end of device
[  604.023386][T22957] loop0: rw=0, sector=2590, nr_sectors = 2 limit=64
[  604.103939][T22957] Buffer I/O error on dev loop0, logical block 1295, async page read
[  604.151416][   T29] audit: type=1800 audit(585.126:245): pid=22957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7470" name="file2" dev="loop0" ino=6 res=0 errno=0
[  604.292369][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7479'.
[  605.344980][T23013] loop4: detected capacity change from 0 to 4096
[  605.664408][T23013] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB
[  606.007645][T23041] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7513'.
[  606.070806][T23046] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7515'.
[  606.191886][T23049] ip6t_srh: unknown srh invflags 4000
[  606.466031][T23057] syz.3.7521: attempt to access beyond end of device
[  606.466031][T23057] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0
[  606.485038][T23059] loop0: detected capacity change from 0 to 128
[  606.552204][T23057] EXT4-fs (nbd3): unable to read superblock
[  606.562791][T23065] netlink: 212404 bytes leftover after parsing attributes in process `syz.5.7524'.
[  606.640804][T23064] loop2: detected capacity change from 0 to 2048
[  606.752174][T23064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  607.238444][T23045] loop4: detected capacity change from 0 to 32768
[  607.280837][T23045] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7512 (23045)
[  607.350287][T23045] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  607.375295][T23045] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  607.397019][T23045] BTRFS info (device loop4): using free-space-tree
[  607.518281][ T2934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.532065][ T2934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.758894][T23124] loop5: detected capacity change from 0 to 8
[  607.875245][ T5396] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  607.998416][ T5226] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  608.068779][ T5396] usb 2-1: Using ep0 maxpacket: 16
[  608.195557][ T5396] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  608.209619][ T5396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  608.227004][ T5396] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  608.238876][ T5396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.250069][ T5396] usb 2-1: Product: syz
[  608.254420][ T5396] usb 2-1: Manufacturer: syz
[  608.259086][ T5396] usb 2-1: SerialNumber: syz
[  608.267689][ T5396] usb 2-1: config 0 descriptor??
[  608.329464][T23137] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7552'.
[  608.359736][T23137] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7552'.
[  608.441464][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7552'.
[  608.602267][ T5396] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27
[  608.643065][    C1] powermate: config urb returned -71
[  608.650026][    C1] powermate: config urb returned -71
[  608.655809][    C1] powermate: config urb returned -71
[  608.666973][    C1] powermate: config urb returned -71
[  608.730156][ T5396] usb 2-1: USB disconnect, device number 16
[  608.736379][    C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  608.881275][   T79] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  609.104655][T23150] loop5: detected capacity change from 0 to 4096
[  609.125597][   T79] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  609.165121][T23150] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  609.177426][   T79] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  609.216862][   T79] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.252313][   T79] usb 5-1: Product: syz
[  609.256545][   T79] usb 5-1: Manufacturer: syz
[  609.269803][   T79] usb 5-1: SerialNumber: syz
[  609.293717][   T79] usb 5-1: config 0 descriptor??
[  609.319209][T23159] loop1: detected capacity change from 0 to 764
[  609.328357][T23156] loop3: detected capacity change from 0 to 512
[  609.371633][T23156] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  609.408076][T23159] Symlink component flag not implemented
[  609.414902][T23156] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  609.435284][T23159] Symlink component flag not implemented
[  609.463338][T23150] ntfs3(loop5): ino=5, "/" attr_set_size
[  609.468896][T23156] EXT4-fs (loop3): orphan cleanup on readonly fs
[  609.469538][T23159] Symlink component flag not implemented (129)
[  609.496701][T23150] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  609.501672][T23156] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.7560: Invalid block bitmap block 0 in block_group 0
[  609.528829][T23159] Symlink component flag not implemented (6)
[  609.631354][T23156] EXT4-fs (loop3): Remounting filesystem read-only
[  609.639096][T23156] Quota error (device loop3): write_blk: dquota write failed
[  609.648035][T23156] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  609.660820][T23156] EXT4-fs (loop3): 1 orphan inode deleted
[  609.672236][T23156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  609.801832][ T5396] usb 5-1: USB disconnect, device number 27
[  609.811280][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.000819][T23171] loop5: detected capacity change from 0 to 8
[  610.022993][T23171] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  610.107730][T23171] cramfs: bad data blocksize 4294966936
[  610.123098][T23145] loop0: detected capacity change from 0 to 32768
[  610.153627][T23145] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7555 (23145)
[  610.153650][T23171] cramfs: Error -3 while decompressing!
[  610.192802][T23145] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  610.203536][T23175] ieee802154 phy0 wpan0: encryption failed: -22
[  610.238291][T23145] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  610.258227][T23171] cramfs: ffffffff9a504860(428)->ffff8880584ea000(4096)
[  610.297876][T23171] cramfs: bad data blocksize 4294966936
[  610.300491][T23145] BTRFS info (device loop0): using free-space-tree
[  610.357173][   T29] audit: type=1800 audit(590.849:246): pid=23171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7567" name="file3" dev="loop5" ino=348 res=0 errno=0
[  610.870139][T23215] loop1: detected capacity change from 0 to 8
[  610.957476][T23215] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  611.365429][T23234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7591'.
[  611.791150][ T5223] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  611.817042][ T5396] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  612.003674][ T5396] usb 4-1: Using ep0 maxpacket: 8
[  612.094044][ T5396] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=18.37
[  612.104051][ T5396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.115780][ T5396] usb 4-1: Product: syz
[  612.120183][ T5396] usb 4-1: Manufacturer: syz
[  612.129332][ T5396] usb 4-1: SerialNumber: syz
[  612.148881][T23255] loop4: detected capacity change from 0 to 16
[  612.208127][T23255] erofs: (device loop4): mounted with root inode @ nid 36.
[  612.222562][ T5286] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  612.306747][T23232] loop5: detected capacity change from 0 to 40427
[  612.356464][ T5396] usb 4-1: config 0 descriptor??
[  612.388445][ T5396] radio-si470x 4-1:0.0: could not find interrupt in endpoint
[  612.395253][T23232] F2FS-fs (loop5): invalid crc value
[  612.396988][ T5396] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  612.494135][T23232] F2FS-fs (loop5): Found nat_bits in checkpoint
[  612.499784][ T5286] usb 3-1: Using ep0 maxpacket: 16
[  612.509697][ T5286] usb 3-1: config 0 interface 0 has no altsetting 0
[  612.530066][ T5286] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  612.552864][ T5286] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  612.601759][ T5286] usb 3-1: Product: syz
[  612.618789][ T5396] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  612.630128][ T5286] usb 3-1: Manufacturer: syz
[  612.634883][ T5286] usb 3-1: SerialNumber: syz
[  612.681078][ T5286] usb 3-1: config 0 descriptor??
[  612.797999][T23232] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  612.894411][ T5396] radio-raremono 4-1:0.0: raremono_cmd_main failed (-71)
[  612.930900][ T5396] radio-raremono 4-1:0.0: V4L2 device registered as radio32
[  613.001593][ T5396] usb 4-1: USB disconnect, device number 32
[  613.008168][ T5396] radio-raremono 4-1:0.0: Thanko's Raremono disconnected
[  613.053997][ T5286] usb 3-1: selecting invalid altsetting 1
[  613.148482][T23273] netlink: 'syz.4.7608': attribute type 5 has an invalid length.
[  613.164950][ T5286] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  613.178416][ T5286] usb 3-1: USB disconnect, device number 20
[  613.191299][ T5239] udevd[5239]: setting owner of /dev/bus/usb/003/020 to uid=0, gid=0 failed: No such file or directory
[  613.353131][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  613.803512][T23286] openvswitch: netlink: Actions may not be safe on all matching packets
[  614.036326][T23269] loop1: detected capacity change from 0 to 32768
[  614.097102][T23269] JBD2: Ignoring recovery information on journal
[  614.339087][T23269] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  614.413899][T23311] delete_channel: no stack
[  614.695917][T23323] loop4: detected capacity change from 0 to 256
[  614.725440][T23323] exfat: Deprecated parameter 'namecase'
[  614.747744][T23327] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.7632'.
[  614.760634][ T5286] rtc_cmos 00:00: Alarms can be up to one day in the future
[  614.779177][T12463] ocfs2: Unmounting device (7,1) on (node local)
[  614.796799][ T5286] rtc_cmos 00:00: Alarms can be up to one day in the future
[  614.830229][ T5286] rtc_cmos 00:00: Alarms can be up to one day in the future
[  614.850084][ T5286] rtc_cmos 00:00: Alarms can be up to one day in the future
[  614.876984][T23323] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  614.905502][ T5286] rtc rtc0: __rtc_set_alarm: err=-22
[  615.415691][T23346] siw: device registration error -23
[  615.672505][T23358] loop5: detected capacity change from 0 to 64
[  615.739090][T23363] misc userio: Invalid payload size
[  616.558948][   T29] audit: type=1326 audit(596.544:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23394 comm="syz.4.7666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cf7dff9 code=0x7ffc0000
[  616.659414][   T29] audit: type=1326 audit(596.544:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23394 comm="syz.4.7666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cf7dff9 code=0x7ffc0000
[  616.714150][   T29] audit: type=1326 audit(596.553:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23394 comm="syz.4.7666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe85cf7dff9 code=0x7ffc0000
[  616.768296][   T29] audit: type=1326 audit(596.553:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23394 comm="syz.4.7666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cf7dff9 code=0x7ffc0000
[  616.824173][   T29] audit: type=1326 audit(596.553:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23394 comm="syz.4.7666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe85cf7dff9 code=0x7ffc0000
[  617.167498][T23387] loop1: detected capacity change from 0 to 32768
[  617.212185][T23387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7664 (23387)
[  617.239196][T23387] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  617.302644][T23387] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  617.311790][T23387] BTRFS info (device loop1): using free-space-tree
[  617.416581][ T5286] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  617.646068][ T5286] usb 1-1: Using ep0 maxpacket: 32
[  617.672247][ T5286] usb 1-1: config 0 has an invalid interface number: 206 but max is 1
[  617.693522][ T5286] usb 1-1: config 0 has no interface number 1
[  617.699767][ T5286] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  617.711150][ T5286] usb 1-1: config 0 interface 206 has no altsetting 0
[  617.789602][ T5286] usb 1-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[  617.799344][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.807366][ T5286] usb 1-1: Product: syz
[  617.811873][ T5286] usb 1-1: Manufacturer: syz
[  617.816494][ T5286] usb 1-1: SerialNumber: syz
[  617.830196][ T5396] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  617.842153][ T5286] usb 1-1: config 0 descriptor??
[  618.009887][T12463] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  618.100310][ T5396] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  618.119368][ T5396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.129350][ T5286] usb 1-1: USB disconnect, device number 25
[  618.165703][ T5396] usb 6-1: Product: syz
[  618.175760][ T5396] usb 6-1: Manufacturer: syz
[  618.193538][ T5396] usb 6-1: SerialNumber: syz
[  618.267464][ T5396] r8152-cfgselector 6-1: Unknown version 0x0000
[  618.328578][ T5396] r8152-cfgselector 6-1: config 0 descriptor??
[  618.458746][T23472] IPv6: NLM_F_REPLACE set, but no existing node found!
[  618.840345][ T5283] r8152-cfgselector 6-1: USB disconnect, device number 32
[  619.466136][T23512] loop0: detected capacity change from 0 to 764
[  619.519040][T23512] rock: directory entry would overflow storage
[  619.552576][T23512] rock: sig=0x4654, size=5, remaining=4
[  619.619957][T23520] SET target dimension over the limit!
[  620.182674][T23546] netlink: 'syz.2.7733': attribute type 3 has an invalid length.
[  620.419420][ T5396] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  620.482329][T23565] xt_CT: You must specify a L4 protocol and not use inversions on it
[  620.492159][T23559] loop2: detected capacity change from 0 to 2048
[  620.508199][T23559] EXT4-fs: Ignoring removed nomblk_io_submit option
[  620.534975][T23559] EXT4-fs: Ignoring removed nomblk_io_submit option
[  620.571898][T23559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  620.616660][ T5396] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.646088][ T5396] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  620.662889][ T5396] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  620.672325][ T5396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.722787][ T5369] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  620.730476][ T5396] hub 5-1:1.0: bad descriptor, ignoring hub
[  620.730511][ T5396] hub 5-1:1.0: probe with driver hub failed with error -5
[  620.747887][T23574] loop0: detected capacity change from 0 to 512
[  620.804669][T23574] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  620.834557][T23574] EXT4-fs error (device loop0): __ext4_iget:4952: inode #15: block 1803188595: comm syz.0.7743: invalid block
[  620.867875][T23574] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.7743: couldn't read orphan inode 15 (err -117)
[  620.902157][T23574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  620.958522][T23581] loop5: detected capacity change from 0 to 2048
[  620.965279][ T5369] usb 4-1: Using ep0 maxpacket: 8
[  620.996775][ T5369] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  621.026695][ T5369] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  621.035876][ T5369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.065192][ T5369] usb 4-1: Product: syz
[  621.071718][T23581] NILFS (loop5): invalid segment: Sequence number mismatch
[  621.078983][T23581] NILFS (loop5): trying rollback from an earlier position
[  621.086606][ T5285] usb 5-1: USB disconnect, device number 28
[  621.087294][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  621.096817][ T5369] usb 4-1: Manufacturer: syz
[  621.110501][ T5369] usb 4-1: SerialNumber: syz
[  621.130225][ T5369] usb 4-1: config 0 descriptor??
[  621.136590][T23553] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  621.142771][T23581] NILFS (loop5): recovery complete
[  621.173660][ T5369] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  621.188073][T23584] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  621.430464][T23592] loop5: detected capacity change from 0 to 256
[  621.436935][ T5369] gspca_zc3xx: reg_w_i err -71
[  621.478567][T23592] exfat: Deprecated parameter 'utf8'
[  621.498127][T23569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  621.518497][T23592] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  621.592491][   T79] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  621.730434][ T5396] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  621.775403][   T79] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  621.785977][   T79] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  621.794993][   T79] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  621.803382][T23602] loop1: detected capacity change from 0 to 4096
[  621.814279][T23602] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  621.833968][   T79] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 64
[  621.868694][   T79] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  621.885764][   T79] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.918069][T23588] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  621.951839][   T79] hub 1-1:1.0: bad descriptor, ignoring hub
[  621.958117][   T79] hub 1-1:1.0: probe with driver hub failed with error -5
[  621.965716][   T79] cdc_wdm 1-1:1.0: skipping garbage
[  621.971090][   T79] cdc_wdm 1-1:1.0: skipping garbage
[  621.976418][   T79] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  621.999904][T23602] ntfs3(loop1): failed to convert "c46c" to macgreek
[  622.015389][ T5396] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  622.024831][ T5396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.032914][ T5396] usb 3-1: Product: syz
[  622.037354][ T5396] usb 3-1: Manufacturer: syz
[  622.041966][ T5396] usb 3-1: SerialNumber: syz
[  622.053958][ T5396] usb 3-1: config 0 descriptor??
[  622.088605][ T5369] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  622.094962][ T5369] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  622.150505][ T5369] usb 4-1: USB disconnect, device number 33
[  622.302484][ T5396] hso 3-1:0.0: Failed to find BULK IN ep
[  622.314707][ T5396] usb-storage 3-1:0.0: USB Mass Storage device detected
[  622.348139][T22704] usb 1-1: USB disconnect, device number 26
[  622.553792][ T5396] usb 3-1: USB disconnect, device number 21
[  623.016181][T23633] netlink: 'syz.3.7770': attribute type 29 has an invalid length.
[  623.696150][T23660] loop4: detected capacity change from 0 to 1764
[  623.773746][T23667] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7787'.
[  624.815552][T23719] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7814'.
[  624.830030][T23719] 0ªX¹¦À: renamed from caif0
[  624.896463][T23719] 0ªX¹¦À: entered allmulticast mode
[  624.904565][T23719] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  625.239583][T23727] cgroup: No subsys list or none specified
[  625.500722][   T79] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  625.625259][T23759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7831'.
[  625.688979][   T79] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  625.717739][   T79] usb 2-1: config 0 has no interface number 0
[  625.739298][   T79] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  625.776162][   T79] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  625.847007][   T79] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  625.866978][   T79] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.898530][T23769] loop4: detected capacity change from 0 to 1024
[  625.909217][   T79] usb 2-1: Product: syz
[  625.913679][   T79] usb 2-1: Manufacturer: syz
[  625.923694][   T79] usb 2-1: SerialNumber: syz
[  625.936693][   T79] usb 2-1: config 0 descriptor??
[  625.945722][T23735] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  625.967967][T23769] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  625.990746][   T79] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  625.992194][T23773] loop0: detected capacity change from 0 to 256
[  626.012910][T23769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002]
[  626.044010][T23769] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  626.051500][   T79] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  626.062754][T23769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  626.104819][T23773] FAT-fs (loop0): Directory bread(block 64) failed
[  626.111667][T23773] FAT-fs (loop0): Directory bread(block 65) failed
[  626.118350][T23773] FAT-fs (loop0): Directory bread(block 66) failed
[  626.125251][T23773] FAT-fs (loop0): Directory bread(block 67) failed
[  626.132054][T23773] FAT-fs (loop0): Directory bread(block 68) failed
[  626.138705][T23773] FAT-fs (loop0): Directory bread(block 69) failed
[  626.142238][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.149068][T23773] FAT-fs (loop0): Directory bread(block 70) failed
[  626.162398][T23773] FAT-fs (loop0): Directory bread(block 71) failed
[  626.169234][T23773] FAT-fs (loop0): Directory bread(block 72) failed
[  626.291934][T23773] FAT-fs (loop0): Directory bread(block 73) failed
[  626.396332][T23766] loop3: detected capacity change from 0 to 32768
[  626.453841][ T5396] usb 2-1: USB disconnect, device number 17
[  626.504158][ T5396] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  626.564613][ T5396] cyberjack 2-1:0.69: device disconnected
[  626.632611][T23785] loop0: detected capacity change from 0 to 2048
[  626.677431][T23785] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  626.694969][T23785] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  626.703080][T23785] UDF-fs: Scanning with blocksize 512 failed
[  626.734298][T23766] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  626.819985][T23785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.939889][T23792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7846'.
[  627.042794][ T5237] ocfs2: Unmounting device (7,3) on (node local)
[  627.142143][T23798] loop4: detected capacity change from 0 to 1024
[  627.513233][   T79] IPVS: starting estimator thread 0...
[  627.656810][T23812] IPVS: using max 17 ests per chain, 40800 per kthread
[  627.667826][T23818] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7848'.
[  627.960286][T23834] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7866'.
[  628.002641][T23837] loop1: detected capacity change from 0 to 8
[  628.102377][T23837] SQUASHFS error: lzo decompression failed, data probably corrupt
[  628.109788][T23842] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96
[  628.145215][T23843] sctp: [Deprecated]: syz.5.7871 (pid 23843) Use of struct sctp_assoc_value in delayed_ack socket option.
[  628.145215][T23843] Use struct sctp_sack_info instead
[  628.150369][T23837] SQUASHFS error: Failed to read block 0x144: -5
[  628.204788][T23837] SQUASHFS error: Unable to read metadata cache entry [142]
[  628.226769][T23837] SQUASHFS error: Unable to read directory block [142:26]
[  629.534336][T23892] loop5: detected capacity change from 0 to 512
[  629.678977][T23892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  629.771584][T23892] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  629.839603][T23898] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  629.862257][T23874] loop3: detected capacity change from 0 to 32768
[  629.965685][ T5222] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.124465][T23874] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  630.124775][T23916] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7903'.
[  630.178549][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7904'.
[  630.206913][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7904'.
[  630.256849][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7904'.
[  630.272370][T23917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7904'.
[  630.476921][T23874] XFS (loop3): Ending clean mount
[  630.672048][T23943] loop4: detected capacity change from 0 to 8
[  630.679009][T23943] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  630.786247][T23947] Error parsing options; rc = [-22]
[  630.797297][T23943] cramfs: Error -3 while decompressing!
[  630.830228][T23943] cramfs: ffffffff9a5049c8(26)->ffff888063a67000(4096)
[  630.837562][T23943] cramfs: Error -5 while decompressing!
[  630.843519][T23943] cramfs: ffffffff9a5049e2(26)->ffff888052bcb000(4096)
[  630.856070][T23943] cramfs: Error -3 while decompressing!
[  630.862226][T23943] cramfs: ffffffff9a5049fc(16)->ffff888052867000(4096)
[  630.869550][T23943] cramfs: Error -3 while decompressing!
[  630.873191][T23948] block device autoloading is deprecated and will be removed.
[  630.875219][T23943] cramfs: ffffffff9a5049c8(26)->ffff888063a67000(4096)
[  630.892311][T23948] syz.5.7914: attempt to access beyond end of device
[  630.892311][T23948] md33: rw=2048, sector=0, nr_sectors = 8 limit=0
[  630.897168][   T29] audit: type=1800 audit(609.789:252): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7916" name="file2" dev="loop4" ino=348 res=0 errno=0
[  630.938632][ T5237] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  631.381611][T23969] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7928'.
[  631.405396][T23969] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7928'.
[  631.684935][T23981] loop3: detected capacity change from 0 to 64
[  631.723656][T23977] loop5: detected capacity change from 0 to 4096
[  631.775173][T23989] tmpfs: User quota inode hardlimit too large.
[  631.784532][T23977] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  632.126896][T23977] ntfs3(loop5): failed to convert "c46c" to cp855
[  633.080845][T24038] loop5: detected capacity change from 0 to 2048
[  633.134426][T24038] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  633.249967][T24048] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  633.320934][T24001] loop0: detected capacity change from 0 to 32768
[  633.380840][T24001] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  633.380840][T24001] 
[  633.406575][T24001] ialloc: diAlloc returned -5!
[  633.842015][T24072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7977'.
[  634.159636][T24084] tmpfs: Bad value for 'mpol'
[  634.669418][T24109] netlink: 'syz.4.7994': attribute type 3 has an invalid length.
[  634.708418][T24109] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.7994'.
[  634.739237][T24109] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  634.796470][T24109] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  634.841924][T24112] loop3: detected capacity change from 0 to 2048
[  634.948086][T24112] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  634.973355][T24112] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  635.027688][T24112] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.391337][T24135] loop3: detected capacity change from 0 to 2048
[  635.578724][T24135] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.695613][T24135] UDF-fs: incorrect filename length (10)
[  636.276625][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8027'.
[  636.436560][T24184] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.8028'.
[  636.690025][T24195] netlink: 'syz.2.8037': attribute type 2 has an invalid length.
[  637.201920][T24218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8047'.
[  637.953893][   T79] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  638.067575][T24251] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8064'.
[  638.584601][   T79] usb 3-1: unable to get BOS descriptor or descriptor too short
[  638.608682][   T79] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  638.646272][   T79] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  638.718588][   T79] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 30768, setting to 1024
[  638.744487][   T79] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024
[  638.806500][   T79] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  638.816347][   T79] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.837658][   T79] usb 3-1: Product: syz
[  638.849910][   T79] usb 3-1: Manufacturer: syz
[  638.897925][   T79] usb 3-1: SerialNumber: syz
[  638.938898][   T79] usb 3-1: config 0 descriptor??
[  638.945488][T24235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  638.962148][T24235] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  639.023329][    C1] usb 3-1: NFC: Urb failure (status -71)
[  639.175148][    C1] usb 3-1: NFC: Urb failure (status -71)
[  639.268321][   T79] usb 3-1: NFC: Unable to get FW version
[  639.281271][   T79] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -71
[  639.382199][T24283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8078'.
[  639.414321][   T79] usb 3-1: USB disconnect, device number 22
[  639.495564][T24285] loop4: detected capacity change from 0 to 1024
[  639.772973][T24285] syz.4.8079: attempt to access beyond end of device
[  639.772973][T24285] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  641.000869][T24347] sctp: [Deprecated]: syz.5.8110 (pid 24347) Use of int in max_burst socket option.
[  641.000869][T24347] Use struct sctp_assoc_value instead
[  641.295775][T24360] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (4)
[  641.576403][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8119'.
[  641.754170][T24338] loop1: detected capacity change from 0 to 32768
[  642.069979][T24398] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  642.498559][   T29] audit: type=1400 audit(620.477:253): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=24413 comm="syz.5.8144"
[  642.525906][    C1] vkms_vblank_simulate: vblank timer overrun
[  642.587045][T24418] loop3: detected capacity change from 0 to 256
[  642.625922][T24423] loop0: detected capacity change from 0 to 1764
[  642.660329][T24425] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8149'.
[  642.706392][T24418] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  642.763741][T24418] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  642.774077][T24418] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  642.792419][T24418] UDF-fs: Scanning with blocksize 512 failed
[  642.820585][T24418] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  642.893638][T24418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  642.908826][T24434] loop4: detected capacity change from 0 to 512
[  642.955720][T24434] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  642.998389][ T5369] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  643.031333][T24434] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  643.112119][T24440] bridge0: port 3(veth0_to_bridge) entered blocking state
[  643.131343][T24440] bridge0: port 3(veth0_to_bridge) entered disabled state
[  643.149732][T24440] veth0_to_bridge: entered allmulticast mode
[  643.157848][T24440] veth0_to_bridge: entered promiscuous mode
[  643.169286][T24434] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  643.182184][ T5369] usb 6-1: Using ep0 maxpacket: 8
[  643.198185][ T5369] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  643.224909][T24434] System zones: 0-2, 18-18, 34-34
[  643.236374][ T5369] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  643.270876][T24434] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  643.279918][T24440] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  643.290606][ T5369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  643.324729][T24440] bridge0: port 3(veth0_to_bridge) entered blocking state
[  643.332014][T24440] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  643.383985][ T5369] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  643.407251][T24434] EXT4-fs (loop4): 1 truncate cleaned up
[  643.421733][T24434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  643.447241][ T5369] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  643.456981][ T5369] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.465122][ T5369] usb 6-1: Product: syz
[  643.469375][ T5369] usb 6-1: Manufacturer: syz
[  643.473987][ T5369] usb 6-1: SerialNumber: syz
[  643.551968][ T5369] usb 6-1: config 0 descriptor??
[  643.575407][ T5369] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29
[  643.596693][ T5226] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  643.686223][T24458] xt_TPROXY: Can be used only with -p tcp or -p udp
[  643.697696][T24456] loop1: detected capacity change from 0 to 2048
[  643.799989][ T5285] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  643.822421][T24456] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  643.845968][ T5369] imon:send_packet: packet tx failed (-71)
[  643.875515][ T5369] imon 6-1:0.0: panel buttons/knobs setup failed
[  643.997104][ T5369] rc_core: IR keymap rc-imon-pad not found
[  644.003075][ T5369] Registered IR keymap rc-empty
[  644.022652][ T5285] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  644.031816][ T5285] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  644.042356][ T5369] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  644.073840][ T5285] usb 1-1: config 0 has no interface number 0
[  644.109243][ T5369] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  644.131191][ T5285] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  644.149316][ T5285] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  644.159911][ T5369] imon:send_packet: packet tx failed (-71)
[  644.184588][ T5369] imon 6-1:0.0: remote input dev register failed
[  644.200292][ T5369] imon 6-1:0.0: imon_init_intf0: rc device setup failed
[  644.219800][ T5285] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  644.257935][ T5285] usb 1-1: config 0 interface 52 has no altsetting 0
[  644.284568][ T5285] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  644.329770][ T5285] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  644.356216][ T5369] imon 6-1:0.0: unable to initialize intf0, err 0
[  644.362905][ T5369] imon:imon_probe: failed to initialize context!
[  644.369275][ T5285] usb 1-1: Product: syz
[  644.384713][ T5369] imon 6-1:0.0: unable to register, err -19
[  644.403581][ T5285] usb 1-1: Manufacturer: syz
[  644.419815][ T5285] usb 1-1: SerialNumber: syz
[  644.430502][ T5369] usb 6-1: USB disconnect, device number 33
[  644.462289][ T5285] usb 1-1: config 0 descriptor??
[  644.755523][ T5285] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  644.831496][ T5285] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5
[  644.870510][T24481] loop3: detected capacity change from 0 to 4096
[  644.894289][T24481] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  644.929186][T24490] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  645.000729][   T79] usb 1-1: USB disconnect, device number 27
[  645.103224][T24481] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  645.132320][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  645.296182][T24501] netlink: 'syz.2.8183': attribute type 1 has an invalid length.
[  645.344097][ T5237] ntfs3(loop3): ino=1a, ntfs_sync_fs failed, -22.
[  645.352249][T24501] netlink: 636 bytes leftover after parsing attributes in process `syz.2.8183'.
[  645.394843][    T9] usb 2-1: Using ep0 maxpacket: 16
[  645.425324][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  645.435252][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  645.446296][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  645.550294][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.32
[  645.559949][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.568336][    T9] usb 2-1: Product: syz
[  645.572589][    T9] usb 2-1: Manufacturer: syz
[  645.577491][    T9] usb 2-1: SerialNumber: syz
[  645.593932][    T9] usb 2-1: config 0 descriptor??
[  645.609967][T24489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  645.628192][    T9] mceusb 2-1:0.0: mceusb_dev_probe: device setup failed!
[  645.636432][    T9] mceusb 2-1:0.0: probe with driver mceusb failed with error -12
[  645.917275][T22704] usb 2-1: USB disconnect, device number 18
[  645.956074][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8196'.
[  645.978048][   T79] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  645.982875][T24523] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8196'.
[  646.032573][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  646.039742][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  646.158140][T24527] loop4: detected capacity change from 0 to 1764
[  646.190066][   T79] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  646.196464][T24531] loop5: detected capacity change from 0 to 256
[  646.216533][   T79] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  646.246550][   T79] usb 4-1: Product: syz
[  646.266833][   T79] usb 4-1: Manufacturer: syz
[  646.288823][   T79] usb 4-1: SerialNumber: syz
[  646.293671][T24531] FAT-fs (loop5): Directory bread(block 64) failed
[  646.293740][T24531] FAT-fs (loop5): Directory bread(block 65) failed
[  646.293825][T24531] FAT-fs (loop5): Directory bread(block 66) failed
[  646.293864][T24531] FAT-fs (loop5): Directory bread(block 67) failed
[  646.293945][T24531] FAT-fs (loop5): Directory bread(block 68) failed
[  646.293984][T24531] FAT-fs (loop5): Directory bread(block 69) failed
[  646.310920][   T79] usb 4-1: config 0 descriptor??
[  646.400249][T24531] FAT-fs (loop5): Directory bread(block 70) failed
[  646.415555][T24531] FAT-fs (loop5): Directory bread(block 71) failed
[  646.434790][T24531] FAT-fs (loop5): Directory bread(block 72) failed
[  646.441421][T24531] FAT-fs (loop5): Directory bread(block 73) failed
[  646.549460][T24541] syz.0.8205: attempt to access beyond end of device
[  646.549460][T24541] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0
[  646.590085][   T79] hso 4-1:0.0: Failed to find BULK IN ep
[  646.598418][   T79] usb-storage 4-1:0.0: USB Mass Storage device detected
[  646.840821][   T79] usb 4-1: USB disconnect, device number 34
[  647.047409][T24560] loop1: detected capacity change from 0 to 2048
[  647.072737][T24560]  loop1: p3 < > p4 < >
[  647.077114][T24560] loop1: partition table partially beyond EOD, truncated
[  647.084964][T24560] loop1: p3 start 4284289 is beyond EOD, truncated
[  647.098242][T24561] loop4: detected capacity change from 0 to 2048
[  647.169878][T24566] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  647.200642][ T4679]  loop1: p3 < > p4 < >
[  647.209006][T24561] syz.4.8212: attempt to access beyond end of device
[  647.209006][T24561] loop4: rw=0, sector=19791209300034, nr_sectors = 2 limit=2048
[  647.234066][ T4679] loop1: partition table partially beyond EOD, truncated
[  647.252464][ T4679] loop1: p3 start 4284289 is beyond EOD, truncated
[  647.272628][T24561] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  647.310917][T24561] NILFS (loop4): error -5 truncating bmap (ino=16)
[  647.391501][T24576] loop1: detected capacity change from 0 to 128
[  647.525225][T24580] loop5: detected capacity change from 0 to 8
[  647.627134][T24582] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  647.651070][ T5230] udevd[5230]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  648.226691][T24604] loop0: detected capacity change from 0 to 256
[  648.339927][T24604] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  648.390167][T24608] loop3: detected capacity change from 0 to 512
[  648.427855][T24608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  648.456134][T24608] EXT4-fs (loop3): orphan cleanup on readonly fs
[  648.469529][T24610] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8238'.
[  648.493277][T24608] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8237: bg 0: block 248: padding at end of block bitmap is not set
[  648.619555][T24604] syz.0.8235: attempt to access beyond end of device
[  648.619555][T24604] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256
[  648.643255][T24608] Quota error (device loop3): write_blk: dquota write failed
[  648.682858][T24608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  648.713114][T24604] syz.0.8235: attempt to access beyond end of device
[  648.713114][T24604] loop0: rw=524288, sector=408, nr_sectors = 256 limit=256
[  648.752656][T24604] syz.0.8235: attempt to access beyond end of device
[  648.752656][T24604] loop0: rw=0, sector=280, nr_sectors = 8 limit=256
[  648.753518][T24608] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.8237: Failed to acquire dquot type 1
[  648.847618][T24608] EXT4-fs (loop3): 1 truncate cleaned up
[  648.865906][T24608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  648.878526][   T29] audit: type=1800 audit(626.311:254): pid=24604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8235" name="file1" dev="loop0" ino=1048687 res=0 errno=0
[  648.917170][T24598] loop1: detected capacity change from 0 to 32768
[  649.029319][T24608] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.8237: Abort forced by user
[  649.054727][ T5369] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  649.062407][T24608] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  649.096853][T24598] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  649.125005][T24608] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  649.242064][ T5369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  649.259240][ T5369] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  649.276294][ T5369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  649.291777][ T5369] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  649.302101][ T5369] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  649.312038][ T5369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.357905][ T5369] usb 6-1: config 0 descriptor??
[  649.363284][T24598] XFS (loop1): Ending clean mount
[  649.374466][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.504453][T24638] loop4: detected capacity change from 0 to 2048
[  649.591958][ T5369] hdpvr 6-1:0.0: firmware version 0x15 dated mÂÒ�R(	ry|ŸÉA3j×Æe{¸£)”7}-SŠ¥8N¾¾¸¤¼†
[  649.624569][T12463] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  649.658719][T24638]  loop4: AHDI p1 p3
[  649.693747][ T4679]  loop4: AHDI p1 p3
[  649.817517][ T5369] hdpvr 6-1:0.0: device init failed
[  649.822881][ T5369] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[  649.845023][ T5369] usb 6-1: USB disconnect, device number 34
[  650.353083][T24669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8261'.
[  650.591051][   T29] audit: type=1326 audit(627.981:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24672 comm="syz.0.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  650.670277][   T29] audit: type=1326 audit(627.981:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24672 comm="syz.0.8264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cc57dff9 code=0x7ffc0000
[  650.763598][   T29] audit: type=1326 audit(627.981:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.1.8265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd37dff9 code=0x7ffc0000
[  650.840021][   T29] audit: type=1326 audit(627.981:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.1.8265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd37dff9 code=0x7ffc0000
[  650.855145][T24679] loop5: detected capacity change from 0 to 4096
[  650.944108][   T29] audit: type=1326 audit(627.981:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.1.8265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f25bd37dff9 code=0x7ffc0000
[  650.945333][T24685] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8270'.
[  650.976674][T24679] NILFS (loop5): invalid segment: Checksum error in segment payload
[  651.007234][T24679] NILFS (loop5): trying rollback from an earlier position
[  651.044415][T24679] NILFS (loop5): recovery complete
[  651.076220][T24690] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  651.091965][   T29] audit: type=1326 audit(627.981:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.1.8265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd37dff9 code=0x7ffc0000
[  651.201854][   T29] audit: type=1326 audit(627.981:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24674 comm="syz.1.8265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25bd37dff9 code=0x7ffc0000
[  651.475467][T24665] loop3: detected capacity change from 0 to 32768
[  651.665589][T24700] netlink: 'syz.2.8278': attribute type 6 has an invalid length.
[  651.809621][T24657] loop4: detected capacity change from 0 to 32768
[  651.867124][T24657] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  651.885000][T24657] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  651.999080][T24657] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  652.045776][ T5369] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  652.055417][ T5369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  652.207501][ T5369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 140ms
[  652.280989][ T5369] gfs2: fsid=syz:syz.0: jid=0: Done
[  652.326351][T24657] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  652.793165][   T79] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  652.879345][ T5369] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  653.097864][   T79] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  653.130708][   T79] usb 6-1: config 0 has no interface number 0
[  653.155601][   T79] usb 6-1: config 0 interface 122 has no altsetting 0
[  653.173426][   T79] usb 6-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  653.183294][   T79] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.191341][   T79] usb 6-1: Product: syz
[  653.196932][   T79] usb 6-1: Manufacturer: syz
[  653.201787][   T79] usb 6-1: SerialNumber: syz
[  653.216520][   T79] usb 6-1: config 0 descriptor??
[  653.267566][ T5369] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad
[  653.312364][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.329870][ T5369] usb 3-1: config 0 descriptor??
[  653.638011][ T5369] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  653.688310][T22704] usb 6-1: USB disconnect, device number 35
[  653.727496][T22704] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  653.892568][T24726] loop0: detected capacity change from 0 to 32768
[  653.973773][T24726] XFS: ikeep mount option is deprecated.
[  654.020597][T24732] loop3: detected capacity change from 0 to 32768
[  654.043112][T24726] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  654.072854][   T79] usb 3-1: USB disconnect, device number 23
[  654.088128][T24750] loop4: detected capacity change from 0 to 4096
[  654.097417][T24750] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  654.132053][T24732] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[  654.132053][T24732] 
[  654.196001][T24750] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  654.205430][T24726] XFS (loop0): Ending clean mount
[  654.241129][T24726] XFS (loop0): Quotacheck needed: Please wait.
[  654.301230][T24750] ntfs3(loop4): ino=5, "/" directory corrupted
[  654.450272][T24726] XFS (loop0): Quotacheck: Done.
[  654.665110][ T5223] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  655.009607][T24781] netlink: 'syz.2.8314': attribute type 3 has an invalid length.
[  655.866566][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  655.866603][   T29] audit: type=1326 audit(632.855:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.2.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2957dff9 code=0x7ffc0000
[  655.964857][   T29] audit: type=1326 audit(632.855:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.2.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2957dff9 code=0x7ffc0000
[  656.096881][   T29] audit: type=1326 audit(632.864:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.2.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0c2957dff9 code=0x7ffc0000
[  656.232181][   T29] audit: type=1326 audit(632.864:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.2.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2957dff9 code=0x7ffc0000
[  656.346090][   T29] audit: type=1326 audit(632.864:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24812 comm="syz.2.8327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c2957dff9 code=0x7ffc0000
[  656.390084][T24835] netlink: 'syz.1.8336': attribute type 1 has an invalid length.
[  656.792216][T24792] loop3: detected capacity change from 0 to 32768
[  656.877431][T24792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8305 (24792)
[  657.196731][ T5369] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  657.366428][ T5369] usb 6-1: Using ep0 maxpacket: 32
[  657.376048][T24870] netlink: 'syz.4.8356': attribute type 7 has an invalid length.
[  657.416983][ T5369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  657.476540][T24870] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8356'.
[  657.500500][ T5369] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  657.588612][ T5369] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  657.678790][ T5369] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  657.747620][ T5369] usb 6-1: config 0 descriptor??
[  657.815727][T24792] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  657.827957][ T5369] hub 6-1:0.0: USB hub found
[  657.904067][T24792] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  658.014474][T24792] BTRFS info (device loop3): using free-space-tree
[  658.027525][ T5369] hub 6-1:0.0: 1 port detected
[  658.245329][ T5369] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  658.290260][ T5369] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  658.393577][ T5369] usbhid 6-1:0.0: can't add hid device: -71
[  658.469553][ T5369] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  658.558380][ T5369] usb 6-1: USB disconnect, device number 36
[  658.613738][T24901] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.8364'.
[  658.705215][T24901] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8364'.
[  658.760083][ T5237] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  658.781829][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8366'.
[  658.798206][T24901] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.8364'.
[  659.412028][T24914] netlink: 'syz.2.8370': attribute type 1 has an invalid length.
[  659.490457][T24914] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8370'.
[  660.549617][T24925] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8376'.
[  660.823678][T24877] loop0: detected capacity change from 0 to 32768
[  660.961133][    T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  661.037739][T24877] ERROR: (device loop0): dbAlloc: unable to allocate blocks
[  661.037739][T24877] 
[  661.193544][    T9] usb 3-1: Using ep0 maxpacket: 16
[  661.249241][    T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  661.319234][    T9] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config
[  661.405458][    T9] usb 3-1: config 0 has no interface number 0
[  661.501214][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  661.581911][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.674015][    T9] usb 3-1: Product: syz
[  661.728959][    T9] usb 3-1: Manufacturer: syz
[  661.779712][    T9] usb 3-1: SerialNumber: syz
[  661.903105][    T9] usb 3-1: config 0 descriptor??
[  661.945709][    T9] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  662.057776][    T9] usb 3-1: No valid video chain found.
[  662.186126][T24909] loop5: detected capacity change from 0 to 32768
[  662.272168][    T9] usb 3-1: USB disconnect, device number 24
[  662.339053][T24909] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  662.468522][T24909] JBD2: Ignoring recovery information on journal
[  662.710859][T24909] JBD2: journal reset failed
[  662.748330][T24909] (syz.5.8369,24909,0):ocfs2_journal_load:1145 ERROR: Failed to load journal!
[  662.818042][T24909] (syz.5.8369,24909,0):ocfs2_check_volume:2423 ERROR: ocfs2 journal load failed! -4
[  662.845593][T24956] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  662.937080][   T29] audit: type=1326 audit(639.380:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  663.196620][   T29] audit: type=1326 audit(639.436:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  663.368885][   T29] audit: type=1326 audit(639.436:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  663.440900][T24964] loop0: detected capacity change from 0 to 2048
[  663.449739][T24967] xt_TCPMSS: Only works on TCP SYN packets
[  663.527531][T24964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  663.552907][   T29] audit: type=1326 audit(639.436:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  663.733009][   T29] audit: type=1326 audit(639.436:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  663.864825][   T29] audit: type=1326 audit(639.436:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  663.971100][   T29] audit: type=1326 audit(639.436:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  664.090362][   T29] audit: type=1326 audit(639.436:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  664.186795][   T29] audit: type=1326 audit(639.436:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  664.323872][   T29] audit: type=1326 audit(639.436:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24958 comm="syz.3.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581997dff9 code=0x50000
[  665.210318][T24985] loop1: detected capacity change from 0 to 64
[  665.248269][T24985] hfs: uid requires an argument
[  665.284119][T24985] hfs: unable to parse mount options
[  666.162789][T24977] loop5: detected capacity change from 0 to 40427
[  666.211466][T24977] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  666.257147][T24977] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  666.330694][T24977] F2FS-fs (loop5): invalid crc value
[  666.400798][T24977] F2FS-fs (loop5): Found nat_bits in checkpoint
[  666.664334][T24977] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  666.704314][T24977] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  667.537281][T24999] loop1: detected capacity change from 0 to 32768
[  667.570942][T24999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.8411 (24999)
[  667.681216][T24999] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  667.731651][T24999] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  667.765308][T24999] BTRFS info (device loop1): using free-space-tree
[  667.989059][T25004] loop3: detected capacity change from 0 to 32768
[  670.074353][T25026] cgroup: name respecified
[  670.099315][T12463] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  670.750739][T25033] ip6tnl2: entered promiscuous mode
[  672.735672][T25070] xt_NFQUEUE: number of total queues is 0
[  673.578619][T25085] netlink: 'syz.2.8443': attribute type 1 has an invalid length.
[  673.710648][T25087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8444'.
[  674.726992][T25113] loop0: detected capacity change from 0 to 512
[  674.837642][T25113] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  675.045144][T25113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  675.536229][T25131] loop3: detected capacity change from 0 to 2048
[  675.567266][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  675.710898][T25131] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  675.734385][T25135] tmpfs: Bad value for 'mpol'
[  676.099400][T25142] netlink: 'syz.0.8467': attribute type 11 has an invalid length.
[  676.205181][T25142] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8467'.
[  676.701266][T25152] ieee802154 phy0 wpan0: encryption failed: -22
[  676.822366][    C1] sched: DL replenish lagged too much
[  677.668009][    T9] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  677.821802][T25176] loop3: detected capacity change from 0 to 512
[  677.898432][    T9] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  677.944580][T25176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002]
[  677.976362][    T9] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  678.004207][T25176] System zones: 0-2, 18-18, 34-34
[  678.080074][T25176] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8487: bg 0: block 248: padding at end of block bitmap is not set
[  678.101632][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  678.199559][    T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  678.208674][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.235692][T25176] __quota_error: 1154 callbacks suppressed
[  678.235714][T25176] Quota error (device loop3): write_blk: dquota write failed
[  678.331486][    T9] usb 5-1: Product: syz
[  678.335719][    T9] usb 5-1: Manufacturer: syz
[  678.349022][T25176] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  678.411617][T25191] loop5: detected capacity change from 0 to 64
[  678.440367][    T9] usb 5-1: SerialNumber: syz
[  678.460228][T25176] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.8487: Failed to acquire dquot type 1
[  678.525680][    T9] usb 5-1: config 0 descriptor??
[  678.575916][    T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34
[  678.625024][T25176] EXT4-fs (loop3): 1 truncate cleaned up
[  678.695919][T25176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  679.144905][    T9] usb 5-1: USB disconnect, device number 29
[  679.391396][ T5237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  679.422994][ T1100] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5
[  679.509274][ T1100] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 1
[  680.484602][ T5283] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  680.661591][ T5283] usb 6-1: config index 0 descriptor too short (expected 24868, got 36)
[  680.684730][ T5283] usb 6-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[  680.717465][ T5283] usb 6-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[  680.749231][ T5283] usb 6-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[  680.792288][ T5283] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  680.818852][ T5283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  681.116079][ T5283] usb 6-1: USB disconnect, device number 37
[  683.147452][T25256] netlink: 'syz.1.8526': attribute type 5 has an invalid length.
[  685.316773][ T5283] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  685.506478][ T5283] usb 2-1: config 0 interface 0 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  685.521941][ T5283] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  685.540499][ T5283] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0
[  685.561480][ T5283] usb 2-1: config 0 interface 0 has no altsetting 0
[  685.580664][ T5283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.08
[  685.597520][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.607681][ T5283] usb 2-1: Product: syz
[  685.619216][ T5283] usb 2-1: Manufacturer: syz
[  685.624992][ T5283] usb 2-1: SerialNumber: syz
[  685.641621][ T5283] usb 2-1: config 0 descriptor??
[  685.884809][ T5283] usbtest 2-1:0.0: Linux user mode ISO test driver
[  685.896689][ T5283] usbtest 2-1:0.0: high-speed {control iso-in} tests (+alt)
[  686.124010][ T5283] usb 2-1: USB disconnect, device number 19
[  687.721957][ T5283] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  687.895207][ T5283] usb 2-1: Using ep0 maxpacket: 8
[  687.912168][ T5283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  687.934711][ T5283] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  687.944183][ T5283] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  687.959663][ T5283] usb 2-1: Product: syz
[  687.964264][ T5283] usb 2-1: Manufacturer: syz
[  687.968908][ T5283] usb 2-1: SerialNumber: syz
[  688.222909][ T5283] usb 2-1: Invalid connection information received from device
[  688.458801][ T5283] usb 2-1: USB disconnect, device number 20
[  689.387256][T25287] QAT: Invalid ioctl 21531
[  689.632514][T25291] loop1: detected capacity change from 0 to 2048
[  689.677539][T25291] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  689.710629][T25292] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  689.722104][T25291] syz.1.8543: attempt to access beyond end of device
[  689.722104][T25291] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  689.755886][T25291] syz.1.8543: attempt to access beyond end of device
[  689.755886][T25291] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  689.778241][T25291] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0)
[  690.928383][T19949] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  690.951707][T19949] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  690.962709][T19949] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  690.973041][T19949] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  690.981093][T19949] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  690.988813][T19949] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  691.826637][T25305] vcan0 speed is unknown, defaulting to 1000
[  691.934552][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  691.949130][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  691.960809][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  691.974066][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  691.982253][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  691.991122][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  692.549371][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  692.586560][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  692.619451][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  692.650352][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  692.658397][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  692.666267][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  693.128437][T25313] vcan0 speed is unknown, defaulting to 1000
[  693.258402][ T5235] Bluetooth: hci6: command tx timeout
[  694.102185][T25319] vcan0 speed is unknown, defaulting to 1000
[  694.114722][T19949] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  694.131351][T19949] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  694.143737][T19949] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  694.153409][T19949] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  694.161188][T19949] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  694.170709][T19949] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  694.211554][T19949] Bluetooth: hci7: command tx timeout
[  694.546260][T25334] netlink: 484 bytes leftover after parsing attributes in process `syz.1.8562'.
[  694.584182][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  694.599359][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  694.611349][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  694.628248][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  694.636325][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  694.643757][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  694.992247][T19949] Bluetooth: hci8: command tx timeout
[  695.067715][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8563'.
[  695.162736][T25328] vcan0 speed is unknown, defaulting to 1000
[  695.348419][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8564'.
[  695.380701][T25339] netlink: 'syz.1.8564': attribute type 3 has an invalid length.
[  695.511992][T19949] Bluetooth: hci6: command tx timeout
[  695.668165][T25333] vcan0 speed is unknown, defaulting to 1000
[  696.380188][T19949] Bluetooth: hci9: command tx timeout
[  696.465209][T19949] Bluetooth: hci7: command tx timeout
[  696.898943][T19949] Bluetooth: hci10: command tx timeout
[  697.248399][T19949] Bluetooth: hci8: command tx timeout
[  697.776413][T19949] Bluetooth: hci6: command tx timeout
[  698.632180][T19949] Bluetooth: hci9: command tx timeout
[  698.718723][T19949] Bluetooth: hci7: command tx timeout
[  699.152378][T19949] Bluetooth: hci10: command tx timeout
[  699.498825][T19949] Bluetooth: hci8: command tx timeout
[  700.029635][T19949] Bluetooth: hci6: command tx timeout
[  700.885645][T19949] Bluetooth: hci9: command tx timeout
[  700.972232][T19949] Bluetooth: hci7: command tx timeout
[  701.405985][T19949] Bluetooth: hci10: command tx timeout
[  701.752208][T19949] Bluetooth: hci8: command tx timeout
[  703.139100][T19949] Bluetooth: hci9: command tx timeout
[  703.665993][T19949] Bluetooth: hci10: command tx timeout
[  708.845410][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  708.864388][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  708.881087][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  708.895431][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  708.913614][ T5235] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  708.921335][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  709.211688][T25369] vcan0 speed is unknown, defaulting to 1000
[  711.199669][T19949] Bluetooth: hci11: command tx timeout
[  712.595903][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  712.602661][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  713.453303][T19949] Bluetooth: hci11: command tx timeout
[  715.706726][T19949] Bluetooth: hci11: command tx timeout
[  717.960521][T19949] Bluetooth: hci11: command tx timeout
[  756.933520][ T5235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  756.952647][ T5235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  756.969592][ T5235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  756.977886][ T5235] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  756.992996][ T5235] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  757.000766][ T5235] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  757.166386][ T5235] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  757.185073][ T5235] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  757.201683][ T5235] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  757.209712][ T5235] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  757.226887][ T5235] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  757.248802][ T5235] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  757.461014][ T5235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  757.471520][ T5235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  757.480036][ T5235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  757.494918][ T5235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  757.503299][ T5235] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  757.527268][ T5235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  757.707251][T25377] vcan0 speed is unknown, defaulting to 1000
[  758.076708][T25381] vcan0 speed is unknown, defaulting to 1000
[  758.561849][T25384] vcan0 speed is unknown, defaulting to 1000
[  758.791653][T19949] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  758.802010][T19949] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  758.811473][T19949] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  758.821278][T19949] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  758.829445][T19949] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  758.836856][T19949] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  759.216848][T19949] Bluetooth: hci12: command tx timeout
[  759.304918][ T5235] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  759.317562][ T5235] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  759.325774][ T5235] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  759.336242][ T5235] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  759.344019][ T5235] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  759.353679][ T5235] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  759.454279][T25388] vcan0 speed is unknown, defaulting to 1000
[  759.488014][ T5235] Bluetooth: hci13: command tx timeout
[  759.768079][T25390] vcan0 speed is unknown, defaulting to 1000
[  759.823699][ T5235] Bluetooth: hci14: command tx timeout
[  761.123932][ T5235] Bluetooth: hci15: command tx timeout
[  761.470581][ T5235] Bluetooth: hci12: command tx timeout
[  761.563195][ T5235] Bluetooth: hci16: command tx timeout
[  761.730819][ T5235] Bluetooth: hci13: command tx timeout
[  762.077218][ T5235] Bluetooth: hci14: command tx timeout
[  763.377695][ T5235] Bluetooth: hci15: command tx timeout
[  763.723975][ T5235] Bluetooth: hci12: command tx timeout
[  763.810623][ T5235] Bluetooth: hci16: command tx timeout
[  763.983839][ T5235] Bluetooth: hci13: command tx timeout
[  764.330694][ T5235] Bluetooth: hci14: command tx timeout
[  765.630930][ T5235] Bluetooth: hci15: command tx timeout
[  765.978456][ T5235] Bluetooth: hci12: command tx timeout
[  766.075280][ T5235] Bluetooth: hci16: command tx timeout
[  766.237904][ T5235] Bluetooth: hci13: command tx timeout
[  766.584706][ T5235] Bluetooth: hci14: command tx timeout
[  767.884353][ T5235] Bluetooth: hci15: command tx timeout
[  768.319148][ T5235] Bluetooth: hci16: command tx timeout
[  771.492003][T25305] lo speed is unknown, defaulting to 1000
[  771.567796][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8578'.
[  771.883320][T25242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.934116][T25313] lo speed is unknown, defaulting to 1000
[  774.406785][T19949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  774.468598][T19949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  774.486258][T19949] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  774.498159][T19949] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  774.514215][T19949] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  774.522236][T19949] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  776.735970][T19949] Bluetooth: hci0: command tx timeout
[  778.978790][T19949] Bluetooth: hci0: command tx timeout
[  779.154990][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  779.161603][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  781.232355][ T5235] Bluetooth: hci0: command tx timeout
[  783.485510][T19949] Bluetooth: hci0: command tx timeout
[  821.891087][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  821.900390][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  821.915522][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  821.944549][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  821.952378][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  821.959996][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  822.208563][T19949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  822.218968][T19949] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  822.228156][T19949] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  822.240781][T19949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  822.248933][T19949] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  822.256821][T19949] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  822.520357][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  822.530249][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  822.542960][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  822.552910][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  822.561039][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  822.568690][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  823.287449][T19949] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  823.300851][T19949] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  823.311108][T19949] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  823.323646][T19949] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  823.331314][T19949] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  823.339718][T19949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  824.232599][T25417] Bluetooth: hci1: command tx timeout
[  824.297136][T25420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  824.306461][T25420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  824.319922][T25420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  824.332423][T25420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  824.339996][T25420] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  824.347657][T25420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  824.482509][T25420] Bluetooth: hci2: command tx timeout
[  824.839933][T25420] Bluetooth: hci3: command tx timeout
[  825.522570][T25420] Bluetooth: hci4: command tx timeout
[  825.795453][T25420] Bluetooth: hci8: command 0x0406 tx timeout
[  825.801701][T25420] Bluetooth: hci6: command 0x0406 tx timeout
[  825.807858][T25417] Bluetooth: hci7: command 0x0406 tx timeout
[  826.476271][ T5235] Bluetooth: hci1: command tx timeout
[  826.562552][ T5235] Bluetooth: hci5: command tx timeout
[  826.735961][ T5235] Bluetooth: hci2: command tx timeout
[  827.093374][ T5235] Bluetooth: hci3: command tx timeout
[  827.776065][ T5235] Bluetooth: hci4: command tx timeout
[  828.729648][ T5235] Bluetooth: hci1: command tx timeout
[  828.815905][ T5235] Bluetooth: hci5: command tx timeout
[  828.989378][ T5235] Bluetooth: hci2: command tx timeout
[  829.342582][T19949] Bluetooth: hci3: command tx timeout
[  830.029524][T19949] Bluetooth: hci4: command tx timeout
[  830.983128][T19949] Bluetooth: hci1: command tx timeout
[  831.069495][T19949] Bluetooth: hci5: command tx timeout
[  831.243072][T19949] Bluetooth: hci2: command tx timeout
[  831.329628][T19949] Bluetooth: hci9: command 0x0406 tx timeout
[  831.335735][T19949] Bluetooth: hci10: command 0x0406 tx timeout
[  831.607448][ T5236] Bluetooth: hci3: command tx timeout
[  832.283471][ T5236] Bluetooth: hci4: command tx timeout
[  833.326349][ T5236] Bluetooth: hci5: command tx timeout
[  839.343692][ T5235] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  839.352964][ T5235] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  839.361564][ T5235] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  839.369872][ T5235] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  839.379127][ T5235] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  839.387553][ T5235] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  841.644238][ T5235] Bluetooth: hci17: command tx timeout
[  842.434506][ T5235] Bluetooth: hci11: command 0x0406 tx timeout
[  843.897273][ T5236] Bluetooth: hci17: command tx timeout
[  845.725447][ T1258] ieee802154 phy0 wpan0: encryption failed: -22
[  845.746411][ T1258] ieee802154 phy1 wpan1: encryption failed: -22
[  846.150853][ T5236] Bluetooth: hci17: command tx timeout
[  848.404250][ T5236] Bluetooth: hci17: command tx timeout
[  854.731731][   T30] INFO: task syz-executor:25328 blocked for more than 143 seconds.
[  854.739692][   T30]       Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  854.764420][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  854.795662][   T30] task:syz-executor    state:D stack:24128 pid:25328 tgid:25328 ppid:1      flags:0x00004006
[  854.829681][   T30] Call Trace:
[  854.833008][   T30]  <TASK>
[  854.835961][   T30]  __schedule+0x1895/0x4b30
[  854.850516][   T30]  ? __pfx___schedule+0x10/0x10
[  854.855422][   T30]  ? __pfx_lock_release+0x10/0x10
[  854.860504][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  854.980919][   T30]  ? schedule+0x90/0x320
[  854.985254][   T30]  schedule+0x14b/0x320
[  854.989453][   T30]  schedule_preempt_disabled+0x13/0x30
[  855.054911][   T30]  __mutex_lock+0x6a7/0xd70
[  855.059866][   T30]  ? __mutex_lock+0x52a/0xd70
[  855.064581][   T30]  ? add_one_compat_dev+0x10d/0x710
[  855.076797][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  855.082911][   T30]  ? xa_find_after+0x1b1/0x700
[  855.087815][   T30]  ? __pfx_down_read+0x10/0x10
[  855.099621][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.105347][   T30]  add_one_compat_dev+0x10d/0x710
[  855.117775][   T30]  rdma_dev_init_net+0x1f1/0x280
[  855.123059][   T30]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  855.128564][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.141234][   T30]  ops_init+0x320/0x590
[  855.145745][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  855.151176][   T30]  setup_net+0x287/0x9e0
[  855.162334][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  855.169141][   T30]  ? __pfx_setup_net+0x10/0x10
[  855.173952][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.186376][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.192050][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.207717][   T30]  copy_net_ns+0x33f/0x570
[  855.212500][   T30]  create_new_namespaces+0x425/0x7b0
[  855.218143][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  855.230073][   T30]  ksys_unshare+0x57d/0xa70
[  855.234627][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  855.239693][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  855.253060][   T30]  ? do_syscall_64+0x100/0x230
[  855.257871][   T30]  __x64_sys_unshare+0x38/0x40
[  855.267495][   T30]  do_syscall_64+0xf3/0x230
[  855.272039][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.280671][   T30] RIP: 0033:0x7f1b8c37f7f7
[  855.289866][   T30] RSP: 002b:00007ffccda40398 EFLAGS: 00000202 ORIG_RAX: 0000000000000110
[  855.300805][   T30] RAX: ffffffffffffffda RBX: 00007f1b8c535f40 RCX: 00007f1b8c37f7f7
[  855.313547][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  855.325020][   T30] RBP: 00007f1b8c536a38 R08: 0000000000000000 R09: 0000000000000000
[  855.344692][   T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c
[  855.357524][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  855.368034][   T30]  </TASK>
[  855.376030][   T30] INFO: task syz-executor:25333 blocked for more than 143 seconds.
[  855.386504][   T30]       Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  855.398812][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  855.409959][   T30] task:syz-executor    state:D stack:24128 pid:25333 tgid:25333 ppid:1      flags:0x00004006
[  855.426126][   T30] Call Trace:
[  855.429523][   T30]  <TASK>
[  855.432479][   T30]  __schedule+0x1895/0x4b30
[  855.445592][   T30]  ? __pfx___schedule+0x10/0x10
[  855.450841][   T30]  ? __pfx_lock_release+0x10/0x10
[  855.455943][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  855.468588][   T30]  ? schedule+0x90/0x320
[  855.472970][   T30]  schedule+0x14b/0x320
[  855.477175][   T30]  schedule_preempt_disabled+0x13/0x30
[  855.495140][   T30]  __mutex_lock+0x6a7/0xd70
[  855.499708][   T30]  ? __mutex_lock+0x52a/0xd70
[  855.509493][   T30]  ? add_one_compat_dev+0x10d/0x710
[  855.517268][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  855.527267][   T30]  ? xa_find_after+0x1b1/0x700
[  855.532275][   T30]  ? __pfx_down_read+0x10/0x10
[  855.539621][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.553280][   T30]  add_one_compat_dev+0x10d/0x710
[  855.561413][   T30]  rdma_dev_init_net+0x1f1/0x280
[  855.571060][   T30]  ? __pfx_rdma_dev_init_net+0x10/0x10
[  855.579082][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.584758][   T30]  ops_init+0x320/0x590
[  855.593861][   T30]  ? lockdep_init_map_type+0xa1/0x910
[  855.601802][   T30]  setup_net+0x287/0x9e0
[  855.606123][   T30]  ? __pfx_down_read_killable+0x10/0x10
[  855.616421][   T30]  ? __pfx_setup_net+0x10/0x10
[  855.626981][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.637295][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.645536][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  855.651209][   T30]  copy_net_ns+0x33f/0x570
[  855.660460][   T30]  create_new_namespaces+0x425/0x7b0
[  855.668484][   T30]  unshare_nsproxy_namespaces+0x124/0x180
[  855.679458][   T30]  ksys_unshare+0x57d/0xa70
[  855.684021][   T30]  ? __pfx_ksys_unshare+0x10/0x10
[  855.694803][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  855.705822][   T30]  ? do_syscall_64+0x100/0x230
[  855.713103][   T30]  __x64_sys_unshare+0x38/0x40
[  855.722553][   T30]  do_syscall_64+0xf3/0x230
[  855.727098][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.735671][   T30] RIP: 0033:0x7fdf40b7f7f7
[  855.744893][   T30] RSP: 002b:00007fff9ba41e48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[  855.756002][   T30] RAX: ffffffffffffffda RBX: 00007fdf40d35f40 RCX: 00007fdf40b7f7f7
[  855.769015][   T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  855.789699][   T30] RBP: 00007fdf40d36a38 R08: 0000000000000000 R09: 0000000000000000
[  855.800648][   T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c
[  855.813351][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  855.823994][   T30]  </TASK>
[  855.831861][   T30] 
[  855.831861][   T30] Showing all locks held in the system:
[  855.842202][   T30] 3 locks held by kworker/0:1/9:
[  855.847175][   T30]  #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  855.866869][   T30]  #1: ffffc900000e7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  855.878816][   T30]  #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50
[  855.890788][   T30] 3 locks held by kworker/u8:1/12:
[  855.895925][   T30] 1 lock held by khungtaskd/30:
[  855.900800][   T30]  #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  855.917768][   T30] 3 locks held by kworker/1:1/79:
[  855.922828][   T30]  #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  855.944608][   T30]  #1: ffffc900020cfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  855.964808][   T30]  #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[  855.975600][   T30] 4 locks held by kworker/u8:6/1100:
[  855.987129][   T30]  #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  856.005055][   T30]  #1: ffffc900042d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  856.015992][   T30]  #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0
[  856.032060][   T30]  #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0
[  856.041846][   T30] 2 locks held by getty/4978:
[  856.053616][   T30]  #0: ffff88802e67d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  856.063470][   T30]  #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  856.083172][   T30] 3 locks held by kworker/0:5/5285:
[  856.089819][   T30]  #0: ffff88801ac79948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  856.109425][   T30]  #1: ffffc90003df7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  856.134517][   T30]  #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0
[  856.146656][   T30] 3 locks held by kworker/u8:9/8820:
[  856.156772][   T30]  #0: ffff88814b5b0148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  856.170955][   T30]  #1: ffffc90019597d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  856.192332][   T30]  #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  856.202277][   T30] 3 locks held by kworker/u8:10/15054:
[  856.214177][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  856.232371][   T30]  #1: ffffc90004f5fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  856.243806][   T30]  #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[  856.259176][   T30] 4 locks held by kworker/1:0/22704:
[  856.264485][   T30] 1 lock held by syz.0.8505/25214:
[  856.269715][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  856.285744][   T30] 2 locks held by syz.4.8507/25219:
[  856.290981][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  856.308048][   T30]  #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0
[  856.320121][   T30] 1 lock held by syz.2.8519/25242:
[  856.332514][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  856.341946][   T30] 1 lock held by syz.5.8522/25248:
[  856.357017][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  856.366074][   T30] 2 locks held by syz-executor/25305:
[  856.378485][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.387982][   T30]  #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  856.404645][   T30] 2 locks held by syz-executor/25313:
[  856.410058][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.421068][   T30]  #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720
[  856.437340][   T30] 6 locks held by syz-executor/25319:
[  856.442748][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.459855][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.472311][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.489181][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.507132][   T30]  #4: ffff888011eb9230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260
[  856.523724][   T30]  #5: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800
[  856.534716][   T30] 4 locks held by syz-executor/25328:
[  856.540294][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.558183][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.569316][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.584014][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.601191][   T30] 4 locks held by syz-executor/25333:
[  856.606856][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.616359][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.626357][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.643429][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.659304][   T30] 1 lock held by syz.1.8578/25367:
[  856.670251][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0
[  856.680740][   T30] 4 locks held by syz-executor/25369:
[  856.691856][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.703405][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.713163][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.730175][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.741514][   T30] 4 locks held by syz-executor/25377:
[  856.753827][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.763638][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.780678][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.795252][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.822649][   T30] 4 locks held by syz-executor/25381:
[  856.828051][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.843806][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.853799][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.870798][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.883440][   T30] 4 locks held by syz-executor/25384:
[  856.894677][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.908437][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.924147][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  856.936595][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  856.953394][   T30] 4 locks held by syz-executor/25388:
[  856.958840][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  856.975969][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  856.991142][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  857.003557][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  857.021556][   T30] 4 locks held by syz-executor/25390:
[  857.027037][   T30]  #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570
[  857.043548][   T30]  #1: ffffffff8fa40f50 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280
[  857.054677][   T30]  #2: ffffffff8fa41110 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280
[  857.070406][   T30]  #3: ffff888011eb8f38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710
[  857.091101][   T30] 1 lock held by syz-executor/25399:
[  857.102183][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.119063][   T30] 1 lock held by syz-executor/25403:
[  857.124371][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.140903][   T30] 1 lock held by syz-executor/25409:
[  857.146223][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.162985][   T30] 1 lock held by syz-executor/25411:
[  857.168304][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.179328][   T30] 1 lock held by syz-executor/25414:
[  857.190374][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.201432][   T30] 1 lock held by syz-executor/25419:
[  857.212638][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.228626][   T30] 1 lock held by syz-executor/25424:
[  857.233955][   T30]  #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  857.255819][   T30] 
[  857.258167][   T30] =============================================
[  857.258167][   T30] 
[  857.273722][   T30] NMI backtrace for cpu 0
[  857.278071][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  857.288596][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  857.298670][   T30] Call Trace:
[  857.301966][   T30]  <TASK>
[  857.304912][   T30]  dump_stack_lvl+0x241/0x360
[  857.309625][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  857.314848][   T30]  ? __pfx__printk+0x10/0x10
[  857.319489][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  857.324465][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  857.329956][   T30]  ? _printk+0xd5/0x120
[  857.334235][   T30]  ? __pfx__printk+0x10/0x10
[  857.338862][   T30]  ? __wake_up_klogd+0xcc/0x110
[  857.343749][   T30]  ? __pfx__printk+0x10/0x10
[  857.348392][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.354138][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  857.359201][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  857.365216][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  857.371229][   T30]  watchdog+0xff4/0x1040
[  857.375507][   T30]  ? watchdog+0x1ea/0x1040
[  857.379971][   T30]  ? __pfx_watchdog+0x10/0x10
[  857.384683][   T30]  kthread+0x2f2/0x390
[  857.388775][   T30]  ? __pfx_watchdog+0x10/0x10
[  857.393486][   T30]  ? __pfx_kthread+0x10/0x10
[  857.398101][   T30]  ret_from_fork+0x4d/0x80
[  857.402554][   T30]  ? __pfx_kthread+0x10/0x10
[  857.407167][   T30]  ret_from_fork_asm+0x1a/0x30
[  857.411987][   T30]  </TASK>
[  857.415400][   T30] Sending NMI from CPU 0 to CPUs 1:
[  857.420709][    C1] NMI backtrace for cpu 1
[  857.420725][    C1] CPU: 1 UID: 0 PID: 22704 Comm: kworker/1:0 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  857.420751][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  857.420767][    C1] Workqueue: events nsim_dev_trap_report_work
[  857.420799][    C1] RIP: 0010:mark_lock+0x61/0x360
[  857.420825][    C1] Code: 85 94 02 00 00 31 ed f6 43 02 03 40 0f 94 c5 83 f5 09 eb 0b 89 d5 83 fa 20 0f 83 e3 02 00 00 41 be 01 00 00 00 89 e9 41 d3 e6 <49> 8d 5f 20 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 3a 02
[  857.420845][    C1] RSP: 0018:ffffc90000a16e08 EFLAGS: 00000016
[  857.420865][    C1] RAX: 0000000000000000 RBX: ffff888025494868 RCX: 0000000000000009
[  857.420883][    C1] RDX: 0000000000000008 RSI: ffff888025494848 RDI: ffff888025493c00
[  857.420900][    C1] RBP: 0000000000000009 R08: ffffffff942c580f R09: 1ffffffff2858b01
[  857.420917][    C1] R10: dffffc0000000000 R11: fffffbfff2858b02 R12: ffff888025493c00
[  857.420936][    C1] R13: dffffc0000000000 R14: 0000000000000200 R15: ffff888025494848
[  857.420957][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  857.420978][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  857.420995][    C1] CR2: 00007f0c2a3b2f98 CR3: 000000000e734000 CR4: 0000000000350ef0
[  857.421014][    C1] Call Trace:
[  857.421023][    C1]  <NMI>
[  857.421033][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  857.421062][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  857.421100][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  857.421137][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  857.421171][    C1]  ? nmi_handle+0x151/0x5a0
[  857.421196][    C1]  ? nmi_handle+0x2a/0x5a0
[  857.421222][    C1]  ? mark_lock+0x61/0x360
[  857.421245][    C1]  ? default_do_nmi+0x63/0x160
[  857.421275][    C1]  ? exc_nmi+0x123/0x1f0
[  857.421303][    C1]  ? end_repeat_nmi+0xf/0x53
[  857.421332][    C1]  ? mark_lock+0x61/0x360
[  857.421356][    C1]  ? mark_lock+0x61/0x360
[  857.421380][    C1]  ? mark_lock+0x61/0x360
[  857.421404][    C1]  </NMI>
[  857.421412][    C1]  <IRQ>
[  857.421424][    C1]  __lock_acquire+0xc35/0x2050
[  857.421469][    C1]  lock_acquire+0x1ed/0x550
[  857.421503][    C1]  ? timekeeping_get_ns+0x5c/0x420
[  857.421536][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  857.421572][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.421599][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.421623][    C1]  ? mark_lock+0x9a/0x360
[  857.421648][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.421675][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.421706][    C1]  ? timekeeping_get_ns+0x5c/0x420
[  857.421735][    C1]  seqcount_lockdep_reader_access+0x13f/0x220
[  857.421764][    C1]  ? timekeeping_get_ns+0x5c/0x420
[  857.421791][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  857.421820][    C1]  ? ktime_get_with_offset+0x83/0x150
[  857.421848][    C1]  ? seqcount_lockdep_reader_access+0x157/0x220
[  857.421876][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.421900][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  857.421935][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.421960][    C1]  ? seqcount_lockdep_reader_access+0x1d7/0x220
[  857.421989][    C1]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  857.422021][    C1]  timekeeping_get_ns+0x5c/0x420
[  857.422050][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.422078][    C1]  ktime_get_with_offset+0xed/0x150
[  857.422108][    C1]  netif_rx_internal+0x459/0x630
[  857.422146][    C1]  ? __pfx_netif_rx_internal+0x10/0x10
[  857.422181][    C1]  ? __pfx_eth_type_trans+0x10/0x10
[  857.422211][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.422235][    C1]  ? skb_scrub_packet+0x29f/0x440
[  857.422260][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.422284][    C1]  ? rcu_is_watching+0x15/0xb0
[  857.422313][    C1]  __netif_rx+0x78/0xc0
[  857.422339][    C1]  veth_xmit+0x61d/0xae0
[  857.422362][    C1]  ? veth_xmit+0x5a/0xae0
[  857.422387][    C1]  dev_hard_start_xmit+0x27c/0x7e0
[  857.422420][    C1]  __dev_queue_xmit+0x1b11/0x3ed0
[  857.422454][    C1]  ? kasan_save_track+0x51/0x80
[  857.422477][    C1]  ? __dev_queue_xmit+0x2da/0x3ed0
[  857.422502][    C1]  ? kasan_save_free_info+0x40/0x50
[  857.422535][    C1]  ? __kasan_slab_free+0x59/0x70
[  857.422559][    C1]  ? kmem_cache_free+0x1a2/0x420
[  857.422591][    C1]  ? br_nf_dev_queue_xmit+0x4f8/0x22e0
[  857.422618][    C1]  ? NF_HOOK+0x702/0x7c0
[  857.422642][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  857.422667][    C1]  ? NF_HOOK+0x702/0x7c0
[  857.422693][    C1]  ? br_nf_forward_ip+0x61e/0x7b0
[  857.422717][    C1]  ? nf_hook_slow+0xc5/0x220
[  857.422747][    C1]  ? NF_HOOK+0x2a7/0x460
[  857.422768][    C1]  ? __br_forward+0x489/0x660
[  857.422789][    C1]  ? br_handle_frame_finish+0x18ba/0x1fe0
[  857.422815][    C1]  ? br_nf_hook_thresh+0x474/0x590
[  857.422838][    C1]  ? br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0
[  857.422866][    C1]  ? br_nf_pre_routing_ipv6+0x379/0x770
[  857.422893][    C1]  ? br_handle_frame+0x9ff/0x1530
[  857.422918][    C1]  ? __netif_receive_skb_core+0x13ea/0x4570
[  857.422948][    C1]  ? __netif_receive_skb+0x12f/0x650
[  857.422976][    C1]  ? process_backlog+0x662/0x15b0
[  857.423007][    C1]  ? __napi_poll+0xcd/0x490
[  857.423034][    C1]  ? net_rx_action+0x89b/0x1240
[  857.423064][    C1]  ? handle_softirqs+0x2c7/0x980
[  857.423095][    C1]  ? do_softirq+0x11b/0x1e0
[  857.423125][    C1]  ? __local_bh_enable_ip+0x1bb/0x200
[  857.423157][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423182][    C1]  ? mark_lock+0x9a/0x360
[  857.423207][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423231][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  857.423269][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  857.423310][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423338][    C1]  br_dev_queue_push_xmit+0x703/0x8d0
[  857.423365][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423389][    C1]  ? br_nf_dev_queue_xmit+0x4f8/0x22e0
[  857.423416][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  857.423443][    C1]  ? NF_HOOK+0x9d/0x7c0
[  857.423467][    C1]  NF_HOOK+0x702/0x7c0
[  857.423490][    C1]  ? NF_HOOK+0x9d/0x7c0
[  857.423514][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  857.423538][    C1]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  857.423566][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423606][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423630][    C1]  ? skb_pull+0xc1/0x1e0
[  857.423661][    C1]  br_nf_post_routing+0xa20/0xe80
[  857.423690][    C1]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  857.423722][    C1]  ? __pfx_br_nf_post_routing+0x10/0x10
[  857.423747][    C1]  nf_hook_slow+0xc5/0x220
[  857.423779][    C1]  NF_HOOK+0x2a7/0x460
[  857.423802][    C1]  ? NF_HOOK+0x9f/0x460
[  857.423823][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  857.423843][    C1]  ? ip6t_do_table+0x16b3/0x18a0
[  857.423875][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  857.423901][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.423928][    C1]  br_forward_finish+0xd8/0x130
[  857.423950][    C1]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  857.423976][    C1]  br_nf_forward_finish+0xb49/0xfb0
[  857.424007][    C1]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  857.424036][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  857.424061][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424086][    C1]  ? NF_HOOK+0x9d/0x7c0
[  857.424108][    C1]  ? NF_HOOK+0x9d/0x7c0
[  857.424131][    C1]  NF_HOOK+0x702/0x7c0
[  857.424154][    C1]  ? NF_HOOK+0x9d/0x7c0
[  857.424179][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  857.424203][    C1]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  857.424230][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424261][    C1]  br_nf_forward_ip+0x61e/0x7b0
[  857.424285][    C1]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  857.424316][    C1]  ? __pfx_br_nf_forward+0x10/0x10
[  857.424340][    C1]  nf_hook_slow+0xc5/0x220
[  857.424372][    C1]  NF_HOOK+0x2a7/0x460
[  857.424395][    C1]  ? NF_HOOK+0x9f/0x460
[  857.424415][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  857.424436][    C1]  ? __asan_memcpy+0x40/0x70
[  857.424459][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  857.424482][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424508][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424535][    C1]  __br_forward+0x489/0x660
[  857.424557][    C1]  ? __pfx_br_forward_finish+0x10/0x10
[  857.424579][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424607][    C1]  ? __pfx___br_forward+0x10/0x10
[  857.424629][    C1]  ? br_flood+0x3ed/0x660
[  857.424655][    C1]  br_handle_frame_finish+0x18ba/0x1fe0
[  857.424696][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  857.424733][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424757][    C1]  ? nf_hook_slow+0x175/0x220
[  857.424787][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  857.424815][    C1]  br_nf_hook_thresh+0x474/0x590
[  857.424844][    C1]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  857.424870][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  857.424900][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424924][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.424949][    C1]  ? skb_push+0x97/0x100
[  857.424978][    C1]  br_nf_pre_routing_finish_ipv6+0xaa0/0xdd0
[  857.425007][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  857.425039][    C1]  br_nf_pre_routing_ipv6+0x379/0x770
[  857.425067][    C1]  ? br_nf_pre_routing_ipv6+0x41e/0x770
[  857.425095][    C1]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  857.425125][    C1]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  857.425153][    C1]  ? br_nf_pre_routing+0x70e/0x1470
[  857.425176][    C1]  ? ip6_mc_input+0xa1f/0xc30
[  857.425201][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.425227][    C1]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  857.425253][    C1]  br_handle_frame+0x9ff/0x1530
[  857.425284][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  857.425309][    C1]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[  857.425343][    C1]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  857.425369][    C1]  ? __pfx_rcu_read_lock_bh_held+0x10/0x10
[  857.425397][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  857.425434][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.425461][    C1]  ? __pfx_br_handle_frame+0x10/0x10
[  857.425487][    C1]  __netif_receive_skb_core+0x13ea/0x4570
[  857.425523][    C1]  ? ip6_mc_input+0xa1f/0xc30
[  857.425549][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.425573][    C1]  ? mark_lock+0x9a/0x360
[  857.425599][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  857.425631][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.425655][    C1]  ? mark_lock+0x9a/0x360
[  857.425694][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.425723][    C1]  __netif_receive_skb+0x12f/0x650
[  857.425753][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  857.425788][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  857.425817][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  857.425852][    C1]  ? __pfx_lock_release+0x10/0x10
[  857.425888][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  857.425928][    C1]  process_backlog+0x662/0x15b0
[  857.425962][    C1]  ? process_backlog+0x33b/0x15b0
[  857.425998][    C1]  ? __pfx_process_backlog+0x10/0x10
[  857.426028][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  857.426066][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  857.426104][    C1]  __napi_poll+0xcd/0x490
[  857.426135][    C1]  net_rx_action+0x89b/0x1240
[  857.426177][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  857.426209][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  857.426262][    C1]  handle_softirqs+0x2c7/0x980
[  857.426297][    C1]  ? do_softirq+0x11b/0x1e0
[  857.426329][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  857.426363][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.426391][    C1]  do_softirq+0x11b/0x1e0
[  857.426421][    C1]  </IRQ>
[  857.426429][    C1]  <TASK>
[  857.426438][    C1]  ? __pfx_do_softirq+0x10/0x10
[  857.426470][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  857.426505][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.426532][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.426556][    C1]  ? rcu_is_watching+0x15/0xb0
[  857.426583][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  857.426616][    C1]  ? nsim_dev_trap_report_work+0x75d/0xaa0
[  857.426643][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  857.426676][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  857.426712][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.426736][    C1]  ? nsim_dev_trap_report_work+0x6a7/0xaa0
[  857.426767][    C1]  nsim_dev_trap_report_work+0x75d/0xaa0
[  857.426802][    C1]  ? process_scheduled_works+0x976/0x1850
[  857.426836][    C1]  process_scheduled_works+0xa65/0x1850
[  857.426883][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  857.426921][    C1]  ? assign_work+0x364/0x3d0
[  857.426956][    C1]  worker_thread+0x870/0xd30
[  857.426992][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.427018][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  857.427043][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  857.427079][    C1]  ? __kthread_parkme+0x169/0x1d0
[  857.427116][    C1]  ? __pfx_worker_thread+0x10/0x10
[  857.427150][    C1]  kthread+0x2f2/0x390
[  857.427172][    C1]  ? __pfx_worker_thread+0x10/0x10
[  857.427205][    C1]  ? __pfx_kthread+0x10/0x10
[  857.427229][    C1]  ret_from_fork+0x4d/0x80
[  857.427263][    C1]  ? __pfx_kthread+0x10/0x10
[  857.427286][    C1]  ret_from_fork_asm+0x1a/0x30
[  857.427327][    C1]  </TASK>
[  858.731700][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  858.738591][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0
[  858.749144][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  858.759224][   T30] Call Trace:
[  858.762606][   T30]  <TASK>
[  858.765554][   T30]  dump_stack_lvl+0x241/0x360
[  858.770262][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  858.775484][   T30]  ? __pfx__printk+0x10/0x10
[  858.780108][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  858.786135][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  858.791797][   T30]  ? vscnprintf+0x5d/0x90
[  858.796162][   T30]  panic+0x349/0x880
[  858.800093][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  858.805755][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  858.811944][   T30]  ? __pfx_panic+0x10/0x10
[  858.816399][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  858.821804][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  858.827460][   T30]  ? __irq_work_queue_local+0x137/0x410
[  858.833040][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  858.838697][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  858.844093][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  858.850275][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  858.856458][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  858.862114][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  858.868388][   T30]  watchdog+0x1033/0x1040
[  858.872755][   T30]  ? watchdog+0x1ea/0x1040
[  858.877212][   T30]  ? __pfx_watchdog+0x10/0x10
[  858.881924][   T30]  kthread+0x2f2/0x390
[  858.886023][   T30]  ? __pfx_watchdog+0x10/0x10
[  858.890819][   T30]  ? __pfx_kthread+0x10/0x10
[  858.895431][   T30]  ret_from_fork+0x4d/0x80
[  858.899882][   T30]  ? __pfx_kthread+0x10/0x10
[  858.904497][   T30]  ret_from_fork_asm+0x1a/0x30
[  858.909310][   T30]  </TASK>
[  858.912559][   T30] Kernel Offset: disabled
[  858.916971][   T30] Rebooting in 86400 seconds..