last executing test programs:

1m8.328666039s ago: executing program 0 (id=76):
sendmmsg(0xffffffffffffffff, &(0x7f0000005880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="37385e66bdb69c74d3c75a71acccbc1bd1a6abed2821915479b3a222cbc8226ba117caee3b9b5a96c1e9a68177bc4dcc26d17dbf849e51cec9af61416c1b6217021f3b82265ab3a9a51de524e68ff74b0d443edd0b04df1ab9ffc59ad0", 0x5d}], 0x1}}], 0x1, 0x40000)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @empty, 'macvlan0\x00'}}, 0x80, 0x0}, 0x0)

1m7.987871852s ago: executing program 0 (id=80):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1000}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x1, 0x5, 0x1ff])

1m6.840198003s ago: executing program 0 (id=86):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001300)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e21, @rand_addr=0x64010101}, 0x1e, 0x0, 0x0, 0x0, 0x9dd6, 0x0, 0x7, 0x2})

1m4.244534919s ago: executing program 0 (id=105):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x32)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0)
preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8)

1m3.363211123s ago: executing program 0 (id=108):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@empty, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5}, 0x5, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0x800, 0xc5e}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c)

1m2.058815419s ago: executing program 0 (id=113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m1.40523879s ago: executing program 32 (id=113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.79564726s ago: executing program 2 (id=487):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x18, 0x5a, 0x1, 0xfffffffc, 0x25dfdbfa, {0x2}, [{0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048811}, 0x8080)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000044)

8.560503127s ago: executing program 2 (id=489):
r0 = socket(0x2, 0x80805, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r2, 0x407, 0x1}, &(0x7f0000000200)=0x8)

8.347968644s ago: executing program 2 (id=492):
io_submit(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, r1, 0x25, 0x8, @val=@netkit={@void, @value=r2}}, 0x1c)

8.113027213s ago: executing program 2 (id=495):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000180)={0x1c, &(0x7f00000000c0)={0x0, 0xe, 0x1, "a7"}, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})

5.676917262s ago: executing program 2 (id=519):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x100, 0x64a})

5.166674545s ago: executing program 1 (id=523):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0})
r2 = dup3(r0, r1, 0x0)
ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000000)={&(0x7f0000000180), &(0x7f0000001300)=""/4098, 0x1002})

4.923212312s ago: executing program 1 (id=526):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x1ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r2, 0x3, 0x5, 0x8, 0x2, 0x80000000}, &(0x7f00000000c0)=0x14)

3.835118263s ago: executing program 3 (id=534):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0)

3.754648795s ago: executing program 6 (id=536):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})

3.564700693s ago: executing program 1 (id=538):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d0000000080211"], 0x3c}}, 0x10)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card3/oss_mixer\x00', 0x2002, 0x0)

3.524800137s ago: executing program 5 (id=539):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x7ff7, 0x4, 0x9, 0x2, 0xfffffe0000000003, 0xfa11, 0xfbffffff}, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r2})

3.517160437s ago: executing program 2 (id=540):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

3.474282877s ago: executing program 6 (id=541):
clock_adjtime(0x2, &(0x7f0000000000)={0x4, 0x800, 0x3, 0xf2d, 0x4, 0xfffffffffffffffe, 0x6, 0x7, 0x4, 0xc, 0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x100000001, 0x40, 0x40, 0x3, 0xc628, 0x5, 0x3, 0xd, 0x5, 0x80, 0x94d, 0x5, 0x400})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})

3.234659679s ago: executing program 5 (id=542):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
close_range(r0, r1, 0x0)

3.062898473s ago: executing program 6 (id=544):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

2.948514783s ago: executing program 5 (id=546):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x4}}, 0x26)

2.905474232s ago: executing program 3 (id=547):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

2.854974184s ago: executing program 6 (id=548):
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)

2.607488439s ago: executing program 5 (id=549):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffefa, &(0x7f0000000180)=ANY=[])

2.577915898s ago: executing program 6 (id=550):
unshare(0x6020480)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="04"], 0x10)

2.526768293s ago: executing program 3 (id=551):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000006})
r3 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r2, &(0x7f0000000040)={r0, r1, 0xfffffffe})

2.203321093s ago: executing program 3 (id=553):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6f5, &(0x7f0000002400)="$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")
r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x8847}, @void, @mpls={[], @llc={@snap={0xaa, 0xab, "c3", "71bedf", 0x8808}}}}, 0xc)
close(r0)

2.193530451s ago: executing program 6 (id=554):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x604c800}, 0x20000000)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050402100000fa0009058202"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x0, 0x15, 0x6, "d54733882f8e"}, 0x0, 0x0, 0x0, 0x0})

2.118860841s ago: executing program 4 (id=555):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x410040, &(0x7f0000000080)={[{@shortname_lower}]}, 0x11, 0x25e, &(0x7f00000001c0)="$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")
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @mptcp=@syn={0x1e, 0xc, 0x4, 0x1, 0x0, 0xffffffff, 0x659a}]}}}}}}}}, 0x0)

1.953975754s ago: executing program 4 (id=556):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x600, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0)

1.719644433s ago: executing program 3 (id=557):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[], 0x1, 0x625c, &(0x7f000000bdc0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000940)=ANY=[], 0x361, 0x0)
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)

1.68188058s ago: executing program 4 (id=558):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='inet_sk_error_report\x00', r0}, 0x18)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)

1.638561063s ago: executing program 1 (id=559):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x2404c840)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044)

1.533321637s ago: executing program 4 (id=560):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"})
close(0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

1.200646392s ago: executing program 1 (id=561):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000001c0)=@pptp={0x18, 0x2, {0x2, @multicast1}}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47b2, 0x10f9, 0x82, 0x0, 0x48)

1.199748314s ago: executing program 4 (id=562):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x7, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}}}}}}, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

618.584462ms ago: executing program 1 (id=563):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xcc0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c000c204e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0", @ANYRES32=0x0], 0x1, 0x442a, &(0x7f0000008940)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x109142, 0xeafd)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

500.714099ms ago: executing program 3 (id=564):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = eventfd(0x80000001)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)

338.975617ms ago: executing program 5 (id=565):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = gettid()
sigaltstack(&(0x7f0000000200)={&(0x7f0000002200)=""/4097, 0x80000001, 0x1001}, 0x0)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000))

154.254167ms ago: executing program 5 (id=566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
getdents64(r0, &(0x7f0000000240)=""/131, 0x83)

0s ago: executing program 4 (id=567):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r1, 0x82000000)
connect$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0xfffffffe, 0x4}}, 0x10)

kernel console output (not intermixed with test programs):

atadv0: Adding interface: batadv_slave_1
[   91.767773][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   91.793742][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   91.883556][ T5837] hsr_slave_0: entered promiscuous mode
[   91.890065][ T5837] hsr_slave_1: entered promiscuous mode
[   91.896313][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   91.902294][ T5837] Cannot create hsr debugfs directory
[   91.929253][ T5842] hsr_slave_0: entered promiscuous mode
[   91.935834][ T5842] hsr_slave_1: entered promiscuous mode
[   91.943612][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   91.949364][ T5842] Cannot create hsr debugfs directory
[   92.030454][ T5840] hsr_slave_0: entered promiscuous mode
[   92.037246][ T5840] hsr_slave_1: entered promiscuous mode
[   92.043561][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   92.049457][ T5840] Cannot create hsr debugfs directory
[   92.069697][ T5830] hsr_slave_0: entered promiscuous mode
[   92.076299][ T5830] hsr_slave_1: entered promiscuous mode
[   92.082496][ T5830] debugfs: 'hsr0' already exists in 'hsr'
[   92.088204][ T5830] Cannot create hsr debugfs directory
[   92.206117][ T5829] hsr_slave_0: entered promiscuous mode
[   92.213166][ T5829] hsr_slave_1: entered promiscuous mode
[   92.219600][ T5829] debugfs: 'hsr0' already exists in 'hsr'
[   92.225315][ T5829] Cannot create hsr debugfs directory
[   92.509046][   T52] Bluetooth: hci3: command tx timeout
[   92.514478][   T52] Bluetooth: hci5: command tx timeout
[   92.520087][ T5836] Bluetooth: hci1: command tx timeout
[   92.520137][ T5853] Bluetooth: hci2: command tx timeout
[   92.530986][ T5854] Bluetooth: hci4: command tx timeout
[   92.589266][ T5853] Bluetooth: hci0: command tx timeout
[   92.859174][ T5831] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   92.871254][ T5831] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   92.890979][ T5831] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   92.902011][ T5831] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   92.957330][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   92.977766][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   92.997267][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   93.020786][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   93.089842][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   93.101819][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   93.120011][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   93.132109][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   93.254759][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.262977][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   93.276684][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   93.306720][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   93.334592][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   93.390972][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   93.433528][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   93.459905][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.467062][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.485024][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   93.500685][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.514468][ T1337] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.521687][ T1337] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.540715][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   93.586122][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   93.654091][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   93.684216][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   93.712819][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   93.725537][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   93.738237][  T143] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.745756][  T143] bridge0: port 1(bridge_slave_0) entered forwarding state
[   93.766334][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   93.792875][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.800060][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   93.912996][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.982882][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   94.040634][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.047790][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.067621][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.138559][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.145759][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.197090][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   94.265490][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.272682][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.314544][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.321827][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.344392][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.457394][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.508421][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.598675][ T5853] Bluetooth: hci2: command tx timeout
[   94.604909][ T5853] Bluetooth: hci4: command tx timeout
[   94.611800][ T5854] Bluetooth: hci5: command tx timeout
[   94.617222][ T5854] Bluetooth: hci1: command tx timeout
[   94.622633][ T5839] Bluetooth: hci3: command tx timeout
[   94.633529][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   94.660411][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   94.671755][ T5854] Bluetooth: hci0: command tx timeout
[   94.687479][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.716152][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.723380][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.744394][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.751683][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state
[   94.767487][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.774742][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state
[   94.812341][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.819533][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.031690][ T5837] veth0_vlan: entered promiscuous mode
[   95.101096][ T5837] veth1_vlan: entered promiscuous mode
[   95.137282][ T5831] veth0_vlan: entered promiscuous mode
[   95.204884][ T5831] veth1_vlan: entered promiscuous mode
[   95.228571][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.255840][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.391652][ T5837] veth0_macvtap: entered promiscuous mode
[   95.457592][ T5831] veth0_macvtap: entered promiscuous mode
[   95.492292][ T5840] veth0_vlan: entered promiscuous mode
[   95.514244][ T5837] veth1_macvtap: entered promiscuous mode
[   95.536987][ T5840] veth1_vlan: entered promiscuous mode
[   95.556631][ T5831] veth1_macvtap: entered promiscuous mode
[   95.593600][ T5829] veth0_vlan: entered promiscuous mode
[   95.613687][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.630499][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.641921][ T5829] veth1_vlan: entered promiscuous mode
[   95.668389][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.700531][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.722685][   T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.735049][   T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.749890][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.767820][   T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.777382][   T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.805239][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.825263][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.836111][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.855160][ T5840] veth0_macvtap: entered promiscuous mode
[   95.874030][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.883221][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.907332][ T5840] veth1_macvtap: entered promiscuous mode
[   95.963502][ T5829] veth0_macvtap: entered promiscuous mode
[   96.032518][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.051871][ T5829] veth1_macvtap: entered promiscuous mode
[   96.086644][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.151814][ T5830] veth0_vlan: entered promiscuous mode
[   96.162986][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.185040][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.193303][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.193339][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.213320][  T143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.224127][  T143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.237328][ T5830] veth1_vlan: entered promiscuous mode
[   96.266006][  T143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.283100][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.301821][  T143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.344013][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.381417][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.390578][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.432177][  T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.446415][  T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.483345][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.486237][ T5830] veth0_macvtap: entered promiscuous mode
[   96.498870][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.504139][  T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.515871][  T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.541480][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   96.551404][ T1337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.575342][ T1337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.601459][ T5830] veth1_macvtap: entered promiscuous mode
[   96.680209][ T5854] Bluetooth: hci1: command tx timeout
[   96.680274][ T5853] Bluetooth: hci4: command tx timeout
[   96.685821][ T5854] Bluetooth: hci3: command tx timeout
[   96.691305][   T52] Bluetooth: hci5: command tx timeout
[   96.691357][   T52] Bluetooth: hci2: command tx timeout
[   96.711918][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.720288][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.749174][ T5854] Bluetooth: hci0: command tx timeout
[   96.788038][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.855077][ T5842] veth0_vlan: entered promiscuous mode
[   96.889849][   T30] audit: type=1326 audit(1764261251.385:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   96.912927][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.922139][   T30] audit: type=1326 audit(1764261251.395:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   96.944527][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.951112][   T30] audit: type=1326 audit(1764261251.395:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   96.982728][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.993845][   T30] audit: type=1326 audit(1764261251.395:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.018378][   T30] audit: type=1326 audit(1764261251.395:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.044571][ T5842] veth1_vlan: entered promiscuous mode
[   97.074790][   T30] audit: type=1326 audit(1764261251.415:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.146604][   T30] audit: type=1326 audit(1764261251.415:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.217339][   T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.228621][   T30] audit: type=1326 audit(1764261251.415:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.272515][   T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.281687][   T30] audit: type=1326 audit(1764261251.515:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.287358][ T5982] syz.5.7 uses obsolete (PF_INET,SOCK_PACKET)
[   97.311177][   T30] audit: type=1326 audit(1764261251.515:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5973 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dca58f749 code=0x7ffc0000
[   97.326841][   T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.342979][   T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   97.383255][ T5842] veth0_macvtap: entered promiscuous mode
[   97.401603][ T5981] Bluetooth: MGMT ver 1.23
[   97.408549][ T5842] veth1_macvtap: entered promiscuous mode
[   97.431882][ T1337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.450150][ T1337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.605088][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.697828][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.791227][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   97.829469][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   97.860733][ T1325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.884024][ T1325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   97.907715][ T1325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   97.993199][ T5997] loop5: detected capacity change from 0 to 136
[   98.054368][ T1325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.099183][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.127157][ T5997] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   98.144598][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.385927][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.415286][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.645211][ T6007] netlink: 'syz.5.17': attribute type 4 has an invalid length.
[   99.337289][ T6018] loop3: detected capacity change from 0 to 4096
[   99.420115][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.491998][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.537064][ T6003] loop1: detected capacity change from 0 to 131072
[   99.551346][ T6003] F2FS-fs (loop1): invalid crc value
[   99.641780][ T6003] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   99.653205][ T6003] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   99.808530][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[  100.158223][ T6029] loop4: detected capacity change from 0 to 128
[  100.202600][ T6029] =======================================================
[  100.202600][ T6029] WARNING: The mand mount option has been deprecated and
[  100.202600][ T6029]          and is ignored by this kernel. Remove the mand
[  100.202600][ T6029]          option from the mount to silence this warning.
[  100.202600][ T6029] =======================================================
[  100.289411][ T6029] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  100.388957][ T6029] hpfs: filesystem error: improperly stopped
[  100.394986][ T6029] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  100.505075][ T6029] hpfs: You really don't want any checks? You are crazy...
[  100.591763][ T6029] hpfs: hpfs_map_sector(): read error
[  100.609855][ T6029] hpfs: code page support is disabled
[  100.628607][ T6029] hpfs: hpfs_map_4sectors(): unaligned read
[  100.649738][ T6029] hpfs: hpfs_map_4sectors(): unaligned read
[  100.691210][ T6029] hpfs: filesystem error: unable to find root dir
[  100.785387][ T6016] loop5: detected capacity change from 0 to 32768
[  100.854279][ T6016] (syz.5.19,6016,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  100.946861][ T6016] (syz.5.19,6016,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.067028][ T6016] JBD2: Ignoring recovery information on journal
[  101.366398][ T6016] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  101.769423][ T6054] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.929205][ T5831] ocfs2: Unmounting device (7,5) on (node local)
[  102.183210][ T6063] loop5: detected capacity change from 0 to 1919
[  102.246570][ T5849]  loop5: [POWERTEC] p1
[  102.274438][ T5849] loop5: p1 start 1848604261 is beyond EOD, truncated
[  102.324151][ T6063]  loop5: [POWERTEC] p1
[  102.359060][ T6063] loop5: p1 start 1848604261 is beyond EOD, truncated
[  102.904762][ T6074] loop1: detected capacity change from 0 to 128
[  103.142304][ T6052] loop3: detected capacity change from 0 to 32768
[  103.187825][ T6052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.31 (6052)
[  103.271324][ T6052] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  103.271544][ T5820] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.351791][ T6052] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  103.526454][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.571631][ T5820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.608878][   T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  103.628980][ T6052] BTRFS info (device loop3): rebuilding free space tree
[  103.650358][ T5820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  103.709738][ T5820] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  103.753121][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.795393][ T6052] BTRFS info (device loop3): enabling ssd optimizations
[  103.820672][ T5820] usb 1-1: config 0 descriptor??
[  103.826814][ T6052] BTRFS info (device loop3): using spread ssd allocation scheme
[  103.828918][   T43] usb 6-1: Using ep0 maxpacket: 16
[  103.860278][ T6052] BTRFS info (device loop3): turning off barriers
[  103.888608][ T6052] BTRFS info (device loop3): turning on async discard
[  103.899902][   T43] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  103.931302][ T6052] BTRFS info (device loop3): enabling free space tree
[  103.932924][   T43] usb 6-1: config 0 has no interface number 0
[  103.966320][   T43] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  103.966435][ T6052] BTRFS info (device loop3): force clearing of disk cache
[  103.997818][   T43] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  104.048908][ T6052] BTRFS info (device loop3): enabling auto defrag
[  104.053837][   T43] usb 6-1: config 0 interface 41 has no altsetting 0
[  104.069152][ T6052] BTRFS info (device loop3): use zstd compression, level 3
[  104.076657][   T43] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  104.099042][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.138001][   T43] usb 6-1: Product: syz
[  104.145651][   T43] usb 6-1: Manufacturer: syz
[  104.159242][   T43] usb 6-1: SerialNumber: syz
[  104.191918][   T43] usb 6-1: config 0 descriptor??
[  104.208136][ T6082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  104.221255][ T6082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  104.343453][ T5820] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  104.468667][ T5840] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.481630][ T6082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  104.519016][ T6082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  104.724464][ T5820] usb 1-1: USB disconnect, device number 2
[  104.775444][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  104.966000][   T43] Error reading MAC address
[  104.979282][ T5846] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  105.017462][ T5846] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  105.028065][ T6082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  105.046108][ T6082] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  105.059000][ T5846] usb 2-1: config 1 interface 0 has no altsetting 0
[  105.100282][ T5846] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  105.121190][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.148655][ T5846] usb 2-1: Product: syz
[  105.156835][ T5846] usb 2-1: Manufacturer: syz
[  105.168009][ T5846] usb 2-1: SerialNumber: syz
[  105.204002][ T6114] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  105.217391][ T6114] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  105.295743][   T43] sr9700 6-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  105.355806][   T43] usb 6-1: USB disconnect, device number 2
[  106.129928][ T6136] loop5: detected capacity change from 0 to 256
[  106.205036][ T6136] FAT-fs (loop5): Directory bread(block 64) failed
[  106.236959][ T6136] FAT-fs (loop5): Directory bread(block 65) failed
[  106.259392][ T6136] FAT-fs (loop5): Directory bread(block 66) failed
[  106.290008][ T6136] FAT-fs (loop5): Directory bread(block 67) failed
[  106.297496][ T5846] (unnamed net_device) (uninitialized): Assigned a random MAC address: 7a:2a:ce:ab:86:91
[  106.336755][ T6136] FAT-fs (loop5): Directory bread(block 68) failed
[  106.356937][ T6136] FAT-fs (loop5): Directory bread(block 69) failed
[  106.359852][ T5846] rtl8150 2-1:1.0: eth1: rtl8150 is detected
[  106.368918][ T6136] FAT-fs (loop5): Directory bread(block 70) failed
[  106.386208][ T6136] FAT-fs (loop5): Directory bread(block 71) failed
[  106.402715][ T6136] FAT-fs (loop5): Directory bread(block 72) failed
[  106.430277][ T5846] usb 2-1: USB disconnect, device number 2
[  106.435118][ T6136] FAT-fs (loop5): Directory bread(block 73) failed
[  106.541532][ T6130] loop3: detected capacity change from 0 to 32768
[  106.552816][ T6130] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.57 (6130)
[  106.577802][ T6132] loop0: detected capacity change from 0 to 40427
[  106.629659][ T6132] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  106.649158][ T6130] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.665629][ T6132] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  106.680727][ T6130] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  106.692525][ T6130] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  106.710162][ T6132] F2FS-fs (loop0): Image doesn't support compression
[  106.723545][ T6132] F2FS-fs (loop0): build fault injection rate: 690
[  106.739579][ T6132] F2FS-fs (loop0): build fault injection type: 0x35f7
[  106.790515][ T6132] F2FS-fs (loop0): invalid crc value
[  106.918184][ T6130] BTRFS info (device loop3): rebuilding free space tree
[  107.037808][ T6130] BTRFS info (device loop3): disabling free space tree
[  107.067378][ T6130] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.073716][ T6132] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  107.106727][ T6160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.62'.
[  107.113942][ T6130] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.133845][ T6132] F2FS-fs (loop0): Start checkpoint disabled!
[  107.177620][ T6132] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  107.179823][ T6130] BTRFS info (device loop3): enabling ssd optimizations
[  107.229293][ T6132] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  107.236397][ T6132] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  107.259837][ T6130] BTRFS info (device loop3): enabling disk space caching
[  107.267027][ T6130] BTRFS info (device loop3): force clearing of disk cache
[  107.268140][ T6160] bond1: option ad_select: invalid value (20)
[  107.278846][ T6130] BTRFS info (device loop3): enabling auto defrag
[  107.350615][ T6130] BTRFS info (device loop3): max_inline set to 0
[  107.356883][ T6160] bond1 (unregistering): Released all slaves
[  107.364518][ T6134] loop2: detected capacity change from 0 to 40427
[  107.402765][ T6134] F2FS-fs (loop2): build fault injection rate: 14
[  107.434345][ T6134] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  107.517655][ T6134] F2FS-fs (loop2): invalid crc value
[  107.548194][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  107.577626][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  107.605302][ T1337] kworker/u8:8: attempt to access beyond end of device
[  107.605302][ T1337] loop0: rw=1, sector=77824, nr_sectors = 136 limit=40427
[  107.679632][ T1337] kworker/u8:8: attempt to access beyond end of device
[  107.679632][ T1337] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.703593][ T6160] Zero length message leads to an empty skb
[  107.725887][ T1337] CPU: 1 UID: 0 PID: 1337 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  107.725923][ T1337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  107.725940][ T1337] Workqueue: writeback wb_workfn (flush-7:0)
[  107.725980][ T1337] Call Trace:
[  107.725990][ T1337]  <TASK>
[  107.726001][ T1337]  dump_stack_lvl+0x189/0x250
[  107.726045][ T1337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.726080][ T1337]  ? __pfx_queue_work_on+0x10/0x10
[  107.726113][ T1337]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  107.726149][ T1337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.726203][ T1337]  f2fs_handle_critical_error+0x37c/0x540
[  107.726253][ T1337]  f2fs_write_end_io+0x886/0xb60
[  107.726306][ T1337]  __submit_merged_bio+0x27a/0x6a0
[  107.726355][ T1337]  __submit_merged_write_cond+0x255/0x530
[  107.726404][ T1337]  f2fs_write_data_pages+0x261d/0x3000
[  107.726480][ T1337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.726528][ T1337]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  107.726608][ T1337]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  107.726666][ T1337]  ? trace_f2fs_writepages+0x7f/0x200
[  107.726706][ T1337]  ? f2fs_write_node_pages+0x478/0x6e0
[  107.726770][ T1337]  ? rcu_is_watching+0x15/0xb0
[  107.726805][ T1337]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.726833][ T1337]  do_writepages+0x32e/0x550
[  107.726873][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.726902][ T1337]  ? reacquire_held_locks+0x127/0x1d0
[  107.726931][ T1337]  ? writeback_sb_inodes+0x384/0x1010
[  107.726980][ T1337]  __writeback_single_inode+0x145/0xff0
[  107.727017][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727045][ T1337]  ? do_raw_spin_unlock+0x122/0x240
[  107.727087][ T1337]  writeback_sb_inodes+0x6c7/0x1010
[  107.727133][ T1337]  ? finish_task_switch+0x26b/0x950
[  107.727180][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727235][ T1337]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  107.727336][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727364][ T1337]  ? rcu_is_watching+0x15/0xb0
[  107.727392][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727433][ T1337]  wb_writeback+0x43b/0xaf0
[  107.727479][ T1337]  ? queue_io+0x381/0x590
[  107.727519][ T1337]  ? __pfx_wb_writeback+0x10/0x10
[  107.727562][ T1337]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.727605][ T1337]  wb_workfn+0x409/0xef0
[  107.727653][ T1337]  ? __pfx_wb_workfn+0x10/0x10
[  107.727687][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727714][ T1337]  ? __lock_acquire+0xab9/0xd20
[  107.727759][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727790][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.727824][ T1337]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.727860][ T1337]  ? process_scheduled_works+0x9ef/0x17b0
[  107.727891][ T1337]  ? process_scheduled_works+0x9ef/0x17b0
[  107.727919][ T1337]  process_scheduled_works+0xae1/0x17b0
[  107.727989][ T1337]  ? __pfx_process_scheduled_works+0x10/0x10
[  107.728028][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.728069][ T1337]  worker_thread+0x8a0/0xda0
[  107.728105][ T1337]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.728176][ T1337]  ? __kthread_parkme+0x7b/0x200
[  107.728229][ T1337]  kthread+0x711/0x8a0
[  107.728268][ T1337]  ? __pfx_worker_thread+0x10/0x10
[  107.728298][ T1337]  ? __pfx_kthread+0x10/0x10
[  107.728327][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.728362][ T1337]  ? _raw_spin_unlock_irq+0x23/0x50
[  107.728395][ T1337]  ? srso_alias_return_thunk+0x5/0xfbef5
[  107.728422][ T1337]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.728458][ T1337]  ? __pfx_kthread+0x10/0x10
[  107.728498][ T1337]  ret_from_fork+0x4bc/0x870
[  107.728535][ T1337]  ? __pfx_ret_from_fork+0x10/0x10
[  107.728571][ T1337]  ? __switch_to_asm+0x39/0x70
[  107.728594][ T1337]  ? __switch_to_asm+0x33/0x70
[  107.728611][ T1337]  ? __pfx_kthread+0x10/0x10
[  107.728646][ T1337]  ret_from_fork_asm+0x1a/0x30
[  107.728695][ T1337]  </TASK>
[  108.166072][ T6134] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.175197][ T6134] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  108.259168][ T6134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  108.285085][ T6134] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  108.300170][ T6134] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_rename2+0x831/0x2600
[  108.351284][ T1337] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  108.382452][ T5837] syz-executor: attempt to access beyond end of device
[  108.382452][ T5837] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.402371][ T3519] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  108.414184][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.536782][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  108.536816][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  108.536830][ T5837] Call Trace:
[  108.536840][ T5837]  <TASK>
[  108.536850][ T5837]  dump_stack_lvl+0x189/0x250
[  108.536894][ T5837]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.536929][ T5837]  ? __pfx_queue_work_on+0x10/0x10
[  108.536957][ T5837]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  108.536993][ T5837]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  108.537041][ T5837]  f2fs_handle_critical_error+0x37c/0x540
[  108.537088][ T5837]  f2fs_write_end_io+0x886/0xb60
[  108.537136][ T5837]  __submit_merged_bio+0x27a/0x6a0
[  108.537182][ T5837]  __submit_merged_write_cond+0x255/0x530
[  108.537228][ T5837]  f2fs_write_data_pages+0x261d/0x3000
[  108.537294][ T5837]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.537316][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537405][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537459][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537487][ T5837]  ? __lock_acquire+0xab9/0xd20
[  108.537522][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537550][ T5837]  ? do_raw_spin_lock+0x121/0x290
[  108.537591][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537624][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537651][ T5837]  ? do_raw_spin_unlock+0x122/0x240
[  108.537686][ T5837]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.537731][ T5837]  do_writepages+0x32e/0x550
[  108.537774][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537806][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.537833][ T5837]  ? do_raw_spin_unlock+0x122/0x240
[  108.537873][ T5837]  filemap_fdatawrite+0x199/0x240
[  108.537907][ T5837]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  108.537989][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.538022][ T5837]  ? do_raw_spin_unlock+0x122/0x240
[  108.538064][ T5837]  f2fs_sync_dirty_inodes+0x31f/0x830
[  108.538109][ T5837]  f2fs_write_checkpoint+0x93e/0x2440
[  108.538135][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.538164][ T5837]  ? __lock_acquire+0xab9/0xd20
[  108.538221][ T5837]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  108.538314][ T5837]  kill_f2fs_super+0x2cc/0x6d0
[  108.538342][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.538386][ T5837]  ? __pfx_kill_f2fs_super+0x10/0x10
[  108.538433][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.538461][ T5837]  ? shrinker_free+0x2ce/0x3e0
[  108.538494][ T5837]  deactivate_locked_super+0xbc/0x130
[  108.538529][ T5837]  cleanup_mnt+0x425/0x4c0
[  108.538558][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.538586][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.538627][ T5837]  task_work_run+0x1d4/0x260
[  108.538668][ T5837]  ? __pfx_task_work_run+0x10/0x10
[  108.538702][ T5837]  ? __x64_sys_umount+0x122/0x160
[  108.538748][ T5837]  ? exit_to_user_mode_loop+0x40/0x130
[  108.538778][ T5837]  exit_to_user_mode_loop+0xe9/0x130
[  108.538803][ T5837]  do_syscall_64+0x2bd/0xfa0
[  108.538839][ T5837]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.538876][ T5837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.538900][ T5837]  ? srso_alias_return_thunk+0x5/0xfbef5
[  108.538928][ T5837]  ? exc_page_fault+0xab/0x100
[  108.538968][ T5837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.538992][ T5837] RIP: 0033:0x7f4dca590a77
[  108.539014][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  108.539035][ T5837] RSP: 002b:00007ffda43aa058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  108.539061][ T5837] RAX: 0000000000000000 RBX: 00007f4dca613d7d RCX: 00007f4dca590a77
[  108.539078][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda43aa110
[  108.539094][ T5837] RBP: 00007ffda43aa110 R08: 0000000000000000 R09: 0000000000000000
[  108.539109][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda43ab1a0
[  108.539126][ T5837] R13: 00007f4dca613d7d R14: 000000000001a72b R15: 00007ffda43ab1e0
[  108.539167][ T5837]  </TASK>
[  108.995719][ T5837] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  109.010742][ T6179] loop5: detected capacity change from 0 to 256
[  109.629155][ T5846] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  109.809080][ T5846] usb 6-1: Using ep0 maxpacket: 16
[  109.819557][ T5846] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.858824][ T5846] usb 6-1: config 0 interface 0 has no altsetting 0
[  109.897018][ T5846] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  109.929651][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.943438][ T5846] usb 6-1: Product: syz
[  109.947635][ T5846] usb 6-1: Manufacturer: syz
[  109.989668][ T5846] usb 6-1: SerialNumber: syz
[  110.041815][ T5846] usb 6-1: config 0 descriptor??
[  110.274163][ T5846] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input5
[  110.661613][ T6206] batadv_slave_1: entered promiscuous mode
[  110.695946][ T6204] batadv_slave_1: left promiscuous mode
[  110.752392][ T5846] rc_core: IR keymap rc-imon-pad not found
[  110.758282][ T5846] Registered IR keymap rc-empty
[  110.805469][ T5846] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  110.856392][ T5846] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  110.922542][ T5846] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  110.968247][ T5846] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7
[  111.016818][ T5846] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:3> initialized
[  111.031118][    C1] imon 6-1:0.0: imon imon_incoming_packet: invalid incoming packet size (len = 0, intf0)
[  111.065298][ T6215] warning: `syz.2.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  111.272300][    C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  111.272769][ T5914] usb 6-1: USB disconnect, device number 3
[  111.701142][ T6208] loop3: detected capacity change from 0 to 32768
[  111.765120][ T6208] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  112.093568][ T5840] ocfs2: Unmounting device (7,3) on (node local)
[  112.332940][ T6246] netlink: 63 bytes leftover after parsing attributes in process `syz.3.90'.
[  112.400505][ T6247] loop1: detected capacity change from 0 to 1024
[  112.413767][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.5.92'.
[  112.458682][ T6247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.505388][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.5.92'.
[  112.532599][ T6245] netlink: 60 bytes leftover after parsing attributes in process `syz.5.92'.
[  112.579273][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz.5.92'.
[  112.778916][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'.
[  112.925610][ T6258] netlink: 'syz.1.95': attribute type 21 has an invalid length.
[  112.939560][ T6256] loop4: detected capacity change from 0 to 128
[  112.951731][ T6256] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  113.006964][ T6258] netlink: 'syz.1.95': attribute type 6 has an invalid length.
[  113.026225][ T6256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.043579][ T6258] netlink: 64 bytes leftover after parsing attributes in process `syz.1.95'.
[  113.044820][ T6265] netlink: 'syz.1.95': attribute type 21 has an invalid length.
[  113.120684][ T6265] netlink: 'syz.1.95': attribute type 6 has an invalid length.
[  113.139957][ T6256] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  113.166703][ T6265] netlink: 64 bytes leftover after parsing attributes in process `syz.1.95'.
[  113.290820][ T5846] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  113.547928][ T6274] loop2: detected capacity change from 0 to 1024
[  114.420854][ T5846] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  114.432595][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.447831][ T5846] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  114.457183][ T5846] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  114.465257][ T5846] usb 6-1: Manufacturer: syz
[  114.761594][ T6278] loop0: detected capacity change from 0 to 1024
[  114.845408][ T6260] loop3: detected capacity change from 0 to 32768
[  114.934617][ T6278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.034823][ T6260] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.358982][ T6260] XFS (loop3): Ending clean mount
[  115.399015][ T5830] EXT4-fs warning (device loop0): ext4_rmdir:3187: inode #11: comm syz-executor: empty directory 'lost+found' has too many links (111)
[  115.422094][ T5846] usb 6-1: config 0 descriptor??
[  115.443832][ T6260] XFS (loop3): Quotacheck needed: Please wait.
[  115.508850][ T5830] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  115.602820][ T5830] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  115.635944][ T6273] loop4: detected capacity change from 0 to 32768
[  115.677272][ T6260] XFS (loop3): Quotacheck: Done.
[  115.723485][ T6270] loop1: detected capacity change from 0 to 262144
[  115.845355][ T5846] rc_core: IR keymap rc-hauppauge not found
[  115.856302][ T6270] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  115.866974][ T6270] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  115.898923][ T5846] Registered IR keymap rc-empty
[  115.908511][ T5846] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  115.925798][ T5846] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8
[  115.994611][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.009982][    C1] igorplugusb 6-1:0.0: Error: urb status = -32
[  116.138416][ T5846] usb 6-1: USB disconnect, device number 4
[  116.486934][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.729188][ T1325] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.858061][ T6303] loop4: detected capacity change from 0 to 1024
[  116.894243][ T1325] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.135310][ T1325] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.265491][ T1325] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.291172][ T6300] loop2: detected capacity change from 0 to 32768
[  117.372654][ T6300] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.478702][ T6300] XFS (loop2): Ending clean mount
[  117.770458][ T5837] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.909362][ T1325] bridge_slave_1: left allmulticast mode
[  117.915211][ T1325] bridge_slave_1: left promiscuous mode
[  117.978132][ T1325] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.049526][ T6328] input: syz1 as /devices/virtual/input/input9
[  118.195907][ T1325] bridge_slave_0: left allmulticast mode
[  118.222742][ T1325] bridge_slave_0: left promiscuous mode
[  118.228641][ T1325] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.568952][ T1213] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  118.595013][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  118.605788][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  118.614438][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  118.622672][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  118.630422][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  118.759233][ T1213] usb 6-1: Using ep0 maxpacket: 8
[  118.767275][ T1213] usb 6-1: config 0 has an invalid interface number: 56 but max is 0
[  118.799451][ T1213] usb 6-1: config 0 has no interface number 0
[  118.846743][ T1213] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  118.877021][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.914091][ T1213] usb 6-1: Product: syz
[  118.918320][ T1213] usb 6-1: Manufacturer: syz
[  118.929770][ T1213] usb 6-1: SerialNumber: syz
[  118.972233][ T1213] usb 6-1: config 0 descriptor??
[  118.981562][ T1213] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  119.026410][ T1213] pctv452e: pctv452e_power_ctrl: 1
[  119.026410][ T1213] 
[  119.041283][ T1213] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  119.041283][ T1213] 
[  119.079122][ T1213] dvb-usb: bulk message failed: -22 (5/0)
[  119.131482][ T1213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  119.147253][ T1213] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  119.202428][ T6333] dvb-usb: bulk message failed: -22 (7/0)
[  119.208338][ T6333] pctv452e: I2C error -22; AA 01  00 00 00 -> aa 01 31 03 00 00 00
[  119.217601][ T1213] usb 6-1: media controller created
[  119.254172][ T1213] dvb-usb: bulk message failed: -22 (8/0)
[  119.268967][ T1213] pctv452e: I2C error -22; AA 02  A0 01 14 -> aa 02 31 04 a0 01 14
[  119.277347][ T1213] dvb-usb: MAC address reading failed.
[  119.427230][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  119.561465][ T6339] loop3: detected capacity change from 0 to 32768
[  119.590900][ T6339] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.123 (6339)
[  119.613580][ T1213] DVB: Unable to find symbol stb0899_attach()
[  119.620785][ T1213] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  119.663078][ T6339] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.687317][ T6339] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  119.888934][ T1213] rc_core: IR keymap rc-tt-1500 not found
[  119.926472][ T1213] Registered IR keymap rc-empty
[  119.950386][ T1213] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  119.961207][ T6339] BTRFS info (device loop3): enabling ssd optimizations
[  119.968179][ T6339] BTRFS info (device loop3): turning on async discard
[  119.980103][ T1213] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input10
[  119.990718][ T6339] BTRFS info (device loop3): enabling free space tree
[  120.009401][ T1213] dvb-usb: schedule remote query interval to 100 msecs.
[  120.028790][ T1213] pctv452e: pctv452e_power_ctrl: 0
[  120.028790][ T1213] 
[  120.036259][ T1213] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  120.100026][ T1213] usb 6-1: USB disconnect, device number 5
[  120.310394][ T5840] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  120.351596][ T1325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.361285][ T1213] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  120.413900][ T1325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.482326][ T1325] bond0 (unregistering): Released all slaves
[  120.757316][ T5854] Bluetooth: hci1: command tx timeout
[  121.331699][ T6385] loop5: detected capacity change from 0 to 32768
[  121.427441][ T6399] loop4: detected capacity change from 0 to 32768
[  121.435532][ T6399] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.131 (6399)
[  121.461432][ T6399] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.468208][ T6385] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.471765][ T6399] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  121.700009][ T6399] BTRFS info (device loop4): enabling ssd optimizations
[  121.707007][ T6399] BTRFS info (device loop4): turning on async discard
[  121.715846][ T6399] BTRFS info (device loop4): enabling free space tree
[  121.738629][ T6385] XFS (loop5): Ending clean mount
[  122.014839][ T5842] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.071068][ T5831] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  122.192387][ T6389] loop3: detected capacity change from 0 to 32768
[  122.501449][ T1325] hsr_slave_0: left promiscuous mode
[  122.609312][ T1325] hsr_slave_1: left promiscuous mode
[  122.616137][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.625272][ T6387] loop1: detected capacity change from 0 to 40427
[  122.638835][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.727854][ T6387] F2FS-fs (loop1): invalid crc value
[  122.735890][ T1325] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.747135][ T1325] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.836187][ T5854] Bluetooth: hci1: command tx timeout
[  122.943373][ T1325] veth1_macvtap: left promiscuous mode
[  122.980690][ T1325] veth0_macvtap: left promiscuous mode
[  123.008145][ T1325] veth1_vlan: left promiscuous mode
[  123.034024][ T1325] veth0_vlan: left promiscuous mode
[  123.164117][ T6387] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.240365][ T6387] F2FS-fs (loop1): Start checkpoint disabled!
[  123.278482][ T6387] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  123.328844][ T6387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  123.430935][ T6387] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  124.326631][ T6478] loop2: detected capacity change from 0 to 4096
[  124.344375][ T6478] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  124.469251][ T6478] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  124.493249][ T6478] ntfs3(loop2): ino=19, mi_enum_attr
[  124.599955][ T6482] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.146'.
[  124.939785][ T5854] Bluetooth: hci1: command tx timeout
[  124.962082][ T1325] team0 (unregistering): Port device team_slave_1 removed
[  125.027402][ T1325] team0 (unregistering): Port device team_slave_0 removed
[  125.074790][ T6484] loop2: detected capacity change from 0 to 32768
[  125.107339][ T6484] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  125.115724][ T6484] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  125.144219][ T6484] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  125.209842][ T6484] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  125.743588][ T6455] vxcan1: entered allmulticast mode
[  125.758045][ T6462] vxcan1: left allmulticast mode
[  126.181649][ T6507] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11
[  126.463202][ T6345] chnl_net:caif_netlink_parms(): no params data found
[  126.490522][ T1213] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  126.703376][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  126.749326][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  126.784963][ T6535] loop1: detected capacity change from 0 to 128
[  126.802522][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  126.831409][ T6535] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  126.844445][ T1213] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  126.883378][ T6535] hpfs: filesystem error: improperly stopped
[  126.912706][ T1213] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  126.918918][ T6535] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  126.961848][ T6535] hpfs: You really don't want any checks? You are crazy...
[  126.971283][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.994557][ T5854] Bluetooth: hci1: command tx timeout
[  127.003440][ T6535] hpfs: hpfs_map_sector(): read error
[  127.017061][ T6535] hpfs: code page support is disabled
[  127.059110][ T6535] hpfs: hpfs_map_4sectors(): unaligned read
[  127.079925][ T1213] usb 5-1: config 0 descriptor??
[  127.107495][ T6535] hpfs: hpfs_map_4sectors(): unaligned read
[  127.134696][ T6535] hpfs: filesystem error: unable to find root dir
[  127.303218][ T6550] loop5: detected capacity change from 0 to 8192
[  127.337276][ T6550] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  127.552798][ T1213] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[  127.616191][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.648557][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.659043][ T1213] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  127.683958][ T6345] bridge_slave_0: entered allmulticast mode
[  127.732300][ T6345] bridge_slave_0: entered promiscuous mode
[  127.738723][   T36] Bluetooth: hci7: Frame reassembly failed (-84)
[  127.823757][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.842408][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.865041][ T6345] bridge_slave_1: entered allmulticast mode
[  127.883551][ T6345] bridge_slave_1: entered promiscuous mode
[  127.920592][ T6558] loop2: detected capacity change from 0 to 4096
[  127.934194][ T6558] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  128.041246][ T6558] ntfs3(loop2): ino=19, mi_enum_attr
[  128.062615][ T6558] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  128.082727][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.210890][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.388634][ T6345] team0: Port device team_slave_0 added
[  128.422230][ T6345] team0: Port device team_slave_1 added
[  128.571487][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.590526][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.652192][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.687388][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.717594][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.750593][ T6575] loop2: detected capacity change from 0 to 8
[  128.757529][ T6574] loop5: detected capacity change from 0 to 512
[  128.772016][ T6574] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  128.804077][ T6575] SQUASHFS error: xz decompression failed, data probably corrupt
[  128.813653][ T6574] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  128.834555][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.856444][ T6575] SQUASHFS error: Failed to read block 0x108: -5
[  128.893580][ T6574] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.175: bad orphan inode 131083
[  128.908344][ T6575] SQUASHFS error: Unable to read metadata cache entry [106]
[  128.962181][ T6575] SQUASHFS error: Unable to read inode 0x11f
[  128.970759][ T6574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.071100][ T5975] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x5
[  129.092652][ T5975] hid-generic 00A0:0006:0003.0003: unknown main item tag 0x0
[  129.120322][ T5975] hid-generic 00A0:0006:0003.0003: hidraw1: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  129.174154][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.214028][ T6345] hsr_slave_0: entered promiscuous mode
[  129.229482][ T5853] Bluetooth: hci6: command 0xfc11 tx timeout
[  129.234306][ T6345] hsr_slave_1: entered promiscuous mode
[  129.241605][ T5854] Bluetooth: hci6: Entering manufacturer mode failed (-110)
[  129.295926][ T6345] debugfs: 'hsr0' already exists in 'hsr'
[  129.319571][   T43] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  129.347673][ T6345] Cannot create hsr debugfs directory
[  129.492475][   T43] usb 3-1: config 0 has no interfaces?
[  129.498013][   T43] usb 3-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  129.519716][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.560935][   T43] usb 3-1: config 0 descriptor??
[  129.621042][ T6593] netlink: 'syz.4.179': attribute type 1 has an invalid length.
[  129.655084][ T1213] usb 5-1: USB disconnect, device number 2
[  129.693928][ T6595] loop3: detected capacity change from 0 to 512
[  129.788894][ T5854] Bluetooth: hci7: command 0x1003 tx timeout
[  129.789096][ T5839] Bluetooth: hci7: Opcode 0x1003 failed: -110
[  129.813676][ T6595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.870029][   T43] usb 3-1: USB disconnect, device number 2
[  129.876267][ T6595] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.009585][ T6595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  130.022177][ T6603] loop4: detected capacity change from 0 to 1764
[  130.074444][ T6595] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  130.294542][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.680001][ T6617] loop5: detected capacity change from 0 to 1024
[  130.735707][ T6617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.867704][ T6345] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  130.899833][ T6628] netlink: 'syz.1.190': attribute type 11 has an invalid length.
[  130.958845][ T6345] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  131.041102][ T6345] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  131.084662][ T6631] loop3: detected capacity change from 0 to 512
[  131.086309][ T6345] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  131.126429][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.343544][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[  131.520110][ T6648] loop2: detected capacity change from 0 to 512
[  131.717114][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.816020][ T6345] 8021q: adding VLAN 0 to HW filter on device team0
[  131.871093][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.878263][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.907676][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.914897][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.119605][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.126482][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  132.398354][ T6670] input: syz0 as /devices/virtual/input/input12
[  132.863855][   T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  132.873940][ T6684] syz.3.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  133.081727][   T43] usb 5-1: Using ep0 maxpacket: 8
[  133.144304][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.153266][   T43] usb 5-1: unable to get BOS descriptor or descriptor too short
[  133.207106][   T43] usb 5-1: config 4 has an invalid interface number: 30 but max is 0
[  133.228828][   T43] usb 5-1: config 4 has no interface number 0
[  133.234915][   T43] usb 5-1: config 4 interface 30 has no altsetting 0
[  133.301937][   T43] usb 5-1: string descriptor 0 read error: -22
[  133.308253][   T43] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  133.379640][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.413983][   T43] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  133.450815][   T43] dw2102: su3000_power_ctrl: 1, initialized 0
[  133.499340][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  133.526596][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  133.605798][   T43] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  133.632336][   T43] usb 5-1: media controller created
[  133.643650][ T6677] dvb-usb: bulk message failed: -22 (3/0)
[  133.684960][ T6677] dw2102: i2c transfer failed.
[  133.704281][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  133.752462][   T43] dw2102: i2c transfer failed.
[  133.757529][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  133.775129][   T43] dw2102: i2c transfer failed.
[  133.780318][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  133.786037][   T43] dw2102: i2c transfer failed.
[  133.791967][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  133.797687][   T43] dw2102: i2c transfer failed.
[  133.802586][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  133.808379][   T43] dw2102: i2c transfer failed.
[  133.839126][   T43] dvb-usb: bulk message failed: -22 (6/0)
[  133.847505][   T43] dw2102: i2c transfer failed.
[  133.854790][   T43] dvb-usb: MAC address: 02:02:02:02:02:02
[  133.898846][ T5975] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  133.910078][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.994323][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  134.019333][   T43] dw2102: command 0x0e transfer failed.
[  134.024983][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  134.058930][ T5975] usb 6-1: Using ep0 maxpacket: 16
[  134.089635][   T43] dw2102: command 0x0e transfer failed.
[  134.095866][ T6687] loop2: detected capacity change from 0 to 32768
[  134.098883][ T5975] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  134.131275][ T6687] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.151662][ T5975] usb 6-1: config 0 has no interface number 0
[  134.180291][ T5975] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  134.191924][ T5975] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  134.205079][ T5975] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  134.221836][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  134.230604][ T5975] usb 6-1: Product: syz
[  134.234764][ T5975] usb 6-1: SerialNumber: syz
[  134.242963][ T5975] usb 6-1: config 0 descriptor??
[  134.264993][ T5975] cm109 6-1:0.8: invalid payload size 0, expected 4
[  134.281927][ T5975] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input13
[  134.438889][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  134.458938][   T43] dw2102: command 0x0e transfer failed.
[  134.478958][ T6687] XFS (loop2): Ending clean mount
[  134.479071][   T43] dvb-usb: bulk message failed: -22 (3/0)
[  134.527575][ T6721] loop4: detected capacity change from 0 to 1024
[  134.545580][ T6687] XFS (loop2): Quotacheck needed: Please wait.
[  134.552320][   T43] dw2102: command 0x0e transfer failed.
[  134.572433][ T6721] EXT4-fs: Ignoring removed nomblk_io_submit option
[  134.579228][   T43] dvb-usb: bulk message failed: -22 (1/0)
[  134.585374][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  134.675071][   T43] dw2102: command 0x51 transfer failed.
[  134.688086][ T6687] XFS (loop2): Quotacheck: Done.
[  134.704872][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  134.709887][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.721007][   T43] dw2102: i2c probe for address 0x68 failed.
[  134.728710][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  134.735495][   T43] dw2102: i2c probe for address 0x69 failed.
[  134.742235][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  134.748086][   T43] dw2102: i2c probe for address 0x6a failed.
[  134.758906][   T43] dw2102: probing for demodulator failed. Is the external power switched on?
[  134.776502][ T6345] veth0_vlan: entered promiscuous mode
[  134.789034][   T43] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  134.829031][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  134.829054][   T30] audit: type=1800 audit(1764261289.325:13): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="file1" dev="loop4" ino=15 res=0 errno=0
[  134.905886][ T6345] veth1_vlan: entered promiscuous mode
[  134.969955][   T30] audit: type=1800 audit(1764261289.325:14): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.220" name="file1" dev="loop4" ino=15 res=0 errno=0
[  134.991159][   T43] rc_core: IR keymap rc-tt-1500 not found
[  135.021803][   T43] Registered IR keymap rc-empty
[  135.040740][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.043536][   T43] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  135.092750][   T43] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input14
[  135.125803][ T6345] veth0_macvtap: entered promiscuous mode
[  135.167574][   T43] dvb-usb: schedule remote query interval to 250 msecs.
[  135.167605][   T43] dw2102: su3000_power_ctrl: 0, initialized 1
[  135.167623][   T43] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  135.174394][ T6345] veth1_macvtap: entered promiscuous mode
[  135.193656][   T43] usb 5-1: USB disconnect, device number 3
[  135.245328][ T6703] loop1: detected capacity change from 0 to 32768
[  135.266113][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.362061][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.371048][ T1337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.371392][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.371659][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.371846][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.420874][   T43] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  135.506112][ T6703] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  135.767036][  T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.818566][  T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.851064][ T5829] ocfs2: Unmounting device (7,1) on (node local)
[  135.967356][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.015023][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.048322][ T6743] input: syz1 as /devices/virtual/input/input15
[  136.244364][   T30] audit: type=1800 audit(1764261290.745:15): pid=6726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.220" name="file1" dev="loop4" ino=15 res=0 errno=0
[  136.672432][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.782826][ T1213] usb 6-1: USB disconnect, device number 6
[  136.845032][ T1213] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  137.011435][ T6739] loop3: detected capacity change from 0 to 32768
[  137.029140][ T6764] loop5: detected capacity change from 0 to 128
[  137.063004][ T6739] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.224 (6739)
[  137.094977][ T6764] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  137.104189][ T6768] loop6: detected capacity change from 0 to 128
[  137.114522][ T6767] evm: overlay not supported
[  137.139977][ T6764] hpfs: filesystem error: improperly stopped
[  137.146201][ T5975] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.154277][ T6739] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.164961][ T6764] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  137.188661][ T6764] hpfs: You really don't want any checks? You are crazy...
[  137.196327][ T6739] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  137.239074][ T6764] hpfs: hpfs_map_sector(): read error
[  137.240451][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  137.265567][ T6764] hpfs: code page support is disabled
[  137.289387][ T6764] hpfs: hpfs_map_4sectors(): unaligned read
[  137.302758][ T6764] hpfs: hpfs_map_4sectors(): unaligned read
[  137.331471][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.343070][ T6764] hpfs: filesystem error: unable to find root dir
[  137.363171][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.379050][ T5975] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  137.393426][ T5975] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  137.396895][ T6739] BTRFS info (device loop3): enabling ssd optimizations
[  137.402966][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.425280][ T5975] usb 5-1: config 0 descriptor??
[  137.445241][ T6739] BTRFS info (device loop3): turning on async discard
[  137.482711][ T6764] hpfs: hpfs_map_4sectors(): unaligned read
[  137.488991][ T6739] BTRFS info (device loop3): enabling free space tree
[  137.521063][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.568865][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.596147][   T30] audit: type=1800 audit(1764261292.095:16): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.224" name="file1" dev="loop3" ino=260 res=0 errno=0
[  137.631070][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.640349][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.648358][   T10] usb 2-1: Product: syz
[  137.668282][ T6788] loop6: detected capacity change from 0 to 4096
[  137.677508][   T10] usb 2-1: Manufacturer: syz
[  137.707349][   T10] usb 2-1: SerialNumber: syz
[  137.909647][ T5975] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  137.974701][   T10] usb 2-1: 0:2 : does not exist
[  138.048615][   T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  138.150617][   T43] usb 5-1: USB disconnect, device number 4
[  138.202271][   T10] usb 2-1: USB disconnect, device number 3
[  138.293675][ T6794] fido_id[6794]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  138.538708][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.919637][ T5840] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  139.478951][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  139.637749][ T6799] loop6: detected capacity change from 0 to 32768
[  139.652135][   T10] usb 5-1: Using ep0 maxpacket: 8
[  139.695691][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  139.747546][ T6799] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  139.760107][   T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  139.801432][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.846750][   T10] usb 5-1: config 0 descriptor??
[  139.928650][ T6799] XFS (loop6): Ending clean mount
[  140.006200][ T6799] XFS (loop6): Quotacheck needed: Please wait.
[  140.099263][   T10] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  140.139747][ T6799] XFS (loop6): Quotacheck: Done.
[  140.146238][ T6833] loop5: detected capacity change from 0 to 4096
[  140.344106][ T6833] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  140.405247][ T6833] ntfs3(loop5): ino=1a, mi_enum_attr
[  140.416797][ T6833] ntfs3(loop5): ino=1a, mi_enum_attr
[  140.436868][ T6345] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  140.458806][ T6833] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  140.526090][ T1213] usb 5-1: USB disconnect, device number 5
[  140.949579][ T1325] ntfs3(loop5): ino=5, mi_enum_attr
[  141.421853][ T6858] dlm: non-version read from control device 4
[  141.779022][ T5975] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  142.009214][ T5975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  142.032680][ T5975] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  142.058808][   T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  142.058831][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.121666][ T5975] usb 7-1: config 0 descriptor??
[  142.122475][ T6861] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  142.127973][ T6875] raw_sendmsg: syz.4.263 forgot to set AF_INET. Fix it!
[  142.272393][   T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[  142.289545][   T10] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  142.313830][   T10] usb 3-1: config 150 has no interface number 0
[  142.340352][   T10] usb 3-1: config 150 interface 204 has no altsetting 0
[  142.358342][   T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  142.369615][ T5914] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  142.402624][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.430102][   T10] usb 3-1: Product: syz
[  142.447720][   T10] usb 3-1: Manufacturer: syz
[  142.478809][   T10] usb 3-1: SerialNumber: syz
[  142.541588][ T5914] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  142.565384][ T5914] usb 2-1: config 0 has no interface number 0
[  142.580875][ T5975] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0
[  142.602656][ T5914] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  142.642351][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.689074][ T5914] usb 2-1: Product: syz
[  142.713352][ T5914] usb 2-1: Manufacturer: syz
[  142.721176][   T10] xr_serial 3-1:150.204: skipping garbage
[  142.749564][ T5914] usb 2-1: SerialNumber: syz
[  142.756620][   T10] xr_serial 3-1:150.204: xr_serial converter detected
[  142.775841][ T5914] usb 2-1: config 0 descriptor??
[  142.818357][ T1213] usb 7-1: USB disconnect, device number 2
[  143.014939][ T5914] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  143.062917][ T5914] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  143.083914][ T5914] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  143.098986][ T5914] usb 2-1: media controller created
[  143.156598][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  143.519793][   T10] xr_serial ttyUSB0: Failed to set reg 0x0e: -71
[  143.562783][   T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  143.621697][   T10] usb 3-1: USB disconnect, device number 3
[  143.662631][   T10] xr_serial 3-1:150.204: device disconnected
[  144.005994][ T6925] loop4: detected capacity change from 0 to 256
[  144.150326][ T6925] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  144.311403][ T5914] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  144.622331][ T5914] usb 2-1: USB disconnect, device number 4
[  144.882083][ T5846] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  145.107177][ T5846] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  145.118447][ T5846] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  145.144407][ T6948] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  145.152761][ T5975] IPVS: starting estimator thread 0...
[  145.168937][ T5846] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  145.201701][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.253574][ T6935] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  145.266652][ T5846] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  145.290245][ T6953] IPVS: using max 24 ests per chain, 57600 per kthread
[  145.379960][ T6956] loop9: detected capacity change from 0 to 7
[  145.444754][ T6956] Dev loop9: unable to read RDB block 7
[  145.455228][ T6956]  loop9: unable to read partition table
[  145.471923][ T6956] loop9: partition table beyond EOD, truncated
[  145.478177][ T6956] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  145.778885][ T5914] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  145.895573][ T1213] usb 5-1: USB disconnect, device number 6
[  145.968862][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  146.011669][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.062497][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.112332][ T5914] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  146.162217][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.231432][ T5914] usb 2-1: config 0 descriptor??
[  146.778081][ T5914] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  146.963378][ T5914] usb 2-1: USB disconnect, device number 5
[  147.058984][ T6989] loop2: detected capacity change from 0 to 32768
[  147.114561][ T6989] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  147.122857][ T6989] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  147.153881][ T6989] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  147.171980][ T5975] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  147.183533][ T5975] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  147.303533][ T6994] fido_id[6994]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  147.379632][ T5975] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 196ms
[  147.388110][ T5975] gfs2: fsid=syz:syz.0: jid=0: Done
[  147.470957][   T30] audit: type=1326 audit(1764261301.965:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd903b8f749 code=0x0
[  147.501374][ T6989] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  147.616601][ T5846] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  147.660643][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.5.298'.
[  147.803148][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.811737][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.828808][ T5846] usb 4-1: Using ep0 maxpacket: 16
[  147.862730][ T6974] loop6: detected capacity change from 0 to 32768
[  147.870903][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.881283][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  147.929189][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  148.011986][ T5846] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  148.031389][ T6974] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.098917][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.202410][ T5846] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  148.267537][ T6974] XFS (loop6): Ending clean mount
[  148.288784][ T5846] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  148.296923][ T5846] usb 4-1: Manufacturer: syz
[  148.319954][ T6974] XFS (loop6): Quotacheck needed: Please wait.
[  148.380931][ T5846] usb 4-1: config 0 descriptor??
[  148.527936][ T6974] XFS (loop6): Quotacheck: Done.
[  148.800805][ T7035] loop2: detected capacity change from 0 to 512
[  148.883659][ T7035] EXT4-fs: Ignoring removed orlov option
[  148.895453][ T6345] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  148.939150][ T5846] rc_core: IR keymap rc-hauppauge not found
[  148.945113][ T5846] Registered IR keymap rc-empty
[  148.956710][ T7035] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  148.982275][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.006048][ T7003] loop3: detected capacity change from 0 to 4096
[  149.059126][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.075273][ T7035] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.306: corrupted in-inode xattr: e_value size too large
[  149.100167][ T5846] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  149.101650][ T7003] ntfs3: Unknown parameter '
'
[  149.130431][ T5846] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  149.181356][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.206429][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.228451][ T7035] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.306: couldn't read orphan inode 15 (err -117)
[  149.268975][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.307922][ T7035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.322724][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.389671][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.418950][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.448526][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.469141][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.488912][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.531019][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.569080][ T5846] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  149.636243][ T5846] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  149.688866][ T5846] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  149.689052][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  149.757130][ T5846] usb 4-1: USB disconnect, device number 2
[  149.891506][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.940708][ T5914] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  149.997602][ T5914] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  150.035915][ T5914] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  150.087440][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  150.133754][ T5914] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  150.218154][ T5914] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  150.250402][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  150.271706][ T5914] usb 2-1: Product: syz
[  150.275938][ T5914] usb 2-1: Manufacturer: syz
[  150.321030][ T5914] cdc_wdm 2-1:1.0: skipping garbage
[  150.349919][ T5914] cdc_wdm 2-1:1.0: skipping garbage
[  150.379921][ T5914] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  150.395180][ T5914] cdc_wdm 2-1:1.0: Unknown control protocol
[  150.640951][ T7047] loop4: detected capacity change from 0 to 32768
[  150.711917][ T7047] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  150.858818][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  150.977729][ T7076] loop6: detected capacity change from 0 to 1024
[  151.028990][ T5846] usb 4-1: Using ep0 maxpacket: 8
[  151.058623][ T5846] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  151.069206][ T7047] XFS (loop4): Ending clean mount
[  151.081162][   T30] audit: type=1800 audit(1764261305.585:18): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.317" name="file1" dev="loop6" ino=20 res=0 errno=0
[  151.109293][ T5846] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  151.133188][ T7047] XFS (loop4): Quotacheck needed: Please wait.
[  151.167732][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.200884][ T5846] usb 4-1: Product: syz
[  151.236584][ T5846] usb 4-1: Manufacturer: syz
[  151.263564][ T5846] usb 4-1: SerialNumber: syz
[  151.328609][ T5846] usb 4-1: config 0 descriptor??
[  151.364754][ T5846] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  151.384412][ T1213] usb 2-1: USB disconnect, device number 6
[  151.400806][ T7047] XFS (loop4): Quotacheck: Done.
[  151.412380][ T5846] usb 4-1: setting power ON
[  151.419226][ T5846] dvb-usb: bulk message failed: -22 (2/0)
[  151.439426][ T5846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  151.454384][ T5846] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  151.480774][ T5846] usb 4-1: media controller created
[  151.498073][ T7079] loop2: detected capacity change from 0 to 4096
[  151.515945][   T30] audit: type=1800 audit(1764261306.015:19): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.309" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  151.536508][    C0] vkms_vblank_simulate: vblank timer overrun
[  151.564187][ T7079] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  151.581722][ T7062] dvb-usb: bulk message failed: -22 (3/0)
[  151.615392][ T5846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.632468][ T7062] dvb-usb: bulk message failed: -22 (3/0)
[  151.679713][ T7079] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  151.741248][   T30] audit: type=1800 audit(1764261306.245:20): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.318" name="file1" dev="loop2" ino=30 res=0 errno=0
[  151.742147][ T5846] usb 4-1: selecting invalid altsetting 6
[  151.845854][ T5842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.858915][ T5846] usb 4-1: digital interface selection failed (-22)
[  151.867255][ T5846] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  151.880889][ T5846] usb 4-1: setting power OFF
[  151.885943][ T5846] dvb-usb: bulk message failed: -22 (2/0)
[  151.894165][ T5846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  151.908803][ T5846] (NULL device *): no alternate interface
[  152.022645][ T5846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  152.148221][ T5846] usb 4-1: USB disconnect, device number 3
[  152.837182][ T7071] loop5: detected capacity change from 0 to 32768
[  152.925252][ T7071] 
[  152.925252][ T7071]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  152.925252][ T7071] 
[  153.027637][ T7071] non-latin1 character 0x3ff found in JFS file name
[  153.065715][ T7071] mount with iocharset=utf8 to access
[  153.088868][ T7071] non-latin1 character 0x3ff found in JFS file name
[  153.135503][ T7071] mount with iocharset=utf8 to access
[  153.350140][ T1325] 
[  153.350140][ T1325]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.350140][ T1325] 
[  153.378797][ T1325] 
[  153.378797][ T1325]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.378797][ T1325] 
[  153.451762][  T111] 
[  153.451762][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.451762][  T111] 
[  153.504583][ T5831] 
[  153.504583][ T5831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.504583][ T5831] 
[  153.553468][ T7083] loop2: detected capacity change from 0 to 32768
[  153.560744][ T5831] 
[  153.560744][ T5831]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.560744][ T5831] 
[  153.579406][ T7113] loop6: detected capacity change from 0 to 1024
[  153.611130][ T7117] loop3: detected capacity change from 0 to 256
[  153.637798][ T7113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.675511][ T7083] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.765934][ T7117] FAT-fs (loop3): Directory bread(block 64) failed
[  153.778569][ T7117] FAT-fs (loop3): Directory bread(block 65) failed
[  153.795300][ T7117] FAT-fs (loop3): Directory bread(block 66) failed
[  153.809316][ T7117] FAT-fs (loop3): Directory bread(block 67) failed
[  153.816532][ T7117] FAT-fs (loop3): Directory bread(block 68) failed
[  153.816627][ T7127] veth1_to_bond: entered allmulticast mode
[  153.886462][ T7117] FAT-fs (loop3): Directory bread(block 69) failed
[  153.895079][ T7127] veth1_to_bond: entered promiscuous mode
[  153.913833][ T7117] FAT-fs (loop3): Directory bread(block 70) failed
[  153.936184][ T7123] veth1_to_bond: left promiscuous mode
[  153.945733][ T7117] FAT-fs (loop3): Directory bread(block 71) failed
[  153.975993][ T7123] veth1_to_bond: left allmulticast mode
[  153.989648][ T7117] FAT-fs (loop3): Directory bread(block 72) failed
[  154.019579][ T7083] XFS (loop2): Ending clean mount
[  154.024686][ T7117] FAT-fs (loop3): Directory bread(block 73) failed
[  154.040051][ T7083] XFS (loop2): Quotacheck needed: Please wait.
[  154.085908][ T7083] XFS (loop2): Quotacheck: Done.
[  154.107113][ T7117] capability: warning: `syz.3.337' uses deprecated v2 capabilities in a way that may be insecure
[  154.361030][ T5837] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.551040][ T7133] loop1: detected capacity change from 0 to 32768
[  154.643737][ T7133] 
[  154.643737][ T7133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.643737][ T7133] 
[  154.665647][ T7133] 
[  154.665647][ T7133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.665647][ T7133] 
[  154.676331][ T7133] 
[  154.676331][ T7133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.676331][ T7133] 
[  154.686789][ T7133] 
[  154.686789][ T7133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.686789][ T7133] 
[  154.697317][ T7133] 
[  154.697317][ T7133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.697317][ T7133] 
[  154.707768][ T7133] 
[  154.707768][ T7133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.707768][ T7133] 
[  154.722198][  T112] 
[  154.722198][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.722198][  T112] 
[  154.734940][ T7137] loop4: detected capacity change from 0 to 2048
[  154.796943][ T7141] 
[  154.796943][ T7141]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.796943][ T7141] 
[  154.820566][ T7137] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  154.876053][ T7141] 
[  154.876053][ T7141]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.876053][ T7141] 
[  154.905349][ T7137] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  154.968853][ T7141] 
[  154.968853][ T7141]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.968853][ T7141] 
[  155.008919][ T7137] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.028594][ T7141] 
[  155.028594][ T7141]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.028594][ T7141] 
[  155.129348][  T111] 
[  155.129348][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.129348][  T111] 
[  155.259857][ T5829] 
[  155.259857][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.259857][ T5829] 
[  155.290767][ T5829] 
[  155.290767][ T5829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  155.290767][ T5829] 
[  155.518864][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  155.740730][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.784291][ T7160] loop1: detected capacity change from 0 to 4096
[  155.818885][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  155.828009][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.864901][    T9] usb 3-1: Product: syz
[  155.875088][    T9] usb 3-1: Manufacturer: syz
[  155.879768][    T9] usb 3-1: SerialNumber: syz
[  156.069214][   T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  156.258814][   T43] usb 5-1: Using ep0 maxpacket: 32
[  156.281308][   T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 0
[  156.298857][   T43] usb 5-1: config 0 has no interface number 0
[  156.318926][   T43] usb 5-1: config 0 interface 125 has no altsetting 0
[  156.359284][   T43] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  156.380032][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.439160][   T43] usb 5-1: Product: syz
[  156.443387][   T43] usb 5-1: Manufacturer: syz
[  156.476181][   T43] usb 5-1: SerialNumber: syz
[  156.619387][   T43] usb 5-1: config 0 descriptor??
[  156.857096][   T43] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  156.985839][    T9] cdc_ncm 3-1:1.0: bind() failure
[  157.025770][    T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  157.049719][    T9] cdc_ncm 3-1:1.1: bind() failure
[  157.101715][    T9] usb 3-1: USB disconnect, device number 4
[  157.135534][ T7181] batadv_slave_1: entered promiscuous mode
[  157.144427][ T7180] batadv_slave_1: left promiscuous mode
[  157.295846][ T7193] loop6: detected capacity change from 0 to 22
[  157.306415][ T7193] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  157.402573][ T7193] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  157.513207][   T43] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  158.057168][ T7207] loop2: detected capacity change from 0 to 2048
[  158.065913][ T7200] loop3: detected capacity change from 0 to 32768
[  158.139325][   T43] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19!
[  158.140710][ T7200] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  158.154977][ T7200] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  158.201266][ T7200] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  158.214667][ T5914] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  158.218081][ T7207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.254657][ T7207] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.270584][ T5914] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  158.349896][   T43] usb 5-1: USB disconnect, device number 7
[  158.481857][ T7216] loop1: detected capacity change from 0 to 512
[  158.539696][ T7220] loop6: detected capacity change from 0 to 8
[  158.582446][ T7220] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  158.597048][ T7216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  158.638079][ T5841] udevd[5841]: incorrect cramfs checksum on /dev/loop6
[  158.649962][ T5914] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 379ms
[  158.694089][ T5914] gfs2: fsid=syz:syz.0: jid=0: Done
[  158.708306][ T7216] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  158.709783][ T7200] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  158.773095][ T7216] EXT4-fs (loop1): 1 truncate cleaned up
[  158.786038][ T5841] udevd[5841]: incorrect cramfs checksum on /dev/loop6
[  158.820691][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.887473][ T7216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.170361][ T7216] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.371: corrupted xattr block 33: invalid header
[  159.274558][ T7216] EXT4-fs (loop1): Remounting filesystem read-only
[  159.516048][ T5829] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.657037][ T7240] bridge0: entered promiscuous mode
[  159.682117][ T7240] macsec1: entered promiscuous mode
[  159.721253][ T7240] bridge0: port 3(macsec1) entered blocking state
[  159.727831][ T7240] bridge0: port 3(macsec1) entered disabled state
[  159.769529][ T7240] macsec1: entered allmulticast mode
[  159.809105][ T7240] bridge0: entered allmulticast mode
[  159.851139][ T7240] macsec1: left allmulticast mode
[  159.878947][ T7240] bridge0: left allmulticast mode
[  159.911316][ T7247] loop5: detected capacity change from 0 to 64
[  159.937700][ T7240] bridge0: left promiscuous mode
[  160.012762][ T7247] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  160.078796][ T5846] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  160.272605][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.301601][ T5846] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.333200][ T5846] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.359283][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.388590][ T5846] usb 2-1: Product: syz
[  160.401379][ T5846] usb 2-1: Manufacturer: syz
[  160.406571][ T5846] usb 2-1: SerialNumber: syz
[  160.469933][ T7266] mmap: syz.5.389 (7266) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  160.471683][ T7262] loop3: detected capacity change from 0 to 4096
[  160.488362][ T1213] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  160.625478][ T5914] IPVS: starting estimator thread 0...
[  160.633444][ T7268] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  160.649834][ T5846] usb 2-1: 0:2 : does not exist
[  160.669605][ T1213] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  160.696451][ T5846] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  160.711390][ T1213] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  160.740125][ T7269] IPVS: using max 30 ests per chain, 72000 per kthread
[  160.761689][ T1213] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  160.774847][ T5846] usb 2-1: USB disconnect, device number 7
[  160.804390][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.865568][ T7260] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  160.907433][ T6734] udevd[6734]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.964901][ T1213] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  161.041086][ T7275] o2cb: This node has not been configured.
[  161.069359][ T7275] o2cb: Cluster check failed. Fix errors before retrying.
[  161.118888][ T7275] (syz.3.393,7275,0):user_dlm_register:674 ERROR: status = -22
[  161.167642][ T7275] (syz.3.393,7275,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  161.261576][ T7278] loop4: detected capacity change from 0 to 256
[  161.430577][ T5846] usb 3-1: USB disconnect, device number 5
[  161.658873][   T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  161.723275][ T7288] netlink: 48 bytes leftover after parsing attributes in process `syz.3.398'.
[  161.846946][   T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.889330][   T43] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.936133][   T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  161.968810][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.993036][   T43] usb 7-1: Product: syz
[  161.997287][   T43] usb 7-1: Manufacturer: syz
[  162.038595][   T43] usb 7-1: SerialNumber: syz
[  162.249254][ T1213] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  162.314502][ T7306] loop5: detected capacity change from 0 to 256
[  162.344755][ T7306] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  162.430815][ T1213] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  162.439881][ T1213] usb 4-1: config 0 has no interface number 0
[  162.457543][ T1213] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  162.486468][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.495654][ T1213] usb 4-1: Product: syz
[  162.500965][ T1213] usb 4-1: Manufacturer: syz
[  162.505582][ T1213] usb 4-1: SerialNumber: syz
[  162.520110][ T1213] usb 4-1: config 0 descriptor??
[  162.748228][ T7316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  162.882881][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  163.008353][ T7321] vivid-007: disconnect
[  163.019308][ T7320] vivid-007: reconnect
[  163.063151][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  163.098036][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  163.107078][   T43] cdc_ncm 7-1:1.0: bind() failure
[  163.139999][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  163.174792][   T43] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71
[  163.193939][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.199452][   T43] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71
[  163.250732][    T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.274872][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.278943][   T43] usbtest 7-1:1.1: probe with driver usbtest failed with error -71
[  163.310661][    T9] usb 3-1: config 0 descriptor??
[  163.319656][   T43] usb 7-1: USB disconnect, device number 3
[  163.390160][ T1213] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x5a
[  163.594850][ T5846] usb 4-1: USB disconnect, device number 4
[  163.764735][ T7341] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  163.795505][    T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  165.028286][ T7346] loop6: detected capacity change from 0 to 131072
[  165.065674][ T7346] F2FS-fs (loop6): invalid crc value
[  165.200093][ T7346] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.213917][ T7346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  165.254420][ T7367] loop5: detected capacity change from 0 to 2048
[  165.266286][ T7367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.432948][ T5914] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  165.650520][ T5914] usb 5-1: Using ep0 maxpacket: 16
[  165.679382][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.705177][ T5914] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  165.738782][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.780412][ T5914] usb 5-1: config 0 descriptor??
[  165.801933][ T1213] usb 3-1: USB disconnect, device number 6
[  166.087507][ T7386] loop2: detected capacity change from 0 to 256
[  166.234908][ T5914] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  166.418872][   T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  166.462560][ T5914] usb 5-1: USB disconnect, device number 8
[  166.608811][   T43] usb 6-1: Using ep0 maxpacket: 16
[  166.620092][   T43] usb 6-1: config 0 has an invalid interface number: 238 but max is 0
[  166.635257][ T7399] loop1: detected capacity change from 0 to 2048
[  166.656067][   T43] usb 6-1: config 0 has no interface number 0
[  166.678181][   T43] usb 6-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.714529][ T7399] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  166.746004][   T43] usb 6-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.795853][ T7399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.805349][   T43] usb 6-1: config 0 interface 238 has no altsetting 0
[  166.830014][   T43] usb 6-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  166.859177][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.894711][   T43] usb 6-1: config 0 descriptor??
[  167.117729][ T7407] loop1: detected capacity change from 0 to 64
[  167.186500][ T7409] loop3: detected capacity change from 0 to 256
[  167.276950][ T7409] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  167.363524][   T43] logitech-djreceiver 0003:046D:C513.0009: unknown main item tag 0x0
[  167.399540][   T43] logitech-djreceiver 0003:046D:C513.0009: unknown main item tag 0x0
[  167.448223][   T43] logitech-djreceiver 0003:046D:C513.0009: unknown main item tag 0x0
[  167.478689][   T43] logitech-djreceiver 0003:046D:C513.0009: unknown main item tag 0x0
[  167.496952][   T43] logitech-djreceiver 0003:046D:C513.0009: unknown main item tag 0x0
[  167.552822][   T43] logitech-djreceiver 0003:046D:C513.0009: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.5-1/input238
[  167.591068][ T7417] netlink: 'syz.2.456': attribute type 10 has an invalid length.
[  167.634238][   T43] usb 6-1: USB disconnect, device number 7
[  167.702077][ T7417] team0: Port device netdevsim0 added
[  167.847404][ T7420] fido_id[7420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  167.984801][ T7428] loop6: detected capacity change from 0 to 2048
[  168.034229][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'.
[  168.044591][ T7434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.082317][ T7428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.131824][ T7434] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.337498][ T6345] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.559266][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  168.575913][ T7455] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.471'.
[  168.741539][    T9] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  168.772876][    T9] usb 4-1: config 0 has no interface number 0
[  168.794242][    T9] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  168.839461][    T9] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  168.870737][    T9] usb 4-1: config 0 interface 255 has no altsetting 0
[  168.909651][    T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  168.926618][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.945148][    T9] usb 4-1: config 0 descriptor??
[  169.015065][    T9] ums-realtek 4-1:0.255: USB Mass Storage device detected
[  169.109119][ T5914] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  169.222951][   T43] usb 4-1: USB disconnect, device number 5
[  169.259293][ T5914] usb 6-1: Using ep0 maxpacket: 16
[  169.284633][ T5914] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  169.299576][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.307675][ T5914] usb 6-1: Product: syz
[  169.312438][ T5914] usb 6-1: Manufacturer: syz
[  169.317047][ T5914] usb 6-1: SerialNumber: syz
[  169.327523][ T5914] usb 6-1: config 0 descriptor??
[  169.338508][ T5914] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  169.366254][ T5914] usb 6-1: Detected FT232H
[  169.389100][ T5846] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  169.542624][ T5914] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  169.551891][ T5846] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  169.561620][ T5846] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config
[  169.573062][ T5846] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  169.587366][ T5846] usb 5-1: config 1 has no interface number 1
[  169.593850][ T5846] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  169.621493][ T5846] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  169.634031][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.642390][ T5846] usb 5-1: Product: syz
[  169.646727][ T5846] usb 5-1: Manufacturer: syz
[  169.651474][ T5846] usb 5-1: SerialNumber: syz
[  169.920964][ T5846] usb 5-1: USB disconnect, device number 9
[  169.958856][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  170.011693][ T7494] netlink: 'syz.2.487': attribute type 3 has an invalid length.
[  170.038334][ T5914] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  170.068841][ T6964] udevd[6964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  170.181667][ T5914] usb 6-1: USB disconnect, device number 8
[  170.199452][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  170.213818][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.231715][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  170.253142][    T9] usb 7-1: config 0 descriptor??
[  170.258290][ T5914] ftdi_sio 6-1:0.0: device disconnected
[  170.270967][    T9] gspca_main: spca508-2.14.0 probing 8086:0110
[  170.377721][ T7502] loop1: detected capacity change from 0 to 2048
[  170.438202][ T7502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.483838][    T9] gspca_spca508: reg_read err -32
[  170.518967][    T9] gspca_spca508: reg_read err -32
[  170.536555][    T9] gspca_spca508: reg_read err -32
[  170.765286][    T9] gspca_spca508: reg_read err -71
[  170.780743][    T9] gspca_spca508: reg write: error -71
[  170.814697][    T9] spca508 7-1:0.0: probe with driver spca508 failed with error -71
[  170.877513][    T9] usb 7-1: USB disconnect, device number 4
[  170.949289][   T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  171.127260][   T43] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  171.158053][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.171351][   T43] usb 3-1: Product: syz
[  171.175543][   T43] usb 3-1: Manufacturer: syz
[  171.191218][   T43] usb 3-1: SerialNumber: syz
[  171.202093][   T43] usb 3-1: config 0 descriptor??
[  171.205181][ T7528] loop1: detected capacity change from 0 to 256
[  171.229455][   T43] hub 3-1:0.0: bad descriptor, ignoring hub
[  171.245886][ T7528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  171.258422][   T43] hub 3-1:0.0: probe with driver hub failed with error -5
[  171.425451][   T43] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  171.493603][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  171.508879][   T43] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  171.535093][   T43] usb 3-1: media controller created
[  171.590314][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  171.738927][   T43] DVB: Unable to find symbol dib7000p_attach()
[  171.772264][   T43] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  171.918815][   T43] rc_core: IR keymap rc-dib0700-rc5 not found
[  171.928932][   T43] Registered IR keymap rc-empty
[  171.945918][   T43] dvb-usb: could not initialize remote control.
[  171.965816][   T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  171.994174][ T7520] loop4: detected capacity change from 0 to 32768
[  172.001459][ T7544] i2c i2c-1: Invalid block size returned: 167
[  172.121736][ T7524] loop5: detected capacity change from 0 to 32768
[  172.206136][   T43] usb 3-1: USB disconnect, device number 7
[  172.287752][ T7524] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  172.342639][   T43] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  172.449905][ T7524] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  172.529161][ T7524] (syz.5.502,7524,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1
[  172.614766][ T7557] (syz.5.502,7557,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=281474976710721, rec_len=32768, name_len=1
[  172.801825][   T30] audit: type=1326 audit(1764261327.305:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  172.803529][ T5831] ocfs2: Unmounting device (7,5) on (node local)
[  172.851933][   T30] audit: type=1326 audit(1764261327.305:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  172.968845][   T30] audit: type=1326 audit(1764261327.335:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.060739][   T30] audit: type=1326 audit(1764261327.335:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.098884][   T30] audit: type=1326 audit(1764261327.345:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.121212][   T30] audit: type=1326 audit(1764261327.345:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.143472][   T30] audit: type=1326 audit(1764261327.345:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.170641][   T30] audit: type=1326 audit(1764261327.345:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.210677][   T30] audit: type=1326 audit(1764261327.345:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.268855][   T30] audit: type=1326 audit(1764261327.345:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7560 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b678f749 code=0x7ffc0000
[  173.396791][ T7573] loop6: detected capacity change from 0 to 764
[  173.438851][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  173.615145][    T9] usb 3-1: Using ep0 maxpacket: 32
[  173.631119][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.658828][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.678788][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  173.687907][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.829251][    T9] usb 3-1: config 0 descriptor??
[  174.033004][ T7559] loop3: detected capacity change from 0 to 32768
[  174.152421][ T7559] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.514 (7559)
[  174.257300][ T7559] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  174.278860][ T7559] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  174.320480][    T9] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  174.471177][ T7559] BTRFS info (device loop3): enabling ssd optimizations
[  174.516574][ T7559] BTRFS info (device loop3): turning on async discard
[  174.552727][ T5846] usb 3-1: USB disconnect, device number 8
[  174.577958][ T7559] BTRFS info (device loop3): enabling free space tree
[  174.589403][ T7559] BTRFS info (device loop3): use zstd compression, level 3
[  174.906773][ T5840] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  175.274878][ T7632] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.508990][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  175.639143][ T7643] netlink: 9 bytes leftover after parsing attributes in process `syz.3.534'.
[  175.689433][ T7643] netlink: 9 bytes leftover after parsing attributes in process `syz.3.534'.
[  175.691023][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[  175.778879][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  175.812269][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  175.821586][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.848998][    T9] usb 2-1: Product: syz
[  175.863171][    T9] usb 2-1: Manufacturer: syz
[  175.885413][    T9] usb 2-1: SerialNumber: syz
[  175.919749][    T9] usb 2-1: config 0 descriptor??
[  176.388930][    T9] usb 2-1: USB disconnect, device number 8
[  176.458522][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.568875][ T5846] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  176.607280][ T7664] loop4: detected capacity change from 0 to 128
[  176.691728][ T7666] loop3: detected capacity change from 0 to 1024
[  176.769763][ T5846] usb 6-1: Using ep0 maxpacket: 32
[  176.790996][ T5846] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  176.821092][ T5846] usb 6-1: config 0 has no interface number 0
[  176.856531][ T5846] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  176.884039][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.908860][ T5846] usb 6-1: Product: syz
[  176.923349][ T5846] usb 6-1: Manufacturer: syz
[  176.938227][ T5846] usb 6-1: SerialNumber: syz
[  176.956343][ T5846] usb 6-1: config 0 descriptor??
[  176.968954][ T5921] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  176.977940][ T5846] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  177.158841][ T5921] usb 7-1: Using ep0 maxpacket: 16
[  177.188697][ T5921] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[  177.193115][ T5846] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  177.197003][ T5921] usb 7-1: config 1 has no interface number 0
[  177.278629][ T5921] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  177.399861][ T5921] usb 7-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 1224, setting to 1024
[  177.438876][ T5921] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024
[  177.452176][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91
[  177.484754][ T5921] usb 7-1: config 1 interface 105 has no altsetting 0
[  177.546765][ T5921] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  177.564075][ T7675] loop3: detected capacity change from 0 to 32768
[  177.587440][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.594405][ T5846] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  177.617581][ T7675] 
[  177.617581][ T7675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.617581][ T7675] 
[  177.684280][ T5921] usb 7-1: Product: syz
[  177.688501][ T5921] usb 7-1: Manufacturer: syz
[  177.704104][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  177.718485][ T7675] 
[  177.718485][ T7675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.718485][ T7675] 
[  177.730785][ T7675] 
[  177.730785][ T7675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.730785][ T7675] 
[  177.741376][ T7675] 
[  177.741376][ T7675]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.741376][ T7675] 
[  177.748938][ T5921] usb 7-1: SerialNumber: syz
[  177.759909][  T112] 
[  177.759909][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.759909][  T112] 
[  177.762327][ T5846] usb 6-1: USB disconnect, device number 9
[  177.802229][ T7683] 
[  177.802229][ T7683]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.802229][ T7683] 
[  177.824296][ T7683] 
[  177.824296][ T7683]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.824296][ T7683] 
[  177.866223][ T7683] 
[  177.866223][ T7683]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.866223][ T7683] 
[  177.879640][ T5846] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  177.892577][ T7668] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  177.895412][ T5846] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  177.931904][ T7668] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  177.962704][ T7683] 
[  177.962704][ T7683]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.962704][ T7683] 
[  177.977416][ T5846] quatech2 6-1:0.51: device disconnected
[  177.994655][ T7683] 
[  177.994655][ T7683]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  177.994655][ T7683] 
[  178.054217][  T111] 
[  178.054217][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.054217][  T111] 
[  178.369622][ T7668] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  178.376937][ T7668] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  178.584640][   T36] 
[  178.584640][   T36]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.584640][   T36] 
[  178.629408][   T36] 
[  178.629408][   T36]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.629408][   T36] 
[  178.686330][ T5840] 
[  178.686330][ T5840]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.686330][ T5840] 
[  178.715885][ T5840] 
[  178.715885][ T5840]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.715885][ T5840] 
[  178.750505][  T112] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN NOPTI
[  178.762667][  T112] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  178.771091][  T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  178.780223][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  178.790287][  T112] RIP: 0010:lmLogSync+0x138/0x9d0
[  178.795360][  T112] Code: fd b0 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 b6 18 df fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 9a 18 df fe 49 8b 3f e8 42 fd b0 fe
[  178.815009][  T112] RSP: 0018:ffffc90002db7ae0 EFLAGS: 00010216
[  178.821083][  T112] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff88801df7bc80
[  178.829054][  T112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  178.837022][  T112] RBP: ffffc90002db7be8 R08: ffffc90002db7a2f R09: ffffc90002db78c8
[  178.844983][  T112] R10: dffffc0000000000 R11: fffff520005b6f46 R12: ffff88805593f800
[  178.852945][  T112] R13: dffffc0000000000 R14: ffff88803275e438 R15: 0000000000000030
[  178.860907][  T112] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[  178.869821][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.876388][  T112] CR2: 00007fd9049156c0 CR3: 0000000031939000 CR4: 0000000000350ef0
[  178.884344][  T112] Call Trace:
[  178.887609][  T112]  <TASK>
[  178.890524][  T112]  ? __pfx___mutex_lock+0x10/0x10
[  178.895555][  T112]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.901449][  T112]  ? __pfx_lmLogSync+0x10/0x10
[  178.906204][  T112]  ? srso_alias_return_thunk+0x5/0xfbef5
[  178.911831][  T112]  jfs_syncpt+0x7b/0x90
[  178.915977][  T112]  txEnd+0x2e5/0x530
[  178.919886][  T112]  jfs_lazycommit+0x5ba/0xa90
[  178.924557][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  178.929745][  T112]  ? __pfx_default_wake_function+0x10/0x10
[  178.935557][  T112]  ? __kthread_parkme+0x7b/0x200
[  178.940483][  T112]  ? srso_alias_return_thunk+0x5/0xfbef5
[  178.946104][  T112]  ? __kthread_parkme+0x1a1/0x200
[  178.951126][  T112]  kthread+0x711/0x8a0
[  178.955201][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[  178.960389][  T112]  ? __pfx_kthread+0x10/0x10
[  178.964973][  T112]  ? srso_alias_return_thunk+0x5/0xfbef5
[  178.970596][  T112]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.975787][  T112]  ? srso_alias_return_thunk+0x5/0xfbef5
[  178.981409][  T112]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.986603][  T112]  ? __pfx_kthread+0x10/0x10
[  178.991187][  T112]  ret_from_fork+0x4bc/0x870
[  178.995766][  T112]  ? __pfx_ret_from_fork+0x10/0x10
[  179.000868][  T112]  ? __switch_to_asm+0x39/0x70
[  179.005616][  T112]  ? __switch_to_asm+0x33/0x70
[  179.010362][  T112]  ? __pfx_kthread+0x10/0x10
[  179.014949][  T112]  ret_from_fork_asm+0x1a/0x30
[  179.019705][  T112]  </TASK>
[  179.022703][  T112] Modules linked in:
[  179.026660][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.034056][  T112] ---[ end trace 0000000000000000 ]---
[  179.050226][ T5921] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  179.059998][  T112] RIP: 0010:lmLogSync+0x138/0x9d0
[  179.066028][  T112] Code: fd b0 fe 4d 8d 7e f0 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 b6 18 df fe 4d 8b 3f 49 83 c7 30 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 9a 18 df fe 49 8b 3f e8 42 fd b0 fe
[  179.086047][  T112] RSP: 0018:ffffc90002db7ae0 EFLAGS: 00010216
[  179.092233][  T112] RAX: 0000000000000006 RBX: dffffc0000000000 RCX: ffff88801df7bc80
[  179.100713][  T112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  179.108777][  T112] RBP: ffffc90002db7be8 R08: ffffc90002db7a2f R09: ffffc90002db78c8
[  179.116845][  T112] R10: dffffc0000000000 R11: fffff520005b6f46 R12: ffff88805593f800
[  179.120455][ T5921] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  179.124845][  T112] R13: dffffc0000000000 R14: ffff88803275e438 R15: 0000000000000030
[  179.148092][  T112] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  179.165596][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.185934][  T112] CR2: 0000001b2f51cff8 CR3: 000000005ae53000 CR4: 0000000000350ef0
[  179.194226][ T5921] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  179.194341][  T112] Kernel panic - not syncing: Fatal exception
[  179.205370][  T112] Kernel Offset: disabled