last executing test programs:

2m15.217432185s ago: executing program 3 (id=3247):
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000061c2f20c81403006c0501e5020109021b00010000000009040000018ea44300090585"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)

2m13.311264772s ago: executing program 3 (id=3262):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000006c0)='P/')

2m10.968219416s ago: executing program 3 (id=3279):
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2m10.695374828s ago: executing program 3 (id=3282):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x95)
lseek(r0, 0x100, 0x1)

2m10.154407668s ago: executing program 3 (id=3287):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2m9.191284852s ago: executing program 3 (id=3296):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r2, 0x2, 0x8, 0x0, &(0x7f0000000100)})

2m8.26368357s ago: executing program 32 (id=3296):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r2, 0x2, 0x8, 0x0, &(0x7f0000000100)})

1m25.72660837s ago: executing program 4 (id=3578):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20000}], 0x3}}], 0x1, 0x0)

1m25.213327177s ago: executing program 4 (id=3582):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1m24.923165878s ago: executing program 4 (id=3584):
r0 = epoll_create1(0x80000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000740)={0x40000000})

1m24.31460335s ago: executing program 4 (id=3589):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

1m24.076360007s ago: executing program 4 (id=3591):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000280), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000400)=[{{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x2, 0x1, 0x1}, {0x2}}], 0x30)
close(r0)

1m23.462437051s ago: executing program 4 (id=3596):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa)
sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0)

1m23.086893436s ago: executing program 33 (id=3596):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa)
sendto(r0, &(0x7f0000000540)="f6b4ff270e6532b2d40765f9e8b460bd68b7e03a08d842e54efc234e21b4fec0541e98608bd3070ff700079b3dc0d7520e7351a1b4266e018855fc4819c097783f98064577274ff947328e4fa0ac578dfad9dba45afb427b80a1b4825dc8e8f06667f93a3d429d004d1933f47ac6e2d5d8b1e58d4eb92fa0a5c5b87b800712e299d0c714c78406947586a02fb600029a4daeb3efe7cba41f2d2d6626f63c7c7f0271cbac55d23e0afc639d9810", 0xfe6d621e554cffe6, 0xd63a66976f7dfbe0, 0x0, 0x0)

1m12.9405789s ago: executing program 5 (id=3664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)

1m11.932388229s ago: executing program 5 (id=3672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1m11.608896896s ago: executing program 5 (id=3674):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}]}, 0x5c}}, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe})

1m10.470262691s ago: executing program 5 (id=3683):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5531, &(0x7f0000000b00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1m7.962751417s ago: executing program 5 (id=3695):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c000580080001"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0)

1m5.447429616s ago: executing program 5 (id=3706):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001640)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000540)={0x9c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x5, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)

1m4.84220541s ago: executing program 34 (id=3706):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001640)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000540)={0x9c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x5, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000881}, 0x0)

5.920654621s ago: executing program 7 (id=4170):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0xd, 0x5, "87e7eb0ac8"}, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0x5, 0x1, "10"}})

4.179287772s ago: executing program 2 (id=4185):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

3.966000039s ago: executing program 1 (id=4189):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

3.810478026s ago: executing program 7 (id=4190):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xfe, 0x1c0, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080))
pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61)

3.644795192s ago: executing program 1 (id=4191):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0xa100)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)

3.643260359s ago: executing program 2 (id=4192):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd70000d0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000140049000dac0f"], 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)

3.349424139s ago: executing program 7 (id=4195):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff8000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40003, 0x0)
clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680})

3.182846097s ago: executing program 6 (id=4196):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000008, 0x32, 0xffffffffffffffff, 0x8528c000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="44cdd73f"])

3.04754236s ago: executing program 1 (id=4198):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r0, 0x7e423000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.039525507s ago: executing program 2 (id=4199):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b50000000008000000000000000001"], 0xb8}}, 0x4)
sendto$inet6(r0, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)

2.939950144s ago: executing program 7 (id=4200):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
syz_usb_disconnect(r0)
close(r1)

2.703129392s ago: executing program 0 (id=4201):
syz_open_dev$video(&(0x7f0000000040), 0x2, 0x40)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011})

2.661668601s ago: executing program 6 (id=4202):
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0)
r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6)

2.577132468s ago: executing program 8 (id=4203):
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x20043, 0x0)

2.50088404s ago: executing program 2 (id=4204):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)

2.480393567s ago: executing program 0 (id=4205):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2101, 0x0)

2.199597636s ago: executing program 6 (id=4206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040802)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000440203804002008008000340", @ANYRESDEC], 0x270}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

2.175977934s ago: executing program 0 (id=4207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r2, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}}, 0x810)

2.110701537s ago: executing program 8 (id=4208):
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
unlink(&(0x7f0000000100)='./file0\x00')
unshare(0x2c020400)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.87961218s ago: executing program 2 (id=4209):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.860155248s ago: executing program 0 (id=4210):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005})
io_setup(0x7, &(0x7f0000000400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000cc0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x9, r0, 0x0, 0x0, 0x4, 0x0, 0x4}])

1.83653938s ago: executing program 8 (id=4211):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000400)=@newneigh={0x24, 0x1c, 0x1, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x0, r2, 0x2, 0x4, 0x9}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20000010)

1.771389608s ago: executing program 6 (id=4212):
pipe(&(0x7f0000000500)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
close(r1)

1.563279078s ago: executing program 8 (id=4213):
syz_emit_ethernet(0x66, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x40}}}}}}}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)

1.515786096s ago: executing program 6 (id=4214):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e00)={'lo\x00', <r1=>0x0})
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40084}, 0xb0be822d26b8b7d6)

1.386028002s ago: executing program 1 (id=4215):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000000), 0x1, 0xb989, &(0x7f0000001280)="$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")

983.587442ms ago: executing program 7 (id=4216):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, r2, 0x1, 0x72b52d, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x74919564}]}]}, 0x28}}, 0x4004890)

655.438594ms ago: executing program 2 (id=4217):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
set_mempolicy_home_node(&(0x7f00003b5000/0x4000)=nil, 0x4000, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

639.319103ms ago: executing program 8 (id=4218):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc}, 0x50)
close(0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x88)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

373.71644ms ago: executing program 1 (id=4219):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4)
sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10)
recvmmsg(r0, &(0x7f0000000540), 0x1, 0x40002140, 0x0)

373.43487ms ago: executing program 0 (id=4220):
syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x1a1003)
r0 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x82cf, 0x8, 0x1000, 0x5cd}, &(0x7f0000000300), &(0x7f0000000080))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)={0x5}, 0x1)

154.65208ms ago: executing program 7 (id=4221):
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="9ebe7c71a123a6fb03cec931f700677e0b126f1f5986ccafe71c1b550f2ad260ec946ea93eebe89a41706be3379af67835b11def814f7ac51b52408b99ce20f30f9aee23926ed84e39a3ff1bf195c5226d69b99d06e54087339373adf824b4fb718af0fe0471186a576891d89c7643972071b738f0161048d2a011c751ca01a8c09e4efa145d0b130efac60ffba07796e33bc7a6027e8dc733e90027a769f2f0ec0093560ff3169887ed13d836582bfcb68c03cd1a47c4dfdcbe830da0e8e1948e245970d95a7154134106b80957e0d03cb91080f1e90b3b91c644fe5564e6946d9645864388374fc644c20c7749064cd80a86b1dc32821c6d4ac4c408993ebe2c3668871ff0fae09077346d84ea4497e56251c233e5ac203b558ca87f0064a2e647b4e5c71402763ba81b7c82eb00b9b36d9a65a9ef09ebe37d453fa989d5fb29eaf4686e5ad112762b03e5ab42dbbd03d376860e2d2925576eab67eaa5b5fa3ee2c431430480e24ca63a8964e1f91d9ab6da5128b8432f4eff3e0f8ec95fc2d04a48f6f10759c61c5566e6d613f685529eb5a2b87e4da439b59800612f38119253c3863222e0c9dcbaf12376745c877471d7a2bc243f516138433793c0094093e13ca3b834137b00b4fb8561474c35bd63c92c50bffa8ebf164c41fd5718b70c7da8dd79a830736434faa517607e97a3812956c3766e46d309a24912822cd77059f900159f7e58c0a72ec60932c84e1ad75e2dadbd217dd60d2937a561e4a887a312dc77a65fd7962484ae6aefaed551b85ce65770fc0b0a5a4f89941cbb8484c38af83c2fea123cd48af455b99fc0c14b186b16e61c73bbacf294e53ffd7a7b804417aab4282cf420a0a3685224c00dae021eb810b467ff68fb49b43742e5b1095f183c1053849fbae276a984419474ed39ca456ccd74185de100b4f607051f40c1471090cd864738d08a952752a67b4bf0ca6c73a9135c5068ea472b70ce126470db14d48f96b9f211dfaed75829b14a1a2cbac87de61c127b4c5063ef0dd40c5ede8a5bd20988862648e274edfcf3d424aa5c0770635d655ca10f09506a9837d73849d90ef533e6e2d9a13d7ee26474261448da7e5a1743b5ceaeebc65672734738881e1134bfddc6328f86312061972404c682e1f09edb22d91351831b6b963fa06e8fbfc250cc66c7d29b69938f0a75662abf4b585d0199928d9377ccf629d3385b10c6adebef1a767f2ad7e2ddcd4278fd56d5638180c920a3ccf50b08c193c932bb86f0101be47e35b5f1f5534b6f080845fc3602e5fa8bff7f806a7e6855a724167e43a01c428d428fb40bd996c6cf743ab524f5f3a0bb2f4b219188407d34ceec56f6ba97dacdcc41480b85edb698945704de95f8019fa80e992974fa400c34138e993c83f8516046e942ab89ae165dd7000cbe218688781a867f4fb75a57cd3dd04d1e4e88d3166c91c5db6fd9935d882a6f2d771e7699aa7e12c4a018df495b567e0f12c91615fb2184ba3ca098f783acd14b0c1ec489a73e3e9e0a759eadf7f646259981393a91e8279d95ed0216ddd593ccf215794aff73d9ed880b8a05a8170bff8bc7a2c556e192a3555780f57d8e9dbb1427c0d763d25e86f0a9ba1f5c2e6c87052f330f52a146c365a8eb3a2ec6914a60a5799af13975b9de44ab37f358390b8dda4f459f3f42b697d36b8e418a39f092b127cc400a2f8b1eae70849c66a9459596080e540b2f3f8a5e36448254555eb6e08e040e27fa14e506f3a9e7dca498786eab24eaa20d16adc485780288a7f71d84ac48674c08826dd1bfa72a5e48448fab1cafcac101cb4081c6ca76502d9d8639d0fe863aa3294c4bee68ed1fe4623e56cc4df2d42f5cdecdd2a7c64272908b5f197a0408f590191b2af3ca8c34577254003977a33112c3b4d1a51d5b53ab823b90438afc815e75ce36dc25d20979afcbb7b7c9e1d74e149c536584032f4fb459758e8cad5406eb8ddf9e07b24d7a8247b646098434f5abf5703c004dcd47aade4385936d0ddc0305177afaf1165db02778140385c8802e456e6a834bb53aa42067e3bc6c366b89cf2f7c55ee75290b093052a323e8fcce96acc75a00e72a0eb53ad5035f14f1d35491f1cb72647142341644f5047b4584ee0e39a51dde8992046e2ba55521766c55e99bf64628c339aac63cfc72269e493d46f95d4f533be54adb67d05b4941497450b3206d0bc4785305124792c091dfe4df456ccbb5dc64deffdae71b482a9deb02e536607ef689dcbf606346b47f3f2f7801f4d64b55defacc1bc0f7f3e86d1a810e766a79a2345551fcd450d8f038092bbf079400809725656235dba67766f3e5afbb03134119cb6e70af106791a68385634ad9fd599947d15d8448223e6b49a26733477366c8e318d46eba0aa2c9061cf44f8dbe08732a727788dd72518bb84b17828f4a400246e5bdc44f108bc309c5ac0af2aa8950cbe1942401aad8a688b508f6c688ec5a42c58c7749227a99be8ec0b85cbdc416bbcf077e6bbd59892f260291df286c64e2490e6be70bb849d8e42a253036bb74617607462bfd444dbac2e25f0794e9d2ee592f73009bd4a07fb9d20776cbc1a50758143941a6a597d28dc62110632d4b0f02ea7df532f6ee2263046ddd579c7a352527ad6cc92150ffd7a2603c1bdb01fba997ddc2c2346934e5f85fa30800db0454d837787a243c267118dfebf63fd76473573764388545389bacf12e949ea132467379a5a180acd17750ef7f306fad9a804801b55be6f33defc0c286f2f5a15926a3d1ef187f7000e241c759066dd42ae13b595f2b87edde1dcf1bb2deff9978d5716a1955fb19a3a8cc5e576c2cd10611eb1859f755cd16c5b656c30e32cb9ec858f98426267fb13988b2ceba6dec8ed0d38c46ebeb9ef89aa94d4619cc8ccbc5067aa1539588785439199b5942c4a5b41a2a2e28ccdaf9821ce34732a39f0cc35c8e88f16e28327184456be80ef6bb4b4e18b4872a93a50b33e4009af632b93ba73f9e6b9e4cd7be5a4a96a191464171219ad30b135e96f934f1b4780125dc637af326040ca8b9e706656b688054e1169b6af70959081b6cdee494c85a1dd73f5b737f8ed570471dd10c70241d7b6193a9ba2d24e0b025d36b273bd40f697ab6413ff59dc800754c652a3c29264af355fbf3a9df51889cc0ead6c8d99e93398d1616ffd7927ad38ed9d32ef4f7ca08e98482d2abfc7f9f", @ANYRES64=r1])

137.268787ms ago: executing program 8 (id=4222):
socket$l2tp(0x2, 0x2, 0x73)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0)
openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
read$char_usb(r0, &(0x7f00000000c0)=""/104, 0x12)

120.756124ms ago: executing program 1 (id=4223):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

118.919463ms ago: executing program 6 (id=4224):
r0 = syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x6e, 0x69, 0x4b, 0x10, 0x1199, 0x9003, 0xd734, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0xfb, 0x7, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xd3, 0x6b, 0x5, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xd1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001300)={0x14, 0x0, &(0x7f00000012c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

0s ago: executing program 0 (id=4225):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

kernel console output (not intermixed with test programs):

6090][ T5933] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  541.280682][T14520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.300592][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.404996][T14658] loop1: detected capacity change from 0 to 256
[  541.419877][T14520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.450622][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.462223][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  541.492353][T14520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.518845][ T5933] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  541.531749][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  541.566200][ T5933] usb 3-1: New USB device strings: Mfr=6, Product=0, SerialNumber=0
[  541.577500][ T5933] usb 3-1: Manufacturer: syz
[  541.583004][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3349'.
[  541.584429][T14520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.611841][ T5933] usb 3-1: config 0 descriptor??
[  541.984035][T14520] hsr_slave_0: entered promiscuous mode
[  542.031432][T14520] hsr_slave_1: entered promiscuous mode
[  542.046378][T14520] debugfs: 'hsr0' already exists in 'hsr'
[  542.067047][T14520] Cannot create hsr debugfs directory
[  542.095557][ T5933] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0
[  542.108554][T14669] loop4: detected capacity change from 0 to 4096
[  542.127863][ T5933] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0
[  542.159447][T14669] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  542.166477][ T5933] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0
[  542.219114][ T5933] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0
[  542.256004][ T5933] hid-thrustmaster 0003:044F:B65D.002F: unknown main item tag 0x0
[  542.317427][ T5933] hid-thrustmaster 0003:044F:B65D.002F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  542.370505][ T5933] hid-thrustmaster 0003:044F:B65D.002F: Wrong number of endpoints?
[  542.406703][    C1] hid-thrustmaster 0003:044F:B65D.002F: Unknown packet type 0x0, unable to proceed further with wheel init
[  542.446014][   T29] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  542.473124][T14669] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  542.499697][T14682] loop5: detected capacity change from 0 to 1024
[  542.616983][   T29] usb 1-1: Using ep0 maxpacket: 16
[  542.649589][ T5933] usb 3-1: USB disconnect, device number 35
[  542.655930][   T30] audit: type=1800 audit(1773416737.133:116): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3351" name="file1" dev="loop4" ino=30 res=0 errno=0
[  542.667260][   T29] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  542.706281][T14682] hfsplus: b-tree write err: -5, ino 3
[  542.752331][   T29] usb 1-1: config 0 has no interface number 0
[  542.779775][   T29] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  542.787153][   T30] audit: type=1800 audit(1773416737.183:117): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3351" name="file1" dev="loop4" ino=30 res=0 errno=0
[  542.816741][   T29] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.850032][   T29] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  542.884334][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.916965][   T29] usb 1-1: config 0 descriptor??
[  542.955296][   T13] hfsplus: b-tree write err: -5, ino 3
[  542.988898][T14684] fido_id[14684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  543.106027][   T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  543.269634][T14692] loop5: detected capacity change from 0 to 512
[  543.286166][   T24] usb 2-1: Using ep0 maxpacket: 32
[  543.300890][T14692] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  543.311549][   T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  543.348542][   T29] hid (null): unknown global tag 0xd
[  543.353905][   T29] hid (null): unknown global tag 0xd
[  543.372587][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.418882][   T29] hid (null): global environment stack underflow
[  543.441488][   T24] usb 2-1: config 0 descriptor??
[  543.471109][T14695] input: syz0 as /devices/virtual/input/input62
[  543.588183][T14520] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  543.673586][T14520] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  543.695061][   T29] usb 1-1: USB disconnect, device number 39
[  543.736251][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  543.773648][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  543.799977][T14520] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  543.827153][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  543.844708][   T24] usb 2-1: media controller created
[  543.891521][T14520] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  543.964498][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  544.086269][   T24] az6027: usb out operation failed. (-71)
[  544.102675][   T24] az6027: usb out operation failed. (-71)
[  544.119398][    T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  544.141957][   T24] stb0899_attach: Driver disabled by Kconfig
[  544.163889][   T24] az6027: no front-end attached
[  544.163889][   T24] 
[  544.183119][   T24] az6027: usb out operation failed. (-71)
[  544.196884][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  544.236185][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63
[  544.244211][    C0] hrtimer: interrupt took 86750 ns
[  544.298139][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  544.319970][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.354345][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  544.355944][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.404245][T14520] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.443036][   T24] usb 2-1: USB disconnect, device number 43
[  544.449675][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  544.485126][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.533961][T14520] 8021q: adding VLAN 0 to HW filter on device team0
[  544.587446][    T9] usb 5-1: config 0 descriptor??
[  544.599387][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.606739][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.728300][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.735566][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.856995][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  545.104804][    T9] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  545.165117][    T9] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  545.187185][    T9] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  545.226228][    T9] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  545.274423][    T9] playstation 0003:054C:0DF2.0031: unknown main item tag 0x0
[  545.321829][    T9] playstation 0003:054C:0DF2.0031: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[  545.440757][    T9] playstation 0003:054C:0DF2.0031: Invalid byte count transferred, expected 20 got 0
[  545.477861][   T30] audit: type=1800 audit(1773416739.963:118): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3370" name="file1" dev="tmpfs" ino=3067 res=0 errno=0
[  545.501651][    T9] playstation 0003:054C:0DF2.0031: Failed to retrieve DualSense pairing info: -22
[  545.558371][    T9] playstation 0003:054C:0DF2.0031: Failed to get MAC address from DualSense
[  545.588477][    T9] playstation 0003:054C:0DF2.0031: Failed to create dualsense.
[  545.631269][    T9] playstation 0003:054C:0DF2.0031: probe with driver playstation failed with error -22
[  545.636823][ T6003] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  545.704505][T14746] loop1: detected capacity change from 0 to 256
[  545.726263][    T9] usb 5-1: USB disconnect, device number 40
[  545.846288][ T6003] usb 3-1: Using ep0 maxpacket: 16
[  545.854984][T14750] netlink: 'syz.0.3376': attribute type 13 has an invalid length.
[  545.888382][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  545.934218][ T6003] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  545.983456][ T6003] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  546.024571][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.090750][ T6003] usb 3-1: config 0 descriptor??
[  546.101692][T14750] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.259906][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  546.319893][T14750] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  546.552446][ T6003] hid (null): invalid report_size 28520
[  546.755546][ T6003] usb 3-1: string descriptor 0 read error: -71
[  546.793919][ T6003] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  546.809209][ T6003] letsketch 0003:6161:4D15.0032: probe with driver letsketch failed with error -32
[  546.871048][ T6003] usb 3-1: USB disconnect, device number 36
[  547.099440][   T43] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.148254][   T43] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.184274][   T43] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.274114][   T43] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  547.332292][T14520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  547.534737][T14763] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  548.422525][T14787] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  548.591677][T14793] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  548.755829][T14520] veth0_vlan: entered promiscuous mode
[  548.809772][T14803] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3392'.
[  548.897812][T14520] veth1_vlan: entered promiscuous mode
[  549.052988][T14520] veth0_macvtap: entered promiscuous mode
[  549.098716][T14520] veth1_macvtap: entered promiscuous mode
[  549.193359][T14520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  549.261379][T14520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  549.282862][T14816] loop1: detected capacity change from 0 to 2048
[  549.325768][T14816] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  549.336295][ T1024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.348217][ T2990] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.371356][ T2990] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.394018][T14816] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  549.423400][ T2990] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  549.751447][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.826051][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.926977][   T43] wlan1: Trigger new scan to find an IBSS to join
[  550.001601][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  550.017813][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  550.488737][T14811] loop4: detected capacity change from 0 to 32768
[  550.505844][T14832] loop2: detected capacity change from 0 to 8
[  550.551334][T14831] loop6: detected capacity change from 0 to 1024
[  550.675145][T14811] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  550.816207][T14811] JBD2: Ignoring recovery information on journal
[  551.031845][T14811] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  551.475793][   T30] audit: type=1800 audit(1773416745.963:119): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3395" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  551.521953][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3405'.
[  551.566734][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3405'.
[  552.077844][ T5834] ocfs2: Unmounting device (7,4) on (node local)
[  552.859931][   T29] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  552.922153][T14855] loop1: detected capacity change from 0 to 32768
[  553.008168][T14855] JBD2: Ignoring recovery information on journal
[  553.031605][   T29] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  553.042942][   T29] usb 3-1: config 0 interface 0 has no altsetting 0
[  553.062444][   T29] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  553.072526][   T29] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  553.080831][   T29] usb 3-1: Product: syz
[  553.085166][   T29] usb 3-1: Manufacturer: syz
[  553.090651][   T29] usb 3-1: SerialNumber: syz
[  553.162030][   T29] usb 3-1: config 0 descriptor??
[  553.215867][T14855] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  553.219025][   T29] usb 3-1: selecting invalid altsetting 0
[  553.634957][   T29] usb 3-1: USB disconnect, device number 37
[  553.700646][T14892] loop4: detected capacity change from 0 to 4096
[  553.755758][T14892] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  553.932317][T14892] ntfs3(loop4): ino=19, mi_enum_attr
[  553.949199][T14892] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  553.976903][ T5830] ocfs2: Unmounting device (7,1) on (node local)
[  553.977546][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  554.097355][T14892] ntfs3(loop4): failed to convert "c46c" to cp874
[  554.124520][T14892] ntfs3(loop4): ino=20, mi_enum_attr
[  554.888061][ T2990] wlan1: Trigger new scan to find an IBSS to join
[  555.107764][T14896] loop6: detected capacity change from 0 to 32768
[  555.164079][T14896] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  555.287345][T14896] JBD2: Ignoring recovery information on journal
[  555.519465][T14896] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  555.677875][T14923] loop5: detected capacity change from 0 to 4096
[  555.765651][T14923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  555.803034][T14896] (syz.6.3425,14896,0):ocfs2_check_dir_entry:312 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds
[  555.803124][T14896] (syz.6.3425,14896,0):ocfs2_find_dir_space_el:3539 ERROR: status = -2
[  555.894658][   T30] audit: type=1800 audit(1773416750.383:120): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3438" name="file1" dev="loop5" ino=15 res=0 errno=0
[  555.899768][T14923] EXT4-fs (loop5): Online defrag not supported with bigalloc
[  555.926905][T14896] (syz.6.3425,14896,1):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2
[  555.946201][ T2990] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00
[  555.975140][T14896] (syz.6.3425,14896,1):ocfs2_rename:1487 ERROR: status = -2
[  556.011758][   T30] audit: type=1800 audit(1773416750.393:121): pid=14923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3438" name="file2" dev="loop5" ino=16 res=0 errno=0
[  556.032777][T14896] (syz.6.3425,14896,1):ocfs2_rename:1703 ERROR: status = -2
[  556.069009][T14934] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3441'.
[  556.200298][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  556.443013][T14520] ocfs2: Unmounting device (7,6) on (node local)
[  556.830408][T14950] netlink: 'syz.4.3449': attribute type 5 has an invalid length.
[  556.869688][T14950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3449'.
[  557.047011][T14955] tap0: tun_chr_ioctl cmd 1074025678
[  557.052388][T14955] tap0: group set to 0
[  557.721196][T14972] loop4: detected capacity change from 0 to 64
[  558.504213][T14990] loop2: detected capacity change from 0 to 256
[  558.592375][T14990] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  558.674407][T14963] loop6: detected capacity change from 0 to 32768
[  558.718345][T14963] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  558.772637][T14963] JBD2: Ignoring recovery information on journal
[  558.826020][   T29] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  558.934189][T14963] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  558.990881][   T29] usb 2-1: Using ep0 maxpacket: 16
[  559.006472][   T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.033631][   T29] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  559.101374][   T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.170973][   T29] usb 2-1: config 0 descriptor??
[  559.176286][   T30] audit: type=1800 audit(1773416753.663:122): pid=14963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3446" name="file1" dev="loop6" ino=17059 res=0 errno=0
[  559.282399][T15003] loop2: detected capacity change from 0 to 4096
[  559.336078][T15003] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  559.404041][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3472'.
[  559.538889][T15003] ntfs3(loop2): ino=19, mi_enum_attr
[  559.554552][T15003] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  559.663950][   T29] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  559.686358][T15003] ntfs3(loop2): failed to convert "c46c" to cp874
[  559.707092][T15003] ntfs3(loop2): ino=20, mi_enum_attr
[  559.804681][T14520] ocfs2: Unmounting device (7,6) on (node local)
[  560.133115][   T29] usb 2-1: USB disconnect, device number 44
[  560.457651][T15017] netlink: 'syz.2.3476': attribute type 13 has an invalid length.
[  560.989449][T15017] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.996950][T15017] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.347480][T15017] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  561.423696][T15017] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.062559][T15062] use of bytesused == 0 is deprecated and will be removed in the future,
[  562.072502][T15062] use the actual size instead.
[  562.694070][T15022] netlink: 'syz.6.3474': attribute type 4 has an invalid length.
[  562.702275][T15022] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3474'.
[  562.714195][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.737919][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.759533][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.786944][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.833223][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.870426][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  562.912308][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  562.942042][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  563.526303][ T5924] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  563.716052][ T5924] usb 5-1: Using ep0 maxpacket: 16
[  563.748462][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.786025][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  563.855976][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  563.896312][ T5924] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[  563.905496][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.935708][T15107] macvlan0: entered promiscuous mode
[  563.963475][T15107] netlink: 'syz.2.3503': attribute type 1 has an invalid length.
[  563.999252][ T5924] usb 5-1: config 0 descriptor??
[  564.033046][T15107] netlink: 'syz.2.3503': attribute type 2 has an invalid length.
[  564.210381][T15114] sch_fq: defrate 0 ignored.
[  564.437596][ T5924] sony 0003:1345:3008.0034: unknown main item tag 0x0
[  564.465058][ T5924] sony 0003:1345:3008.0034: unknown main item tag 0x0
[  564.490638][ T5924] sony 0003:1345:3008.0034: unknown main item tag 0x0
[  564.523743][ T5924] sony 0003:1345:3008.0034: unknown main item tag 0x0
[  564.542571][T15121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3508'.
[  564.566643][ T5924] sony 0003:1345:3008.0034: unknown main item tag 0x0
[  564.575570][ T5924] sony 0003:1345:3008.0034: unknown main item tag 0x0
[  564.623520][ T5924] sony 0003:1345:3008.0034: report_id 51781 is invalid
[  564.658054][ T5924] sony 0003:1345:3008.0034: item 0 2 1 8 parsing failed
[  564.716645][ T5924] sony 0003:1345:3008.0034: parse failed
[  564.722479][ T5924] sony 0003:1345:3008.0034: probe with driver sony failed with error -22
[  564.838913][ T5924] usb 5-1: USB disconnect, device number 41
[  564.957457][T15131] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  565.553061][T15145] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3516'.
[  565.747855][T15151] tipc: Started in network mode
[  565.773269][T15151] tipc: Node identity ac14140f, cluster identity 4711
[  565.813188][T15151] tipc: New replicast peer: 255.255.255.255
[  565.854521][T15151] tipc: Enabled bearer <udp:syz2>, priority 10
[  565.930677][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  565.937148][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  565.967896][ T5950] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  566.078855][T15160] loop5: detected capacity change from 0 to 2048
[  566.122704][T15160] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  566.175957][ T5950] usb 1-1: Using ep0 maxpacket: 32
[  566.225668][ T5950] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  566.250208][ T5950] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  566.286060][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  566.364722][ T5836] udevd[5836]: incorrect nilfs2 checksum on /dev/loop5
[  566.381368][ T5950] usb 1-1: config 1 has no interface number 0
[  566.395955][T15170] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  566.447630][ T5950] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  566.545930][ T5950] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  566.681051][ T5950] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  566.766242][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.920026][ T5950] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  567.129800][ T5950] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  567.444322][T15180] loop5: detected capacity change from 0 to 256
[  567.452240][T15173] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3525'.
[  567.513063][T15166] loop4: detected capacity change from 0 to 131072
[  567.514214][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3525'.
[  567.531128][T15166] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  567.538821][T15180] exfat: Deprecated parameter 'utf8'
[  567.538995][T15180] exfat: Deprecated parameter 'namecase'
[  567.552845][T15166] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  567.562002][T15166] F2FS-fs (loop4): QUOTA feature is enabled, so ignore qf_name
[  567.583215][T15166] F2FS-fs (loop4): invalid crc value
[  567.597138][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3525'.
[  567.615500][T15180] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  567.703171][T15166] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  567.714874][ T5950] usb 1-1: USB disconnect, device number 40
[  567.715966][ T5933] tipc: Node number set to 2886997007
[  567.743715][T15166] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955
[  567.785835][ T5950] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  567.849512][   T30] audit: type=1804 audit(1773416762.313:123): pid=15180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3526" name="/newroot/559/file0/file1" dev="loop5" ino=1048855 res=1 errno=0
[  567.947710][T15166] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903
[  568.640240][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3530'.
[  568.995426][T15163] loop1: detected capacity change from 0 to 32768
[  569.146598][T15163] read_mapping_page failed!
[  569.176092][T15163] diRead: diIAGRead returned -5
[  569.344021][T15185] loop2: detected capacity change from 0 to 131072
[  569.353739][T15185] F2FS-fs (loop2): Test dummy encryption mode enabled
[  569.490736][T15185] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  569.507153][T15185] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  569.588259][T15185] syz.2.3528 (pid 15185) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  570.500300][ T6003] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  570.707507][ T6003] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  570.774414][ T6003] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  570.796702][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.833283][T15230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3542'.
[  570.854853][ T6003] usb 6-1: config 0 descriptor??
[  571.114141][ T6003] usb 6-1: string descriptor 0 read error: -71
[  571.167520][ T6003] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  571.188342][T15234] vlan2: entered promiscuous mode
[  571.200264][T15234] bridge0: entered promiscuous mode
[  571.221291][ T6003] usb 6-1: USB disconnect, device number 35
[  571.580493][T15243] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  572.008212][T15255] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3551'.
[  572.181896][T15258] loop6: detected capacity change from 0 to 256
[  572.258509][T15258] exfat: Deprecated parameter 'namecase'
[  572.377356][T15258] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc534f927, utbl_chksum : 0xe619d30d)
[  572.754065][T15271] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  574.602691][T15311] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  574.771507][T15316] loop5: detected capacity change from 0 to 256
[  574.848178][T15316] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  574.950004][T15303] loop6: detected capacity change from 0 to 32768
[  575.136306][T15303] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  575.291395][T15303] XFS (loop6): Ending clean mount
[  575.358037][T15303] XFS (loop6): Quotacheck needed: Please wait.
[  575.484695][T15303] XFS (loop6): Quotacheck: Done.
[  575.838706][T14520] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  575.932784][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3587'.
[  576.092221][T15347] loop4: detected capacity change from 0 to 128
[  576.294294][ T5834] VFS: Lookup of '..×Ã' in minix loop4 would have caused loop
[  576.309810][ T5834] VFS: Lookup of '..×Ã' in minix loop4 would have caused loop
[  576.556772][ T5933] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  576.758117][T15358] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  576.766872][ T5933] usb 1-1: Using ep0 maxpacket: 32
[  576.800891][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  576.816035][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  576.826956][ T5933] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  576.836203][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.873894][ T5933] usb 1-1: config 0 descriptor??
[  576.946093][    T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  577.122523][ T1024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.143186][    T9] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  577.149508][ T1024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.174418][    T9] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  577.196039][    T9] usb 7-1: Product: syz
[  577.200312][    T9] usb 7-1: Manufacturer: syz
[  577.218243][    T9] usb 7-1: SerialNumber: syz
[  577.236388][    T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  577.381898][ T5933] koneplus 0003:1E7D:2D51.0035: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[  577.398106][ T1024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.417722][ T1024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.482072][T15365] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3599'.
[  577.670427][    T9] vp7045: USB control message 'in' went wrong.
[  577.678702][ T1024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.693425][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  577.719903][ T1024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  577.753738][    T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  577.791648][    T9] usb 7-1: USB disconnect, device number 2
[  577.820952][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  577.830549][ T5950] usb 1-1: USB disconnect, device number 41
[  577.852113][T15372] loop5: detected capacity change from 0 to 1024
[  577.859728][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  577.870548][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  577.897237][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  577.907163][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  577.933614][ T5854] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  578.052883][ T1024] batman_adv: batadv0: Removing interface: netdevsim0
[  578.150803][ T1024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.171949][   T43] hfsplus: b-tree write err: -5, ino 25
[  578.190071][   T43] hfsplus: b-tree write err: -5, ino 4
[  578.195683][   T43] hfsplus: b-tree write err: -5, ino 2
[  578.204131][ T1024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.223118][   T43] hfsplus: b-tree write err: -5, ino 20
[  578.452443][T15383] loop5: detected capacity change from 0 to 128
[  578.620106][ T5933] hid-generic 0005:4C4A:5508.0036: item fetching failed at offset 0/1
[  578.642659][ T5933] hid-generic 0005:4C4A:5508.0036: probe with driver hid-generic failed with error -22
[  578.934132][T15398] loop5: detected capacity change from 0 to 512
[  579.088504][T15398] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.3611: Parent and EA inode have the same ino 15
[  579.146779][T15398] loop5: lost filesystem error report for type 5 error -117
[  579.155920][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  579.169800][    C1] EXT4-fs (loop5): initial error at time 1773416773: ext4_xattr_inode_iget:436
[  579.178867][    C1] EXT4-fs (loop5): last error at time 1773416773: ext4_xattr_inode_iget:436
[  579.191061][T15398] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.3611: Parent and EA inode have the same ino 15
[  579.232161][T15398] loop5: lost filesystem error report for type 5 error -117
[  579.235817][T15398] EXT4-fs (loop5): 1 orphan inode deleted
[  579.290194][T15398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  579.390162][ T1024] bridge_slave_1: left allmulticast mode
[  579.428240][ T1024] bridge_slave_1: left promiscuous mode
[  579.434109][ T1024] bridge0: port 2(bridge_slave_1) entered disabled state
[  579.468407][ T1024] bridge_slave_0: left allmulticast mode
[  579.477678][   T30] audit: type=1326 audit(1773416773.963:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.0.3616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54bf19c799 code=0x0
[  579.506257][ T1024] bridge_slave_0: left promiscuous mode
[  579.512227][ T1024] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.006856][ T5841] Bluetooth: hci4: command tx timeout
[  581.425385][ T1024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  581.444561][ T1024] bond_slave_0: left allmulticast mode
[  581.454024][ T1024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  581.467234][ T1024] bond_slave_1: left allmulticast mode
[  581.474055][ T1024] bond0 (unregistering): Released all slaves
[  581.632724][T15373] chnl_net:caif_netlink_parms(): no params data found
[  581.689233][ T5833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  581.716448][ T5924] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  581.736622][ T1024] tipc: Disabling bearer <udp:syz2>
[  581.748045][ T1024] tipc: Left network mode
[  581.917863][ T5924] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  581.926719][ T5933] kernel read not supported for file /67/net/arp (pid: 5933 comm: kworker/1:6)
[  581.966542][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.981870][T15455] loop5: detected capacity change from 0 to 128
[  582.068385][ T5924] usb 3-1: config 0 descriptor??
[  582.086901][ T5841] Bluetooth: hci4: command tx timeout
[  582.120242][ T5924] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  582.133163][T15455] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  582.256749][T15455] ext4 filesystem being mounted at /576/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  582.441384][T12521] kernel read not supported for file /usbmon7 (pid: 12521 comm: kworker/0:2)
[  582.558824][ T5833] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  582.906675][T15373] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.935844][T15373] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.938904][ T5924] usb 3-1: USB disconnect, device number 38
[  582.947157][T15373] bridge_slave_0: entered allmulticast mode
[  583.015563][T15373] bridge_slave_0: entered promiscuous mode
[  583.106809][T15373] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.130645][T15373] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.170690][T15373] bridge_slave_1: entered allmulticast mode
[  583.205368][T15373] bridge_slave_1: entered promiscuous mode
[  583.270124][ T1024] hsr_slave_0: left promiscuous mode
[  583.296967][ T1024] hsr_slave_1: left promiscuous mode
[  583.303236][ T1024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  583.331199][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.369336][ T1024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  583.399290][ T1024] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.422766][ T1024] veth1_macvtap: left promiscuous mode
[  583.429314][ T1024] veth0_macvtap: left promiscuous mode
[  583.436563][ T1024] veth1_vlan: left promiscuous mode
[  583.462686][T15490] loop6: detected capacity change from 0 to 128
[  583.467284][ T1024] veth0_vlan: left promiscuous mode
[  583.499301][T15490] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  583.751112][   T43] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  584.166151][ T5841] Bluetooth: hci4: command tx timeout
[  584.258990][ T1024] team0 (unregistering): Port device team_slave_1 removed
[  584.283213][ T1024] team0 (unregistering): Port device team_slave_0 removed
[  584.559930][T15373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.621960][T15373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.737970][   T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  584.771795][T15373] team0: Port device team_slave_0 added
[  584.790189][T15373] team0: Port device team_slave_1 added
[  584.897266][T15373] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.924613][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.956120][   T24] usb 6-1: Using ep0 maxpacket: 16
[  585.007981][   T24] usb 6-1: config 0 has no interfaces?
[  585.033425][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  585.053586][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  585.062942][T15373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  585.078257][T15503] loop2: detected capacity change from 0 to 4096
[  585.097755][   T24] usb 6-1: SerialNumber: syz
[  585.122792][T15373] batman_adv: batadv0: Adding interface: batadv_slave_1
[  585.140019][   T24] usb 6-1: config 0 descriptor??
[  585.191533][T15373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  585.248140][T15513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3646'.
[  585.291311][T15503] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  585.317581][T15373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  585.331492][T15503] ntfs3(loop2): Failed to load $Extend (-22).
[  585.347891][T15503] ntfs3(loop2): Failed to initialize $Extend.
[  585.433227][T12521] usb 6-1: USB disconnect, device number 36
[  585.537927][T15503] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22.
[  585.728631][ T5832] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22.
[  585.963007][T15530] loop2: detected capacity change from 0 to 512
[  585.974236][T15373] hsr_slave_0: entered promiscuous mode
[  585.994547][   T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  586.000176][T15373] hsr_slave_1: entered promiscuous mode
[  586.014202][T15530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  586.060196][T15530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  586.075016][T15373] debugfs: 'hsr0' already exists in 'hsr'
[  586.107123][T15530] System zones: 1-2, 4-12, 8-8
[  586.113255][T15373] Cannot create hsr debugfs directory
[  586.135528][T15530] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.3650: iget: bad i_size value: 38620345925642
[  586.150293][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3652'.
[  586.206634][T15530] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  586.207275][T15530] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3650: couldn't read orphan inode 15 (err -117)
[  586.216558][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  586.216594][    C0] EXT4-fs (loop2): initial error at time 1773416780: ext4_orphan_get:1391: inode 15
[  586.216651][    C0] EXT4-fs (loop2): last error at time 1773416780: ext4_orphan_get:1391: inode 15
[  586.267391][ T5841] Bluetooth: hci4: command tx timeout
[  586.353876][T15530] loop2: lost filesystem error report for type 5 error -117
[  586.358010][T15530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  586.628985][T15547] overlayfs: upper fs does not support file handles, falling back to index=off.
[  586.677245][T15547] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  586.727971][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.016471][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3659'.
[  587.141405][T15557] loop2: detected capacity change from 0 to 164
[  587.217112][T15557] isofs_fill_super: root inode is not a directory. Corrupted media?
[  587.496824][T15561] loop6: detected capacity change from 0 to 512
[  587.590267][T15561] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.3661: bg 0: block 393: padding at end of block bitmap is not set
[  587.685338][T15561] loop6: lost filesystem error report for type 5 error -117
[  587.688115][    C0] EXT4-fs (loop6): initial error at time 1773416782: ext4_validate_block_bitmap:440
[  587.705006][    C0] EXT4-fs (loop6): last error at time 1773416782: ext4_validate_block_bitmap:440
[  587.724543][T15561] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  587.744770][T15561] loop6: lost filesystem error report for type 5 error -117
[  587.749071][T15561] EXT4-fs (loop6): 2 truncates cleaned up
[  587.764998][T15561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  587.898088][T15570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.934431][T15373] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  588.088883][T14520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.101974][T15573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  588.137987][T15373] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  588.199853][T15373] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  588.206034][T12521] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  588.261279][T15373] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  588.360571][T12521] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  588.384670][T12521] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  588.402672][T15592] loop6: detected capacity change from 0 to 256
[  588.424599][T12521] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  588.458665][T15592] exfat: Deprecated parameter 'namecase'
[  588.476568][T12521] usb 2-1: config 220 has no interface number 2
[  588.482937][T12521] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  588.520174][T15592] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  588.573030][T12521] usb 2-1: config 220 interface 0 has no altsetting 0
[  588.596475][T12521] usb 2-1: config 220 interface 76 has no altsetting 0
[  588.644181][T12521] usb 2-1: config 220 interface 1 has no altsetting 0
[  588.679998][T12521] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  588.690571][T12521] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.713251][T15373] 8021q: adding VLAN 0 to HW filter on device bond0
[  588.726838][T12521] usb 2-1: Product: syz
[  588.743294][T12521] usb 2-1: Manufacturer: syz
[  588.767140][T12521] usb 2-1: SerialNumber: syz
[  588.840051][T15373] 8021q: adding VLAN 0 to HW filter on device team0
[  588.894915][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.902224][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.933288][   T30] audit: type=1326 audit(1773416783.423:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15602 comm="syz.5.3674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e6039c799 code=0x0
[  588.953544][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.962704][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  589.030270][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3675'.
[  589.047890][T15607] netem: change failed
[  589.057656][T12521] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  589.075217][T12521] uvcvideo 2-1:220.0: No valid video chain found.
[  589.096429][T12521] usb 2-1: selecting invalid altsetting 0
[  589.152870][T12521] usb 2-1: selecting invalid altsetting 0
[  589.170527][T12521] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  589.243050][T12521] usb 2-1: USB disconnect, device number 45
[  589.456658][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3679'.
[  590.189224][T15373] 8021q: adding VLAN 0 to HW filter on device batadv0
[  590.615537][T15648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3687'.
[  590.648970][T15646] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.903176][T15646] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.056114][   T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  591.217073][   T24] usb 1-1: Using ep0 maxpacket: 16
[  591.226294][   T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.265958][   T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.300853][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  591.317990][T15646] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.325979][   T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  591.357778][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.398046][T15633] loop5: detected capacity change from 0 to 40427
[  591.408810][   T24] usb 1-1: config 0 descriptor??
[  591.425839][T15633] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  591.441646][T15633] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  591.480995][T15633] F2FS-fs (loop5): invalid crc value
[  591.548861][ T5805] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  591.615788][T15646] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.711648][T15633] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  591.727387][ T5805] usb 3-1: Using ep0 maxpacket: 32
[  591.748000][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  591.749095][T15633] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  591.778852][ T5805] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  591.800714][T15633] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  591.843100][T15373] veth0_vlan: entered promiscuous mode
[  591.850183][ T5805] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  591.886039][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.907472][T15373] veth1_vlan: entered promiscuous mode
[  591.921870][   T24] nzxt-smart2 0003:1E71:2009.0037: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  591.942824][ T5805] usb 3-1: config 0 descriptor??
[  591.971968][ T5805] hub 3-1:0.0: bad descriptor, ignoring hub
[  591.990221][ T5805] hub 3-1:0.0: probe with driver hub failed with error -5
[  592.019755][ T5805] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  592.106835][T15373] veth0_macvtap: entered promiscuous mode
[  592.133403][   T24] usb 1-1: USB disconnect, device number 42
[  592.173540][T15373] veth1_macvtap: entered promiscuous mode
[  592.339690][ T1024] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  592.347880][T15672] fido_id[15672]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  592.363868][ T1024] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.423199][ T5833] syz-executor: attempt to access beyond end of device
[  592.423199][ T5833] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  592.468407][ T5924] usb 3-1: USB disconnect, device number 39
[  592.471386][   T43] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.485104][ T5833] syz-executor: attempt to access beyond end of device
[  592.485104][ T5833] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  592.565526][T15373] batman_adv: batadv0: Interface activated: batadv_slave_0
[  592.585619][ T1024] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.622068][T15373] batman_adv: batadv0: Interface activated: batadv_slave_1
[  592.668135][ T1024] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  592.696532][ T1024] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  592.746773][ T1024] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  592.791379][ T1024] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  592.841179][   T43] kworker/u8:3: attempt to access beyond end of device
[  592.841179][   T43] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  592.885349][T15680] loop1: detected capacity change from 0 to 4096
[  592.923686][   T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  592.923749][   T43] Tainted: [L]=SOFTLOCKUP
[  592.923762][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  592.923802][   T43] Workqueue: writeback wb_workfn (flush-7:5)
[  592.923884][   T43] Call Trace:
[  592.923897][   T43]  <TASK>
[  592.923913][   T43]  dump_stack_lvl+0x100/0x190
[  592.923977][   T43]  f2fs_handle_critical_error+0x5d7/0x970
[  592.924024][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.924081][   T43]  ? f2fs_build_fault_attr+0x53/0x280
[  592.924153][   T43]  f2fs_write_end_io+0xc3f/0xf30
[  592.924203][   T43]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  592.924257][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.924315][   T43]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  592.924365][   T43]  bio_endio+0x7a3/0x910
[  592.924410][   T43]  submit_bio_noacct+0x64c/0x2010
[  592.924474][   T43]  f2fs_submit_write_bio+0x133/0x350
[  592.924516][   T43]  __submit_merged_bio+0x331/0x7b0
[  592.924566][   T43]  __submit_merged_write_cond+0x3fe/0x510
[  592.924621][   T43]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  592.924679][   T43]  ? __pfx___might_resched+0x10/0x10
[  592.924721][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.924780][   T43]  f2fs_write_cache_pages+0x21c0/0x2720
[  592.924857][   T43]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  592.924924][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.924970][   T43]  ? find_held_lock+0x2b/0x80
[  592.925023][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.925070][   T43]  ? mark_held_locks+0x40/0x70
[  592.925165][   T43]  ? veth_xmit+0x6a3/0xe90
[  592.925225][   T43]  ? veth_xmit+0x6a3/0xe90
[  592.925310][   T43]  ? __local_bh_enable_ip+0x9e/0x120
[  592.925365][   T43]  ? __dev_queue_xmit+0x8a0/0x4800
[  592.925407][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.925452][   T43]  ? __dev_queue_xmit+0x5af/0x4800
[  592.925497][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.925545][   T43]  ? rcu_is_watching+0x12/0xc0
[  592.925595][   T43]  f2fs_write_data_pages+0x799/0x16d0
[  592.925664][   T43]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  592.925726][   T43]  ? do_raw_spin_lock+0x128/0x260
[  592.925770][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.925819][   T43]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  592.925881][   T43]  do_writepages+0x278/0x600
[  592.925949][   T43]  ? __pfx_do_writepages+0x10/0x10
[  592.926008][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926063][   T43]  __writeback_single_inode+0x164/0x13c0
[  592.926113][   T43]  ? find_held_lock+0x2b/0x80
[  592.926162][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926213][   T43]  ? __pfx___writeback_single_inode+0x10/0x10
[  592.926262][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926310][   T43]  ? do_raw_spin_unlock+0x145/0x1e0
[  592.926352][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926413][   T43]  writeback_sb_inodes+0x766/0x1c70
[  592.926482][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926531][   T43]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  592.926581][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926627][   T43]  ? update_cfs_rq_load_avg+0x51/0x550
[  592.926741][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926789][   T43]  ? rcu_is_watching+0x12/0xc0
[  592.926831][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.926875][   T43]  ? queue_io+0x287/0x550
[  592.926916][   T43]  wb_writeback+0x1c0/0xbe0
[  592.926970][   T43]  ? __pfx_wb_writeback+0x10/0x10
[  592.927024][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.927071][   T43]  ? mark_held_locks+0x40/0x70
[  592.927128][   T43]  ? _raw_spin_unlock_irq+0x23/0x50
[  592.927187][   T43]  wb_workfn+0x142/0xc00
[  592.927241][   T43]  ? __pfx___schedule+0x10/0x10
[  592.927290][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.927341][   T43]  ? __pfx_wb_workfn+0x10/0x10
[  592.927400][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.927451][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.927501][   T43]  ? preempt_schedule_thunk+0x16/0x30
[  592.927572][   T43]  process_one_work+0x9d7/0x1920
[  592.927630][   T43]  ? __pfx_process_one_work+0x10/0x10
[  592.927664][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.927728][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.927782][   T43]  worker_thread+0x5da/0xe40
[  592.927830][   T43]  ? __pfx_worker_thread+0x10/0x10
[  592.927869][   T43]  ? kthread+0x13a/0x450
[  592.927927][   T43]  ? __pfx_worker_thread+0x10/0x10
[  592.927962][   T43]  kthread+0x370/0x450
[  592.928020][   T43]  ? __pfx_kthread+0x10/0x10
[  592.928083][   T43]  ret_from_fork+0x754/0xd80
[  592.928150][   T43]  ? __pfx_ret_from_fork+0x10/0x10
[  592.928215][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  592.928262][   T43]  ? __switch_to+0x7b4/0x1120
[  592.928306][   T43]  ? __pfx_kthread+0x10/0x10
[  592.928376][   T43]  ret_from_fork_asm+0x1a/0x30
[  592.928444][   T43]  </TASK>
[  593.443108][   T43] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  593.451319][   T43] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.451377][   T43] Tainted: [L]=SOFTLOCKUP
[  593.451392][   T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  593.451418][   T43] Workqueue: writeback wb_workfn (flush-7:5)
[  593.451482][   T43] Call Trace:
[  593.451495][   T43]  <TASK>
[  593.451511][   T43]  dump_stack_lvl+0x100/0x190
[  593.451575][   T43]  f2fs_handle_critical_error+0x5d7/0x970
[  593.451620][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.451669][   T43]  ? f2fs_build_fault_attr+0x53/0x280
[  593.451742][   T43]  f2fs_write_end_io+0xc3f/0xf30
[  593.451793][   T43]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  593.451847][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.451907][   T43]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  593.451972][   T43]  bio_endio+0x7a3/0x910
[  593.452015][   T43]  submit_bio_noacct+0x64c/0x2010
[  593.452087][   T43]  f2fs_submit_write_bio+0x133/0x350
[  593.452131][   T43]  __submit_merged_bio+0x331/0x7b0
[  593.452190][   T43]  __submit_merged_write_cond+0x3fe/0x510
[  593.452249][   T43]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  593.452309][   T43]  ? __pfx___might_resched+0x10/0x10
[  593.452350][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.452411][   T43]  f2fs_write_cache_pages+0x21c0/0x2720
[  593.452494][   T43]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  593.452563][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.452611][   T43]  ? find_held_lock+0x2b/0x80
[  593.452665][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.452713][   T43]  ? mark_held_locks+0x40/0x70
[  593.452817][   T43]  ? veth_xmit+0x6a3/0xe90
[  593.452870][   T43]  ? veth_xmit+0x6a3/0xe90
[  593.452962][   T43]  ? __local_bh_enable_ip+0x9e/0x120
[  593.453008][   T43]  ? __dev_queue_xmit+0x8a0/0x4800
[  593.453051][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.453098][   T43]  ? __dev_queue_xmit+0x5af/0x4800
[  593.453145][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.453202][   T43]  ? rcu_is_watching+0x12/0xc0
[  593.453253][   T43]  f2fs_write_data_pages+0x799/0x16d0
[  593.453324][   T43]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  593.453388][   T43]  ? do_raw_spin_lock+0x128/0x260
[  593.453433][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.453482][   T43]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  593.453542][   T43]  do_writepages+0x278/0x600
[  593.453608][   T43]  ? __pfx_do_writepages+0x10/0x10
[  593.453670][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.453726][   T43]  __writeback_single_inode+0x164/0x13c0
[  593.453776][   T43]  ? find_held_lock+0x2b/0x80
[  593.453825][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.453877][   T43]  ? __pfx___writeback_single_inode+0x10/0x10
[  593.453926][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.453973][   T43]  ? do_raw_spin_unlock+0x145/0x1e0
[  593.454015][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.454072][   T43]  writeback_sb_inodes+0x766/0x1c70
[  593.454142][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.454200][   T43]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  593.454249][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.454296][   T43]  ? update_cfs_rq_load_avg+0x51/0x550
[  593.454419][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.454467][   T43]  ? rcu_is_watching+0x12/0xc0
[  593.454508][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.454555][   T43]  ? queue_io+0x287/0x550
[  593.454601][   T43]  wb_writeback+0x1c0/0xbe0
[  593.454666][   T43]  ? __pfx_wb_writeback+0x10/0x10
[  593.454729][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.454776][   T43]  ? mark_held_locks+0x40/0x70
[  593.454833][   T43]  ? _raw_spin_unlock_irq+0x23/0x50
[  593.454892][   T43]  wb_workfn+0x142/0xc00
[  593.454947][   T43]  ? __pfx___schedule+0x10/0x10
[  593.454995][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.455047][   T43]  ? __pfx_wb_workfn+0x10/0x10
[  593.455101][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.455154][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.455216][   T43]  ? preempt_schedule_thunk+0x16/0x30
[  593.455282][   T43]  process_one_work+0x9d7/0x1920
[  593.455346][   T43]  ? __pfx_process_one_work+0x10/0x10
[  593.455382][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.455449][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.455505][   T43]  worker_thread+0x5da/0xe40
[  593.455558][   T43]  ? __pfx_worker_thread+0x10/0x10
[  593.455599][   T43]  ? kthread+0x13a/0x450
[  593.455657][   T43]  ? __pfx_worker_thread+0x10/0x10
[  593.455691][   T43]  kthread+0x370/0x450
[  593.455748][   T43]  ? __pfx_kthread+0x10/0x10
[  593.455811][   T43]  ret_from_fork+0x754/0xd80
[  593.455882][   T43]  ? __pfx_ret_from_fork+0x10/0x10
[  593.455949][   T43]  ? srso_alias_return_thunk+0x5/0xfbef5
[  593.455995][   T43]  ? __switch_to+0x7b4/0x1120
[  593.456038][   T43]  ? __pfx_kthread+0x10/0x10
[  593.456102][   T43]  ret_from_fork_asm+0x1a/0x30
[  593.456183][   T43]  </TASK>
[  593.936567][   T43] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  594.227971][T15692] loop2: detected capacity change from 0 to 16
[  594.284436][T15680] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  594.364078][T15692] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  594.429920][T15692] erofs (device loop2): mounted with root inode @ nid 36.
[  594.442682][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  594.456034][ T5933] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  594.506660][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.564260][   T55] ntfs3(loop1): ino=5, mi_enum_attr
[  594.636829][ T5933] usb 7-1: Using ep0 maxpacket: 16
[  594.668397][ T5933] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  594.698191][ T5933] usb 7-1: config 0 has no interface number 0
[  594.704409][ T5933] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  594.767524][ T5933] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  594.806287][ T5933] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  594.842640][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.891822][ T3004] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  594.915221][ T5933] usb 7-1: config 0 descriptor??
[  595.067366][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.090785][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.200410][ T3004] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.359088][ T3004] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.551941][ T3004] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  595.570074][ T5933] input: HID 28bd:0071 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0038/input/input64
[  595.656390][T15708] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3598'.
[  595.669376][T15708] netlink: 'syz.7.3598': attribute type 7 has an invalid length.
[  595.681983][T15709] loop2: detected capacity change from 0 to 512
[  595.696362][T15708] netlink: 'syz.7.3598': attribute type 8 has an invalid length.
[  595.724589][ T5933] input: HID 28bd:0071 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0038/input/input65
[  595.740233][T15709] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  595.754286][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3598'.
[  595.893547][T15708] gretap0: entered promiscuous mode
[  595.902191][ T5933] uclogic 0003:28BD:0071.0038: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.6-1/input1
[  595.919052][T15709] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1139: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  595.984350][T15709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.3709: bg 0: block 248: padding at end of block bitmap is not set
[  596.036924][ T5933] usb 7-1: USB disconnect, device number 3
[  596.066153][T15708] gretap0: left promiscuous mode
[  596.097895][T15709] loop2: lost filesystem error report for type 5 error -117
[  596.106642][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  596.120567][    C1] EXT4-fs (loop2): last error at time 1773416790: ext4_validate_block_bitmap:440
[  596.135135][T15709] Quota error (device loop2): write_blk: dquota write failed
[  596.159808][T15709] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  596.189752][T15709] EXT4-fs error (device loop2): ext4_acquire_dquot:6999: comm syz.2.3709: Failed to acquire dquot type 1
[  596.259691][T15709] loop2: lost filesystem error report for type 5 error -117
[  596.295647][T15709] EXT4-fs (loop2): 1 truncate cleaned up
[  596.348353][T15709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  596.477650][T15715] fido_id[15715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  596.517529][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  596.529823][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  596.543745][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  596.571611][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  596.584227][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  596.686304][ T3004] bridge_slave_1: left allmulticast mode
[  596.692031][ T3004] bridge_slave_1: left promiscuous mode
[  596.777929][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.832665][T15729] loop7: detected capacity change from 0 to 2048
[  596.859115][T15729] EXT4-fs: Ignoring removed mblk_io_submit option
[  596.880173][ T3004] bridge_slave_0: left allmulticast mode
[  596.910267][ T3004] bridge_slave_0: left promiscuous mode
[  596.947213][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state
[  596.968459][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  596.990893][ T1024] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  597.022405][T15729] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  597.026586][ T1024] EXT4-fs error (device loop2): ext4_release_dquot:7035: comm kworker/u8:7: Failed to release dquot type 1
[  597.048699][ T1024] loop2: lost filesystem error report for type 5 error -117
[  597.289023][T15729] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.3714: bg 0: block 234: padding at end of block bitmap is not set
[  597.329298][T15741] loop2: detected capacity change from 0 to 1024
[  597.357537][T15741] EXT4-fs: Ignoring removed orlov option
[  597.379260][T15729] EXT4-fs (loop7): Remounting filesystem read-only
[  597.421368][T15741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  597.492376][T15741] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.3717: unexpected EA_INODE flag
[  597.669651][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.724379][T15373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.341005][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3722'.
[  598.370561][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3722'.
[  598.736636][ T5841] Bluetooth: hci3: command tx timeout
[  599.074124][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.123219][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.138543][ T3004] bond0 (unregistering): Released all slaves
[  599.425671][ T3004] tipc: Left network mode
[  599.448437][T15785] netlink: 'syz.7.3730': attribute type 27 has an invalid length.
[  599.590571][T15789] netem: invalid attributes len -1
[  599.619283][T15791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3731'.
[  599.634060][T15789] netem: change failed
[  599.651179][T15790] tipc: Started in network mode
[  599.660582][T15790] tipc: Node identity ac14140f, cluster identity 4711
[  599.698707][T15790] tipc: New replicast peer: 255.255.255.255
[  599.739881][T15790] tipc: Enabled bearer <udp:syz2>, priority 10
[  600.045151][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3735'.
[  600.104434][T15802] netlink: 'syz.6.3735': attribute type 7 has an invalid length.
[  600.148411][T15802] netlink: 'syz.6.3735': attribute type 8 has an invalid length.
[  600.186707][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3735'.
[  600.201330][T15806] loop2: detected capacity change from 0 to 512
[  600.383021][T15802] gretap0: entered promiscuous mode
[  600.452476][T15802] gretap0: left promiscuous mode
[  600.768739][T15819] loop2: detected capacity change from 0 to 256
[  600.806441][ T5841] Bluetooth: hci3: command tx timeout
[  600.947454][T15819] FAT-fs (loop2): Directory bread(block 64) failed
[  600.954066][T15819] FAT-fs (loop2): Directory bread(block 65) failed
[  601.007592][T15819] FAT-fs (loop2): Directory bread(block 66) failed
[  601.022122][T15819] FAT-fs (loop2): Directory bread(block 67) failed
[  601.031155][T15819] FAT-fs (loop2): Directory bread(block 68) failed
[  601.038815][T15819] FAT-fs (loop2): Directory bread(block 69) failed
[  601.048108][T15819] FAT-fs (loop2): Directory bread(block 70) failed
[  601.054668][T15819] FAT-fs (loop2): Directory bread(block 71) failed
[  601.062170][T15819] FAT-fs (loop2): Directory bread(block 72) failed
[  601.071479][T15819] FAT-fs (loop2): Directory bread(block 73) failed
[  601.078690][ T5805] tipc: Node number set to 2886997007
[  601.427610][ T3004] hsr_slave_0: left promiscuous mode
[  601.487037][ T3004] hsr_slave_1: left promiscuous mode
[  601.493449][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  601.545577][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0
[  601.609419][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  601.650024][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1
[  601.727099][ T3004] batman_adv: batadv0: Removing interface: ipvlan2
[  601.869456][ T3004] veth1_macvtap: left promiscuous mode
[  601.878454][ T3004] veth0_macvtap: left promiscuous mode
[  601.884482][ T3004] veth1_vlan: left promiscuous mode
[  601.890817][ T3004] veth0_vlan: left promiscuous mode
[  601.905809][T15844] loop7: detected capacity change from 0 to 4096
[  602.775479][T15859] loop1: detected capacity change from 0 to 4096
[  602.805014][T15859] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  602.872004][T15859] ntfs3(loop1): Failed to load $Extend (-22).
[  602.886528][ T5841] Bluetooth: hci3: command tx timeout
[  602.903316][T15859] ntfs3(loop1): Failed to initialize $Extend.
[  603.075399][ T3004] team0 (unregistering): Port device team_slave_1 removed
[  603.155525][ T3004] team0 (unregistering): Port device team_slave_0 removed
[  603.190973][ T3004] veth0_to_team (unregistering): left allmulticast mode
[  603.862816][T15720] chnl_net:caif_netlink_parms(): no params data found
[  604.028880][T15884] loop2: detected capacity change from 0 to 512
[  604.176640][T15884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  604.270552][T15884] ext4 filesystem being mounted at /649/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.370602][T15884] EXT4-fs warning (device loop2): ext4_group_add:1715: Can't resize non-sparse filesystem further
[  604.552434][T15720] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.600350][T15720] bridge0: port 1(bridge_slave_0) entered disabled state
[  604.627029][T15720] bridge_slave_0: entered allmulticast mode
[  604.644574][T15720] bridge_slave_0: entered promiscuous mode
[  604.681981][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.698044][T15720] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.730034][T15720] bridge0: port 2(bridge_slave_1) entered disabled state
[  604.776310][T15720] bridge_slave_1: entered allmulticast mode
[  604.813502][T15871] loop1: detected capacity change from 0 to 32768
[  604.817947][T15720] bridge_slave_1: entered promiscuous mode
[  604.901485][T15871] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  604.974593][ T5841] Bluetooth: hci3: command tx timeout
[  605.101728][T15871] XFS (loop1): Ending clean mount
[  605.184466][T15720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.346105][T15720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.399231][ T5830] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  605.591552][T15720] team0: Port device team_slave_0 added
[  605.635403][T15720] team0: Port device team_slave_1 added
[  605.892791][T15720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.935792][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.040052][T15720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  606.284115][T15720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  606.315955][T15720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  606.409544][T15720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.686092][ T5950] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  606.759663][T15720] hsr_slave_0: entered promiscuous mode
[  606.777113][T15720] hsr_slave_1: entered promiscuous mode
[  606.795924][T15720] debugfs: 'hsr0' already exists in 'hsr'
[  606.801878][T15720] Cannot create hsr debugfs directory
[  606.848348][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.890150][ T5950] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  606.911169][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.967758][ T5950] usb 1-1: config 0 descriptor??
[  607.225708][ T5950] usbhid 1-1:0.0: can't add hid device: -71
[  607.243283][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3784'.
[  607.254779][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  607.279006][T15950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3784'.
[  607.305483][ T5950] usb 1-1: USB disconnect, device number 43
[  607.776227][ T5950] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  607.917714][T15930] loop7: detected capacity change from 0 to 32768
[  607.950462][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  607.967647][T15930] xfs: Deprecated parameter 'attr2'
[  607.984401][ T5950] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.40
[  608.028942][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.031209][T15930] XFS: attr2 mount option is deprecated.
[  608.084996][ T5950] usb 1-1: config 0 descriptor??
[  608.102351][T15720] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  608.141851][ T5950] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input66
[  608.162067][T15720] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  608.207323][T15930] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  608.326899][    C1] usb 1-1: unknown answer from device
[  608.360939][T15720] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  608.451931][T15720] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  608.535420][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.539865][ T5174] usb 1-1: control msg error: -71
[  608.543420][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.556543][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.563916][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.572296][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.579742][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.587134][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.594509][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.602740][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.610113][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.617721][    C1] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.625186][    C1] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1
[  608.734032][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.741603][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.749918][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.757914][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.765393][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.773231][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.783187][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.797079][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.804876][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.813595][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.820979][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.828613][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.836013][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.843457][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.851062][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.858468][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.865823][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.873370][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.880762][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.888495][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.895955][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.903406][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.910814][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.918337][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.925692][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.933570][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.941214][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.948638][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.956055][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.963507][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.971251][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.978652][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.986116][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  608.993488][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.000869][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.007597][T15930] XFS (loop7): Ending clean mount
[  609.008541][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.020809][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.028355][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.036270][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.043642][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.051338][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.058808][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.068351][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.075711][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.083095][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.095970][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.104134][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.115944][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.123914][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.135810][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.146322][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.153919][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.161692][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.169627][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.176452][ T5174] usb 1-1: control msg error: -71
[  609.177336][    C0] usb 1-1: pegasus_irq - nonzero urb status received: -71
[  609.182382][T15930] XFS (loop7): Quotacheck needed: Please wait.
[  609.189157][    C0] usb 1-1: pegasus_irq - usb_submit_urb failed with result -1
[  609.193605][ T5950] usb 1-1: USB disconnect, device number 44
[  609.297419][T15995] loop1: detected capacity change from 0 to 512
[  609.403811][T15998] loop6: detected capacity change from 0 to 512
[  609.419974][T15720] 8021q: adding VLAN 0 to HW filter on device bond0
[  609.434157][T15995] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  609.444754][T15720] 8021q: adding VLAN 0 to HW filter on device team0
[  609.479739][   T55] bridge0: port 1(bridge_slave_0) entered blocking state
[  609.487018][   T55] bridge0: port 1(bridge_slave_0) entered forwarding state
[  609.513322][T15995] EXT4-fs (loop1): orphan cleanup on readonly fs
[  609.521552][T15930] XFS (loop7): Quotacheck: Done.
[  609.596144][T15998] EXT4-fs warning (device loop6): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  609.625665][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  609.633066][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  609.714511][T15995] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated!
[  609.770728][T15995] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  609.801601][T15998] EXT4-fs warning (device loop6): dx_probe:848: Enable large directory feature to access it
[  609.876027][T15995] EXT4-fs error (device loop1): ext4_acquire_dquot:6999: comm syz.1.3794: Failed to acquire dquot type 1
[  609.886096][T15998] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.3795: Corrupt directory, running e2fsck is recommended
[  609.912966][T15995] loop1: lost filesystem error report for type 5 error -5
[  609.915896][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  609.929611][    C1] EXT4-fs (loop1): initial error at time 1773416804: ext4_acquire_dquot:6999
[  609.938481][    C1] EXT4-fs (loop1): last error at time 1773416804: ext4_acquire_dquot:6999
[  609.956825][T15720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  609.968988][T15995] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.3794: bg 0: block 40: padding at end of block bitmap is not set
[  609.979235][T15998] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  610.001998][T15995] loop1: lost filesystem error report for type 5 error -117
[  610.025993][T15995] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[  610.036491][T15998] EXT4-fs error (device loop6): ext4_iget_extra_inode:5024: inode #15: comm syz.6.3795: corrupted in-inode xattr: invalid ea_ino
[  610.098481][T15995] loop1: lost filesystem error report for type 5 error -117
[  610.103288][T15995] EXT4-fs (loop1): 1 truncate cleaned up
[  610.107626][T15373] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  610.133394][T15998] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  610.135889][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  610.141086][T15995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  610.145168][    C0] EXT4-fs (loop6): initial error at time 1773416804: ext4_iget_extra_inode:5024
[  610.156016][T15998] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3795: couldn't read orphan inode 15 (err -117)
[  610.164366][    C0] : inode 15
[  610.164396][    C0] EXT4-fs (loop6): last error at time 1773416804: ext4_iget_extra_inode:5024: inode 15
[  610.265983][T15998] loop6: lost filesystem error report for type 5 error -117
[  610.268817][T15998] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  610.494051][ T5830] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  610.780258][T15720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  610.837481][T15998] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  611.058533][T14520] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  612.261015][T15720] veth0_vlan: entered promiscuous mode
[  612.328907][T15720] veth1_vlan: entered promiscuous mode
[  612.483055][T15720] veth0_macvtap: entered promiscuous mode
[  612.525618][T15720] veth1_macvtap: entered promiscuous mode
[  612.649542][T15720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  612.692719][T15720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  612.808461][ T3004] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  612.844452][ T3004] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  612.912472][ T3004] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  612.921951][T16073] block nbd7: not configured, cannot reconfigure
[  612.931157][ T3004] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.098420][T16046] loop1: detected capacity change from 0 to 32768
[  613.158317][T16046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3808 (16046)
[  613.270696][T16046] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  613.295575][T16082] loop2: detected capacity change from 0 to 256
[  613.318009][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.326688][T16046] BTRFS info (device loop1): using sha256 checksum algorithm
[  613.350271][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.462255][T16082] FAT-fs (loop2): Directory bread(block 64) failed
[  613.486442][T16082] FAT-fs (loop2): Directory bread(block 65) failed
[  613.493140][T16082] FAT-fs (loop2): Directory bread(block 66) failed
[  613.545099][T16046] BTRFS info (device loop1): rebuilding free space tree
[  613.602887][T16082] FAT-fs (loop2): Directory bread(block 67) failed
[  613.652140][T16082] FAT-fs (loop2): Directory bread(block 68) failed
[  613.656759][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.688471][T16046] BTRFS info (device loop1): enabling ssd optimizations
[  613.696273][T16082] FAT-fs (loop2): Directory bread(block 69) failed
[  613.703101][T16082] FAT-fs (loop2): Directory bread(block 70) failed
[  613.706736][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.726244][T16046] BTRFS info (device loop1): using spread ssd allocation scheme
[  613.767448][T16082] FAT-fs (loop2): Directory bread(block 71) failed
[  613.777657][T16046] BTRFS info (device loop1): turning on async discard
[  613.785336][T16046] BTRFS info (device loop1): enabling free space tree
[  613.825294][T16082] FAT-fs (loop2): Directory bread(block 72) failed
[  613.852954][T16082] FAT-fs (loop2): Directory bread(block 73) failed
[  613.859988][T16046] BTRFS info (device loop1): force clearing of disk cache
[  614.496294][   T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  614.555378][ T5830] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  614.716965][   T24] usb 9-1: Using ep0 maxpacket: 16
[  614.754020][   T24] usb 9-1: config 0 has an invalid interface number: 2 but max is 0
[  614.802605][   T24] usb 9-1: config 0 has no interface number 0
[  614.835121][   T24] usb 9-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.907978][   T24] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  614.937019][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.013458][   T24] usb 9-1: config 0 descriptor??
[  615.114971][T16125] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3823'.
[  615.510932][   T24] mcp2221 0003:04D8:00DD.0039: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input2
[  615.696213][T16133] loop1: detected capacity change from 0 to 2048
[  615.749687][T16133] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  615.844855][T16133] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  615.980795][   T24] usb 9-1: USB disconnect, device number 2
[  616.045712][T16143] loop7: detected capacity change from 0 to 512
[  616.168896][T16143] EXT4-fs: Ignoring removed bh option
[  616.232665][T16143] EXT4-fs (loop7): Test dummy encryption mode enabled
[  616.300145][T16143] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  616.559859][T16143] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3831: inode has both inline data and extents flags
[  616.674195][T16143] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  616.675353][T16143] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.3831: couldn't read orphan inode 15 (err -117)
[  616.684668][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  616.684705][    C1] EXT4-fs (loop7): initial error at time 1773416811: ext4_orphan_get:1391: inode 15
[  616.684762][    C1] EXT4-fs (loop7): last error at time 1773416811: ext4_orphan_get:1391: inode 15
[  616.842993][    T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  616.884108][T16143] loop7: lost filesystem error report for type 5 error -117
[  616.888678][T16143] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  617.055267][    T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  617.064759][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.109124][    T9] usb 1-1: config 0 descriptor??
[  617.134011][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  617.284703][T15373] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  617.314358][T16174] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3842'.
[  617.765032][    T9] gspca_cpia1: usb_control_msg 01, error -71
[  617.780238][    T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  617.808488][T16183] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3845'.
[  617.816357][    T9] usb 1-1: USB disconnect, device number 45
[  618.105512][T16166] loop2: detected capacity change from 0 to 32768
[  618.172393][T16166] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  618.233598][T16166] JBD2: Ignoring recovery information on journal
[  618.294693][T16195] vivid-002: disconnect
[  618.376342][T16193] vivid-002: reconnect
[  618.455920][T16166] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  618.749181][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3853'.
[  618.880297][T16212] loop1: detected capacity change from 0 to 2048
[  618.975047][T16212] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  619.017182][T16212] UDF-fs: Scanning with blocksize 512 failed
[  619.121244][T16212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  619.181825][ T5832] ocfs2: Unmounting device (7,2) on (node local)
[  620.219589][T16202] loop8: detected capacity change from 0 to 32768
[  620.328967][T16202] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  620.433594][T16202] XFS (loop8): Ending clean mount
[  620.528004][T16202] XFS (loop8): Quotacheck needed: Please wait.
[  620.542609][T16255] netlink: 'syz.7.3865': attribute type 5 has an invalid length.
[  620.641834][T16202] XFS (loop8): Quotacheck: Done.
[  620.968983][T15720] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  621.325974][    T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  621.512302][    T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  621.555946][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.610730][    T9] usb 1-1: config 0 descriptor??
[  621.652578][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  621.864435][    T9] gp8psk: usb in 128 operation failed.
[  622.104260][    T9] gp8psk: FW Version = 76.140.219 (0x4c8cdb)  Build 2187/40/149
[  622.312019][    T9] gp8psk: usb in 149 operation failed.
[  622.338197][    T9] gp8psk: failed to get FPGA version
[  622.376026][    T9] gp8psk: usb in 138 operation failed.
[  622.396066][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  622.442241][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  622.522401][    T9] usb 1-1: USB disconnect, device number 46
[  622.734506][T16304] netlink: 360 bytes leftover after parsing attributes in process `syz.6.3882'.
[  623.415983][    T9] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  623.586176][    T9] usb 1-1: Using ep0 maxpacket: 16
[  623.628889][    T9] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.671189][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  623.699085][    T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  623.737755][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.786073][    T9] usb 1-1: config 0 descriptor??
[  624.004116][T16305] loop8: detected capacity change from 0 to 32768
[  624.094590][T16305] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  624.283540][    T9] mcp2221 0003:04D8:00DD.003A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  624.394564][T16305] XFS (loop8): Ending clean mount
[  624.455628][T16343] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  624.504808][T16343] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  624.681009][   T24] usb 1-1: USB disconnect, device number 47
[  624.707438][T15720] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  627.382479][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  627.389255][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  628.062833][T16429] netlink: 'syz.0.3933': attribute type 6 has an invalid length.
[  628.096487][T16429] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3933'.
[  628.141889][T16436] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.3933'.
[  628.616218][    T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0)
[  629.179408][T16456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3943'.
[  629.912244][   T30] audit: type=1326 audit(1773416824.403:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  629.958298][   T30] audit: type=1326 audit(1773416824.403:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.017068][   T30] audit: type=1326 audit(1773416824.423:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.116971][   T30] audit: type=1326 audit(1773416824.423:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.225160][   T30] audit: type=1326 audit(1773416824.423:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.302101][   T30] audit: type=1326 audit(1773416824.423:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.384452][   T30] audit: type=1326 audit(1773416824.423:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.472033][   T30] audit: type=1326 audit(1773416824.423:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.510612][T16488] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  630.528592][T16488] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  630.577108][   T30] audit: type=1326 audit(1773416824.423:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  630.730077][   T30] audit: type=1326 audit(1773416824.423:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.8.3952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f92a6b9c799 code=0x7ffc0000
[  631.246065][T16494] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.301644][T16504] loop7: detected capacity change from 0 to 256
[  631.328920][T16504] exfat: Deprecated parameter 'utf8'
[  631.351666][T16504] exfat: Deprecated parameter 'namecase'
[  631.414766][T16504] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  631.637730][T16509] loop6: detected capacity change from 0 to 64
[  631.680467][T16494] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.765651][T16509] Trying to free block not in datazone
[  632.037251][T16494] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.589777][T16494] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.088984][   T13] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.313019][ T3004] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.387835][ T3004] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.518964][ T2963] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  634.917188][ T6003] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  634.937878][T16593] Falling back ldisc for ttyS3.
[  635.083218][ T6003] usb 9-1: config 0 has no interfaces?
[  635.091625][ T6003] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  635.118828][ T6003] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.159410][ T6003] usb 9-1: config 0 descriptor??
[  635.457441][T16590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  635.476323][T16590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  635.525402][ T6003] usb 9-1: USB disconnect, device number 3
[  636.001347][ T6003] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  636.247192][ T6003] usb 9-1: config 0 has an invalid interface number: 69 but max is 0
[  636.293830][ T6003] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  636.347215][ T6003] usb 9-1: config 0 has no interface number 0
[  636.367197][ T6003] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  636.388975][ T6003] usb 9-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  636.470668][ T6003] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  636.496088][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.504173][ T6003] usb 9-1: Product: syz
[  636.546797][ T6003] usb 9-1: Manufacturer: syz
[  636.551489][ T6003] usb 9-1: SerialNumber: syz
[  636.574660][ T6003] usb 9-1: config 0 descriptor??
[  636.612682][ T6003] hub 9-1:0.69: bad descriptor, ignoring hub
[  636.629095][ T6003] hub 9-1:0.69: probe with driver hub failed with error -5
[  636.658303][ T6003] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  636.689761][ T6003] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  636.723278][ T6003] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  636.825366][ T6003] usb 9-1: USB disconnect, device number 4
[  636.894173][ T6003] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  636.970936][ T6003] cyberjack 9-1:0.69: device disconnected
[  637.567244][ T6003] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  637.680414][T16662] loop6: detected capacity change from 0 to 4096
[  637.742075][ T6003] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  637.769941][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.796340][ T6003] usb 2-1: Product: syz
[  637.812560][ T6003] usb 2-1: Manufacturer: syz
[  637.836356][ T6003] usb 2-1: SerialNumber: syz
[  637.861597][T16662] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  637.906713][T16662] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  637.993992][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  637.994021][   T30] audit: type=1800 audit(1773416832.483:145): pid=16662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4018" name="file1" dev="loop6" ino=30 res=0 errno=0
[  638.041612][T16678] loop2: detected capacity change from 0 to 1024
[  638.049809][T16662] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex
[  638.051719][T16680] bridge0: entered promiscuous mode
[  638.094233][T16661] ntfs3(loop6): ino=1e, "file1" attr_set_size_ex
[  638.107895][T16680] macvlan2: entered promiscuous mode
[  638.140293][T16678] hfsplus: b-tree write err: -5, ino 2
[  638.207777][T16678] hfsplus: bad catalog entry type
[  638.274529][   T13] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  638.304703][T14520] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  638.375900][T14520] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  638.386652][T14520] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  638.415766][   T12] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  638.423429][   T13] hfsplus: b-tree write err: -5, ino 25
[  638.450509][   T13] hfsplus: b-tree write err: -5, ino 4
[  638.494828][   T13] hfsplus: b-tree write err: -5, ino 2
[  638.532594][ T6003] rtl8150 2-1:1.0: eth13: rtl8150 is detected
[  638.541297][   T13] hfsplus: b-tree write err: -5, ino 26
[  638.714930][ T6003] usb 2-1: USB disconnect, device number 46
[  640.316269][T16741] netlink: 'syz.1.4048': attribute type 21 has an invalid length.
[  640.324294][T16741] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4048'.
[  640.410583][T16741] netlink: 'syz.1.4048': attribute type 21 has an invalid length.
[  640.466444][T16741] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4048'.
[  642.254265][T16776] loop7: detected capacity change from 0 to 32768
[  642.321786][T16776] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  642.412629][T16776] JBD2: Ignoring recovery information on journal
[  642.427879][T16784] loop8: detected capacity change from 0 to 32768
[  642.609747][T16793] team_slave_0: entered allmulticast mode
[  642.658067][T16793] team_slave_0: entered promiscuous mode
[  642.663561][T16776] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  642.719002][T16797] UFO tlock:0xffffc9000295a480
[  642.767324][T16800] loop6: detected capacity change from 0 to 16
[  642.838659][T16800] erofs (device loop6): mounted with root inode @ nid 36.
[  642.882863][  T110] ERROR: (device loop8): dbFree: error in block map
[  642.882863][  T110] 
[  642.928885][T16776] overlayfs: upper fs does not support tmpfile.
[  642.959684][T16800] syz.6.4070: attempt to access beyond end of device
[  642.959684][T16800] loop6: rw=0, sector=301994239, nr_sectors = 1 limit=16
[  642.984467][T16776] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  642.986505][  T110] ERROR: (device loop8): remounting filesystem as read-only
[  643.005504][T16776] overlayfs: failed to set xattr on upper
[  643.030454][T16800] erofs (device loop6): read error -5 @ 0 of nid 36
[  643.051099][T16776] overlayfs: ...falling back to redirect_dir=nofollow.
[  643.068391][T16776] overlayfs: ...falling back to index=off.
[  643.099121][T16776] overlayfs: ...falling back to uuid=null.
[  643.109271][T16776] overlayfs: upper fs missing required features.
[  643.384320][T15373] ocfs2: Unmounting device (7,7) on (node local)
[  643.495982][T16077] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  643.541112][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4079'.
[  643.667115][T16077] usb 1-1: Using ep0 maxpacket: 8
[  643.704575][T16077] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  643.745454][T16077] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  643.785921][T16077] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  643.816045][T16077] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  643.847031][T16077] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  643.876072][T16077] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.124079][T16077] usb 1-1: GET_CAPABILITIES returned 0
[  644.133672][T16077] usbtmc 1-1:16.0: can't read capabilities
[  644.344094][T16077] usb 1-1: USB disconnect, device number 48
[  644.819947][T16845] netlink: 'syz.6.4091': attribute type 4 has an invalid length.
[  644.986558][T16077] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  645.086259][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  645.170268][T16077] usb 9-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  645.196432][T16077] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 184
[  645.216455][T16077] usb 9-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  645.225615][T16077] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.259099][T16077] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  645.266750][ T5892] usb 8-1: Using ep0 maxpacket: 8
[  645.293184][ T5892] usb 8-1: unable to get BOS descriptor or descriptor too short
[  645.312380][ T5892] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  645.336484][ T5892] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 249, changing to 7
[  645.354286][ T5892] usb 8-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40
[  645.364477][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.386019][ T5892] usb 8-1: Product: syz
[  645.390393][ T5892] usb 8-1: Manufacturer: syz
[  645.395144][ T5892] usb 8-1: SerialNumber: syz
[  645.406997][   T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  645.466035][T16077] gspca_sn9c2028: read1 error -32
[  645.472836][T16077] gspca_sn9c2028: read1 error -32
[  645.479788][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4098'.
[  645.575978][   T24] usb 7-1: Using ep0 maxpacket: 32
[  645.602630][   T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  645.641146][   T24] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  645.653448][ T5892] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  645.699422][ T6003] usb 9-1: USB disconnect, device number 5
[  645.706131][   T24] usb 7-1: config 0 interface 0 has no altsetting 0
[  645.730384][ T5892] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -22
[  645.753536][   T24] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  645.774347][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.805509][   T24] usb 7-1: Product: syz
[  645.815350][   T24] usb 7-1: Manufacturer: syz
[  645.820379][   T24] usb 7-1: SerialNumber: syz
[  645.840432][   T24] usb 7-1: config 0 descriptor??
[  645.949289][T16868] loop2: detected capacity change from 0 to 1024
[  645.972424][T16868] EXT4-fs: Ignoring removed orlov option
[  646.081064][ T5892] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -22
[  646.140605][ T5892] usb 8-1: USB disconnect, device number 2
[  646.202479][T16868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  646.269417][ T6832] udevd[6832]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  646.302626][   T24] gs_usb 7-1:0.0: Configuring for 1 interfaces
[  646.362736][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4103'.
[  646.459697][T16880] loop8: detected capacity change from 0 to 128
[  646.503764][T16880] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  646.573282][T16880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  646.704569][   T24] gs_usb 7-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  646.746975][   T24] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71
[  646.785423][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  646.791678][   T24] usb 7-1: USB disconnect, device number 4
[  646.827367][ T5805] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  646.988723][ T5805] usb 8-1: Using ep0 maxpacket: 16
[  647.027820][ T5805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.060258][ T5805] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.097339][ T5805] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  647.135925][ T5805] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  647.175937][ T5805] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.205374][ T5805] usb 8-1: config 0 descriptor??
[  647.327208][T16898] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input67
[  647.537849][T16903] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4115'.
[  647.704124][ T5805] microsoft 0003:045E:07DA.003B: ignoring exceeding usage max
[  647.732733][ T5805] microsoft 0003:045E:07DA.003B: unsupported Resolution Multiplier 0
[  647.793544][T16908] loop6: detected capacity change from 0 to 256
[  647.823143][ T5805] microsoft 0003:045E:07DA.003B: implement() called with n (152) > 32! (kworker/1:3)
[  647.880267][ T5805] microsoft 0003:045E:07DA.003B: unsupported Resolution Multiplier 0
[  647.932822][   T30] audit: type=1800 audit(1773416842.423:146): pid=16908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4116" name="file1" dev="loop6" ino=1048892 res=0 errno=0
[  647.956715][ T5805] microsoft 0003:045E:07DA.003B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0
[  648.006815][ T5805] microsoft 0003:045E:07DA.003B: no inputs found
[  648.013239][ T5805] microsoft 0003:045E:07DA.003B: could not initialize ff, continuing anyway
[  648.128191][ T5805] usb 8-1: USB disconnect, device number 3
[  648.384923][T16917] serio: Serial port ptm0
[  648.422434][T16911] fido_id[16911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  649.195997][T16077] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  649.386404][T16936] loop1: detected capacity change from 0 to 4096
[  649.396879][T16077] usb 8-1: config 0 has no interfaces?
[  649.402439][T16077] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  649.442510][T16936] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  649.457291][T16077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.502577][T16077] usb 8-1: config 0 descriptor??
[  649.745958][T16936] ntfs3(loop1): ino=19, mi_enum_attr
[  649.787948][T16936] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  649.796714][T16929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.849794][T16929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.872444][ T5805] usb 8-1: USB disconnect, device number 4
[  650.315941][T16077] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  650.503006][T16077] usb 8-1: config 0 has an invalid interface number: 69 but max is 0
[  650.515939][T16077] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  650.531318][T16943] loop8: detected capacity change from 0 to 32768
[  650.538437][T16077] usb 8-1: config 0 has no interface number 0
[  650.544582][T16077] usb 8-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  650.569724][T16943] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4130 (16943)
[  650.608265][T16077] usb 8-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  650.657412][T16077] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  650.676505][T16943] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  650.687006][T16077] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.703451][T16077] usb 8-1: Product: syz
[  650.711745][T16077] usb 8-1: Manufacturer: syz
[  650.719059][T16943] BTRFS info (device loop8): using blake2b checksum algorithm
[  650.727901][T16077] usb 8-1: SerialNumber: syz
[  650.749143][T16077] usb 8-1: config 0 descriptor??
[  650.777166][T16077] hub 8-1:0.69: bad descriptor, ignoring hub
[  650.832483][T16077] hub 8-1:0.69: probe with driver hub failed with error -5
[  650.894025][T16077] cyberjack 8-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  650.944357][T16943] BTRFS info (device loop8): enabling ssd optimizations
[  650.976459][T16077] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  650.996012][T16943] BTRFS info (device loop8): turning on async discard
[  651.004197][T16943] BTRFS info (device loop8): enabling free space tree
[  651.012203][T16943] BTRFS info (device loop8): use zstd compression, level 3
[  651.036567][T16077] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  651.146978][T16077] usb 8-1: USB disconnect, device number 5
[  651.216713][T16077] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  651.263412][T16077] cyberjack 8-1:0.69: device disconnected
[  651.787037][T15720] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  652.007638][T16959] loop6: detected capacity change from 0 to 32768
[  652.040417][T16959] (syz.6.4136,16959,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  652.103379][T16959] (syz.6.4136,16959,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  652.175598][T16959] (syz.6.4136,16959,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  652.220004][T16959] JBD2: Ignoring recovery information on journal
[  652.467833][T16959] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  652.651743][T17007] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4148'.
[  652.696036][T17007] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4148'.
[  652.714390][T17007] netlink: 'syz.7.4148': attribute type 5 has an invalid length.
[  652.742637][T17007] netlink: 43 bytes leftover after parsing attributes in process `syz.7.4148'.
[  652.781548][T16959] (syz.6.4136,16959,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  652.852258][T16959] (syz.6.4136,16959,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  652.916595][T16959] (syz.6.4136,16959,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  652.938979][T16959] (syz.6.4136,16959,1):ocfs2_quota_read:201 ERROR: status = -5
[  653.013532][T16959] Quota error (device loop6): find_next_id: Can't read quota tree block 5
[  653.024442][T16959] (syz.6.4136,16959,1):ocfs2_get_next_id:921 ERROR: status = -5
[  653.177818][T14520] ocfs2: Unmounting device (7,6) on (node local)
[  653.357995][   T30] audit: type=1326 audit(1773416847.853:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17001 comm="syz.8.4145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a6b9c799 code=0x7fc00000
[  653.874721][T17031] loop6: detected capacity change from 0 to 256
[  653.917970][T17031] exfat: Deprecated parameter 'namecase'
[  653.923897][T17031] exfat: Deprecated parameter 'utf8'
[  653.954452][T17031] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  654.326076][ T5892] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  654.495938][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  654.513935][ T5892] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  654.525916][ T5892] usb 2-1: config 0 has no interface number 0
[  654.532104][ T5892] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  654.595019][ T5892] usb 2-1: config 0 interface 85 has no altsetting 0
[  654.624739][ T5892] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  654.655355][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.679529][ T5892] usb 2-1: Product: syz
[  654.683803][ T5892] usb 2-1: Manufacturer: syz
[  654.705472][ T5892] usb 2-1: SerialNumber: syz
[  654.733450][ T5892] usb 2-1: config 0 descriptor??
[  654.826043][T16077] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  655.026803][T16077] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.047548][T16077] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 3
[  655.052880][ T5854] Bluetooth: hci5: command 0x0406 tx timeout
[  655.081507][T16077] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  655.156004][T16077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.215969][T16077] usb 8-1: config 0 descriptor??
[  655.340625][T17045] loop8: detected capacity change from 0 to 32768
[  655.388254][T17045] (syz.8.4167,17045,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  655.402171][ T5892] appletouch 2-1:0.85: Geyser mode initialized.
[  655.417581][ T5892] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input68
[  655.454793][T17045] (syz.8.4167,17045,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  655.509860][T17045] (syz.8.4167,17045,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  655.616303][T17045] JBD2: Ignoring recovery information on journal
[  655.641010][ T5805] usb 2-1: USB disconnect, device number 47
[  655.641081][    C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  655.779202][ T5805] appletouch 2-1:0.85: input: appletouch disconnected
[  655.809103][T17045] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  655.859498][T16077] Bluetooth: Can't get version to change to load ram patch err
[  655.870781][T16077] Bluetooth: Loading sysconfig file failed
[  655.921807][T16077] ath3k 8-1:0.0: probe with driver ath3k failed with error -71
[  655.955990][T16077] usb 8-1: USB disconnect, device number 6
[  655.999192][T17045] (syz.8.4167,17045,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  656.029730][T17045] (syz.8.4167,17045,1):ocfs2_block_check_validate:415 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  656.076527][T17045] (syz.8.4167,17045,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  656.109795][T17045] (syz.8.4167,17045,0):ocfs2_quota_read:201 ERROR: status = -5
[  656.143499][T17045] Quota error (device loop8): find_next_id: Can't read quota tree block 5
[  656.173062][T17045] (syz.8.4167,17045,0):ocfs2_get_next_id:921 ERROR: status = -5
[  656.422434][T15720] ocfs2: Unmounting device (7,8) on (node local)
[  656.470363][ T5805] kernel read not supported for file /rfkill (pid: 5805 comm: kworker/1:3)
[  656.735282][T17093] loop7: detected capacity change from 0 to 64
[  657.093797][T17107] loop8: detected capacity change from 0 to 128
[  657.238063][T17107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  657.302328][T17107] System zones: 1-3, 19-19, 35-36
[  657.351024][T17107] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  657.409979][T17107] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  657.620734][T17107] EXT4-fs warning (device loop8): ext4_group_add:1734: No reserved GDT blocks, can't resize
[  657.781293][T15720] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  657.795945][ T5892] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  657.968505][ T5892] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  658.010939][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0
[  658.053789][ T5892] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  658.074726][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  658.085730][ T5892] usb 8-1: Product: syz
[  658.117844][ T5892] usb 8-1: Manufacturer: syz
[  658.122526][ T5892] usb 8-1: SerialNumber: syz
[  658.181564][ T5892] usb 8-1: config 0 descriptor??
[  658.219277][ T5892] usb 8-1: selecting invalid altsetting 0
[  658.324933][T17136] netlink: 564 bytes leftover after parsing attributes in process `syz.6.4206'.
[  658.362278][T17136] netlink: 564 bytes leftover after parsing attributes in process `syz.6.4206'.
[  658.471880][ T5805] usb 8-1: USB disconnect, device number 7
[  659.670126][T17154] loop1: detected capacity change from 0 to 65536
[  659.677334][T17152] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  659.736217][T17154] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  659.762446][T17152] bond2 (unregistering): Released all slaves
[  659.801648][T17154] XFS (loop1): Ending clean mount
[  659.808995][T17154] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  660.425143][T17179] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[  660.477512][ T5933] kernel write not supported for file /input/event2 (pid: 5933 comm: kworker/1:6)
[  660.540157][T17179] sp0: Synchronizing with TNC
[  660.593048][    C0] 
[  660.595399][    C0] ================================
[  660.600551][    C0] WARNING: inconsistent lock state
[  660.605675][    C0] syzkaller #0 Tainted: G             L     
[  660.611683][    C0] --------------------------------
[  660.616790][    C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[  660.623678][    C0] kworker/u8:1/13 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  660.630040][    C0] ffff888033419068 (&dev->spinlock){?...}-{3:3}, at: das16m1_interrupt+0x68/0x120
[  660.639403][    C0] {HARDIRQ-ON-W} state was registered at:
[  660.645134][    C0]   lock_acquire+0x1cf/0x380
[  660.649941][    C0]   _raw_spin_lock_bh+0x33/0x40
[  660.654810][    C0]   waveform_ao_cancel+0x96/0x150
[  660.659854][    C0]   do_cancel+0xf4/0x180
[  660.664109][    C0]   comedi_close+0x2f6/0x470
[  660.668723][    C0]   __fput+0x3ff/0xb40
[  660.672817][    C0]   task_work_run+0x150/0x240
[  660.677497][    C0]   exit_to_user_mode_loop+0x100/0x4a0
[  660.682979][    C0]   do_syscall_64+0x67c/0xf80
[  660.687676][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  660.693665][    C0] irq event stamp: 4582124
[  660.698086][    C0] hardirqs last  enabled at (4582123): [<ffffffff81d60bf5>] finish_task_switch.isra.0+0x205/0xb80
[  660.708894][    C0] hardirqs last disabled at (4582124): [<ffffffff8b8e3dc9>] common_interrupt+0x19/0xe0
[  660.718805][    C0] softirqs last  enabled at (4582100): [<ffffffff873a49d7>] nsim_dev_trap_report_work+0x8c7/0xd10
[  660.729436][    C0] softirqs last disabled at (4582098): [<ffffffff873a4946>] nsim_dev_trap_report_work+0x836/0xd10
[  660.740052][    C0] 
[  660.740052][    C0] other info that might help us debug this:
[  660.748211][    C0]  Possible unsafe locking scenario:
[  660.748211][    C0] 
[  660.755664][    C0]        CPU0
[  660.758944][    C0]        ----
[  660.762579][    C0]   lock(&dev->spinlock);
[  660.766920][    C0]   <Interrupt>
[  660.770362][    C0]     lock(&dev->spinlock);
[  660.774876][    C0] 
[  660.774876][    C0]  *** DEADLOCK ***
[  660.774876][    C0] 
[  660.783005][    C0] no locks held by kworker/u8:1/13.
[  660.788300][    C0] 
[  660.788300][    C0] stack backtrace:
[  660.794238][    C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  660.794285][    C0] Tainted: [L]=SOFTLOCKUP
[  660.794298][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026
[  660.794321][    C0] Workqueue:  0x0 (events_unbound)
[  660.794365][    C0] Call Trace:
[  660.794381][    C0]  <IRQ>
[  660.794393][    C0]  dump_stack_lvl+0x100/0x190
[  660.794447][    C0]  print_usage_bug.part.0+0x257/0x340
[  660.794505][    C0]  mark_lock+0x74a/0xa20
[  660.794550][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.794591][    C0]  ? look_up_lock_class+0x55/0x120
[  660.794639][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.794679][    C0]  ? register_lock_class+0x40/0x560
[  660.794727][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.794767][    C0]  ? __lock_acquire+0x4a5/0x2630
[  660.794819][    C0]  __lock_acquire+0x10ff/0x2630
[  660.794871][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.794912][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.794951][    C0]  ? do_raw_spin_lock+0x128/0x260
[  660.794987][    C0]  lock_acquire+0x1cf/0x380
[  660.795034][    C0]  ? das16m1_interrupt+0x68/0x120
[  660.795070][    C0]  ? clockevents_program_event+0x151/0x360
[  660.795126][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.795171][    C0]  _raw_spin_lock+0x2e/0x40
[  660.795209][    C0]  ? das16m1_interrupt+0x68/0x120
[  660.795247][    C0]  das16m1_interrupt+0x68/0x120
[  660.795280][    C0]  ? __pfx_das16m1_interrupt+0x10/0x10
[  660.795315][    C0]  __handle_irq_event_percpu+0x232/0x8e0
[  660.795360][    C0]  handle_irq_event+0xab/0x1e0
[  660.795398][    C0]  handle_edge_irq+0x375/0x970
[  660.795438][    C0]  __common_interrupt+0xd8/0x2f0
[  660.795484][    C0]  common_interrupt+0xb9/0xe0
[  660.795518][    C0]  </IRQ>
[  660.795529][    C0]  <TASK>
[  660.795543][    C0]  asm_common_interrupt+0x26/0x40
[  660.795577][    C0] RIP: 0010:finish_task_switch.isra.0+0x20e/0xb80
[  660.795623][    C0] Code: e3 03 0f 48 85 d2 0f 85 84 06 00 00 85 c0 0f 85 a7 01 00 00 48 89 df e8 20 e5 ff ff e8 3b 8b 3a 00 fb 49 8d bc 24 70 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84
[  660.795656][    C0] RSP: 0018:ffffc90000127bd0 EFLAGS: 00000206
[  660.795682][    C0] RAX: 000000000045eaeb RBX: ffff8880b843b280 RCX: 0000000000000000
[  660.795703][    C0] RDX: 0000000000000000 RSI: ffffffff8de80815 RDI: ffff88801e2e71f0
[  660.795725][    C0] RBP: ffffc90000127c18 R08: 0000000000000001 R09: 0000000000000000
[  660.795746][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88801e2e5b80
[  660.795767][    C0] R13: ffff88802930bd00 R14: ffff88807ba88000 R15: ffff8880b843c0c0
[  660.795802][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.795847][    C0]  __schedule+0xff6/0x6120
[  660.795889][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.795932][    C0]  ? __lock_acquire+0x4a5/0x2630
[  660.795997][    C0]  ? __pfx___schedule+0x10/0x10
[  660.796042][    C0]  ? find_held_lock+0x2b/0x80
[  660.796087][    C0]  ? schedule+0x2bf/0x390
[  660.796124][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.796173][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.796225][    C0]  schedule+0xdd/0x390
[  660.796278][    C0]  ? worker_thread+0x4ab/0xe40
[  660.796312][    C0]  worker_thread+0x526/0xe40
[  660.796357][    C0]  ? kthread+0x13a/0x450
[  660.796414][    C0]  ? __pfx_worker_thread+0x10/0x10
[  660.796447][    C0]  kthread+0x370/0x450
[  660.796503][    C0]  ? __pfx_kthread+0x10/0x10
[  660.796562][    C0]  ret_from_fork+0x754/0xd80
[  660.796624][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  660.796685][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  660.796733][    C0]  ? __switch_to+0x7b4/0x1120
[  660.796770][    C0]  ? __pfx_kthread+0x10/0x10
[  660.796821][    C0]  ret_from_fork_asm+0x1a/0x30
[  660.796873][    C0]  </TASK>
[  660.796963][    C0] comedi comedi3: fifo overflow
[  661.236658][ T5805] usb 7-1: new full-speed USB device number 5 using dummy_hcd
[  661.244809][ T5933] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  661.396626][ T5933] usb 8-1: Using ep0 maxpacket: 16
[  661.403431][ T5805] usb 7-1: not running at top speed; connect to a high speed hub
[  661.413905][ T5933] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  661.424800][ T5933] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  661.454285][ T5933] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  661.465630][ T5933] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  661.493860][ T5805] usb 7-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34
[  661.503350][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.516172][ T5933] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  661.536851][ T5805] usb 7-1: Product: syz
[  661.546904][ T5805] usb 7-1: Manufacturer: syz
[  661.556140][ T5805] usb 7-1: SerialNumber: syz
[  661.567942][ T5933] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  661.585421][ T5933] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  661.609211][ T5933] usb 8-1: Manufacturer: syz
[  661.618235][ T5933] usb 8-1: config 0 descriptor??
[  661.886545][ T5933] rc_core: IR keymap rc-hauppauge not found
[  661.892533][ T5933] Registered IR keymap rc-empty
[  661.898092][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  661.916675][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  661.936723][ T5933] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  661.950041][ T5933] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input69
[  661.963979][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  661.986034][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.006501][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.027258][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.046123][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.066579][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.086014][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.106016][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.126734][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.145950][ T5933] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  662.167499][ T5933] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  662.176700][ T5933] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  662.205462][ T5805] qmi_wwan 7-1:251.0: probe with driver qmi_wwan failed with error -22
[  662.330555][T16077] usb 8-1: USB disconnect, device number 8
[  662.409305][ T5805] usb 7-1: USB disconnect, device number 5