last executing test programs:

4.579063804s ago: executing program 0 (id=2211):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8e37f3", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

4.330199721s ago: executing program 2 (id=2215):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000003c0))
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400000000fe8000000000000000000000000000aafeff0000200002000a004e2200000007ff010000000000000000000000000001050000000d0001007564703a73"], 0x6c}}, 0x0)

4.243314861s ago: executing program 0 (id=2216):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/2, 0x2, 0xd}}, 0x120)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2)
write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4)

3.869204663s ago: executing program 2 (id=2220):
bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x25, 0x5, 0x0, 0x0, 0x9ad, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002040)=[{0x0, 0x4, 0x1, 0x5}], 0x10, 0x460, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x6, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20)

3.833477228s ago: executing program 1 (id=2221):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
rename(0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @auto="6c491e352c25d66f291327745f84cfd8"}})

3.62586341s ago: executing program 0 (id=2222):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom$inet6(r0, 0x0, 0x2, 0x2100, 0x0, 0x0)

3.433278818s ago: executing program 1 (id=2224):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe)
listen(r0, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0)

3.35363165s ago: executing program 2 (id=2225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000690bb74108000300", @ANYRES32=r2], 0x24}}, 0x0)

3.27027648s ago: executing program 0 (id=2227):
r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17\x00\x00\x00\x00\xe2{mn\xcc\xbf2\xc0\x90kn\xe8\xfe/\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\xb9\v\xb5$\xee\x84\x1cn,Bd8\x13<\xf0E\x86\xc0v\xd5?\xe5E:+Pm\x1d\xb4\xb8k\x11\x00', 0x0)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
splice(r1, 0x0, r0, &(0x7f0000000140), 0x4, 0x0)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000200)={0x18}, 0x18)

3.11851609s ago: executing program 1 (id=2228):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES16, @ANYRESOCT=0x0], 0x9, 0x6205, &(0x7f000000cb40)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0\x00', 0x0)
unlink(&(0x7f0000000100)='./file0/file0\x00')

2.977207734s ago: executing program 2 (id=2230):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

2.816073165s ago: executing program 0 (id=2232):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000cd05000000000000000000000000000000000000000000000000030200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000001"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)

2.575825612s ago: executing program 0 (id=2234):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
fchdir(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xffffffffffffffff, 0xd000000})

2.540736328s ago: executing program 4 (id=2235):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x35}, 0x2c)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10)

1.958557735s ago: executing program 5 (id=2237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="08000300"], 0x80}}, 0x0)

1.621852667s ago: executing program 5 (id=2239):
syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20200)
r0 = syz_io_uring_setup(0x24b9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0)

1.581374833s ago: executing program 3 (id=2240):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc)
bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0xffdbdf25}, 0xc)

1.451773987s ago: executing program 4 (id=2241):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000840), 0x4)

1.31260052s ago: executing program 5 (id=2242):
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount$bind(&(0x7f0000000340)='./bus\x00', &(0x7f0000000300)='./bus\x00', 0x0, 0x81c80, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x1901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x104)

1.251875877s ago: executing program 3 (id=2243):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000540)={0x1, 0x6, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "b6855a32474ffa64f778ddcf29c94337"})

1.108154902s ago: executing program 4 (id=2244):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x1, 0x3}}]}}]}, 0x44}}, 0x0)

973.769057ms ago: executing program 5 (id=2245):
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x140, &(0x7f0000000340)="$eJzs2r9Kw1AUBvAzCEpHR6dAJQqa/1pXHcXN3SHU3DR4Y0oiSPsC4iQoXAdfQvAJfALJ6KZLB18icturplEhk9fh+y394LTpyblwp2PlWeqxwiLaHF4fTpbzLDV6wU6feSykmX0iMmQoq+rWpm9ePutlRfYPX9Br9W322V2PxcElS3jk624JAAAAAAAAAAAAAAAAAAAAAABaMjsqdAYivWAJj7xatRiNT0LOo7wgWtLUoV6moXa4iAl+J+cTzNU35Fh2ZUrEXi7r7vzvb1RYGwj+2pyvc5YOnWI0tpI0jKM4OvX9oOduue6270yf5TSfaN6rnqisHtzaOpn9dCQ7M2v7Zs9t9s3U+S+sJOLqvPlvX+ePgICA8BFaXp//3/T+mxDRYtB9lPef3c/4sSr+xTj1vj4A/OY9AAD//3cgO3s=")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r0, 0x7ff, 0x0)
getdents64(r0, 0x0, 0x10)

872.25743ms ago: executing program 3 (id=2246):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e800800050000000000080006"], 0x38}}, 0x0)

722.96824ms ago: executing program 1 (id=2247):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001e00), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)

722.469829ms ago: executing program 4 (id=2248):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650b53771860093ddbc9c50a5cdefe904da32", 0xd1, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, &(0x7f0000000ac0)=""/262, 0x106, &(0x7f0000000540)={&(0x7f0000000280)={'sha512-ssse3\x00'}, &(0x7f0000000580)="92f900a77cb6719ff389c726f7db65f500000000", 0x14})

538.563707ms ago: executing program 3 (id=2249):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000020850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10)

498.224886ms ago: executing program 5 (id=2250):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0xdf06, @empty}, 0x1c)
shutdown(r0, 0x1)
sendto$inet6(r0, 0x0, 0x0, 0x120fc0aaa6594540, &(0x7f00000003c0)={0xa, 0x4e20, 0x204, @mcast2, 0x9}, 0x1c)

481.564662ms ago: executing program 4 (id=2251):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
listen(r0, 0x80)

411.539256ms ago: executing program 1 (id=2252):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r1)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x30}}, 0x0)

409.481088ms ago: executing program 2 (id=2253):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00000000c0)=0xff, 0x4)
recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0)

261.994766ms ago: executing program 3 (id=2254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r1, 0x5, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}]]}, 0x34}}, 0x4000000)

126.398989ms ago: executing program 2 (id=2255):
ioperm(0x0, 0x2, 0x7f)
unshare(0x2a020480)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x3fc, 0x4, 0x25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x20)

122.735204ms ago: executing program 4 (id=2256):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000001000)=ANY=[@ANYRESHEX], 0x12)

80.854338ms ago: executing program 5 (id=2257):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

31.744273ms ago: executing program 3 (id=2258):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r0, &(0x7f0000000780), &(0x7f0000000740)=@tcp6=r1}, 0x90)

0s ago: executing program 1 (id=2259):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000003280)=0x800, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x44, &(0x7f0000000040), 0x4)

kernel console output (not intermixed with test programs):

ectory bread(block 73) failed
[  183.704737][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.837970][ T7552] Process accounting resumed
[  183.845282][ T7352] 8021q: adding VLAN 0 to HW filter on device team0
[  183.866705][ T7552] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 899)
[  183.879314][ T1043] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.886534][ T1043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.920346][ T7552] FAT-fs (loop3): Filesystem has been set read-only
[  183.970250][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.977502][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  184.825838][ T7586] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 0, id = 0
[  185.118703][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.227630][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  185.242849][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  185.256007][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  185.267370][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  185.275180][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  185.286519][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  186.443780][ T7597] chnl_net:caif_netlink_parms(): no params data found
[  187.011487][ T7352] veth0_vlan: entered promiscuous mode
[  187.203870][ T7597] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.211348][ T7597] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.218750][ T7597] bridge_slave_0: entered allmulticast mode
[  187.237141][ T7597] bridge_slave_0: entered promiscuous mode
[  187.338079][ T5241] Bluetooth: hci6: command tx timeout
[  187.346454][ T7352] veth1_vlan: entered promiscuous mode
[  187.448918][ T7597] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.466404][ T7597] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.484129][ T7597] bridge_slave_1: entered allmulticast mode
[  187.495916][ T7597] bridge_slave_1: entered promiscuous mode
[  187.666229][  T934] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  187.738848][ T7597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.784925][ T7597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.876338][  T934] usb 1-1: Using ep0 maxpacket: 16
[  187.893675][  T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.922708][  T934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.950180][  T934] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  188.010917][  T934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.075687][  T934] usb 1-1: config 0 descriptor??
[  188.082533][   T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  188.098708][ T7597] team0: Port device team_slave_0 added
[  188.110750][ T7597] team0: Port device team_slave_1 added
[  188.124263][ T7619] ip_vti0: entered allmulticast mode
[  188.139812][ T7352] veth0_macvtap: entered promiscuous mode
[  188.238265][ T7352] veth1_macvtap: entered promiscuous mode
[  188.295284][   T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  188.339256][   T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  188.376803][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  188.435416][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.461818][ T7643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  188.475839][   T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  188.577725][ T7637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.633974][ T7637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.644583][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.678438][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.707201][  T934] hid (null): bogus close delimiter
[  188.743124][ T7597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.760249][ T7654] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  188.768419][ T7654] netlink: 9312 bytes leftover after parsing attributes in process `syz.1.901'.
[  188.794609][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.806452][ T7654] netlink: 'syz.1.901': attribute type 1 has an invalid length.
[  188.814132][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.824352][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.835364][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.846203][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.865510][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.883524][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.896398][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.930626][  T934] usb 1-1: string descriptor 0 read error: -71
[  188.941744][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.976695][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.984688][  T934] usb 1-1: Max retries (5) exceeded reading string descriptor 200
[  189.004320][  T934] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -32
[  189.018670][   T25] usb 4-1: USB disconnect, device number 9
[  189.020934][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.030569][  T934] usb 1-1: USB disconnect, device number 4
[  189.100513][ T7597] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.136856][ T7597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.206365][ T7597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.298188][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.344891][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.375178][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.398374][ T7660] loop1: detected capacity change from 0 to 64
[  189.417794][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.430424][ T5241] Bluetooth: hci6: command tx timeout
[  189.453166][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.484702][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.539584][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.561423][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.605819][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  189.636353][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.669966][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  189.850616][ T7597] hsr_slave_0: entered promiscuous mode
[  189.875719][ T7597] hsr_slave_1: entered promiscuous mode
[  189.883575][ T7597] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  189.912264][ T7597] Cannot create hsr debugfs directory
[  189.929785][ T7665] netlink: 136 bytes leftover after parsing attributes in process `syz.3.906'.
[  189.948073][ T7665] netlink: 89 bytes leftover after parsing attributes in process `syz.3.906'.
[  189.977105][ T7352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.012032][ T7352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.046348][ T7352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.077977][ T7352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.126237][ T7670] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  190.147125][ T7670] macvtap1: entered promiscuous mode
[  190.153162][ T7670] macvtap1: entered allmulticast mode
[  190.183001][ T7670] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  190.312533][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'.
[  190.602891][ T7688] loop1: detected capacity change from 0 to 16
[  190.697376][ T7688] erofs: (device loop1): mounted with root inode @ nid 36.
[  190.800612][ T7688] syz.1.918: attempt to access beyond end of device
[  190.800612][ T7688] loop1: rw=0, sector=8, nr_sectors = 32 limit=16
[  191.140558][ T2493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.164193][ T2493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.322716][ T7597] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.360855][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'.
[  191.431954][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.450718][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.497773][ T5241] Bluetooth: hci6: command tx timeout
[  191.614548][ T7597] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.801410][ T7597] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.984087][ T7597] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  192.287860][ T7725] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.933'.
[  192.299722][ T7722] loop4: detected capacity change from 0 to 4096
[  192.320447][ T7722] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  192.337980][ T7725] openvswitch: netlink: VXLAN extension 45 out of range max 1
[  192.378727][ T7597] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  192.419213][ T7597] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  192.450300][ T7597] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  192.457814][ T7722] ntfs3: loop4: ino=0, ntfs_iget5
[  192.457987][ T7722] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  192.555287][ T7597] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  192.990376][ T7597] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.100394][ T7597] 8021q: adding VLAN 0 to HW filter on device team0
[  193.135881][ T2493] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.143139][ T2493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.222606][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.229898][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.413037][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'.
[  193.455976][ T7746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.943'.
[  193.473565][ T7746] macsec1: entered allmulticast mode
[  193.577057][ T5241] Bluetooth: hci6: command tx timeout
[  193.901034][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  193.908320][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  194.423619][ T7597] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.806398][ T7748] loop4: detected capacity change from 0 to 32768
[  194.900665][ T7748] 
[  194.900665][ T7748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.900665][ T7748] 
[  194.920139][ T7778] loop3: detected capacity change from 0 to 128
[  195.037247][ T7780] can0: slcan on ttyS3.
[  195.160004][ T7782] 
[  195.160004][ T7782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.160004][ T7782] 
[  195.217349][ T7782] 
[  195.217349][ T7782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.217349][ T7782] 
[  195.229161][ T7780] can0 (unregistered): slcan off ttyS3.
[  195.257815][ T7782] 
[  195.257815][ T7782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.257815][ T7782] 
[  195.327124][ T7782] 
[  195.327124][ T7782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.327124][ T7782] 
[  195.392907][ T7782] 
[  195.392907][ T7782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.392907][ T7782] 
[  195.418506][ T7748] 
[  195.418506][ T7748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.418506][ T7748] 
[  195.440249][ T7597] veth0_vlan: entered promiscuous mode
[  195.447165][ T7748] 
[  195.447165][ T7748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.447165][ T7748] 
[  195.501910][ T7597] veth1_vlan: entered promiscuous mode
[  195.503988][ T7748] 
[  195.503988][ T7748]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.503988][ T7748] 
[  195.639936][ T7597] veth0_macvtap: entered promiscuous mode
[  195.680325][ T7597] veth1_macvtap: entered promiscuous mode
[  195.695372][ T7352] 
[  195.695372][ T7352]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.695372][ T7352] 
[  195.744216][ T7791] netlink: 312 bytes leftover after parsing attributes in process `syz.0.960'.
[  195.755804][ T7352] 
[  195.755804][ T7352]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  195.755804][ T7352] 
[  195.781807][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.823870][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.851793][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.893165][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.926256][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  195.949901][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  195.984090][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.016315][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.050543][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.085061][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.114041][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.146936][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.190421][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.232416][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.307542][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.337571][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.382878][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.422847][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.447489][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.522069][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.557126][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.567003][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.630460][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.667626][ T7597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.703175][ T7597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.739415][ T7597] batman_adv: batadv0: Interface activated: batadv_slave_1
[  196.789234][ T7597] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  196.823747][ T7597] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  196.859304][ T7597] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  196.884434][ T7597] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.317939][ T2493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.365381][ T2493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.449507][ T7825] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  197.492238][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.504731][ T7825] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  197.533504][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.547481][ T7825] netlink: 'syz.4.973': attribute type 29 has an invalid length.
[  197.846825][   T29] audit: type=1107 audit(1726300972.665:78): pid=7831 uid=0 auid=0 ses=1 subj=unconfined msg=''
[  198.384639][   T29] audit: type=1326 audit(1726300973.215:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.0.984" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dab77def9 code=0x0
[  198.556529][ T7856] netlink: 'syz.3.986': attribute type 29 has an invalid length.
[  198.821017][ T7860] loop3: detected capacity change from 0 to 2048
[  198.890791][ T7860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  199.031657][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.604457][ T7875] loop3: detected capacity change from 0 to 256
[  199.619383][ T7854] loop4: detected capacity change from 0 to 32768
[  199.685012][ T7854] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  199.712488][ T7875] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  199.869158][ T7854] XFS (loop4): Ending clean mount
[  200.104604][ T7352] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.547129][ T7900] loop5: detected capacity change from 0 to 2048
[  200.642189][ T7900] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  200.746952][ T7900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.100416][ T5251] Bluetooth: hci5: command 0x0406 tx timeout
[  201.100644][ T5249] Bluetooth: hci3: command 0x0406 tx timeout
[  201.112650][ T5249] Bluetooth: hci0: command 0x0406 tx timeout
[  201.113772][ T4620] Bluetooth: hci4: command 0x0406 tx timeout
[  201.522332][ T7897] loop3: detected capacity change from 0 to 32768
[  201.575891][ T7897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1001 (7897)
[  201.635937][ T7897] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  201.657517][ T7897] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  201.668560][ T7897] BTRFS info (device loop3): using free-space-tree
[  201.935327][ T5254] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  201.945642][ T5254] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  201.957472][ T5254] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  201.967469][ T5254] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  201.976097][ T5254] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  201.983795][ T5254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  202.243110][ T7955] loop5: detected capacity change from 0 to 1024
[  202.310479][ T5229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.357164][ T7955] EXT4-fs: Ignoring removed nomblk_io_submit option
[  202.443154][ T7955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  202.464514][ T7955] EXT4-fs (loop5): Test dummy encryption mode enabled
[  202.665680][ T7955] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  202.783045][ T7955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.278367][ T7947] chnl_net:caif_netlink_parms(): no params data found
[  203.508706][ T7955] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  203.638821][ T7995] loop3: detected capacity change from 0 to 2048
[  203.747120][ T7995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.778243][ T7995] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.878023][   T29] audit: type=1800 audit(1726300978.705:80): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1033" name="bus" dev="loop3" ino=18 res=0 errno=0
[  203.942997][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.963446][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.990433][ T7947] bridge_slave_0: entered allmulticast mode
[  204.009408][ T7947] bridge_slave_0: entered promiscuous mode
[  204.011500][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.022516][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.049059][ T7597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.058703][ T5254] Bluetooth: hci7: command tx timeout
[  204.065538][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.084372][ T7947] bridge_slave_1: entered allmulticast mode
[  204.101462][ T7947] bridge_slave_1: entered promiscuous mode
[  204.267413][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'.
[  204.427007][ T7947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  204.498523][ T8007] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  204.512387][ T7947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  204.572353][ T8015] Zero length message leads to an empty skb
[  204.872221][ T8018] netlink: 308 bytes leftover after parsing attributes in process `syz.0.1042'.
[  204.921066][ T8000] loop4: detected capacity change from 0 to 32768
[  204.999668][ T7947] team0: Port device team_slave_0 added
[  205.013080][ T7947] team0: Port device team_slave_1 added
[  205.043967][ T8000] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.063644][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'.
[  205.364314][ T8000] XFS (loop4): Ending clean mount
[  205.469975][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.531687][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.653872][ T7947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.687190][ T8048] hugetlbfs: syz.3.1051 (8048): Using mlock ulimits for SHM_HUGETLB is obsolete
[  205.722835][ T8044] netlink: 'syz.2.1049': attribute type 12 has an invalid length.
[  205.731373][ T8044] netlink: 'syz.2.1049': attribute type 29 has an invalid length.
[  205.748396][ T8044] netlink: 'syz.2.1049': attribute type 2 has an invalid length.
[  205.786284][ T7352] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.809788][ T8044] netlink: 'syz.2.1049': attribute type 2 has an invalid length.
[  205.852247][ T8044] netlink: 'syz.2.1049': attribute type 1 has an invalid length.
[  205.916615][ T8044] netlink: 'syz.2.1049': attribute type 37 has an invalid length.
[  205.990040][ T8044] netlink: 'syz.2.1049': attribute type 2 has an invalid length.
[  206.028545][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.057462][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  206.118456][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  206.151591][ T5254] Bluetooth: hci7: command tx timeout
[  206.268419][ T7947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  206.346536][ T8060] loop4: detected capacity change from 0 to 1764
[  206.579744][ T8060] iso9660: Corrupted directory entry in block 2 of inode 1920
[  206.624819][ T7947] hsr_slave_0: entered promiscuous mode
[  206.649480][ T7947] hsr_slave_1: entered promiscuous mode
[  206.666722][ T7947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  206.694697][ T7947] Cannot create hsr debugfs directory
[  207.259194][ T8084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1067'.
[  207.635606][ T7947] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.063160][ T7947] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.201514][ T8104] loop4: detected capacity change from 0 to 4096
[  208.229472][ T5254] Bluetooth: hci7: command tx timeout
[  208.236026][ T8104] ntfs3: Unknown parameter '0xffffffffffffffff0x0000000000000000'
[  208.499820][ T7947] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.622533][ T8112] loop5: detected capacity change from 0 to 1764
[  208.656542][ T7947] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.852611][ T8094] loop3: detected capacity change from 0 to 40427
[  208.900739][ T8094] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  208.938737][ T8094] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  209.019877][ T8094] F2FS-fs (loop3): Found nat_bits in checkpoint
[  209.224187][ T7947] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  209.288867][ T8094] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  209.343766][ T8094] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  209.447013][ T7947] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  209.506218][ T7947] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  209.606035][ T7947] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  209.629182][   T46] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  209.929520][   T46] usb 5-1: Using ep0 maxpacket: 8
[  209.960073][   T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.993291][   T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.094059][   T46] usb 5-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40
[  210.109666][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.117722][   T46] usb 5-1: Product: syz
[  210.149788][   T46] usb 5-1: Manufacturer: syz
[  210.165439][   T46] usb 5-1: SerialNumber: syz
[  210.226117][ T7947] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.281209][ T8135] loop5: detected capacity change from 0 to 16
[  210.299338][ T5254] Bluetooth: hci7: command tx timeout
[  210.372332][ T7947] 8021q: adding VLAN 0 to HW filter on device team0
[  210.423338][ T8135] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  210.457616][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.465054][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.577371][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.584751][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.841337][   T46] hid (null): report_id 2668810406 is invalid
[  210.853959][   T46] asus 0003:0B05:19B6.0006: report_id 2668810406 is invalid
[  210.878046][   T46] asus 0003:0B05:19B6.0006: item 0 4 1 8 parsing failed
[  210.914667][   T46] asus 0003:0B05:19B6.0006: Asus hid parse failed: -22
[  210.927597][ T8141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1093'.
[  210.956623][   T46] asus 0003:0B05:19B6.0006: probe with driver asus failed with error -22
[  211.151269][   T46] usb 5-1: USB disconnect, device number 9
[  211.498082][   T29] audit: type=1326 audit(1726300986.314:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  211.595530][   T29] audit: type=1326 audit(1726300986.314:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  211.612441][ T7947] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.680633][   T29] audit: type=1326 audit(1726300986.314:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  211.790523][   T29] audit: type=1326 audit(1726300986.314:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  211.870506][   T29] audit: type=1326 audit(1726300986.314:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  211.894999][ T7947] veth0_vlan: entered promiscuous mode
[  211.965394][ T7947] veth1_vlan: entered promiscuous mode
[  211.981434][ T8173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1107'.
[  212.002914][   T29] audit: type=1326 audit(1726300986.394:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  212.049646][ T8173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1107'.
[  212.100043][   T29] audit: type=1326 audit(1726300986.404:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  212.164800][ T7947] veth0_macvtap: entered promiscuous mode
[  212.211250][   T29] audit: type=1326 audit(1726300986.404:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  212.260298][ T7947] veth1_macvtap: entered promiscuous mode
[  212.304473][   T29] audit: type=1326 audit(1726300986.404:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.2.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd33757def9 code=0x7ffc0000
[  212.447774][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.489010][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.499297][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.511729][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.522297][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.533383][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.549320][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.589662][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.620371][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.660011][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.692551][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.724168][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.769038][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.808432][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.841805][ T7947] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.926499][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.933819][ T8190] xt_bpf: check failed: parse error
[  212.957879][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.004390][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.043416][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.057996][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.081794][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.098494][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.123430][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.147154][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.157940][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.168297][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.200536][ T5240] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  213.208291][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.222986][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  213.246855][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  213.262942][ T7947] batman_adv: batadv0: Interface activated: batadv_slave_1
[  213.288475][ T8194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'.
[  213.304876][ T7947] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.330474][ T7947] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.369199][ T7947] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.419769][ T5240] usb 1-1: Using ep0 maxpacket: 16
[  213.426501][ T7947] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.448113][ T5240] usb 1-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config
[  213.479888][ T5240] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD
[  213.523504][ T5240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10
[  213.559149][ T5240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024
[  213.622414][ T5240] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.715817][ T5240] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  213.735478][ T5240] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  213.771048][ T5240] usb 1-1: Manufacturer: syz
[  213.802651][ T5240] usb 1-1: config 0 descriptor??
[  213.808715][ T8192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  213.859349][ T5240] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  213.889201][ T2493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.889296][ T2493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.988405][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.014943][ T5240] kernel write not supported for file /sysvipc/shm (pid: 5240 comm: kworker/0:3)
[  214.019316][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.141325][  T934] usb 1-1: USB disconnect, device number 5
[  214.668534][ T8202] loop3: detected capacity change from 0 to 32768
[  214.749551][ T8202] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.973640][ T8202] XFS (loop3): Ending clean mount
[  215.022040][ T8202] XFS (loop3): Quotacheck needed: Please wait.
[  215.201640][ T8202] XFS (loop3): Quotacheck: Done.
[  215.470598][ T5229] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  215.518764][ T8251] sock: sock_timestamping_bind_phc: sock not bind to device
[  215.769465][ T5298] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  215.867765][ T8206] loop5: detected capacity change from 0 to 32768
[  216.028561][ T8206] ERROR: (device loop5): diAllocBit: iag inconsistent
[  216.028561][ T8206] 
[  216.029458][ T5298] usb 1-1: Using ep0 maxpacket: 32
[  216.053343][ T5298] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  216.099667][ T5298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.129919][ T8206] ialloc: diAlloc returned -5!
[  216.150908][ T5298] usb 1-1: config 0 descriptor??
[  216.165140][ T5298] gspca_main: sunplus-2.14.0 probing 0458:7006
[  216.772355][ T8254] loop4: detected capacity change from 0 to 32768
[  216.796328][ T8254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1137 (8254)
[  216.830457][ T8254] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  216.871682][ T8254] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  216.909589][ T8254] BTRFS info (device loop4): using free-space-tree
[  216.993153][ T5298] gspca_sunplus: reg_w_riv err -71
[  217.005054][ T5298] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  217.033918][ T5298] usb 1-1: USB disconnect, device number 6
[  217.111125][ T8262] loop3: detected capacity change from 0 to 40427
[  217.210897][ T8262] F2FS-fs (loop3): Found nat_bits in checkpoint
[  217.304156][ T7352] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  217.416107][ T8262] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  217.521203][ T5240] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  217.578474][ T8262] syz.3.1141: attempt to access beyond end of device
[  217.578474][ T8262] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  217.800428][ T5240] usb 2-1: Using ep0 maxpacket: 16
[  217.822707][ T5240] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  217.840582][ T5240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  217.888986][ T5229] syz-executor: attempt to access beyond end of device
[  217.888986][ T5229] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  217.899666][ T5240] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  217.920358][ T5229] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  217.970407][ T5240] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  217.979511][ T5240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.057436][ T5240] usb 2-1: config 0 descriptor??
[  218.113687][ T8305] input: syz0 as /devices/virtual/input/input18
[  218.253908][ T8301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  218.481356][ T8307] loop5: detected capacity change from 0 to 128
[  218.531884][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.556318][ T8307] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.577644][   T35] bridge_slave_1: left allmulticast mode
[  218.591952][   T35] bridge_slave_1: left promiscuous mode
[  218.603371][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.621837][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.669979][ T8307] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  218.698074][ T5240] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0007/input/input19
[  218.707737][   T35] bridge_slave_0: left allmulticast mode
[  218.755062][   T35] bridge_slave_0: left promiscuous mode
[  218.775539][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.844791][ T5240] input: HID 0458:5005 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5005.0007/input/input20
[  218.889192][ T8307] fscrypt (loop5, inode 12): Unsupported encryption flags (0x43)
[  218.989246][ T5240] kye 0003:0458:5005.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0
[  219.088890][ T5240] usb 2-1: USB disconnect, device number 5
[  219.097080][ T7597] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.096472][ T8326] loop3: detected capacity change from 0 to 4096
[  220.163426][ T8330] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.504977][ T8337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1165'.
[  220.863097][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.892950][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.917972][   T35] bond0 (unregistering): Released all slaves
[  220.966562][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'.
[  221.030409][ T8341] macsec1: entered promiscuous mode
[  221.054331][ T8341] macvlan0: entered promiscuous mode
[  221.131794][ T8341] macvlan0: left promiscuous mode
[  221.238749][ T8346] netlink: 'syz.3.1170': attribute type 1 has an invalid length.
[  221.252415][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1175'.
[  221.574914][ T8362] loop4: detected capacity change from 0 to 4096
[  221.628268][ T8362] NILFS (loop4): invalid segment: Checksum error in segment payload
[  221.673678][ T8362] NILFS (loop4): trying rollback from an earlier position
[  221.762941][ T8362] NILFS (loop4): recovery complete
[  221.796338][ T8374] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.991548][ T5241] Bluetooth: hci0: unexpected event 0x05 length: 12 > 4
[  222.344186][   T35] hsr_slave_0: left promiscuous mode
[  222.409872][   T35] hsr_slave_1: left promiscuous mode
[  222.483198][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.510772][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.535345][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.563174][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.667878][   T35] veth1_macvtap: left promiscuous mode
[  222.732644][   T35] veth0_macvtap: left promiscuous mode
[  222.760992][   T35] veth1_vlan: left allmulticast mode
[  222.766465][   T35] veth1_vlan: left promiscuous mode
[  222.806598][   T35] veth0_vlan: left promiscuous mode
[  223.543896][   T35] pim6reg (unregistering): left allmulticast mode
[  223.610694][ T8395] loop5: detected capacity change from 0 to 32768
[  223.681954][ T8395] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  223.841366][ T8395] XFS (loop5): Ending clean mount
[  224.112398][ T7597] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  224.241721][   T35] macvlan1 (unregistering): left allmulticast mode
[  226.208046][   T35] team0 (unregistering): Port device team_slave_1 removed
[  226.308499][   T35] team0 (unregistering): Port device team_slave_0 removed
[  227.285385][ T8459] syz.1.1217 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  228.029322][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1227'.
[  228.369307][ T8488] trusted_key: syz.2.1230 sent an empty control message without MSG_MORE.
[  228.401684][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'.
[  228.650013][ T8468] loop3: detected capacity change from 0 to 32768
[  228.692700][ T8468] jfs: Unrecognized mount option "nuota" or missing value
[  228.897707][ T8501] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0)
[  229.289633][ T8507] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1
[  229.582716][ T8522] loop3: detected capacity change from 0 to 512
[  229.600196][ T8522] EXT4-fs: Ignoring removed nobh option
[  229.685058][ T8522] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  229.709818][ T8522] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  229.781095][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1249'.
[  229.796905][ T8522] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.1245: casefold flag without casefold feature
[  229.871658][ T8522] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1245: couldn't read orphan inode 13 (err -117)
[  229.918601][ T8522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.092521][ T8536] loop4: detected capacity change from 0 to 1024
[  230.122292][ T8536] EXT4-fs: Ignoring removed orlov option
[  230.143726][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.181196][ T8536] EXT4-fs: Ignoring removed nomblk_io_submit option
[  230.280519][ T8536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.802274][   T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  230.999657][ T7352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.034429][   T46] usb 4-1: config 0 interface 0 has no altsetting 0
[  231.051359][   T46] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  231.075194][ T8524] loop5: detected capacity change from 0 to 40427
[  231.091072][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.099646][ T8524] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  231.099683][ T8524] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  231.143642][ T8524] F2FS-fs (loop5): Found nat_bits in checkpoint
[  231.202552][   T46] usb 4-1: config 0 descriptor??
[  231.393996][ T8524] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  231.421733][ T8524] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  231.636171][ T7597] syz-executor: attempt to access beyond end of device
[  231.636171][ T7597] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  231.683685][ T7597] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  231.692938][ T8562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'.
[  231.738738][ T8562] netem: unknown loss type 13
[  231.744911][ T8562] netem: change failed
[  232.095632][   T46] video4linux radio32: keene_cmd_main failed (-71)
[  232.113855][   T46] radio-keene 4-1:0.0: V4L2 device registered as radio32
[  232.143500][   T46] usb 4-1: USB disconnect, device number 10
[  232.183060][ T8574] netlink: 'syz.4.1265': attribute type 8 has an invalid length.
[  232.492140][ T8579] loop4: detected capacity change from 0 to 256
[  233.151174][ T8593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  233.574819][   T29] audit: type=1326 audit(1726301008.401:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8606 comm="syz.5.1279" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8895f7def9 code=0x0
[  234.037537][ T8631] netlink: 'syz.1.1289': attribute type 1 has an invalid length.
[  234.817293][ T8656] nvme_fabrics: missing parameter 'transport=%s'
[  234.847747][ T8656] nvme_fabrics: missing parameter 'nqn=%s'
[  235.541045][ T5240] kernel write not supported for file /dsp (pid: 5240 comm: kworker/0:3)
[  235.679508][   T29] audit: type=1326 audit(1726301010.501:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118e37def9 code=0x7ffc0000
[  235.805552][   T29] audit: type=1326 audit(1726301010.501:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118e37def9 code=0x7ffc0000
[  235.882452][   T29] audit: type=1326 audit(1726301010.541:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118e37def9 code=0x7ffc0000
[  235.955695][   T29] audit: type=1326 audit(1726301010.541:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118e37def9 code=0x7ffc0000
[  236.051856][   T29] audit: type=1326 audit(1726301010.571:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118e37def9 code=0x7ffc0000
[  236.113755][   T29] audit: type=1326 audit(1726301010.571:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118e37def9 code=0x7ffc0000
[  236.217672][   T29] audit: type=1326 audit(1726301010.571:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f118e374ea7 code=0x7ffc0000
[  236.272643][   T29] audit: type=1326 audit(1726301010.571:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f118e319869 code=0x7ffc0000
[  236.334621][   T29] audit: type=1326 audit(1726301010.571:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.4.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f118e374ea7 code=0x7ffc0000
[  236.523474][ T8709] loop5: detected capacity change from 0 to 64
[  236.535679][ T8709] hfs: unable to parse mount options
[  236.564107][ T8712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1324'.
[  237.005451][ T8726] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1331'.
[  237.073402][ T5335] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  237.232016][ T5298] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  237.284446][ T5335] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  237.293958][ T5335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.324657][ T5335] usb 1-1: config 0 descriptor??
[  237.355913][ T5335] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  237.383659][ T8734] netlink: 'syz.3.1335': attribute type 10 has an invalid length.
[  237.420969][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.428920][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.452968][ T5298] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  237.483644][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  237.512206][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  237.514187][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.530551][ T8734] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.538399][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.545708][ T8734] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.562564][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.604673][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  237.620707][ T8734] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  237.642248][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  237.692072][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.723148][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  237.748042][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  237.792400][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.813374][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  237.841095][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  237.885552][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.900475][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  237.929158][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  237.983226][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.995219][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.022695][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.038091][ T5335] gspca_stv06xx: vv6410 sensor detected
[  238.072121][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  238.080411][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.112459][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.132224][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  238.142516][ T5298] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  238.151482][ T5298] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.190936][ T5298] usb 2-1: config 0 interface 0 has no altsetting 0
[  238.214785][ T5298] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  238.224789][ T5298] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  238.242097][ T5298] usb 2-1: Product: syz
[  238.263127][ T5298] usb 2-1: Manufacturer: syz
[  238.275618][ T5298] usb 2-1: SerialNumber: syz
[  238.303675][ T5298] usb 2-1: config 0 descriptor??
[  238.334611][ T5298] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  238.369668][ T5335] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71
[  238.401183][ T5335] usb 1-1: USB disconnect, device number 7
[  238.455290][ T8728] loop4: detected capacity change from 0 to 32768
[  238.532644][ T8728] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.570710][ T5240] usb 2-1: USB disconnect, device number 6
[  238.580983][ T5240] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  238.759791][ T8728] XFS (loop4): Ending clean mount
[  238.815306][ T8728] XFS (loop4): Quotacheck needed: Please wait.
[  238.999552][ T8768] loop5: detected capacity change from 0 to 4096
[  239.018382][ T8774] loop3: detected capacity change from 0 to 128
[  239.028485][ T8728] XFS (loop4): Quotacheck: Done.
[  239.070414][ T8768] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  239.123023][ T7352] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.134610][ T8774] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  239.156330][ T8774] ext4 filesystem being mounted at /292/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  239.189116][ T8774] fscrypt (loop3, inode 12): Unsupported encryption flags (0xf9)
[  239.304786][ T5229] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  239.332895][ T8768] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  239.353019][ T8768] ntfs3: loop5: ino=1e, "file1" attr_set_size
[  239.603670][   T11] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  239.632484][ T7597] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  239.659481][ T7597] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  239.708982][ T7597] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  239.732450][ T2493] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  239.874414][ T8792] program syz.4.1353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.599832][ T8824] netlink: 'syz.5.1371': attribute type 10 has an invalid length.
[  240.779984][ T8824] team0: Port device wlan1 added
[  240.917814][ T8827] netlink: 'syz.5.1371': attribute type 10 has an invalid length.
[  241.096146][ T8827] batman_adv: batadv0: Adding interface: team0
[  241.096170][ T8827] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  241.096205][ T8827] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  241.602771][ T8817] loop3: detected capacity change from 0 to 32768
[  241.674638][ T8817] 
[  241.674638][ T8817]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.674638][ T8817] 
[  241.789501][ T8817] 
[  241.789501][ T8817]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.789501][ T8817] 
[  241.831310][ T8817] 
[  241.831310][ T8817]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.831310][ T8817] 
[  241.883477][ T8817] 
[  241.883477][ T8817]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.883477][ T8817] 
[  241.913388][ T8817] 
[  241.913388][ T8817]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.913388][ T8817] 
[  241.941926][ T8817] 
[  241.941926][ T8817]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.941926][ T8817] 
[  242.010469][  T110] 
[  242.010469][  T110]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  242.010469][  T110] 
[  242.038779][ T8856] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1385'.
[  242.061922][ T8817] jfs_rmdir: dtDelete returned -2
[  242.189196][ T5229] 
[  242.189196][ T5229]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  242.189196][ T5229] 
[  242.225196][ T5229] 
[  242.225196][ T5229]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  242.225196][ T5229] 
[  242.561634][ T8862] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  242.710804][ T8862] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  243.358191][ T8890] ALSA: mixer_oss: invalid OSS volume ''
[  243.738715][ T8901] bridge0: entered promiscuous mode
[  243.793618][ T8901] bridge0: left promiscuous mode
[  244.263472][ T8918] loop4: detected capacity change from 0 to 1024
[  244.281622][ T8918] EXT4-fs: Ignoring removed nobh option
[  244.293489][ T8918] EXT4-fs: Ignoring removed orlov option
[  244.308084][ T8918] EXT4-fs: Ignoring removed nomblk_io_submit option
[  244.315204][ T8886] loop3: detected capacity change from 0 to 32768
[  244.333102][ T8886] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1398 (8886)
[  244.368992][ T8886] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.390705][ T8886] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  244.404100][ T8886] BTRFS info (device loop3): using free-space-tree
[  244.425315][ T8918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.541916][ T7352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.846474][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'.
[  245.086413][ T5229] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.472147][ T8915] loop5: detected capacity change from 0 to 32768
[  245.508023][ T8915] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1410 (8915)
[  245.589684][ T8915] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.621650][ T8915] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  245.666905][ T8915] BTRFS info (device loop5): using free-space-tree
[  245.933071][ T8993] netlink: 'syz.2.1431': attribute type 46 has an invalid length.
[  245.944387][ T8993] netlink: 212868 bytes leftover after parsing attributes in process `syz.2.1431'.
[  246.113551][ T7597] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  247.189725][ T5254] Bluetooth: hci1: command 0x0406 tx timeout
[  247.253581][ T9023] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  247.490104][ T9010] loop3: detected capacity change from 0 to 32768
[  248.174426][ T9052] tun0: tun_chr_ioctl cmd 1074025675
[  248.199691][ T9052] tun0: persist disabled
[  248.746273][ T9070] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1465'.
[  250.173712][ T5335] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  250.403718][ T5335] usb 2-1: Using ep0 maxpacket: 16
[  250.426037][ T5335] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  250.467138][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  250.488502][ T5335] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  250.524109][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.532212][ T5335] usb 2-1: Product: syz
[  250.575463][ T5335] usb 2-1: Manufacturer: syz
[  250.580130][ T5335] usb 2-1: SerialNumber: syz
[  250.598378][ T5335] usb 2-1: config 0 descriptor??
[  250.616337][ T5335] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  250.657246][ T5335] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  250.869723][ T9130] loop4: detected capacity change from 0 to 512
[  250.936437][ T9130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.964422][ T5240] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  250.973839][ T9130] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.058395][ T9130] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.1493: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  251.194268][ T5240] usb 6-1: Using ep0 maxpacket: 16
[  251.201818][ T9130] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.1493: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  251.202574][ T5240] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  251.255063][ T5335] em28xx 2-1:0.0: chip ID is em2800
[  251.294279][ T9130] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.1493: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  251.305731][ T5240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  251.360580][ T5240] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  251.381711][ T5240] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.383073][ T9130] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.1493: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  251.400599][ T5240] usb 6-1: Product: syz
[  251.446555][ T5335] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  251.460682][ T9130] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.1493: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  251.475521][ T5335] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  251.499638][ T5240] usb 6-1: Manufacturer: syz
[  251.533820][ T5240] usb 6-1: SerialNumber: syz
[  251.539900][ T5335] em28xx 2-1:0.0: No AC97 audio processor
[  251.542493][ T9130] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.1493: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  251.548062][ T5240] usb 6-1: config 0 descriptor??
[  251.606518][ T5335] usb 2-1: USB disconnect, device number 7
[  251.624332][ T5335] em28xx 2-1:0.0: Disconnecting em28xx
[  251.638964][ T5240] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  251.656076][ T5335] em28xx 2-1:0.0: Freeing device
[  251.663786][ T5240] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  251.743048][ T7352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.917305][ T9157] netlink: 'syz.2.1506': attribute type 1 has an invalid length.
[  251.937082][ T9157] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1506'.
[  251.964341][ T9157] netlink: 'syz.2.1506': attribute type 1 has an invalid length.
[  252.250968][ T9166] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1510'.
[  252.285335][ T5240] em28xx 6-1:0.0: chip ID is em2870
[  252.609093][ T5240] usb 6-1: USB disconnect, device number 7
[  252.618650][ T5240] em28xx 6-1:0.0: Disconnecting em28xx
[  252.660175][ T5240] em28xx 6-1:0.0: Freeing device
[  252.917727][ T9175] loop3: detected capacity change from 0 to 1024
[  253.179752][ T9164] loop4: detected capacity change from 0 to 32768
[  253.190100][ T1043] hfsplus: b-tree write err: -5, ino 4
[  253.292645][ T9164] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  253.744305][ T9204] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  253.796866][ T7352] ocfs2: Unmounting device (7,4) on (node local)
[  254.281847][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1533'.
[  254.327633][ T9222] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  254.536834][ T9226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1526'.
[  255.373633][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  255.380162][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  255.825486][ T5297] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  256.024345][ T5297] usb 4-1: Using ep0 maxpacket: 8
[  256.051116][ T5297] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  256.084328][ T5297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.125627][ T5297] usb 4-1: Product: syz
[  256.129872][ T5297] usb 4-1: Manufacturer: syz
[  256.148657][ T5297] usb 4-1: SerialNumber: syz
[  256.175529][ T5297] usb 4-1: config 0 descriptor??
[  256.199760][ T5297] gspca_main: sq930x-2.14.0 probing 2770:930c
[  256.594732][ T5240] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  256.658193][ T9282] ceph: missing cluster fsid
[  256.674887][ T9282] ceph: separator ':' missing in source
[  256.795992][ T5240] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.845451][ T5240] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.876200][ T5240] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  256.904551][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.912643][ T5240] usb 5-1: SerialNumber: syz
[  256.917078][ T9287] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1566'.
[  257.030469][ T5297] gspca_sq930x: ucbus_write failed -71
[  257.040457][ T5297] sq930x 4-1:0.0: probe with driver sq930x failed with error -71
[  257.080751][ T5297] usb 4-1: USB disconnect, device number 11
[  257.148548][ T5240] usb 5-1: 0:2 : does not exist
[  257.202124][ T5240] usb 5-1: USB disconnect, device number 10
[  257.888315][ T9312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'.
[  258.335508][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1572'.
[  258.873842][ T9334] vlan2: entered promiscuous mode
[  258.908345][ T9334] vlan2: entered allmulticast mode
[  259.584764][  T937] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  259.807552][ T9370] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1606'.
[  259.847963][  T937] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  259.876385][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  259.900915][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  259.947563][ T5240] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  259.959257][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.002689][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.052830][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.095628][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.121675][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.150128][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.195442][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.204325][ T5240] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  260.225264][ T5240] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  260.245515][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.254483][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.291735][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.318558][ T5240] usb 5-1: config 0 descriptor??
[  260.332926][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.352425][ T5240] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  260.364154][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.379862][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.433834][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.452643][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.493632][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.541808][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.581305][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.616021][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.639131][ T5240] usb 5-1: USB disconnect, device number 11
[  260.674844][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.702992][  T937] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  260.729096][  T937] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  260.770759][  T937] usb 1-1: config 0 interface 0 has no altsetting 0
[  260.809226][  T937] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  260.828465][  T937] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  260.874327][  T937] usb 1-1: Product: syz
[  260.887087][ T9382] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  260.890613][  T937] usb 1-1: Manufacturer: syz
[  260.923743][  T937] usb 1-1: SerialNumber: syz
[  260.943436][  T937] usb 1-1: config 0 descriptor??
[  260.979633][  T937] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  261.267044][ T5240] usb 1-1: USB disconnect, device number 8
[  261.286801][ T5240] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  261.290100][ T9362] loop3: detected capacity change from 0 to 40427
[  261.310764][ T9387] loop5: detected capacity change from 0 to 256
[  261.347787][ T9362] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  261.379646][ T9362] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  261.464965][ T9362] F2FS-fs (loop3): Found nat_bits in checkpoint
[  261.759131][ T9362] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  261.786664][ T9362] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  261.903459][   T29] kauditd_printk_skb: 72 callbacks suppressed
[  261.903484][   T29] audit: type=1800 audit(1726301036.718:172): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1601" name="bus" dev="loop3" ino=14 res=0 errno=0
[  262.062585][ T5229] syz-executor: attempt to access beyond end of device
[  262.062585][ T5229] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  262.146122][ T5229] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  262.176505][ T5229] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  262.334472][ T9410] sp0: Synchronizing with TNC
[  262.566563][ T5240] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  262.813321][ T5240] usb 1-1: config 0 has no interfaces?
[  262.819945][ T5240] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  262.885345][ T5240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.940843][ T5240] usb 1-1: config 0 descriptor??
[  263.302129][ T9399] loop4: detected capacity change from 0 to 32768
[  263.326110][ T9430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'.
[  263.398975][ T9430] xfrm1: entered promiscuous mode
[  263.413468][ T9399] JBD2: Ignoring recovery information on journal
[  263.425369][ T9430] xfrm1: entered allmulticast mode
[  263.508158][ T9413] dvmrp0: entered allmulticast mode
[  263.588407][  T937] usb 1-1: USB disconnect, device number 9
[  263.647491][ T9399] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  264.020336][ T7352] ocfs2: Unmounting device (7,4) on (node local)
[  264.510798][ T9459] loop5: detected capacity change from 0 to 512
[  264.554627][ T9459] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  264.622187][ T1119] dvmrp0 (unregistering): left allmulticast mode
[  264.652231][ T9459] EXT4-fs (loop5): 1 truncate cleaned up
[  264.698356][ T9459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.772782][ T9467] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  265.110230][ T9475] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  265.168968][ T9475] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.177582][ T9475] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.235478][ T9475] bridge0: entered allmulticast mode
[  265.460486][ T7597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.925533][ T5365] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  266.155557][ T5365] usb 2-1: Using ep0 maxpacket: 8
[  266.215764][ T5365] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  266.244459][ T5365] usb 2-1: config 0 has no interface number 0
[  266.314777][ T5365] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  266.403804][ T5365] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  266.482733][ T5365] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  266.520434][ T5365] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.576502][ T5365] usb 2-1: config 0 descriptor??
[  266.604082][ T5365] iowarrior 2-1:0.1: no interrupt-in endpoint found
[  266.702232][ T9509] loop4: detected capacity change from 0 to 4096
[  266.721467][ T9511] loop5: detected capacity change from 0 to 512
[  266.778933][ T9511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.801740][ T9511] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  266.828150][ T9514] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.868790][   T46] usb 2-1: USB disconnect, device number 8
[  267.083302][ T9518] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.1669'.
[  267.332441][ T7597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.587022][ T9524] netlink: 'syz.3.1674': attribute type 10 has an invalid length.
[  267.623592][ T9524] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  267.853500][ T9534] bond_slave_0: entered promiscuous mode
[  267.887084][ T9533] bond_slave_0: left promiscuous mode
[  268.434582][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'.
[  268.450271][ T9552] loop4: detected capacity change from 0 to 64
[  268.485958][   T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  268.722416][   T46] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  268.765810][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.798599][   T46] usb 4-1: Product: syz
[  268.803303][   T46] usb 4-1: Manufacturer: syz
[  268.842824][   T46] usb 4-1: SerialNumber: syz
[  268.875099][   T46] usb 4-1: config 0 descriptor??
[  269.132949][ T9565] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1690'.
[  269.171062][ T9565] ip6gretap0: entered promiscuous mode
[  269.203662][ T9565] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1690'.
[  269.432531][ T9569] syz.2.1692 (9569): /proc/9568/oom_adj is deprecated, please use /proc/9568/oom_score_adj instead.
[  269.792828][   T46] usb 4-1: f81604_write: reg: 105 data: f2 failed: -EPROTO
[  269.821850][   T46] f81604 4-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  269.871163][   T46] f81604 4-1:0.0: probe with driver f81604 failed with error -71
[  269.927595][   T46] usb 4-1: USB disconnect, device number 12
[  269.969883][ T9577] loop4: detected capacity change from 0 to 1024
[  270.319438][   T35] hfsplus: b-tree write err: -5, ino 4
[  271.926369][   T29] audit: type=1326 audit(1726301046.727:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.4.1720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f118e37def9 code=0x0
[  272.562045][ T9649] loop5: detected capacity change from 0 to 128
[  273.336857][   T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  273.547117][   T25] usb 5-1: Using ep0 maxpacket: 8
[  273.569588][   T25] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  273.589972][   T25] usb 5-1: config 0 has no interface number 0
[  273.622169][   T25] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  273.654815][   T25] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  273.685528][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.711161][   T25] usb 5-1: config 0 descriptor??
[  273.759012][   T25] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  274.047929][ T9660] loop3: detected capacity change from 0 to 40427
[  274.070536][   T25] usb 5-1: USB disconnect, device number 12
[  274.093279][   T25] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected
[  274.106990][ T9660] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[  274.138715][ T9660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  274.193297][ T9660] F2FS-fs (loop3): invalid crc value
[  274.234463][ T9660] F2FS-fs (loop3): Found nat_bits in checkpoint
[  274.303557][ T9669] loop5: detected capacity change from 0 to 4096
[  274.366738][ T9669] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  274.461839][ T9660] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  274.486734][ T9660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  274.730773][ T5229] syz-executor: attempt to access beyond end of device
[  274.730773][ T5229] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  274.755394][ T9669] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  274.783127][ T9669] ntfs3: loop5: ino=1e, "file1" attr_set_size
[  274.790367][ T5229] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  274.929081][ T9687] loop4: detected capacity change from 0 to 1024
[  274.937211][ T1119] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  274.945347][ T7597] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  274.955125][ T7597] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  274.965027][ T7597] ntfs3: loop5: ino=3, ntfs_set_state failed, -22.
[  275.025186][ T1043] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22.
[  275.099663][ T9687] hfsplus: found bad thread record in catalog
[  275.125409][ T9687] hfsplus: catalog searching failed
[  275.276000][   T35] hfsplus: found bad thread record in catalog
[  275.295098][   T35] hfsplus: found bad thread record in catalog
[  275.821550][ T9693] block nbd5: shutting down sockets
[  275.903938][ T9697] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  275.947238][ T9697] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  275.981068][ T9697] netlink: 'syz.1.1751': attribute type 29 has an invalid length.
[  277.370859][ T5297] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  277.597916][ T5297] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.630230][ T5297] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  277.669169][ T5297] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  277.696884][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  277.726315][ T5297] usb 4-1: SerialNumber: syz
[  277.937570][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'.
[  277.994851][ T5297] usb 4-1: 0:2 : does not exist
[  278.070273][ T5297] usb 4-1: USB disconnect, device number 13
[  278.727159][ T9745] loop4: detected capacity change from 0 to 256
[  279.643826][ T9771] loop5: detected capacity change from 0 to 256
[  279.704709][ T9771] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  279.757459][ T9771] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  279.940255][ T9779] loop3: detected capacity change from 0 to 256
[  280.010774][ T9779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d)
[  281.311198][ T9809] loop4: detected capacity change from 0 to 764
[  282.589001][ T9830] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1808'.
[  282.640104][ T9830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1808'.
[  284.120070][ T9828] loop5: detected capacity change from 0 to 32768
[  286.249609][ T9849] loop4: detected capacity change from 0 to 32768
[  286.296377][ T9849] XFS: ikeep mount option is deprecated.
[  286.328251][ T9849] XFS: ikeep mount option is deprecated.
[  286.446001][ T9849] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  286.716347][ T9849] XFS (loop4): Ending clean mount
[  287.170579][ T7352] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  288.618472][ T9909] loop6: detected capacity change from 0 to 524287999
[  288.656199][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.665737][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.692612][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.701852][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.725599][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.735304][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.745577][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.759013][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.769208][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.783733][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.793071][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.801544][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.811831][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.822179][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.831398][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.839626][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.849933][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.858897][ T9909] ldm_validate_partition_table(): Disk read failed.
[  288.891632][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  288.900896][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.915827][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[  288.925476][ T9909] Dev loop6: unable to read RDB block 0
[  288.977316][ T9909]  loop6: unable to read partition table
[  289.006663][ T9909] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[  289.280668][ T9918] netlink: 'syz.4.1842': attribute type 8 has an invalid length.
[  289.298634][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1842'.
[  289.332917][ T9920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1843'.
[  291.248771][  T934] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  291.458494][  T934] usb 1-1: Using ep0 maxpacket: 8
[  291.467962][  T934] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  291.499609][  T934] usb 1-1: config 179 has no interface number 0
[  291.506683][  T934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  291.553442][  T934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  291.591739][  T934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  291.626960][  T934] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  291.665899][  T934] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  291.705873][  T934] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  291.735840][  T934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.775755][ T9954] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  291.991605][ T9952] loop5: detected capacity change from 0 to 32768
[  292.032022][ T9952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1857 (9952)
[  292.110359][ T9952] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  292.115649][ T5297] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23
[  292.155526][ T9952] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  292.193777][ T9952] BTRFS info (device loop5): using free-space-tree
[  292.315259][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  292.323624][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  292.341303][ T5297] usb 1-1: USB disconnect, device number 10
[  292.349280][ T5297] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  292.395832][ T9969] dlm: no local IP address has been set
[  292.443230][ T9969] dlm: cannot start dlm midcomms -107
[  292.802492][ T7597] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.170701][ T9989] netlink: 'syz.4.1868': attribute type 6 has an invalid length.
[  293.200421][ T9989] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1868'.
[  295.730869][ T5254] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  295.743446][ T5254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  295.793880][ T5254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  295.807486][ T5254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  295.890563][ T5254] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  295.899971][ T5254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  296.551269][T10050] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  296.629851][T10053] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  297.089591][ T5240] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  297.281827][T10033] chnl_net:caif_netlink_parms(): no params data found
[  297.341757][ T5240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  297.385587][ T5240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.406258][T10077] program syz.1.1905 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  297.445478][ T5240] usb 6-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  297.478808][ T5240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.541399][ T5240] usb 6-1: config 0 descriptor??
[  297.809545][ T5298] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  297.817489][T10033] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.852672][T10033] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.886652][T10033] bridge_slave_0: entered allmulticast mode
[  297.923328][T10033] bridge_slave_0: entered promiscuous mode
[  297.962027][T10033] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.985879][T10033] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.996716][ T5240] wacom 0003:056A:00E5.0008: unknown main item tag 0x0
[  298.004220][ T5254] Bluetooth: hci5: command tx timeout
[  298.028752][T10033] bridge_slave_1: entered allmulticast mode
[  298.041687][T10033] bridge_slave_1: entered promiscuous mode
[  298.049921][ T5298] usb 5-1: Using ep0 maxpacket: 16
[  298.092039][ T5298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  298.120551][ T5240] wacom 0003:056A:00E5.0008: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.5-1/input0
[  298.169276][ T5298] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  298.193917][ T5298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.209522][ T5240] usb 6-1: USB disconnect, device number 8
[  298.237463][ T5298] usb 5-1: Product: syz
[  298.268903][ T5298] usb 5-1: Manufacturer: syz
[  298.293683][T10033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.306106][ T5298] usb 5-1: SerialNumber: syz
[  298.335599][ T5298] usb 5-1: config 0 descriptor??
[  298.351244][T10033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.373524][ T5298] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  298.390159][ T5254] Bluetooth: hci2: command 0x0406 tx timeout
[  298.602045][T10033] team0: Port device team_slave_0 added
[  298.636380][ T5297] usb 5-1: USB disconnect, device number 13
[  298.660895][T10033] team0: Port device team_slave_1 added
[  298.790745][T10033] batman_adv: batadv0: Adding interface: batadv_slave_0
[  298.797767][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  298.934410][T10033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.019596][T10033] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.049278][T10033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.160993][T10033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.320223][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'.
[  299.335359][T10096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'.
[  299.429646][ T5298] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  299.612211][T10033] hsr_slave_0: entered promiscuous mode
[  299.650437][ T5298] usb 1-1: Using ep0 maxpacket: 8
[  299.670371][ T5298] usb 1-1: config 0 has an invalid interface number: 52 but max is 0
[  299.678128][T10033] hsr_slave_1: entered promiscuous mode
[  299.699571][ T5298] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  299.722200][T10033] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.729492][ T5298] usb 1-1: config 0 has no interface number 0
[  299.751051][ T5298] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 48, changing to 9
[  299.755047][T10033] Cannot create hsr debugfs directory
[  299.780008][T10100] netlink: 'syz.5.1916': attribute type 29 has an invalid length.
[  299.795076][ T5298] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024
[  299.849725][ T5298] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  299.909694][ T5298] usb 1-1: config 0 interface 52 has no altsetting 0
[  299.950320][ T5298] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  299.990172][ T5298] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35
[  300.018206][ T5298] usb 1-1: Product: syz
[  300.031065][ T5298] usb 1-1: Manufacturer: syz
[  300.051423][ T5298] usb 1-1: SerialNumber: syz
[  300.070498][ T5241] Bluetooth: hci5: command tx timeout
[  300.090473][ T5298] usb 1-1: config 0 descriptor??
[  300.394010][ T5298] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input28
[  300.753457][   T46] usb 1-1: USB disconnect, device number 11
[  300.753562][    C0] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[  301.297389][T10033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.407446][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1926'.
[  301.681846][T10033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.721542][T10140] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1934'.
[  301.780740][T10135] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  301.809186][T10135] macsec1: entered promiscuous mode
[  301.853999][T10135] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  301.971483][T10146] loop4: detected capacity change from 0 to 8
[  302.150209][ T5241] Bluetooth: hci5: command tx timeout
[  302.191628][T10033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.594727][T10033] bond0: (slave netdevsim0): Releasing backup interface
[  302.650649][   T29] audit: type=1326 audit(1726301077.473:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10158 comm="syz.5.1942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8895f7def9 code=0x7fc00000
[  302.665356][T10033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.530699][T10033] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  303.584853][T10033] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  303.614121][T10180] loop5: detected capacity change from 0 to 64
[  303.657389][T10033] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  303.736093][T10033] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  304.230816][ T5241] Bluetooth: hci5: command tx timeout
[  304.372552][T10033] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.497272][T10033] 8021q: adding VLAN 0 to HW filter on device team0
[  304.568956][T10200] loop5: detected capacity change from 0 to 1024
[  304.585788][ T2493] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.593129][ T2493] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.699008][ T2493] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.706582][ T2493] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.871400][T10204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  305.052229][T10209] binder: 10208:10209 ioctl c00c620f 20000340 returned -22
[  305.089831][ T5298] IPVS: starting estimator thread 0...
[  305.211347][T10213] IPVS: using max 16 ests per chain, 38400 per kthread
[  305.870318][ T5298] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  305.959616][T10033] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.093496][ T5298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.133465][ T5298] usb 3-1: config 0 has no interfaces?
[  306.164542][ T5298] usb 3-1: New USB device found, idVendor=04b4, idProduct=bd29, bcdDevice= 0.c7
[  306.232192][ T5298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.273586][ T5298] usb 3-1: config 0 descriptor??
[  306.315458][T10033] veth0_vlan: entered promiscuous mode
[  306.392551][T10033] veth1_vlan: entered promiscuous mode
[  306.640009][T10033] veth0_macvtap: entered promiscuous mode
[  306.640033][ T5298] usb 3-1: USB disconnect, device number 2
[  306.658204][T10033] veth1_macvtap: entered promiscuous mode
[  306.710066][T10248] bridge_slave_1: left allmulticast mode
[  306.716492][T10248] bridge_slave_1: left promiscuous mode
[  306.729402][T10248] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.772181][T10248] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  306.885518][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.915158][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.941836][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.978467][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.009878][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.039818][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.072113][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.113813][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.143776][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.176357][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.206287][T10256] loop5: detected capacity change from 0 to 4096
[  307.214509][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.229500][T10256] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  307.239649][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.260906][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.283166][T10256] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  307.296292][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.354576][T10256] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  307.366413][T10033] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.685685][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.734064][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.760476][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.792293][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.829403][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.835137][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  307.872991][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.905249][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.930116][T10267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1990'.
[  307.944108][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.967961][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.983620][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.002176][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.028147][T10246] loop4: detected capacity change from 0 to 32768
[  308.033751][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.038817][T10246] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1979 (10246)
[  308.048953][T10033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  308.078939][T10033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.119172][T10246] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  308.145160][T10246] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  308.156278][T10246] BTRFS info (device loop4): using free-space-tree
[  308.156821][T10033] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.195875][T10033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.205638][T10033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.219406][T10033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.229050][T10033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.318168][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  308.647921][ T5241] Bluetooth: hci6: command 0x0406 tx timeout
[  308.693524][T10288] nbd: device at index 5 is going down
[  309.067918][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.096886][ T7352] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  309.106206][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.267686][ T2493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.330788][ T2493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.334508][   T46] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  309.452608][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.584485][   T46] usb 1-1: Using ep0 maxpacket: 32
[  309.622763][   T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  309.675478][   T46] usb 1-1: config 0 interface 0 has no altsetting 0
[  309.726531][   T46] usb 1-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=ab.19
[  309.760842][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.761187][ T5240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.778459][ T5365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  309.811609][   T46] usb 1-1: Product: syz
[  309.816358][   T46] usb 1-1: Manufacturer: syz
[  309.853065][   T46] usb 1-1: SerialNumber: syz
[  309.914488][   T46] usb 1-1: config 0 descriptor??
[  309.928639][ T5298] kernel write not supported for file /snd/seq (pid: 5298 comm: kworker/0:4)
[  310.018128][   T46] rndis_host 1-1:0.0: skipping garbage
[  310.058613][   T46] usb 1-1: bad CDC descriptors
[  310.111118][   T46] cdc_acm 1-1:0.0: skipping garbage
[  310.336725][   T46] usb 1-1: USB disconnect, device number 12
[  310.472487][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  310.878398][ T5240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.048549][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2007'.
[  311.536044][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.786350][T10300] IPVS: You probably need to specify IP address on multicast interface.
[  311.821370][T10300] IPVS: Error connecting to the multicast addr
[  312.188955][T10318] loop5: detected capacity change from 0 to 40427
[  312.212118][T10340] netlink: 'syz.2.2014': attribute type 7 has an invalid length.
[  312.219897][T10340] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2014'.
[  312.256784][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'.
[  312.321990][T10318] F2FS-fs (loop5): invalid crc value
[  312.328391][T10340] netlink: 'syz.2.2014': attribute type 3 has an invalid length.
[  312.337158][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2013'.
[  312.388413][T10340] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2014'.
[  312.405811][T10318] F2FS-fs (loop5): Found nat_bits in checkpoint
[  312.517953][T10341] vlan3: entered allmulticast mode
[  312.571570][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  312.573547][T10341] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  312.795560][T10318] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  312.924574][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'.
[  312.967828][T10351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'.
[  312.996295][T10352] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2017'.
[  313.103803][ T7597] syz-executor: attempt to access beyond end of device
[  313.103803][ T7597] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  313.141121][ T7597] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  313.593063][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  313.619700][T10362] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  313.941143][ T5240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  314.640833][   T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  315.021907][T10392] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.676975][ T5296] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.727482][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.808358][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  316.818404][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  316.960330][ T5240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  317.738744][T10478] xt_CT: You must specify a L4 protocol and not use inversions on it
[  317.756463][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.177965][T10489] tun0: tun_chr_ioctl cmd 1074812118
[  318.241893][   T46] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  318.472644][   T46] usb 5-1: Using ep0 maxpacket: 32
[  318.500375][   T46] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  318.529228][   T46] usb 5-1: config 0 has no interface number 0
[  318.554546][   T46] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  318.583973][   T46] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  318.616391][   T46] usb 5-1: config 0 interface 126 has no altsetting 0
[  318.672826][   T46] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  318.690666][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.706385][   T46] usb 5-1: Product: syz
[  318.711373][   T46] usb 5-1: Manufacturer: syz
[  318.718137][   T46] usb 5-1: SerialNumber: syz
[  318.744991][   T46] usb 5-1: config 0 descriptor??
[  318.753876][T10482] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  318.800454][ T5297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  318.812630][T10482] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  318.978341][ T5296] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  319.221778][ T5296] usb 4-1: Using ep0 maxpacket: 8
[  319.265928][   T46] ir_usb 5-1:0.126: IR Dongle converter detected
[  319.289729][ T5296] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.307998][ T5296] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.326190][ T5296] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[  319.341757][ T5296] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.353256][ T5298] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.375075][ T5296] usb 4-1: Product: syz
[  319.379861][ T5296] usb 4-1: Manufacturer: syz
[  319.401894][ T5296] usb 4-1: SerialNumber: syz
[  319.485771][   T46] usb 5-1: IR Dongle converter now attached to ttyUSB0
[  319.656431][ T5296] usbhid 4-1:1.0: can't add hid device: -22
[  319.670515][ T5365] usb 5-1: USB disconnect, device number 14
[  319.681963][ T5296] usbhid 4-1:1.0: probe with driver usbhid failed with error -22
[  319.700171][ T5365] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  319.735034][ T5365] ir_usb 5-1:0.126: device disconnected
[  319.822026][ T5298] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  319.846274][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.922874][   T25] usb 4-1: USB disconnect, device number 14
[  319.999751][T10510] netlink: 'syz.5.2088': attribute type 1 has an invalid length.
[  320.004601][  T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.009865][T10510] netlink: 3440 bytes leftover after parsing attributes in process `syz.5.2088'.
[  320.027751][T10510] netlink: 'syz.5.2088': attribute type 1 has an invalid length.
[  320.032463][ T5298] usb 2-1: Using ep0 maxpacket: 8
[  320.036406][T10510] netlink: 5888 bytes leftover after parsing attributes in process `syz.5.2088'.
[  320.067341][ T5298] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  320.094149][ T5298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.124785][ T5298] usb 2-1: Product: syz
[  320.129016][ T5298] usb 2-1: Manufacturer: syz
[  320.155202][ T5298] usb 2-1: SerialNumber: syz
[  320.177952][ T5298] usb 2-1: config 0 descriptor??
[  320.419449][ T5298] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[  320.445858][ T5298] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  320.492304][ T5298] usb 2-1: USB disconnect, device number 9
[  320.492961][T10516] loop4: detected capacity change from 0 to 512
[  320.525902][T10516] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  320.610351][T10516] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  320.694034][  T937] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  320.727952][T10516] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2091: invalid indirect mapped block 4294967295 (level 0)
[  320.792720][T10516] EXT4-fs (loop4): Remounting filesystem read-only
[  320.825811][T10524] program syz.5.2094 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  320.826086][T10516] EXT4-fs (loop4): 1 orphan inode deleted
[  320.845860][T10516] EXT4-fs (loop4): 1 truncate cleaned up
[  320.855121][T10516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.887879][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.902317][  T937] usb 3-1: Using ep0 maxpacket: 8
[  320.943669][  T937] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  320.970487][  T937] usb 3-1: config 150 has no interface number 0
[  321.021991][  T937] usb 3-1: config 150 interface 204 has no altsetting 0
[  321.052040][  T937] usb 3-1: config 150 interface 1 has no altsetting 0
[  321.095968][  T937] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  321.128970][  T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.165649][ T7352] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.173809][  T937] usb 3-1: Product: syz
[  321.176858][T10526] syz.3.2095 uses obsolete (PF_INET,SOCK_PACKET)
[  321.199739][  T937] usb 3-1: Manufacturer: syz
[  321.212305][  T937] usb 3-1: SerialNumber: syz
[  321.495059][  T937] xr_serial 3-1:150.204: xr_serial converter detected
[  321.676511][T10540] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2102'.
[  321.708736][T10540] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2102'.
[  321.839856][T10542] loop5: detected capacity change from 0 to 16
[  321.892659][T10542] erofs: (device loop5): mounted with root inode @ nid 36.
[  321.921635][   T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.973732][T10545] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2104'.
[  322.101114][  T937] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  322.132113][  T937] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  322.183431][  T937] usb 3-1: USB disconnect, device number 3
[  322.191002][  T937] xr_serial 3-1:150.204: device disconnected
[  322.586961][T10559] overlayfs: failed to clone upperpath
[  323.288242][T10532] loop4: detected capacity change from 0 to 40427
[  323.328586][T10532] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  323.369237][T10532] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  323.379088][  T937] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  323.464696][T10532] F2FS-fs (loop4): Found nat_bits in checkpoint
[  323.593341][  T937] usb 6-1: Using ep0 maxpacket: 8
[  323.616520][  T937] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  323.653487][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  323.702615][  T937] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  323.751911][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  323.783788][T10532] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  323.801335][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  323.823833][T10532] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  323.846946][  T937] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  323.868357][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  323.911307][  T937] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  323.963043][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  324.026836][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  324.087935][  T937] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  324.113102][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  324.145477][  T937] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  324.226452][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  324.264648][  T937] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  324.353442][  T937] usb 6-1: string descriptor 0 read error: -22
[  324.359845][  T937] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  324.400465][  T937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.474183][T10593] Process accounting resumed
[  324.481480][  T937] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  324.879617][   T46] usb 6-1: USB disconnect, device number 9
[  325.783525][T10633] netlink: 'syz.2.2145': attribute type 1 has an invalid length.
[  325.882854][T10633] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.2145'.
[  325.930180][T10633] netlink: 'syz.2.2145': attribute type 1 has an invalid length.
[  326.086927][T10643] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  326.206359][T10645] netlink: 'syz.1.2149': attribute type 4 has an invalid length.
[  326.802211][T10665] loop5: detected capacity change from 0 to 512
[  326.824367][T10665] EXT4-fs: Ignoring removed bh option
[  326.874782][T10665] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  327.063487][T10665] EXT4-fs (loop5): 1 truncate cleaned up
[  327.105724][T10665] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.610468][ T7597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.220272][T10697] loop3: detected capacity change from 0 to 256
[  328.325429][   T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  328.393486][T10697] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  328.591371][   T25] usb 6-1: Using ep0 maxpacket: 16
[  328.615944][   T25] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  328.646333][   T25] usb 6-1: config 0 has no interface number 0
[  328.683259][   T25] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  328.721546][   T25] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  328.787968][   T25] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  328.821630][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.862850][   T25] usb 6-1: Product: syz
[  328.888467][   T25] usb 6-1: Manufacturer: syz
[  328.933348][   T25] usb 6-1: SerialNumber: syz
[  328.967261][   T25] usb 6-1: config 0 descriptor??
[  329.004043][T10691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  329.043441][T10691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  329.119497][ T5241] Bluetooth: hci7: command 0x0405 tx timeout
[  329.129395][T10708] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2178'.
[  329.341355][T10691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  329.403310][T10691] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  330.085963][   T25] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  330.123493][   T25] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  330.171756][   T25] asix 6-1:0.251: probe with driver asix failed with error -71
[  330.247986][   T25] usb 6-1: USB disconnect, device number 10
[  331.039439][T10734] loop5: detected capacity change from 0 to 64
[  331.146803][T10734] hfs: request for non-existent node 131072 in B*Tree
[  331.191968][T10734] hfs: request for non-existent node 131072 in B*Tree
[  331.425687][T10746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2194'.
[  331.501305][T10749] loop5: detected capacity change from 0 to 64
[  332.479008][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2210'.
[  333.057037][T10791] tipc: Started in network mode
[  333.062558][T10791] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711
[  333.117033][T10791] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  333.151981][ T5365] hid-generic 000D:0000:0000.0009: unknown main item tag 0x0
[  333.205097][ T5365] hid-generic 000D:0000:0000.0009: unknown main item tag 0x0
[  333.276648][ T5365] hid-generic 000D:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  333.419363][   T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  333.422997][T10801] loop5: detected capacity change from 0 to 2048
[  333.543766][T10801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.621637][T10801] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  333.633684][   T25] usb 4-1: Using ep0 maxpacket: 32
[  333.657570][   T25] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  333.698702][   T25] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  333.764715][   T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  333.783665][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  333.823627][   T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  333.873521][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  333.906244][   T25] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  333.908762][ T7597] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.963975][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.025060][   T25] usb 4-1: config 0 descriptor??
[  334.053959][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'.
[  334.296857][   T25] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  334.393867][ T5241] Bluetooth: hci5: command 0x0405 tx timeout
[  334.451595][T10832] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  334.552865][   T46] usb 4-1: USB disconnect, device number 15
[  334.574553][   T46] usblp0: removed
[  334.649790][ T5298] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  334.702443][   T25] IPVS: starting estimator thread 0...
[  334.719179][T10835] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  334.803958][T10837] IPVS: using max 17 ests per chain, 40800 per kthread
[  334.883857][ T5298] usb 3-1: Using ep0 maxpacket: 8
[  334.899386][ T5298] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  334.943531][ T5298] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  334.953644][ T5298] usb 3-1: Product: syz
[  334.957854][ T5298] usb 3-1: Manufacturer: syz
[  334.962472][ T5298] usb 3-1: SerialNumber: syz
[  335.014746][ T5298] usb 3-1: config 0 descriptor??
[  335.024522][ T5298] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  335.417782][T10845] syz.3.2238 uses old SIOCAX25GETINFO
[  335.681416][ T5298] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29
[  336.009296][ T5298] usb 3-1: USB disconnect, device number 4
[  336.326154][T10860] loop5: detected capacity change from 0 to 24
[  336.396968][T10860] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  336.440487][T10860] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  336.509612][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2246'.
[  337.279647][   T30] INFO: task syz.1.918:7690 blocked for more than 143 seconds.
[  337.295053][   T30]       Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0
[  337.302831][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  337.354801][   T30] task:syz.1.918       state:D stack:24304 pid:7690  tgid:7686  ppid:6246   flags:0x00004004
[  337.413473][   T30] Call Trace:
[  337.429266][   T30]  <TASK>
[  337.436943][   T30]  __schedule+0x1800/0x4a60
[  337.442217][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.451032][   T30]  ? __pfx___schedule+0x10/0x10
[  337.463272][   T30]  ? __blk_flush_plug+0x449/0x500
[  337.469878][   T30]  ? __pfx_lock_release+0x10/0x10
[  337.481504][   T30]  ? __blk_flush_plug+0x449/0x500
[  337.486877][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  337.492917][   T30]  ? __pfx___blk_flush_plug+0x10/0x10
[  337.511962][   T30]  ? schedule+0x90/0x320
[  337.516860][   T30]  schedule+0x14b/0x320
[  337.521171][   T30]  io_schedule+0x8d/0x110
[  337.527479][   T30]  folio_wait_bit_common+0x882/0x12b0
[  337.532917][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  337.538901][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  337.545711][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  337.551069][   T30]  z_erofs_runqueue+0xa8c/0x2010
[  337.563389][   T30]  ? __pfx_z_erofs_runqueue+0x10/0x10
[  337.568988][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.575029][   T30]  ? _raw_spin_unlock+0x28/0x50
[  337.579928][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.586105][   T30]  ? lockref_put_or_lock+0x75/0xc0
[  337.591257][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.597413][   T30]  z_erofs_readahead+0xbae/0xf00
[  337.606582][   T30]  ? __pfx_z_erofs_readahead+0x10/0x10
[  337.612105][   T30]  ? __pfx_lock_release+0x10/0x10
[  337.617649][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.623333][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.629299][   T30]  ? blk_start_plug+0x70/0x1b0
[  337.635413][   T30]  read_pages+0x180/0x840
[  337.639792][   T30]  ? __pfx_lru_add_fn+0x10/0x10
[  337.645081][   T30]  ? __pfx_read_pages+0x10/0x10
[  337.649967][   T30]  ? filemap_add_folio+0x26d/0x650
[  337.656502][   T30]  ? __pfx_filemap_add_folio+0x10/0x10
[  337.662020][   T30]  page_cache_ra_unbounded+0x6ce/0x7f0
[  337.667888][   T30]  force_page_cache_ra+0x280/0x2f0
[  337.673056][   T30]  generic_fadvise+0x528/0x840
[  337.678676][   T30]  ? __pfx_generic_fadvise+0x10/0x10
[  337.684251][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.689925][   T30]  ? __fget_files+0x3f6/0x470
[  337.694796][   T30]  ? __fget_files+0x29/0x470
[  337.699599][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  337.707637][   T30]  __x64_sys_fadvise64+0x145/0x190
[  337.721459][   T30]  do_syscall_64+0xf3/0x230
[  337.727283][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.733230][   T30] RIP: 0033:0x7fc7a8f7def9
[  337.746141][   T30] RSP: 002b:00007fc7a9e2c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  337.761616][   T30] RAX: ffffffffffffffda RBX: 00007fc7a9136058 RCX: 00007fc7a8f7def9
[  337.771590][   T30] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000005
[  337.779812][   T30] RBP: 00007fc7a8ff0b76 R08: 0000000000000000 R09: 0000000000000000
[  337.791241][   T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  337.803219][   T30] R13: 0000000000000000 R14: 00007fc7a9136058 R15: 00007ffd9c872988
[  337.813520][   T30]  </TASK>
[  337.816762][   T30] 
[  337.816762][   T30] Showing all locks held in the system:
[  337.829449][   T30] 3 locks held by kworker/1:0/25:
[  337.837441][   T30]  #0: ffff8880b893e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  337.854165][   T30]  #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770
[  337.876312][   T30]  #2: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: net_tx_action+0x708/0xa50
[  337.886203][   T30] 1 lock held by khungtaskd/30:
[  337.891080][   T30]  #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  337.901155][   T30] 2 locks held by kworker/u8:8/1119:
[  337.906675][   T30] 3 locks held by kworker/u8:9/2493:
[  337.916030][   T30]  #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830
[  337.927960][   T30]  #1: ffffc9000969fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830
[  337.939928][   T30]  #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  337.951440][   T30] 2 locks held by getty/4987:
[  337.959658][   T30]  #0: ffff888034fa10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  337.969658][   T30]  #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  337.981608][   T30] 1 lock held by syz.1.918/7690:
[  337.987979][   T30]  #0: ffff88805c934330 (mapping.invalidate_lock#6){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0
[  337.999612][   T30] 2 locks held by syz.3.1816/9847:
[  338.005194][   T30]  #0: ffffffff8fcf1a70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40
[  338.015839][   T30]  #1: ffffffff8ec0b6e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90
[  338.026559][   T30] 
[  338.029054][   T30] =============================================
[  338.029054][   T30] 
[  338.038126][   T30] NMI backtrace for cpu 0
[  338.042480][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0
[  338.053003][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  338.063073][   T30] Call Trace:
[  338.066382][   T30]  <TASK>
[  338.069333][   T30]  dump_stack_lvl+0x241/0x360
[  338.074048][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.079286][   T30]  ? __pfx__printk+0x10/0x10
[  338.083910][   T30]  ? vprintk_emit+0x667/0x7c0
[  338.088630][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  338.094122][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  338.099100][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  338.104627][   T30]  ? _printk+0xd5/0x120
[  338.108809][   T30]  ? __pfx__printk+0x10/0x10
[  338.113428][   T30]  ? __wake_up_klogd+0xcc/0x110
[  338.118316][   T30]  ? __pfx__printk+0x10/0x10
[  338.122921][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.128580][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  338.133623][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  338.139627][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  338.145640][   T30]  watchdog+0xff4/0x1040
[  338.149920][   T30]  ? watchdog+0x1ea/0x1040
[  338.154381][   T30]  ? __pfx_watchdog+0x10/0x10
[  338.159085][   T30]  kthread+0x2f2/0x390
[  338.163168][   T30]  ? __pfx_watchdog+0x10/0x10
[  338.167870][   T30]  ? __pfx_kthread+0x10/0x10
[  338.172481][   T30]  ret_from_fork+0x4d/0x80
[  338.176923][   T30]  ? __pfx_kthread+0x10/0x10
[  338.181528][   T30]  ret_from_fork_asm+0x1a/0x30
[  338.186423][   T30]  </TASK>
[  338.191764][   T30] Sending NMI from CPU 0 to CPUs 1:
[  338.198347][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30
[  338.204327][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  338.204348][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00135-gb7718454f937 #0
[  338.204378][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  338.204395][   T30] Call Trace:
[  338.204407][   T30]  <TASK>
[  338.204419][   T30]  dump_stack_lvl+0x241/0x360
[  338.204462][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.204492][   T30]  ? __pfx__printk+0x10/0x10
[  338.204515][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  338.204563][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.204602][   T30]  ? vscnprintf+0x5d/0x90
[  338.204638][   T30]  panic+0x349/0x860
[  338.204662][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.204702][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  338.204740][   T30]  ? __pfx_panic+0x10/0x10
[  338.204763][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  338.204794][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.204831][   T30]  ? __irq_work_queue_local+0x137/0x410
[  338.204870][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.204907][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  338.204936][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  338.204971][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  338.205009][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  338.205046][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  338.205085][   T30]  watchdog+0x1033/0x1040
[  338.205126][   T30]  ? watchdog+0x1ea/0x1040
[  338.205171][   T30]  ? __pfx_watchdog+0x10/0x10
[  338.205209][   T30]  kthread+0x2f2/0x390
[  338.205234][   T30]  ? __pfx_watchdog+0x10/0x10
[  338.205271][   T30]  ? __pfx_kthread+0x10/0x10
[  338.205297][   T30]  ret_from_fork+0x4d/0x80
[  338.205334][   T30]  ? __pfx_kthread+0x10/0x10
[  338.205359][   T30]  ret_from_fork_asm+0x1a/0x30
[  338.205414][   T30]  </TASK>
[  338.212216][   T30] Kernel Offset: disabled
[  338.394938][   T30] Rebooting in 86400 seconds..