last executing test programs:

1m42.789891301s ago: executing program 2 (id=284):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x1})
ppoll(&(0x7f0000000000)=[{r1, 0x2bc8a8fbcfebe7c6}], 0x1, 0x0, 0x0, 0x0)

1m42.656514482s ago: executing program 2 (id=286):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f000000bf00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}}, 0x2000c994)

1m42.546690131s ago: executing program 2 (id=287):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10)
get_robust_list(0x0, 0x0, 0x0)

1m42.43098952s ago: executing program 2 (id=289):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m41.972901928s ago: executing program 2 (id=297):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m40.750831788s ago: executing program 2 (id=307):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0)

1m40.442770303s ago: executing program 32 (id=307):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x30, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x0)

5.471769122s ago: executing program 1 (id=1116):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0)

5.112272052s ago: executing program 1 (id=1121):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000100)='./bus\x00', 0x300000a, &(0x7f0000000240)={[{@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@enospc_debug}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@nodatasum}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xc1, &(0x7f0000000800)="$eJzs1z1KxFAUBeCbBIylNiJYWKdxDy5FLE0jVorgDsQduAJXYe8S0ltYpBXxDZP3YH66aSYMfF8RcjjNhfua+/X7cfHWRaSXiNSd33+nlYfHp7ubfvk96SPiODY0EakNDlsdEW1Z7uVpzj/XuatKP4zPt8PYRH4lefWTo9f5BgcAAHZW11v5P13lv79yBU7hrCr92hH4+b6vIQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmtAgAAP//5g4sAw==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xca289435, &(0x7f0000000400)={0x0, 0x0, {0x1, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x7, 0x0, 0x0, [0x2000000, 0x0, 0x0, 0xfffffffffffffffc]}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @usage, 0x0, 0x0, [0x0, 0x0, 0x3, 0x0, 0x0, 0x67e5]}, {0x0, @usage=0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @usage=0xfffffffffffffffe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x9, 0x5]}})

4.487380582s ago: executing program 3 (id=1125):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@nogrpid}, {@gqnoenforce}, {@nolazytime}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3.679558479s ago: executing program 4 (id=1131):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$bfs(&(0x7f0000000200), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="004a5ee0571b8b8ed0f6a48d325fba78ad6f0600000000003049b1bc0f575f7c1bc5a03700000021b507dcf20b43396d320c73fa0435a17e3ad49101519c27821d8fb92ae6ac27790cf4b0e5ba4928b9ed510bc26200000000000046d3817e28effc50f2bcd60c4d947d5e38e19ad1850bfeef8025459fcbe1f74e65c5098522bae8e8ba957ad8774e4e665c9a4ad49144e3f9ebfe52eff9b8edc7440e932e133ac2e2d3a9f006a3aef51a7aec57bbf2c360e284b902ade529a9140c889a18f357d7a424f96ca02d9b917784e84246cfcd5ff450a276bd4c8b77aae199342dc8ade5b0d1f9f54dd440ae3736fb92ba0e088ab18dd6a79e96e5cf2f97f41a90c175ee9590a20100000064c3000000000000000000", @ANYRES64=0x0], 0x1, 0xa0, &(0x7f0000000340)="$eJzs17GJAkEABdB/Gxx7yTZwwXWwNdwVcRUYGhopgjZkK5ZgamRgajIiuyIsaGCyCu/BMHw+Az+d7WnznSYpq6SUsk6nXMzmi+ln7nvU8R6q/q6T/DRdPvwlv0k++n53XE6uZ/D8vx5hMwAA8Jwq7TC3t5/d/muUUQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv5BwAAP//ToEaBw==")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)

3.233823565s ago: executing program 5 (id=1134):
r0 = socket$inet6(0xa, 0x3, 0x5)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
setsockopt$inet6_int(r0, 0x29, 0x18, 0x0, 0x0)

2.791712431s ago: executing program 1 (id=1135):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20)

2.791372362s ago: executing program 3 (id=1137):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048060}, 0x100)

2.67714741s ago: executing program 5 (id=1138):
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000)

2.367559796s ago: executing program 5 (id=1140):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

2.325716869s ago: executing program 4 (id=1141):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
sendto$inet(r0, 0x0, 0x0, 0x20000090, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)

2.295040112s ago: executing program 0 (id=1142):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0)

2.043639073s ago: executing program 0 (id=1143):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)={r1}, &(0x7f00000001c0)=0x8)

1.95042317s ago: executing program 0 (id=1144):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @remote, @dev, @remote}}}}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.941415061s ago: executing program 4 (id=1145):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
acct(&(0x7f00000001c0)='./file0\x00')
acct(&(0x7f0000000240)='./file0\x00')

1.723320268s ago: executing program 0 (id=1146):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6e)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

1.723051559s ago: executing program 1 (id=1147):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
prlimit64(0x0, 0xe, 0x0, 0x0)

1.638319166s ago: executing program 4 (id=1148):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@resgid}, {@auto_da_alloc}, {@jqfmt_vfsv0}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x47b, &(0x7f0000001280)="$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")
io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x183081, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=')

1.353163579s ago: executing program 0 (id=1149):
keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x6, 0x7fc00002}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))

1.083431371s ago: executing program 3 (id=1150):
r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
fcntl$setstatus(r0, 0x4, 0xc00)
read(r0, &(0x7f0000000080)=""/116, 0xfffffeb2)
read(r0, &(0x7f0000000280)=""/96, 0x60)

995.563438ms ago: executing program 0 (id=1151):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

971.44534ms ago: executing program 4 (id=1152):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040060}, 0x40840)

915.521075ms ago: executing program 3 (id=1153):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6)

797.070855ms ago: executing program 3 (id=1154):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000028000"})

701.085263ms ago: executing program 5 (id=1155):
r0 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x101, 0xb)

575.557383ms ago: executing program 1 (id=1156):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x3)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

564.054744ms ago: executing program 5 (id=1157):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x80000010})

480.98305ms ago: executing program 4 (id=1158):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x80010000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x2}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

395.504867ms ago: executing program 3 (id=1159):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x4031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10)

372.28726ms ago: executing program 1 (id=1160):
r0 = io_uring_setup(0x6812, &(0x7f0000000780)={0x0, 0x485c, 0x0, 0x2, 0x2ce})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x78, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)

351.335541ms ago: executing program 5 (id=1161):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeffffe}, {0x16, 0x8}]}, 0x10)
syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[], 0x0)

0s ago: executing program 33 (id=1158):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x80010000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x2}, 0x1c)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

Manufacturer: syz
[  129.442216][ T4790] usb 5-1: SerialNumber: syz
[  129.450046][ T5419] UDF-fs: Scanning with blocksize 512 failed
[  129.458679][ T5395] F2FS-fs (loop3): Found nat_bits in checkpoint
[  129.489262][ T5419] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.667182][ T5395] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  129.710970][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.745910][ T5432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.380'.
[  129.809289][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  129.818306][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  129.898126][ T5237] 8021q: adding VLAN 0 to HW filter on device team0
[  129.932707][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.959203][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  129.961498][ T4280] syz-executor: attempt to access beyond end of device
[  129.961498][ T4280] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.989291][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.996507][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.053260][ T4790] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  130.090453][ T4790] dvb-usb: bulk message failed: -71 (3/0)
[  130.107365][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.120579][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.140742][ T4790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.153588][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.194596][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.201841][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.212605][ T4790] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  130.241686][ T4790] usb 5-1: media controller created
[  130.274275][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.310351][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.325492][ T4790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  130.339693][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.371141][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.431386][ T4790] dvb-usb: bulk message failed: -71 (6/0)
[  130.445600][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.464524][ T4790] dvb-usb: bulk message failed: -71 (6/0)
[  130.465110][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.491103][ T4790] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  130.510829][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.531734][ T4790] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  130.560403][ T4790] dvb-usb: schedule remote query interval to 150 msecs.
[  130.577240][ T5445] loop1: detected capacity change from 0 to 1024
[  130.577700][ T4790] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  130.600869][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.629000][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.681921][ T5445] EXT4-fs: Ignoring removed orlov option
[  130.687742][ T5445] EXT4-fs: Ignoring removed nomblk_io_submit option
[  130.698016][ T4790] usb 5-1: USB disconnect, device number 4
[  130.721036][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.770774][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.805426][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.857922][ T4790] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  130.876662][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.386'.
[  130.896872][ T5449] bridge: RTM_NEWNEIGH with unconfigured vlan 203 on bridge0
[  130.911251][ T5445] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  131.207333][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  131.382021][ T5469] loop0: detected capacity change from 0 to 8
[  131.660183][ T4784] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  131.806374][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  131.826192][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  131.850084][ T4784] usb 2-1: Using ep0 maxpacket: 16
[  131.850926][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  131.860785][ T4784] usb 2-1: config 0 has no interfaces?
[  131.873173][ T4784] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  131.885831][ T4784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.910778][ T4784] usb 2-1: config 0 descriptor??
[  132.087692][ T5487] loop0: detected capacity change from 0 to 64
[  132.178098][ T4784] usb 2-1: USB disconnect, device number 6
[  132.634985][ T5493] loop4: detected capacity change from 0 to 40427
[  132.650022][ T5493] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  132.657929][ T5493] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  132.669509][ T5493] F2FS-fs (loop4): invalid crc_offset: 33558524
[  132.731698][ T5493] F2FS-fs (loop4): Found nat_bits in checkpoint
[  132.782315][ T5493] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  132.789461][ T5493] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  132.864225][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.871194][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  132.924436][ T5507] loop0: detected capacity change from 0 to 1024
[  133.082434][   T26] audit: type=1800 audit(1754053590.262:21): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.396" name="file1" dev="loop0" ino=20 res=0 errno=0
[  133.307047][   T46] hfsplus: b-tree write err: -5, ino 4
[  133.605609][ T5523] loop1: detected capacity change from 0 to 512
[  133.617888][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  133.633314][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  133.678070][ T5523] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  133.691797][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  133.703275][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  133.774905][ T5520] loop0: detected capacity change from 0 to 4096
[  133.785678][ T5237] device veth0_vlan entered promiscuous mode
[  133.793601][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  133.821572][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  133.822345][ T5523] EXT4-fs (loop1): 1 truncate cleaned up
[  133.850485][ T5523] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  133.875956][ T5237] device veth1_vlan entered promiscuous mode
[  133.892081][ T5520] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  134.065671][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  134.079834][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  134.106453][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.135813][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.150342][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  134.169720][ T5237] device veth0_macvtap entered promiscuous mode
[  134.206395][ T5536] device netdevsim0 entered promiscuous mode
[  134.243364][ T5536] device netdevsim0 left promiscuous mode
[  134.294302][ T5520] ntfs: (device loop0): parse_options(): NLS character set macgre�
 not found. Using previous one utf8.
[  134.350353][ T5520] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  134.360795][ T5520] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  134.387373][ T5237] device veth1_macvtap entered promiscuous mode
[  134.423805][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.459702][ T5520] ntfs: volume version 3.1.
[  134.471721][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.513369][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.530376][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.561546][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  134.585248][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.614593][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.646233][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  134.673737][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  134.697810][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  134.715826][ T4969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  134.720504][ T4790] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  134.733791][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.767656][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.810174][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.836287][ T5545] loop1: detected capacity change from 0 to 4096
[  134.850121][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.869963][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.889991][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  134.902855][ T5545] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  134.934657][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  134.940013][ T4790] usb 4-1: Using ep0 maxpacket: 16
[  134.946875][ T5545] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  134.957784][ T4790] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  134.984957][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.006797][ T5545] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  135.034737][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.043252][ T4790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.066507][ T5545] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  135.076031][ T4790] usb 4-1: Product: syz
[  135.089095][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.112911][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.119596][ T4790] usb 4-1: Manufacturer: syz
[  135.139248][ T5237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.139860][ T4790] usb 4-1: SerialNumber: syz
[  135.151135][ T5545] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  135.164729][ T5237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.177564][ T5545] ntfs: volume version 3.1.
[  135.188737][ T5237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.191911][ T5552] loop4: detected capacity change from 0 to 512
[  135.210734][ T4790] usb 4-1: config 0 descriptor??
[  135.217323][ T5237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.262631][ T4790] as10x_usb: device has been detected
[  135.277153][ T5552] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  135.279486][ T4790] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  135.342207][ T4790] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  135.368882][ T5552] EXT4-fs (loop4): 1 truncate cleaned up
[  135.383824][ T4790] as10x_usb: error during firmware upload part1
[  135.391448][ T5552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  135.401093][ T4790] Registered device Sky IT Digital Key (green led)
[  135.522655][ T5552] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.411: Directory hole found for htree leaf block 0
[  135.612219][ T5541] random: crng reseeded on system resumption
[  135.676262][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.730825][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.746985][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  135.795680][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  135.847136][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.861541][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.908783][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  136.694043][ T3740] usb 4-1: USB disconnect, device number 2
[  136.770886][ T3740] Unregistered device Sky IT Digital Key (green led)
[  136.775724][ T3740] as10x_usb: device has been disconnected
[  136.908086][ T5586] loop0: detected capacity change from 0 to 2048
[  136.998561][ T5586] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  137.069740][ T5586] EXT4-fs (loop0): shut down requested (1)
[  137.080307][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  137.111310][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  137.246438][ T5601] loop4: detected capacity change from 0 to 512
[  137.262305][ T5601] EXT4-fs: Ignoring removed orlov option
[  137.280011][   T27] usb 2-1: Using ep0 maxpacket: 8
[  137.287249][   T27] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.315506][ T5601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  137.330761][   T27] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.382037][   T27] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.388472][ T5601] EXT4-fs (loop4): orphan cleanup on readonly fs
[  137.388706][   T27] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  137.424716][ T5601] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.423: bg 0: block 248: padding at end of block bitmap is not set
[  137.456926][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.482667][   T27] usb 2-1: config 0 descriptor??
[  137.525435][ T5601] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.423: Failed to acquire dquot type 1
[  137.639236][ T5601] EXT4-fs (loop4): 1 truncate cleaned up
[  137.672732][ T5601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  137.815910][ T5601] EXT4-fs (loop4): shut down requested (2)
[  137.864002][ T5601] EXT4-fs: Ignoring removed orlov option
[  137.915950][ T5601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  137.930067][ T5601] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  137.945457][   T27] razer 0003:1532:010E.0003: unknown main item tag 0x0
[  137.973620][   T27] razer 0003:1532:010E.0003: unknown main item tag 0x0
[  137.992801][   T27] razer 0003:1532:010E.0003: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0
[  138.015782][ T5601] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  138.032940][ T5601] ext4 filesystem being remounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  138.216545][   T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  138.230942][ T4793] usb 2-1: USB disconnect, device number 7
[  138.275548][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  138.380479][ T5623] fido_id[5623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  138.423575][   T27] usb 6-1: Using ep0 maxpacket: 8
[  138.435580][   T27] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  138.467639][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.496942][   T27] pvrusb2: Hardware description: Terratec Grabster AV400
[  138.519370][ T5636] device wlan0 entered promiscuous mode
[  138.532090][   T27] pvrusb2: **********
[  138.540290][   T27] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  138.568313][ T5636] device wlan0 left promiscuous mode
[  138.573884][   T27] pvrusb2: Important functionality might not be entirely working.
[  138.599986][   T27] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  138.629009][   T27] pvrusb2: **********
[  138.666889][ T3740] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  138.698979][ T2309] pvrusb2: Invalid write control endpoint
[  138.882991][ T3740] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  138.907573][ T2309] pvrusb2: Invalid write control endpoint
[  138.911706][ T3740] usb 5-1: config 0 has no interface number 0
[  138.919772][ T3740] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.932126][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  138.982384][ T3740] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.987010][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  139.002793][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'.
[  139.020455][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  139.022243][ T3740] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.048493][ T2309] pvrusb2: Device being rendered inoperable
[  139.069044][ T5615] pvrusb2: Attempted to execute control transfer when device not ok
[  139.069335][ T3740] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  139.094757][ T3740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.094803][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  139.124647][ T4793] usb 6-1: USB disconnect, device number 2
[  139.128660][ T3740] usb 5-1: config 0 descriptor??
[  139.174108][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  139.215351][ T2309] pvrusb2: Attached sub-driver cx25840
[  139.262772][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  139.283916][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  139.772244][ T3740] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0004/input/input10
[  139.897556][ T3740] uclogic 0003:28BD:0042.0004: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1
[  139.937978][ T5671] loop5: detected capacity change from 0 to 128
[  140.009550][ T5671] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  140.092281][ T5671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.118621][ T4790] usb 5-1: USB disconnect, device number 5
[  140.413114][ T5678] fido_id[5678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  140.884759][ T5701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.458'.
[  141.449724][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv1
[  141.475475][ T5724] team0: Port device batadv1 added
[  142.326964][ T5725] loop3: detected capacity change from 0 to 32768
[  142.442705][ T5747] loop5: detected capacity change from 0 to 1024
[  142.460552][ T5725] 
[  142.460552][ T5725]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.460552][ T5725] 
[  142.533229][ T5747] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  142.570184][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  142.570200][   T26] audit: type=1800 audit(1754053599.742:22): pid=5725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.466" name="file1" dev="loop3" ino=0 res=0 errno=0
[  142.613895][ T5725] ialloc: diAlloc returned -5!
[  142.784252][ T4280] 
[  142.784252][ T4280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.784252][ T4280] 
[  142.810120][ T4280] 
[  142.810120][ T4280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  142.810120][ T4280] 
[  142.889887][ T5758] loop1: detected capacity change from 0 to 1024
[  142.931135][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  143.120476][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.129390][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.251863][ T5767] loop5: detected capacity change from 0 to 2048
[  143.341668][ T5767] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  143.517284][ T5742] loop0: detected capacity change from 0 to 32768
[  143.648836][ T5742] XFS (loop0): Mounting V5 Filesystem
[  143.690518][ T5237] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz-executor: bg 0: block 15: invalid block bitmap
[  143.729303][ T5237] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  143.738983][ T5781] loop3: detected capacity change from 0 to 4096
[  143.825595][ T5781] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  143.849656][ T5742] XFS (loop0): Ending clean mount
[  143.872777][ T5742] XFS (loop0): Quotacheck needed: Please wait.
[  143.959111][ T5742] XFS (loop0): Quotacheck: Done.
[  143.980793][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  144.086658][ T5742] XFS (loop0): Internal error !xfs_ifork_has_extents(ifp) at line 3881 of file fs/xfs/libxfs/xfs_bmap.c.  Caller xfs_bmapi_read+0x797/0x8a0
[  144.135446][ T5742] CPU: 0 PID: 5742 Comm: syz.0.472 Not tainted 6.1.147-syzkaller #0
[  144.143522][ T5742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  144.153651][ T5742] Call Trace:
[  144.156980][ T5742]  <TASK>
[  144.159952][ T5742]  dump_stack_lvl+0x168/0x22e
[  144.164704][ T5742]  ? __xfs_printk+0x90/0x90
[  144.169253][ T5742]  ? show_regs_print_info+0x12/0x12
[  144.174506][ T5742]  ? verify_lock_unused+0x140/0x140
[  144.179767][ T5742]  xfs_corruption_error+0x11e/0x170
[  144.185018][ T5742]  ? xfs_bmapi_read+0x797/0x8a0
[  144.189913][ T5742]  xfs_bmapi_read+0x7c6/0x8a0
[  144.194659][ T5742]  ? xfs_bmapi_read+0x797/0x8a0
[  144.199548][ T5742]  ? read_lock_is_recursive+0x10/0x10
[  144.204974][ T5742]  ? lockdep_lock+0xdc/0x1e0
[  144.209623][ T5742]  ? lockdep_unlock+0x133/0x2d0
[  144.214519][ T5742]  ? xfs_trim_extent+0x260/0x260
[  144.219500][ T5742]  ? down_read_nested+0x1aa/0x2e0
[  144.224579][ T5742]  xfs_read_iomap_begin+0x328/0x690
[  144.229837][ T5742]  ? xfs_buffered_write_iomap_end+0x160/0x160
[  144.235964][ T5742]  ? verify_lock_unused+0x140/0x140
[  144.241228][ T5742]  ? stack_trace_save+0x50/0xe0
[  144.246141][ T5742]  ? xfs_buffered_write_iomap_end+0x160/0x160
[  144.252268][ T5742]  iomap_iter+0x6c6/0x1040
[  144.256741][ T5742]  iomap_fiemap+0x101/0x4c0
[  144.261304][ T5742]  ? iomap_dio_zero+0x690/0x690
[  144.266235][ T5742]  ? preempt_count_add+0x8d/0x190
[  144.271300][ T5742]  ? down_read_nested+0x1aa/0x2e0
[  144.276372][ T5742]  ? xfs_ilock+0x1e5/0x3d0
[  144.280844][ T5742]  xfs_vn_fiemap+0xa6/0x100
[  144.285395][ T5742]  do_vfs_ioctl+0x1425/0x1d10
[  144.290115][ T5742]  ? __ia32_compat_sys_ioctl+0x780/0x780
[  144.295792][ T5742]  ? tomoyo_path_number_perm+0x1b6/0x600
[  144.301553][ T5742]  ? __lock_acquire+0x7c50/0x7c50
[  144.306622][ T5742]  ? slab_free_freelist_hook+0x131/0x1a0
[  144.312314][ T5742]  ? tomoyo_path_number_perm+0x4ae/0x600
[  144.318001][ T5742]  ? __kmem_cache_free+0xb6/0x1f0
[  144.323084][ T5742]  ? tomoyo_path_number_perm+0x503/0x600
[  144.328772][ T5742]  ? tomoyo_path_number_perm+0x1b6/0x600
[  144.334456][ T5742]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  144.340007][ T5742]  ? __fget_files+0x28/0x4d0
[  144.344661][ T5742]  ? bpf_lsm_file_ioctl+0x5/0x10
[  144.349645][ T5742]  ? security_file_ioctl+0x7c/0xa0
[  144.354822][ T5742]  __se_sys_ioctl+0x83/0x170
[  144.359461][ T5742]  do_syscall_64+0x4c/0xa0
[  144.363915][ T5742]  ? clear_bhb_loop+0x60/0xb0
[  144.368727][ T5742]  ? clear_bhb_loop+0x60/0xb0
[  144.373447][ T5742]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  144.379391][ T5742] RIP: 0033:0x7fc01c58eb69
[  144.383869][ T5742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.403526][ T5742] RSP: 002b:00007fc01d416038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  144.411997][ T5742] RAX: ffffffffffffffda RBX: 00007fc01c7b5fa0 RCX: 00007fc01c58eb69
[  144.420025][ T5742] RDX: 0000200000000280 RSI: 00000000c020660b RDI: 0000000000000004
[  144.428040][ T5742] RBP: 00007fc01c611df1 R08: 0000000000000000 R09: 0000000000000000
[  144.436049][ T5742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.444054][ T5742] R13: 0000000000000000 R14: 00007fc01c7b5fa0 R15: 00007ffdfe2df988
[  144.452123][ T5742]  </TASK>
[  144.660041][ T5742] XFS (loop0): Corruption detected. Unmount and run xfs_repair
[  144.891234][ T4268] XFS (loop0): Unmounting Filesystem
[  145.499112][ T5834] binder: 5833:5834 ioctl c00c620f 0 returned -14
[  145.956069][ T5845] loop5: detected capacity change from 0 to 4096
[  145.962671][    T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  146.034753][ T5845] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  146.170114][    T7] usb 4-1: Using ep0 maxpacket: 32
[  146.177573][    T7] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  146.221582][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.262288][    T7] usb 4-1: config 0 descriptor??
[  146.272523][ T5851] binder: 5850:5851 ioctl c0046209 0 returned -22
[  146.495747][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  146.531884][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  146.599558][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  146.615889][ T5237] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22.
[  146.644526][    T7] usb 4-1: media controller created
[  146.693851][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.841192][    T7] az6027: usb out operation failed. (-71)
[  146.866757][    T7] az6027: usb out operation failed. (-71)
[  146.884777][    T7] stb0899_attach: Driver disabled by Kconfig
[  146.898535][    T7] az6027: no front-end attached
[  146.898535][    T7] 
[  146.906631][ T3740] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  146.927203][    T7] az6027: usb out operation failed. (-71)
[  146.969032][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  146.987630][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  147.037187][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[  147.080602][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  147.117107][    T7] usb 4-1: USB disconnect, device number 3
[  147.131668][ T3740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.188766][ T3740] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.225702][ T3740] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00
[  147.254759][ T3740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.285705][ T3740] usb 5-1: config 0 descriptor??
[  147.398908][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  147.610192][ T5884] binder: 5883:5884 ioctl c0046209 0 returned -22
[  147.714952][ T3740] hid-generic 0003:05AC:4262.0005: unbalanced delimiter at end of report description
[  147.739220][ T3740] hid-generic: probe of 0003:05AC:4262.0005 failed with error -22
[  147.942267][ T3740] usb 5-1: USB disconnect, device number 6
[  148.193708][ T5901] loop3: detected capacity change from 0 to 2048
[  148.253097][ T5901]  loop3: p1 < > p4
[  148.269868][ T5901] loop3: p4 size 8388608 extends beyond EOD, truncated
[  148.636134][ T4510] udevd[4510]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  148.671280][ T4995] udevd[4995]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  148.757870][ T4510] udevd[4510]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  148.781588][ T4995] udevd[4995]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  149.349641][ T5909] loop0: detected capacity change from 0 to 32768
[  149.422442][ T5909] XFS (loop0): Mounting V5 Filesystem
[  149.557550][ T5909] XFS (loop0): Ending clean mount
[  149.617063][ T5909] XFS (loop0): Quotacheck needed: Please wait.
[  149.715963][ T5909] XFS (loop0): Quotacheck: Done.
[  149.869644][ T5935] loop3: detected capacity change from 0 to 4096
[  150.011404][ T5942] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.044714][ T4268] XFS (loop0): Unmounting Filesystem
[  150.073177][ T5935] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  150.103802][ T5935] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  150.218829][ T5926] loop5: detected capacity change from 0 to 32768
[  150.520291][ T3740] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  150.700039][ T4790] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  150.700293][ T3740] usb 5-1: Using ep0 maxpacket: 32
[  150.715332][ T3740] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  150.724704][ T3740] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.740306][ T4793] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  150.740674][ T3740] usb 5-1: config 0 descriptor??
[  150.760261][ T3740] gspca_main: sunplus-2.14.0 probing 041e:400b
[  150.890068][ T4790] usb 2-1: Using ep0 maxpacket: 32
[  150.913426][ T4790] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.939142][ T4793] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  150.958168][ T4790] usb 2-1: no configurations
[  150.963320][ T4793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.977844][ T4790] usb 2-1: can't read configurations, error -22
[  150.996268][ T4793] usb 4-1: config 0 descriptor??
[  151.012181][ T4793] cp210x 4-1:0.0: cp210x converter detected
[  151.228468][ T5955] loop5: detected capacity change from 0 to 128
[  151.435072][ T4793] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  151.467147][ T4793] usb 4-1: cp210x converter now attached to ttyUSB0
[  151.556170][ T5960] loop1: detected capacity change from 0 to 256
[  151.565744][ T3740] gspca_sunplus: reg_r err -71
[  151.572344][ T3740] sunplus: probe of 5-1:0.0 failed with error -71
[  151.592262][ T3740] usb 5-1: USB disconnect, device number 7
[  151.659886][ T4336] usb 4-1: USB disconnect, device number 4
[  151.695795][ T4336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  151.703734][ T4321] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  151.753797][ T4336] cp210x 4-1:0.0: device disconnected
[  151.842045][ T5962] loop0: detected capacity change from 0 to 4096
[  151.890080][ T4321] usb 6-1: Using ep0 maxpacket: 32
[  151.898200][ T4321] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  151.915247][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.937582][ T5962] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  151.965443][ T4321] usb 6-1: config 0 descriptor??
[  151.974842][ T5962] ntfs3: loop0: Failed to load $Extend.
[  152.194474][ T4321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  152.230469][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  152.273137][ T4321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  152.330066][ T4321] usb 6-1: media controller created
[  152.356052][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  152.401132][ T4321] az6027: usb out operation failed. (-71)
[  152.419624][ T4321] az6027: usb out operation failed. (-71)
[  152.445837][ T4321] stb0899_attach: Driver disabled by Kconfig
[  152.458773][ T4321] az6027: no front-end attached
[  152.458773][ T4321] 
[  152.476006][ T4321] az6027: usb out operation failed. (-71)
[  152.486284][ T4321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  152.500219][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  152.526854][ T4321] dvb-usb: schedule remote query interval to 400 msecs.
[  152.554128][ T4321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  152.598166][ T4321] usb 6-1: USB disconnect, device number 3
[  152.728744][ T4321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  152.787070][ T5984] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  152.960851][ T5989] tun0: tun_chr_ioctl cmd 2148553947
[  153.239610][ T5970] loop1: detected capacity change from 0 to 32768
[  153.304404][ T5970] XFS (loop1): Mounting V5 Filesystem
[  153.453681][ T4790] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  153.495755][ T5970] XFS (loop1): Ending clean mount
[  153.516467][ T5970] XFS (loop1): Quotacheck needed: Please wait.
[  153.621817][ T5970] XFS (loop1): Quotacheck: Done.
[  153.661272][ T4790] usb 6-1: Using ep0 maxpacket: 32
[  153.681071][ T4790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.697685][ T6019] loop4: detected capacity change from 0 to 1024
[  153.736941][ T4790] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.797688][ T4790] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  153.838221][ T4790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.894087][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.897118][ T4790] usb 6-1: config 0 descriptor??
[  153.914636][ T4269] XFS (loop1): Unmounting Filesystem
[  153.935284][ T4790] hub 6-1:0.0: USB hub found
[  154.133606][ T4790] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[  154.546369][ T4790] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1
[  154.562367][ T6039] loop0: detected capacity change from 0 to 1024
[  154.580538][ T4790] hid-generic: probe of 0003:046D:C31C.0006 failed with error -22
[  154.697677][ T6039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  154.790575][ T6047] loop1: detected capacity change from 0 to 64
[  154.850751][ T6047] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  154.941362][ T4793] usb 6-1: USB disconnect, device number 4
[  155.188113][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  155.389297][ T6060] netlink: 28 bytes leftover after parsing attributes in process `syz.0.573'.
[  155.549245][ T6067] loop5: detected capacity change from 0 to 256
[  155.573086][ T6068] hub 8-0:1.0: USB hub found
[  155.602737][ T6068] hub 8-0:1.0: 1 port detected
[  155.615543][ T6067] exfat: Deprecated parameter 'namecase'
[  155.661899][ T6067] exfat: Deprecated parameter 'utf8'
[  155.724556][ T6067] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  156.450483][ T6099] loop3: detected capacity change from 0 to 512
[  156.477412][ T6099] EXT4-fs: Ignoring removed orlov option
[  156.542889][ T6099] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.588: bg 0: block 411: padding at end of block bitmap is not set
[  156.563823][ T6099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.588: inode #1: comm syz.3.588: iget: illegal inode #
[  156.570033][ T4336] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  156.607094][ T6099] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.588: error while reading EA inode 1 err=-117
[  156.681540][ T6099] EXT4-fs (loop3): 1 orphan inode deleted
[  156.700066][ T6099] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  156.768284][ T4336] usb 1-1: Using ep0 maxpacket: 16
[  156.775710][ T4336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.815421][ T6099] EXT4-fs (loop3): shut down requested (2)
[  156.829198][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  156.889956][ T4336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  156.920842][ T4336] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  156.960014][ T4336] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.986004][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  156.992219][ T4336] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  157.012057][ T4336] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  157.029973][ T4336] usb 1-1: Manufacturer: syz
[  157.053343][ T4336] usb 1-1: config 0 descriptor??
[  157.206733][ T6085] loop4: detected capacity change from 0 to 40427
[  157.229365][ T6085] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  157.267611][ T6085] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  157.291784][ T6085] F2FS-fs (loop4): invalid crc value
[  157.322061][ T6085] F2FS-fs (loop4): Found nat_bits in checkpoint
[  157.422994][ T6085] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  157.436669][ T6085] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  157.444987][ T4336] rc_core: IR keymap rc-hauppauge not found
[  157.457895][ T4336] Registered IR keymap rc-empty
[  157.464446][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.500097][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.540785][ T4336] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  157.566300][ T4336] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  157.630242][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.695209][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.744402][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.790098][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.830188][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.882021][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.930373][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  157.960042][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.010059][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.040016][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.070059][ T4336] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  158.107266][ T4336] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  158.153751][ T6137] loop5: detected capacity change from 0 to 64
[  158.160105][ T4336] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  158.187494][ T4336] usb 1-1: USB disconnect, device number 3
[  158.216110][ T6137] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  158.433684][ T6145] loop3: detected capacity change from 0 to 512
[  158.533100][ T4784] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  158.567095][ T6145] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.604: casefold flag without casefold feature
[  158.616067][ T6145] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.604: couldn't read orphan inode 15 (err -117)
[  158.672525][ T6145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  158.732202][ T4784] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  158.758113][ T4784] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  158.774695][   T26] audit: type=1800 audit(1754053615.952:23): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.604" name="bus" dev="loop3" ino=18 res=0 errno=0
[  158.792624][ T4784] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  158.814324][ T4784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.864375][ T4784] usb 2-1: Product: syz
[  158.899073][ T4784] usb 2-1: Manufacturer: syz
[  158.903874][ T4784] usb 2-1: SerialNumber: syz
[  158.925505][ T4784] usb 2-1: config 0 descriptor??
[  158.966411][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  158.980357][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.047258][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  159.111823][ T6165] xt_CONNSECMARK: invalid mode: 0
[  159.251890][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.259226][ T6141] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.353060][ T6174] loop4: detected capacity change from 0 to 64
[  159.409688][ T6174] hfs: unable to locate alternate MDB
[  159.435199][ T6174] hfs: continuing without an alternate MDB
[  159.535948][ T6174] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  159.657535][ T4329] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  159.850004][ T4329] usb 6-1: Using ep0 maxpacket: 8
[  159.857255][ T4329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.889536][ T4329] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.917884][ T6191] loop3: detected capacity change from 0 to 128
[  159.936038][ T4329] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  159.940532][ T4784] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  159.954968][ T6191] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  159.993116][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.007087][ T4784] usb 2-1: USB disconnect, device number 10
[  160.032078][ T6191] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  160.061187][ T4329] usb 6-1: config 0 descriptor??
[  160.119813][ T6191] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.619: checksumming directory block 0
[  160.254320][ T6200] loop0: detected capacity change from 0 to 2048
[  160.286413][ T4329] usbhid 6-1:0.0: can't add hid device: -71
[  160.294930][ T4329] usbhid: probe of 6-1:0.0 failed with error -71
[  160.315396][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  160.324277][ T6200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  160.335896][ T4329] usb 6-1: USB disconnect, device number 5
[  160.344450][ T6200] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.516522][ T6206] input: syz0 as /devices/virtual/input/input14
[  160.590537][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.623'.
[  160.651398][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  160.938989][ T6216] Can't find ip_set type 
[  161.183875][ T6234] loop3: detected capacity change from 0 to 256
[  161.233090][   T27] kernel write not supported for file /251/loginuid (pid: 27 comm: kworker/1:1)
[  161.276671][ T6234] FAT-fs (loop3): Directory bread(block 64) failed
[  161.300345][ T6234] FAT-fs (loop3): Directory bread(block 65) failed
[  161.330344][ T6234] FAT-fs (loop3): Directory bread(block 66) failed
[  161.367878][ T6234] FAT-fs (loop3): Directory bread(block 67) failed
[  161.420070][ T6234] FAT-fs (loop3): Directory bread(block 68) failed
[  161.426767][ T6234] FAT-fs (loop3): Directory bread(block 69) failed
[  161.493752][ T6234] FAT-fs (loop3): Directory bread(block 70) failed
[  161.501482][ T6245] process 'syz.0.638' launched './file1' with NULL argv: empty string added
[  161.526735][ T6234] FAT-fs (loop3): Directory bread(block 71) failed
[  161.540283][ T6234] FAT-fs (loop3): Directory bread(block 72) failed
[  161.565531][ T6234] FAT-fs (loop3): Directory bread(block 73) failed
[  162.695825][ T6279] bridge: RTM_NEWNEIGH with invalid ether address
[  162.863663][ T6254] loop1: detected capacity change from 0 to 32768
[  163.267410][ T6293] netlink: 'syz.0.659': attribute type 5 has an invalid length.
[  163.459408][ T6301] loop0: detected capacity change from 0 to 64
[  163.629996][ T4321] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  163.659631][   T26] audit: type=1800 audit(1754053620.832:24): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.663" name="file2" dev="loop0" ino=19 res=0 errno=0
[  163.830173][ T4321] usb 4-1: Using ep0 maxpacket: 8
[  163.839749][ T4321] usb 4-1: unable to get BOS descriptor or descriptor too short
[  163.853455][ T6311] loop5: detected capacity change from 0 to 128
[  163.867737][ T4321] usb 4-1: config 4 interface 0 has no altsetting 0
[  163.889263][ T4321] usb 4-1: string descriptor 0 read error: -22
[  163.907988][ T4321] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  163.945379][ T4321] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  163.988198][ T4321] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  164.025592][ T4321] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  164.042639][ T6313] loop0: detected capacity change from 0 to 1024
[  164.049564][ T4321] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  164.057345][ T4321] usb 4-1: media controller created
[  164.070197][ T4784] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  164.087158][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  164.257582][   T56] hfsplus: b-tree write err: -5, ino 4
[  164.297376][ T4784] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  164.326819][ T4784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.386624][ T4784] usb 5-1: config 0 descriptor??
[  164.426616][ T4784] gspca_main: cpia1-2.14.0 probing 0813:0001
[  164.628866][ T6322] loop0: detected capacity change from 0 to 764
[  164.780139][ T6307] loop1: detected capacity change from 0 to 32768
[  164.840345][ T4784] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  164.930117][ T4336] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  165.130045][ T4336] usb 6-1: Using ep0 maxpacket: 8
[  165.137520][ T4336] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  165.179480][ T4336] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  165.209748][ T4336] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.228371][ T4336] usb 6-1: Product: syz
[  165.233224][ T4336] usb 6-1: Manufacturer: syz
[  165.237897][ T4336] usb 6-1: SerialNumber: syz
[  165.242950][ T4784] gspca_cpia1: usb_control_msg 02, error -71
[  165.257047][ T4321] usb 4-1: USB disconnect, device number 5
[  165.270328][ T4784] gspca_cpia1: usb_control_msg 05, error -71
[  165.276383][ T4784] cpia1 5-1:0.0: unexpected systemstate: 00
[  165.318948][ T4336] usb 6-1: config 0 descriptor??
[  165.347918][ T4336] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  165.356101][ T4784] usb 5-1: USB disconnect, device number 8
[  165.406788][ T4336] usb 6-1: setting power ON
[  165.416542][ T4336] dvb-usb: bulk message failed: -22 (2/0)
[  165.416591][ T6330] loop1: detected capacity change from 0 to 8192
[  165.444240][ T4336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  165.469733][ T4336] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  165.479096][ T6330] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  165.493779][ T6330] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  165.497785][ T4336] usb 6-1: media controller created
[  165.503945][ T6330] REISERFS (device loop1): using ordered data mode
[  165.515577][ T6330] reiserfs: using flush barriers
[  165.545816][ T6330] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  165.574232][ T6330] REISERFS (device loop1): checking transaction log (loop1)
[  165.578379][ T6324] dvb-usb: bulk message failed: -22 (3/0)
[  165.610568][ T6324] dvb-usb: bulk message failed: -22 (5/0)
[  165.615541][ T6330] REISERFS (device loop1): Using r5 hash to sort names
[  165.627724][ T4336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.641172][ T6330] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  165.656905][ T6330] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  165.670669][ T6324] cxusb: i2c wr: len=79 is too big!
[  165.670669][ T6324] 
[  165.702121][ T4336] usb 6-1: selecting invalid altsetting 6
[  165.709469][ T4336] usb 6-1: digital interface selection failed (-22)
[  165.732722][ T4336] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  165.754468][ T4336] usb 6-1: setting power OFF
[  165.759822][ T4336] dvb-usb: bulk message failed: -22 (2/0)
[  165.776402][ T4336] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  165.779459][ T6330] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  165.787384][ T4336] (NULL device *): no alternate interface
[  165.862378][ T6330] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  165.932640][ T6330] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  165.942408][ T4336] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  165.999558][ T4336] usb 6-1: USB disconnect, device number 6
[  166.025466][ T6342] loop4: detected capacity change from 0 to 256
[  166.147550][ T6342] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  166.460176][   T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  166.681924][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.724446][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.764782][   T27] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  166.801311][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.831825][   T27] usb 1-1: config 0 descriptor??
[  166.866317][ T6361] netlink: 'syz.5.690': attribute type 21 has an invalid length.
[  167.257950][   T27] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  167.278318][   T27] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  167.314984][   T27] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  167.351886][   T27] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  167.359374][   T27] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0
[  167.407890][   T27] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  167.645761][ T6353] loop1: detected capacity change from 0 to 40427
[  167.677179][ T6353] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  167.716163][   T27] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 32: -71
[  167.746671][ T6353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  167.756800][   T27] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense firmware info: -71
[  167.779172][   T27] playstation 0003:054C:0DF2.0007: Failed to get firmware info from DualSense
[  167.818955][   T27] playstation 0003:054C:0DF2.0007: Failed to create dualsense.
[  167.833244][   T27] playstation: probe of 0003:054C:0DF2.0007 failed with error -71
[  167.868058][   T27] usb 1-1: USB disconnect, device number 4
[  167.877626][ T6353] F2FS-fs (loop1): Found nat_bits in checkpoint
[  167.906208][ T6365] loop4: detected capacity change from 0 to 32768
[  167.955065][ T6385] udevd[6385]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  168.040565][ T6365] JBD2: Ignoring recovery information on journal
[  168.100002][ T6365] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  168.127886][ T6353] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  168.137563][ T6353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  168.299117][   T26] audit: type=1800 audit(1754053625.472:25): pid=6353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.684" name="file1" dev="loop1" ino=10 res=0 errno=0
[  168.441036][ T6396] loop0: detected capacity change from 0 to 128
[  168.471770][ T6396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  168.494487][ T6396] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  168.543457][ T4267] ocfs2: Unmounting device (7,4) on (node local)
[  168.569677][ T6396] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes
[  168.673555][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  168.794065][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.705'.
[  168.941366][ T6407] loop0: detected capacity change from 0 to 1764
[  168.966242][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.711'.
[  169.292226][ T6415] device erspan0 entered promiscuous mode
[  169.521511][ T6423] netlink: 'syz.4.716': attribute type 21 has an invalid length.
[  169.560151][ T6427] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.718'.
[  170.318166][ T3740] kernel write not supported for file /input/mouse0 (pid: 3740 comm: kworker/0:3)
[  170.681478][ T6432] loop4: detected capacity change from 0 to 32768
[  171.003148][ T6438] loop5: detected capacity change from 0 to 32768
[  171.163087][ T6438] XFS (loop5): Mounting V5 Filesystem
[  171.354037][ T6438] XFS (loop5): Ending clean mount
[  171.363886][ T6438] XFS (loop5): Quotacheck needed: Please wait.
[  171.378106][ T6444] loop1: detected capacity change from 0 to 32768
[  171.505108][ T6438] XFS (loop5): Quotacheck: Done.
[  171.505211][ T6444] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  171.531369][ T6444] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  171.633750][ T6482] loop3: detected capacity change from 0 to 128
[  171.639279][ T5237] XFS (loop5): Unmounting Filesystem
[  171.728616][ T6444] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  171.762368][ T6482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  171.800320][ T6482] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  171.822146][ T3740] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  171.829475][ T3740] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  171.946097][ T6482] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  172.034983][ T3740] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 205ms
[  172.098760][ T3740] gfs2: fsid=syz:syz.0: jid=0: Done
[  172.106779][ T6444] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  172.161180][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  172.334248][ T6493] loop3: detected capacity change from 0 to 1024
[  172.579841][ T4298] hfsplus: b-tree write err: -5, ino 4
[  172.605616][ T6478] loop0: detected capacity change from 0 to 40427
[  172.643576][ T6478] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  172.657789][ T6478] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  172.787040][ T6478] F2FS-fs (loop0): Found nat_bits in checkpoint
[  172.999342][ T6478] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  173.010506][ T6478] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  173.165032][   T26] audit: type=1800 audit(1754053630.342:26): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.749" name="file1" dev="loop0" ino=10 res=0 errno=0
[  173.213809][ T4336] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  173.410985][ T4336] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  173.429815][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.443756][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.470016][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  173.486549][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.510060][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.546626][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  173.561790][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.590014][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.614671][ T4787] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  173.630024][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  173.641542][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.658667][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.680977][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  173.716869][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.760055][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.791125][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  173.830727][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.839680][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.862752][ T4787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.887183][ T4787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.888029][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  173.908282][ T4787] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  173.928576][ T4787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.938063][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  173.971047][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  173.988036][ T4787] usb 4-1: config 0 descriptor??
[  174.013572][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  174.043922][ T4336] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  174.080032][ T4336] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  174.119974][ T4336] usb 6-1: config 0 interface 0 has no altsetting 0
[  174.129060][ T4336] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  174.172564][ T4336] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  174.191526][ T4336] usb 6-1: Product: syz
[  174.195847][ T4336] usb 6-1: Manufacturer: syz
[  174.212137][ T4336] usb 6-1: SerialNumber: syz
[  174.230755][ T4336] usb 6-1: config 0 descriptor??
[  174.287701][ T4336] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[  174.450930][ T4787] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  174.466503][ T4787] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  174.497828][ T4787] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  174.516600][ T4787] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  174.534414][ T4787] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0
[  174.560655][ T4787] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[  174.852690][ T4787] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 32: -71
[  174.873268][ T4787] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -71
[  174.900049][ T4787] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense
[  174.929128][ T4787] playstation 0003:054C:0DF2.0008: Failed to create dualsense.
[  174.954167][ T4787] playstation: probe of 0003:054C:0DF2.0008 failed with error -71
[  174.994296][ T4787] usb 4-1: USB disconnect, device number 6
[  175.155183][ T6553] udevd[6553]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  175.383484][ T6557] loop0: detected capacity change from 0 to 1024
[  175.390057][ T4793] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  175.408932][ T6557] hfsplus: unable to parse mount options
[  175.593568][ T4793] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  175.628853][ T4793] usb 2-1: config 0 has no interface number 0
[  175.654354][ T4793] usb 2-1: config 0 interface 12 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  175.682117][ T4793] usb 2-1: config 0 interface 12 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.699486][ T4793] usb 2-1: config 0 interface 12 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  175.720095][ T4321] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  175.720681][ T4793] usb 2-1: New USB device found, idVendor=0463, idProduct=0027, bcdDevice= 0.00
[  175.749602][ T4793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.777799][ T4793] usb 2-1: config 0 descriptor??
[  175.927413][ T6569] sctp: [Deprecated]: syz.4.776 (pid 6569) Use of int in max_burst socket option deprecated.
[  175.927413][ T6569] Use struct sctp_assoc_value instead
[  175.930153][ T4321] usb 1-1: Using ep0 maxpacket: 32
[  175.962482][ T4321] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  175.989516][ T4321] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  176.018351][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  176.046093][ T4321] usb 1-1: config 1 has no interface number 0
[  176.070676][ T4321] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  176.096368][ T4321] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  176.150078][ T4321] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  176.173879][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.197864][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.216723][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.238633][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.261360][ T4321] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  176.267910][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.295937][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.318756][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.343593][ T4793] hid-generic 0003:0463:0027.0009: unknown main item tag 0x0
[  176.356053][ T4793] hid-generic 0003:0463:0027.0009: hidraw0: USB HID vff.fa Device [HID 0463:0027] on usb-dummy_hcd.1-1/input12
[  176.387601][ T4793] usb 6-1: USB disconnect, device number 7
[  176.428330][ T4793] yurex 6-1:0.0: USB YUREX #0 now disconnected
[  176.428660][ T4321] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  176.451820][ T6581] udevd[6581]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  176.499547][ T4336] usb 2-1: USB disconnect, device number 11
[  176.790057][ T4793] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  176.879434][ T4336] usb 1-1: USB disconnect, device number 5
[  176.893167][ T4336] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  176.980028][ T4793] usb 6-1: Using ep0 maxpacket: 16
[  176.991322][ T4793] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  177.010094][ T4793] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  177.030033][ T4793] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  177.062385][ T4793] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  177.100234][ T4793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.108305][ T4793] usb 6-1: Product: syz
[  177.119972][ T4793] usb 6-1: Manufacturer: syz
[  177.124658][ T4793] usb 6-1: SerialNumber: syz
[  177.288408][ T6595] loop3: detected capacity change from 0 to 1024
[  177.340749][ T6587] loop4: detected capacity change from 0 to 40427
[  177.356661][ T6595] EXT4-fs: Ignoring removed orlov option
[  177.367565][ T6587] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  177.368672][ T6595] EXT4-fs: Ignoring removed oldalloc option
[  177.397428][ T6587] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  177.426033][ T6595] EXT4-fs (loop3): Test dummy encryption mode enabled
[  177.432231][ T6587] F2FS-fs (loop4): invalid crc value
[  177.479389][ T6587] F2FS-fs (loop4): Found nat_bits in checkpoint
[  177.498367][ T6595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  177.583131][ T4793] usb 6-1: 0:2 : does not exist
[  177.731373][ T6587] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  177.749384][ T6614] netlink: 'syz.1.792': attribute type 21 has an invalid length.
[  177.762557][ T6587] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  177.776316][ T6614] netlink: 156 bytes leftover after parsing attributes in process `syz.1.792'.
[  177.826218][ T6616] netlink: 'syz.1.792': attribute type 21 has an invalid length.
[  177.865744][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  177.882412][ T6616] netlink: 156 bytes leftover after parsing attributes in process `syz.1.792'.
[  177.994230][ T4793] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1)
[  178.106412][ T4793] usb 6-1: USB disconnect, device number 8
[  178.441789][ T4995] udevd[4995]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.468814][ T4321] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  178.547677][ T4784] kernel read not supported for file /rfkill (pid: 4784 comm: kworker/1:6)
[  178.684661][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  178.690340][ T4287] Bluetooth: hci2: command 0x0405 tx timeout
[  178.728229][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  178.787196][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.801'.
[  178.807981][ T4321] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  178.845544][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  178.865402][ T4321] usb 2-1: SerialNumber: syz
[  178.870087][ T4784] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  178.935074][ T6643] loop3: detected capacity change from 0 to 128
[  179.002334][ T6643] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  179.048418][ T6643] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.052080][ T4784] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  179.067267][ T4784] usb 1-1: config 0 has no interface number 0
[  179.075788][ T4784] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  179.094104][ T4784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.102506][ T4784] usb 1-1: Product: syz
[  179.106761][ T4784] usb 1-1: Manufacturer: syz
[  179.111540][ T4784] usb 1-1: SerialNumber: syz
[  179.120682][ T4784] usb 1-1: config 0 descriptor??
[  179.122325][ T4321] usb 2-1: 0:2 : does not exist
[  179.189643][ T4321] usb 2-1: USB disconnect, device number 12
[  179.260109][   T27] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  179.277256][ T4280] EXT4-fs (loop3): unmounting filesystem.
[  179.443233][ T4995] udevd[4995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.490197][   T27] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  179.499791][   T27] usb 6-1: config 0 has no interface number 0
[  179.511775][   T27] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  179.521191][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.536337][ T4784] usb 1-1: Firmware: major: 191, minor: 182, hardware type: HULUSB (4)
[  179.546907][   T27] usb 6-1: Product: syz
[  179.556186][   T27] usb 6-1: Manufacturer: syz
[  179.565315][   T27] usb 6-1: SerialNumber: syz
[  179.616373][   T27] usb 6-1: config 0 descriptor??
[  179.739165][ T6659] loop3: detected capacity change from 0 to 2048
[  179.745090][ T4784] usb 1-1: failed to fetch extended address, random address set
[  179.773414][ T6659] NILFS (loop3): invalid segment: Inconsistency found
[  179.795698][ T6659] NILFS (loop3): trying rollback from an earlier position
[  179.836161][   T27] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  179.863667][ T6659] NILFS (loop3): recovery complete
[  179.898409][   T27] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  179.925595][ T6664] loop1: detected capacity change from 0 to 512
[  179.953448][   T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  179.954925][ T6664] EXT4-fs: Ignoring removed oldalloc option
[  179.978381][ T6667] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.986653][ T4784] usb 1-1: USB disconnect, device number 6
[  180.035801][   T27] usb 6-1: media controller created
[  180.047523][ T6664] EXT4-fs (loop1): 1 truncate cleaned up
[  180.050960][ T6647] usb 6-1: dvb_usb_ec168: I2C read not implemented
[  180.057863][ T6664] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  180.093538][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.147024][   T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  180.224929][   T26] audit: type=1800 audit(1754053637.402:27): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.810" name="file1" dev="loop1" ino=13 res=0 errno=0
[  180.262482][   T27] usb 6-1: USB disconnect, device number 9
[  180.467192][ T4269] EXT4-fs (loop1): unmounting filesystem.
[  181.040250][ T4784] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  181.250030][ T4784] usb 1-1: Using ep0 maxpacket: 16
[  181.261379][ T4784] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  181.292610][ T4784] usb 1-1: config 0 has no interface number 0
[  181.298789][ T4784] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.361096][ T4784] usb 1-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.381192][ T4784] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  181.390852][ T4784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.411338][ T4784] usb 1-1: config 0 descriptor??
[  181.433335][ T6703] loop5: detected capacity change from 0 to 8192
[  181.508108][ T6703] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  181.785152][ T6713] loop3: detected capacity change from 0 to 4096
[  181.842533][ T4784] hid (null): report_id 3440387768 is invalid
[  181.860242][ T4784] hid (null): unknown global tag 0xc
[  181.881862][ T6713] ntfs: volume version 3.1.
[  181.935839][ T6720] loop1: detected capacity change from 0 to 2048
[  182.017334][ T6713] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  182.025827][ T6726] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.044639][ T4784] usb 1-1: USB disconnect, device number 7
[  182.117020][ T6713] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  182.155087][   T26] audit: type=1804 audit(1754053639.332:28): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.831" name="/newroot/178/file0/file1" dev="loop3" ino=67 res=1 errno=0
[  182.176592][    C1] vkms_vblank_simulate: vblank timer overrun
[  182.210190][ T4321] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  182.223212][ T6726] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  182.250649][ T6726] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  182.310019][ T6726] Remounting filesystem read-only
[  182.419956][ T4321] usb 6-1: Using ep0 maxpacket: 32
[  182.428304][ T4321] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  182.468333][ T4321] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.492685][ T4269] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  182.503545][ T4321] usb 6-1: config 0 descriptor??
[  182.714744][ T4321] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  182.741783][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  182.777052][ T4321] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  182.799781][ T4321] usb 6-1: media controller created
[  182.839679][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  182.926495][ T4321] az6027: usb out operation failed. (-71)
[  182.944657][ T4321] az6027: usb out operation failed. (-71)
[  182.964571][ T4321] stb0899_attach: Driver disabled by Kconfig
[  182.989977][ T4321] az6027: no front-end attached
[  182.989977][ T4321] 
[  183.008160][ T4321] az6027: usb out operation failed. (-71)
[  183.030014][ T4321] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  183.059330][ T4321] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15
[  183.097966][ T4321] dvb-usb: schedule remote query interval to 400 msecs.
[  183.121723][ T4321] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  183.170257][ T4321] usb 6-1: USB disconnect, device number 10
[  183.263476][ T4321] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  183.600632][ T6733] loop4: detected capacity change from 0 to 32768
[  183.661863][ T6733] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.839 (6733)
[  183.712069][ T6741] loop1: detected capacity change from 0 to 32768
[  183.720891][ T6733] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  183.760949][ T6741] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.843 (6741)
[  183.774524][ T6733] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  183.829794][ T6733] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  183.866156][ T6741] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  183.880359][ T6733] BTRFS info (device loop4): use zstd compression, level 3
[  183.908116][ T6733] BTRFS info (device loop4): using free space tree
[  183.916433][ T6741] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  183.974708][ T6741] BTRFS info (device loop1): using free space tree
[  184.026618][ T6767] udevd[6767]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  184.182625][ T6790] udevd[6790]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  184.312284][ T6741] BTRFS info (device loop1): enabling ssd optimizations
[  184.326271][ T6733] BTRFS info (device loop4): enabling ssd optimizations
[  184.772313][ T4269] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  184.821785][ T6817] udevd[6817]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  185.064020][ T6819] loop3: detected capacity change from 0 to 4096
[  185.114384][ T6824] udevd[6824]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  185.272320][ T4267] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  185.938572][ T6849] loop4: detected capacity change from 0 to 256
[  185.999984][ T6840] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  186.020016][ T4784] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  186.189984][ T6840] usb 1-1: Using ep0 maxpacket: 16
[  186.220405][ T6840] usb 1-1: unable to get BOS descriptor or descriptor too short
[  186.240051][ T4784] usb 6-1: Using ep0 maxpacket: 16
[  186.246370][ T6840] usb 1-1: unable to read config index 0 descriptor/start: -71
[  186.255534][ T4784] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[  186.265642][ T6840] usb 1-1: can't read configurations, error -71
[  186.275774][ T4784] usb 6-1: config 0 has no interface number 0
[  186.290512][ T4784] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  186.310003][ T4784] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  186.332260][ T4784] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  186.349981][ T4784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.368270][ T4784] usb 6-1: Product: syz
[  186.378394][ T4784] usb 6-1: Manufacturer: syz
[  186.388518][ T4784] usb 6-1: SerialNumber: syz
[  186.417176][ T4784] usb 6-1: config 0 descriptor??
[  186.430404][ T6845] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  186.440767][ T6845] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  186.664704][ T6845] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  186.680220][ T6845] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  186.918254][ T6861] netlink: 165 bytes leftover after parsing attributes in process `syz.1.873'.
[  186.995362][ T6863] loop0: detected capacity change from 0 to 4096
[  187.068472][ T6863] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  187.156507][ T6863] ntfs3: loop0: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  187.260212][ T6865] ptrace attach of "./syz-executor exec"[4269] was attempted by ""[6865]
[  187.316906][ T4784] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  187.355671][ T4784] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  187.386837][ T4784] asix: probe of 6-1:0.251 failed with error -71
[  187.444198][ T4784] usb 6-1: USB disconnect, device number 11
[  187.898043][ T6878] loop4: detected capacity change from 0 to 512
[  187.950787][ T6878] EXT4-fs: Ignoring removed orlov option
[  188.005012][ T6878] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.881: bg 0: block 411: padding at end of block bitmap is not set
[  188.032866][ T6882] serio: Serial port ptm0
[  188.045579][ T6878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.881: inode #1: comm syz.4.881: iget: illegal inode #
[  188.066939][ T6878] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.881: error while reading EA inode 1 err=-117
[  188.098157][ T6878] EXT4-fs (loop4): 1 orphan inode deleted
[  188.123042][ T4280] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  188.123281][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  188.166688][ T4280] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  188.204453][ T6878] EXT4-fs (loop4): shut down requested (2)
[  188.413687][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.414355][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  188.752698][ T6897] loop0: detected capacity change from 0 to 128
[  188.781993][ T6897] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  188.848135][ T6897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.888910][ T6900] loop5: detected capacity change from 0 to 4096
[  188.930034][ T6846] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  188.974007][ T6905] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  189.138091][ T6846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.181117][ T6846] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  189.230639][ T6846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.275276][ T6846] usb 4-1: config 0 descriptor??
[  189.606648][ T6920] loop0: detected capacity change from 0 to 512
[  189.624582][ T6920] EXT4-fs: Ignoring removed orlov option
[  189.687644][ T6920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.898: bg 0: block 411: padding at end of block bitmap is not set
[  189.732069][ T6846] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  189.755466][ T6846] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000B/input/input16
[  189.806230][ T6920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.898: inode #1: comm syz.0.898: iget: illegal inode #
[  189.876763][ T6920] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.898: error while reading EA inode 1 err=-117
[  189.903476][ T6846] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  189.926579][ T6920] EXT4-fs (loop0): 1 orphan inode deleted
[  189.941649][ T6920] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  190.015666][ T6920] EXT4-fs (loop0): shut down requested (2)
[  190.082577][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'.
[  190.087860][ T6932] udevd[6932]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  190.168760][ T6830] usb 4-1: USB disconnect, device number 7
[  190.215411][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  190.417004][ T6937] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  190.520087][ T6943] xt_CT: You must specify a L4 protocol and not use inversions on it
[  190.669971][ T6829] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  190.947124][ T6829] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  190.968092][ T6829] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  190.995398][ T6829] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  191.024486][ T6829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.054000][ T6829] usb 6-1: Product: syz
[  191.063309][ T6829] usb 6-1: Manufacturer: syz
[  191.068050][ T6829] usb 6-1: SerialNumber: syz
[  191.105061][ T6829] usb 6-1: config 0 descriptor??
[  191.127261][ T6941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.139854][ T6941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.190772][ T6966] loop3: detected capacity change from 0 to 1024
[  191.290085][ T4329] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  191.364446][ T6941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.396981][ T6941] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  191.509803][ T4329] usb 2-1: Using ep0 maxpacket: 8
[  191.519343][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  191.576364][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.597018][ T4329] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  191.617634][ T4329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  191.639419][ T4329] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  191.655479][ T4329] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  191.687652][ T4329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.712107][ T4329] usb 2-1: config 0 descriptor??
[  191.718481][ T6958] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  191.831366][ T6829] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  191.939605][ T6967] loop4: detected capacity change from 0 to 32768
[  191.991170][ T4287] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  191.998501][ T4287] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  192.006767][ T4287] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  192.029843][ T6967] XFS (loop4): Mounting V5 Filesystem
[  192.036775][ T6829] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  192.053698][ T6829] usb 6-1: USB disconnect, device number 12
[  192.140258][ T6843] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  192.147739][ T6967] XFS (loop4): Ending clean mount
[  192.165670][ T6967] XFS (loop4): Quotacheck needed: Please wait.
[  192.189754][ T4329] usb 2-1: USB disconnect, device number 13
[  192.192247][   T48] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  192.318094][ T6967] XFS (loop4): Quotacheck: Done.
[  192.343440][ T6843] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  192.360249][ T6843] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  192.376637][ T6843] usb 1-1: config 220 has no interface number 2
[  192.383583][ T6843] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  192.397298][ T6843] usb 1-1: config 220 interface 0 has no altsetting 0
[  192.404459][ T6843] usb 1-1: config 220 interface 76 has no altsetting 0
[  192.404665][ T4267] XFS (loop4): Unmounting Filesystem
[  192.411587][ T6843] usb 1-1: config 220 interface 1 has no altsetting 0
[  192.429392][ T6843] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  192.453684][ T6843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.464717][ T6843] usb 1-1: Product: syz
[  192.468959][ T6843] usb 1-1: Manufacturer: syz
[  192.478180][ T6843] usb 1-1: SerialNumber: syz
[  192.734637][ T6843] usb 1-1: selecting invalid altsetting 0
[  192.741676][ T6843] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  192.748083][ T6843] usb 1-1: No valid video chain found.
[  192.773892][ T6843] usb 1-1: selecting invalid altsetting 0
[  192.784430][ T6843] usbtest: probe of 1-1:220.1 failed with error -22
[  192.817828][ T6843] usb 1-1: USB disconnect, device number 10
[  192.908897][ T6993] loop5: detected capacity change from 0 to 512
[  192.932446][    T9] wlan1: Trigger new scan to find an IBSS to join
[  192.971266][ T6993] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  193.007512][ T6993] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  193.074958][ T6993] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  193.087617][ T6993] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  193.099028][ T6993] System zones: 0-2, 18-18, 34-34
[  193.130235][ T6993] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.926: iget: bad i_size value: 360287970189639680
[  193.134456][ T6997] loop3: detected capacity change from 0 to 4096
[  193.180246][ T6993] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.926: couldn't read orphan inode 15 (err -117)
[  193.256903][ T6993] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  193.536673][ T6991] loop4: detected capacity change from 0 to 32768
[  193.556458][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  193.582463][ T6991] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.924 (6991)
[  193.680000][ T6991] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.722737][ T6991] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  193.796198][ T6991] BTRFS info (device loop4): using free space tree
[  194.079855][ T7032] udevd[7032]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  194.106059][ T6991] BTRFS info (device loop4): enabling ssd optimizations
[  194.293253][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.299618][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.328869][ T4267] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.363604][ T7043] loop3: detected capacity change from 0 to 256
[  194.406256][ T7043] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  194.454593][ T6843] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  194.590017][ T4995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4995)
[  194.663033][ T6843] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  194.666466][ T7044] udevd[7044]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  194.680069][ T6843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.728424][ T6843] usb 6-1: config 0 descriptor??
[  194.756781][ T6843] cp210x 6-1:0.0: cp210x converter detected
[  194.939349][ T7047] loop4: detected capacity change from 0 to 64
[  195.069416][ T7047] hfs: request for non-existent node 1317 in B*Tree
[  195.098307][ T7047] hfs: request for non-existent node 1317 in B*Tree
[  195.124311][ T7047] hfs: request for non-existent node 1536 in B*Tree
[  195.167443][ T7047] hfs: request for non-existent node 1536 in B*Tree
[  195.173438][ T6843] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  195.197344][ T7034] loop0: detected capacity change from 0 to 32768
[  195.213673][ T6843] usb 6-1: cp210x converter now attached to ttyUSB0
[  195.232505][ T7034] XFS: noikeep mount option is deprecated.
[  195.244397][ T7019] loop1: detected capacity change from 0 to 32768
[  195.284946][   T56] hfs: request for non-existent node 1317 in B*Tree
[  195.299399][ T7019] XFS (loop1): Mounting V5 Filesystem
[  195.318093][ T7034] XFS (loop0): Mounting V5 Filesystem
[  195.329042][   T56] hfs: request for non-existent node 1317 in B*Tree
[  195.415972][ T6843] usb 6-1: USB disconnect, device number 13
[  195.427535][ T6843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  195.436978][ T7034] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  195.438079][ T6843] cp210x 6-1:0.0: device disconnected
[  195.578366][ T7019] XFS (loop1): Ending clean mount
[  195.613086][ T7034] XFS (loop0): Starting recovery (logdev: internal)
[  195.637796][ T7019] XFS (loop1): Quotacheck needed: Please wait.
[  195.679856][ T7034] XFS (loop0): Ending recovery (logdev: internal)
[  195.795921][ T7019] XFS (loop1): Quotacheck: Done.
[  195.898505][ T7019] XFS (loop1): Internal error !xfs_ifork_has_extents(ifp) at line 3881 of file fs/xfs/libxfs/xfs_bmap.c.  Caller xfs_bmapi_read+0x797/0x8a0
[  196.000115][ T7019] CPU: 1 PID: 7019 Comm: syz.1.937 Not tainted 6.1.147-syzkaller #0
[  196.008197][ T7019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  196.018310][ T7019] Call Trace:
[  196.021631][ T7019]  <TASK>
[  196.024597][ T7019]  dump_stack_lvl+0x168/0x22e
[  196.029326][ T7019]  ? __xfs_printk+0x90/0x90
[  196.033874][ T7019]  ? show_regs_print_info+0x12/0x12
[  196.039151][ T7019]  ? verify_lock_unused+0x140/0x140
[  196.044429][ T7019]  xfs_corruption_error+0x11e/0x170
[  196.049772][ T7019]  ? xfs_bmapi_read+0x797/0x8a0
[  196.054676][ T7019]  xfs_bmapi_read+0x7c6/0x8a0
[  196.059395][ T7019]  ? xfs_bmapi_read+0x797/0x8a0
[  196.064293][ T7019]  ? read_lock_is_recursive+0x10/0x10
[  196.069722][ T7019]  ? is_dynamic_key+0x260/0x260
[  196.074616][ T7019]  ? xfs_trim_extent+0x260/0x260
[  196.079588][ T7019]  ? down_read_nested+0x1aa/0x2e0
[  196.084730][ T7019]  xfs_read_iomap_begin+0x328/0x690
[  196.089959][ T7019]  ? xfs_buffered_write_iomap_end+0x160/0x160
[  196.096060][ T7019]  ? verify_lock_unused+0x140/0x140
[  196.101289][ T7019]  ? stack_trace_save+0x50/0xe0
[  196.106169][ T7019]  ? xfs_buffered_write_iomap_end+0x160/0x160
[  196.112347][ T7019]  iomap_iter+0x6c6/0x1040
[  196.116796][ T7019]  iomap_fiemap+0x101/0x4c0
[  196.121328][ T7019]  ? iomap_dio_zero+0x690/0x690
[  196.126235][ T7019]  ? preempt_count_add+0x8d/0x190
[  196.131280][ T7019]  ? down_read_nested+0x1aa/0x2e0
[  196.137049][ T7019]  ? xfs_ilock+0x1e5/0x3d0
[  196.141557][ T7019]  xfs_vn_fiemap+0xa6/0x100
[  196.146107][ T7019]  do_vfs_ioctl+0x1425/0x1d10
[  196.150832][ T7019]  ? __ia32_compat_sys_ioctl+0x780/0x780
[  196.156629][ T7019]  ? tomoyo_path_number_perm+0x1b6/0x600
[  196.162300][ T7019]  ? __lock_acquire+0x7c50/0x7c50
[  196.167363][ T7019]  ? slab_free_freelist_hook+0x131/0x1a0
[  196.173028][ T7019]  ? tomoyo_path_number_perm+0x4ae/0x600
[  196.178688][ T7019]  ? __kmem_cache_free+0xb6/0x1f0
[  196.183765][ T7019]  ? tomoyo_path_number_perm+0x503/0x600
[  196.189423][ T7019]  ? tomoyo_path_number_perm+0x1b6/0x600
[  196.195256][ T7019]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  196.200779][ T7019]  ? __fget_files+0x28/0x4d0
[  196.205416][ T7019]  ? bpf_lsm_file_ioctl+0x5/0x10
[  196.210394][ T7019]  ? security_file_ioctl+0x7c/0xa0
[  196.215535][ T7019]  __se_sys_ioctl+0x83/0x170
[  196.220182][ T7019]  do_syscall_64+0x4c/0xa0
[  196.224725][ T7019]  ? clear_bhb_loop+0x60/0xb0
[  196.229426][ T7019]  ? clear_bhb_loop+0x60/0xb0
[  196.234177][ T7019]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  196.240120][ T7019] RIP: 0033:0x7ff19c78eb69
[  196.244559][ T7019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  196.264198][ T7019] RSP: 002b:00007ff19d5b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  196.272666][ T7019] RAX: ffffffffffffffda RBX: 00007ff19c9b5fa0 RCX: 00007ff19c78eb69
[  196.280661][ T7019] RDX: 0000200000000280 RSI: 00000000c020660b RDI: 0000000000000004
[  196.288654][ T7019] RBP: 00007ff19c811df1 R08: 0000000000000000 R09: 0000000000000000
[  196.296647][ T7019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.304646][ T7019] R13: 0000000000000000 R14: 00007ff19c9b5fa0 R15: 00007ffd8c997218
[  196.312743][ T7019]  </TASK>
[  196.338086][ T4268] XFS (loop0): Unmounting Filesystem
[  196.380701][ T7019] XFS (loop1): Corruption detected. Unmount and run xfs_repair
[  196.491557][ T7075] netlink: 'syz.5.950': attribute type 2 has an invalid length.
[  196.499271][ T7075] netlink: 132 bytes leftover after parsing attributes in process `syz.5.950'.
[  196.513644][ T4269] XFS (loop1): Unmounting Filesystem
[  197.208127][ T7089] Failed to get privilege flags for destination (handle=0x2:0x0)
[  197.221527][   T26] audit: type=1326 audit(1754053654.402:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7088 comm="syz.0.958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc01c58eb69 code=0x0
[  197.328694][ T7092] loop0: detected capacity change from 0 to 164
[  197.344451][ T7072] loop3: detected capacity change from 0 to 32768
[  197.353721][ T7093] loop1: detected capacity change from 0 to 256
[  197.368819][ T7093] exfat: Deprecated parameter 'namecase'
[  197.407695][ T7092] isofs_fill_super: bread failed, dev=loop0, iso_blknum=41, block=82
[  197.422271][ T7093] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  197.450669][ T7095] loop5: detected capacity change from 0 to 512
[  197.493104][ T7095] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  197.516918][ T7093] autofs4:pid:7093:autofs_fill_super: could not open pipe file descriptor
[  197.528541][ T4421] blk_print_req_error: 26 callbacks suppressed
[  197.528559][ T4421] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  197.633171][ T7095] EXT4-fs (loop5): 1 truncate cleaned up
[  197.660545][ T7095] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  197.890376][   T56] wlan1: Trigger new scan to find an IBSS to join
[  198.097959][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  198.287626][ T7110] loop5: detected capacity change from 0 to 128
[  198.337570][ T7110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  198.360399][ T7110] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.393068][ T4329] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  198.515705][ T7119] syzkaller1: tun_chr_ioctl cmd 1074025675
[  198.523502][ T7119] syzkaller1: persist disabled
[  198.557043][ T7121] loop3: detected capacity change from 0 to 256
[  198.559408][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  198.609329][ T4329] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  198.630648][ T4329] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  198.657142][ T7121] FAT-fs (loop3): unable to read block(4294967296) for building NFS inode
[  198.670001][ T6846] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  198.673662][ T4329] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  198.702312][ T4329] usb 2-1: config 220 has no interface number 2
[  198.708689][ T4329] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  198.760144][ T4329] usb 2-1: config 220 interface 0 has no altsetting 0
[  198.784115][ T4329] usb 2-1: config 220 interface 76 has no altsetting 0
[  198.799655][ T4329] usb 2-1: config 220 interface 1 has no altsetting 0
[  198.825219][   T56] wlan1: Creating new IBSS network, BSSID c2:a3:e6:95:d3:da
[  198.838297][ T4329] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  198.847646][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.856865][ T4329] usb 2-1: Product: syz
[  198.860356][ T6846] usb 5-1: Using ep0 maxpacket: 8
[  198.862118][ T4329] usb 2-1: Manufacturer: syz
[  198.871352][ T6846] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  198.871361][ T4329] usb 2-1: SerialNumber: syz
[  198.871382][ T6846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.985744][ T6846] usb 5-1: Product: syz
[  198.990994][ T6846] usb 5-1: Manufacturer: syz
[  199.005947][ T6846] usb 5-1: SerialNumber: syz
[  199.026239][ T6846] usb 5-1: config 0 descriptor??
[  199.047794][ T6846] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  199.067610][ T6846] usb 5-1: setting power ON
[  199.076868][ T6846] dvb-usb: bulk message failed: -22 (2/0)
[  199.097842][ T4329] usb 2-1: selecting invalid altsetting 0
[  199.106465][ T4329] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  199.120577][ T6846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.129454][ T4329] usb 2-1: No valid video chain found.
[  199.174908][ T4329] usb 2-1: selecting invalid altsetting 0
[  199.180933][ T6846] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  199.180975][ T6846] usb 5-1: media controller created
[  199.212585][ T6846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  199.219957][ T4329] usbtest: probe of 2-1:220.1 failed with error -22
[  199.241800][ T7117] dvb-usb: bulk message failed: -22 (3/0)
[  199.247771][ T7117] dvb-usb: bulk message failed: -22 (4/0)
[  199.277593][ T4329] usb 2-1: USB disconnect, device number 14
[  199.297627][ T6846] usb 5-1: selecting invalid altsetting 6
[  199.309674][ T6846] usb 5-1: digital interface selection failed (-22)
[  199.340292][ T7134] dvb-usb: bulk message failed: -22 (4/0)
[  199.346438][ T7134] cxusb: i2c read failed
[  199.351979][ T6846] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  199.380677][ T6846] usb 5-1: setting power OFF
[  199.398902][ T6846] dvb-usb: bulk message failed: -22 (2/0)
[  199.418203][ T6846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  199.429718][ T6846] (NULL device *): no alternate interface
[  199.512485][ T6846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  199.577435][ T6846] usb 5-1: USB disconnect, device number 9
[  199.804088][ T7127] loop5: detected capacity change from 0 to 32768
[  199.886449][ T7127] XFS (loop5): Mounting V5 Filesystem
[  200.111196][ T7127] XFS (loop5): Ending clean mount
[  200.325829][ T5237] XFS (loop5): Unmounting Filesystem
[  200.708399][ T7164] loop0: detected capacity change from 0 to 32768
[  200.721960][ T7164] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.987 (7164)
[  200.765438][ T7164] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  200.775860][ T7164] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  200.784612][ T7164] BTRFS info (device loop0): setting nodatacow, compression disabled
[  200.792782][ T7164] BTRFS info (device loop0): turning off barriers
[  200.799257][ T7164] BTRFS info (device loop0): enabling ssd optimizations
[  200.806403][ T7164] BTRFS info (device loop0): using spread ssd allocation scheme
[  200.814150][ T7164] BTRFS info (device loop0): force clearing of disk cache
[  200.822559][ T7164] BTRFS info (device loop0): doing ref verification
[  200.829544][ T7164] BTRFS error (device loop0): invalid value 0 for thread_pool
[  200.843630][ T7164] BTRFS error (device loop0): open_ctree failed: -22
[  201.244360][ T4421] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4421)
[  201.343270][ T7189] udevd[7189]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  201.491766][   T48] Bluetooth: hci3: command 0x0406 tx timeout
[  201.491775][ T4287] Bluetooth: hci1: command 0x0406 tx timeout
[  201.587137][ T7195] loop0: detected capacity change from 0 to 4096
[  201.619668][ T7195] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  201.784754][ T7199] loop1: detected capacity change from 0 to 4096
[  201.841084][ T7199] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  201.959289][ T7199] ntfs: (device loop1): parse_options(): NLS character set macgre�
 not found. Using previous one utf8.
[  202.020317][ T7199] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  202.094424][ T7199] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  202.165777][ T7199] ntfs: volume version 3.1.
[  202.434523][ T7218] loop0: detected capacity change from 0 to 512
[  202.518222][ T7218] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  202.552030][ T7221] loop3: detected capacity change from 0 to 2048
[  202.657545][ T7221] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  202.680584][ T7218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  202.694443][ T7221] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  202.748600][ T7218] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.824370][ T7221] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  202.847419][ T7221] EXT4-fs (loop3): This should not happen!! Data will be lost
[  202.847419][ T7221] 
[  202.904114][ T7221] EXT4-fs (loop3): Total free blocks count 0
[  202.932447][ T7221] EXT4-fs (loop3): Free/Dirty block details
[  202.973059][ T7221] EXT4-fs (loop3): free_blocks=4096
[  203.004183][ T7221] EXT4-fs (loop3): dirty_blocks=32
[  203.029202][ T7221] EXT4-fs (loop3): Block reservation details
[  203.053259][ T7221] EXT4-fs (loop3): i_reserved_data_blocks=2
[  203.070049][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  203.130646][ T7234] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  203.237429][ T7243] loop5: detected capacity change from 0 to 4096
[  203.286942][ T7243] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  203.430144][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1019'.
[  203.606114][ T7251] loop1: detected capacity change from 0 to 2048
[  203.677997][ T7251] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  203.864822][ T7258] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.050208][ T4329] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  204.164288][ T7267] loop5: detected capacity change from 0 to 512
[  204.191939][ T7267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  204.244835][ T7245] loop0: detected capacity change from 0 to 32768
[  204.258292][ T7267] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  204.273045][ T4329] usb 5-1: Using ep0 maxpacket: 32
[  204.284753][ T4329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.300695][ T7267] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[  204.320887][ T4329] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.331560][ T4329] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  204.340865][ T4329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.350354][ T7245] XFS (loop0): Mounting V5 Filesystem
[  204.351810][ T4329] usb 5-1: config 0 descriptor??
[  204.364121][ T4329] hub 5-1:0.0: USB hub found
[  204.369500][ T7267] System zones: 0-1, 15-15, 18-18, 34-34
[  204.376696][ T7267] EXT4-fs (loop5): orphan cleanup on readonly fs
[  204.384278][ T7267] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  204.398356][ T7267] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  204.414784][ T7267] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  204.423292][ T7267] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1027: bg 0: block 40: padding at end of block bitmap is not set
[  204.454113][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  204.537448][ T7267] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  204.566732][ T4329] hub 5-1:0.0: config failed, can't read hub descriptor (err -90)
[  204.575456][ T7267] EXT4-fs (loop5): 1 truncate cleaned up
[  204.597970][ T7267] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  204.622539][ T7245] XFS (loop0): Ending clean mount
[  204.628215][ T7283] loop3: detected capacity change from 0 to 1024
[  204.680465][ T7267] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.1027: bad symlink.
[  204.749562][ T7267] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.1027: bad symlink.
[  204.802017][ T7286] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.1027: bad symlink.
[  204.834693][ T4268] XFS (loop0): Unmounting Filesystem
[  204.973989][ T4329] hid-generic 0003:046D:C31C.000C: item fetching failed at offset 0/1
[  204.987604][ T4329] hid-generic: probe of 0003:046D:C31C.000C failed with error -22
[  205.020811][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  205.219793][ T7288] loop1: detected capacity change from 0 to 4096
[  205.236383][ T7288] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  205.356981][ T4787] usb 5-1: USB disconnect, device number 10
[  206.176058][ T7292] loop5: detected capacity change from 0 to 32768
[  206.195658][ T7312] loop0: detected capacity change from 0 to 736
[  206.335384][ T7292] XFS (loop5): Mounting V5 Filesystem
[  206.464671][ T7292] XFS (loop5): Ending clean mount
[  206.515283][ T7292] XFS (loop5): Quotacheck needed: Please wait.
[  206.525814][ T7296] loop3: detected capacity change from 0 to 32768
[  206.593426][ T7296] XFS: attr2 mount option is deprecated.
[  206.620026][ T7296] XFS: ikeep mount option is deprecated.
[  206.712426][ T7292] XFS (loop5): Quotacheck: Done.
[  206.726461][ T7296] XFS (loop3): Mounting V5 Filesystem
[  206.817170][ T7292] XFS (loop5): User initiated shutdown received.
[  206.851021][ T7292] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  206.895487][ T7296] XFS (loop3): Ending clean mount
[  206.916184][ T7296] XFS (loop3): Quotacheck needed: Please wait.
[  206.962144][ T7292] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  207.064806][ T7296] XFS (loop3): Quotacheck: Done.
[  207.157835][ T5237] XFS (loop5): Unmounting Filesystem
[  207.240954][ T4280] XFS (loop3): Unmounting Filesystem
[  207.493406][ T6828] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  207.690127][ T6828] usb 1-1: Using ep0 maxpacket: 32
[  207.697571][ T6828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.754376][ T6828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.787687][ T6828] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  207.807414][ T6828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.844802][ T6828] usb 1-1: config 0 descriptor??
[  207.879203][ T6828] hub 1-1:0.0: USB hub found
[  208.082231][ T6828] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  208.509115][ T6828] hid-generic 0003:046D:C31C.000D: item fetching failed at offset 0/1
[  208.544867][ T6828] hid-generic: probe of 0003:046D:C31C.000D failed with error -22
[  208.618539][ T7374] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  208.806958][ T7383] loop3: detected capacity change from 0 to 64
[  208.854603][ T4329] usb 1-1: USB disconnect, device number 11
[  208.946111][ T7387] capability: warning: `syz.5.1068' uses 32-bit capabilities (legacy support in use)
[  208.958600][ T7383] syz.3.1066: attempt to access beyond end of device
[  208.958600][ T7383] loop3: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  208.996445][ T7383] buffer_io_error: 25 callbacks suppressed
[  208.996463][ T7383] Buffer I/O error on dev loop3, logical block 134217734, lost async page write
[  210.022684][ T7426] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  210.443204][ T7432] loop5: detected capacity change from 0 to 4096
[  210.608710][ T7432] ntfs3: loop5: failed to convert "0000" to iso8859-9
[  210.620524][ T7399] loop3: detected capacity change from 0 to 40427
[  210.677918][ T7399] F2FS-fs (loop3): invalid crc value
[  210.720019][ T6830] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  210.763359][ T7399] F2FS-fs (loop3): Found nat_bits in checkpoint
[  210.930143][ T6830] usb 2-1: Using ep0 maxpacket: 32
[  210.947546][ T6830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.969356][ T7399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  210.999667][ T6830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.030064][ T6830] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  211.049105][ T6830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.091750][ T6830] usb 2-1: config 0 descriptor??
[  211.122531][ T6830] hub 2-1:0.0: USB hub found
[  211.230599][ T4280] syz-executor: attempt to access beyond end of device
[  211.230599][ T4280] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  211.337500][ T6830] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  211.766390][ T6830] hid-generic 0003:046D:C31C.000E: item fetching failed at offset 0/1
[  211.790485][ T6830] hid-generic: probe of 0003:046D:C31C.000E failed with error -22
[  212.100232][ T6830] usb 2-1: USB disconnect, device number 15
[  212.208447][ T7479] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  212.232823][ T7465] loop5: detected capacity change from 0 to 40427
[  212.275506][ T7465] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[  212.299580][ T7465] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff
[  212.305849][ T7470] loop4: detected capacity change from 0 to 40427
[  212.337638][ T7465] F2FS-fs (loop5): invalid crc value
[  212.355451][ T7470] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  212.362172][ T7465] F2FS-fs (loop5): Found nat_bits in checkpoint
[  212.399538][ T7470] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  212.453051][ T7470] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x3ffff
[  212.486879][ T7470] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  212.487548][ T7465] F2FS-fs (loop5): Start checkpoint disabled!
[  212.536059][ T7470] F2FS-fs (loop4): invalid crc value
[  212.577439][ T7470] F2FS-fs (loop4): Found nat_bits in checkpoint
[  212.581278][ T7465] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  212.703612][ T7465] F2FS-fs (loop5) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xf8c/0x1980
[  212.833921][ T7470] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  212.851710][ T7470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  212.964391][ T7470] syz.4.1095: attempt to access beyond end of device
[  212.964391][ T7470] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  213.169707][ T4267] syz-executor: attempt to access beyond end of device
[  213.169707][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  213.481367][ T7507] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  214.210161][ T4329] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  214.405240][ T4329] usb 1-1: Using ep0 maxpacket: 16
[  214.416130][ T4329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  214.457960][ T4329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  214.497013][ T4329] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  214.541119][ T4329] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  214.588971][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.623539][ T4329] usb 1-1: config 0 descriptor??
[  215.001247][ T7546] loop5: detected capacity change from 0 to 1024
[  215.059207][ T7546] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.1118: Invalid block bitmap block 0 in block_group 0
[  215.076940][ T4329] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000F/input/input17
[  215.108488][ T7546] Quota error (device loop5): write_blk: dquota write failed
[  215.123757][ T7546] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  215.173036][ T4329] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  215.195459][ T7546] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.1118: Failed to acquire dquot type 0
[  215.240058][ T7546] EXT4-fs error (device loop5): ext4_free_blocks:6210: comm syz.5.1118: Freeing blocks not in datazone - block = 0, count = 4096
[  215.253860][ T6843] usb 1-1: USB disconnect, device number 12
[  215.305410][ T7546] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1118: Invalid inode bitmap blk 0 in block_group 0
[  215.320079][   T11] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8
[  215.355870][   T11] EXT4-fs error (device loop5): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 0
[  215.375418][ T7552] udevd[7552]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  215.378485][ T7546] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  215.430010][ T7546] EXT4-fs (loop5): 1 orphan inode deleted
[  215.446100][ T7546] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  215.646769][ T5237] EXT4-fs (loop5): unmounting filesystem.
[  215.996827][ T7551] loop1: detected capacity change from 0 to 32768
[  216.010099][ T7547] loop4: detected capacity change from 0 to 40427
[  216.045705][ T7547] F2FS-fs (loop4): invalid crc value
[  216.056448][ T7551] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.084698][ T7551] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  216.097122][ T7551] BTRFS info (device loop1): use no compression
[  216.107308][ T7551] BTRFS info (device loop1): doing ref verification
[  216.120743][ T7547] F2FS-fs (loop4): Found nat_bits in checkpoint
[  216.156962][ T7551] BTRFS info (device loop1): force clearing of disk cache
[  216.196181][ T7551] BTRFS info (device loop1): turning off barriers
[  216.254001][ T7551] BTRFS info (device loop1): setting nodatasum
[  216.278597][ T7551] BTRFS info (device loop1): enabling ssd optimizations
[  216.307861][ T7547] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  216.326638][ T7551] BTRFS info (device loop1): using spread ssd allocation scheme
[  216.359962][ T7551] BTRFS info (device loop1): not using ssd optimizations
[  216.367073][ T7551] BTRFS info (device loop1): not using spread ssd allocation scheme
[  216.431790][ T7551] BTRFS info (device loop1): using free space tree
[  216.496188][ T4267] syz-executor: attempt to access beyond end of device
[  216.496188][ T4267] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  216.612709][ T7580] udevd[7580]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  216.785542][ T7551] BTRFS info (device loop1): rebuilding free space tree
[  216.842767][ T7596] loop0: detected capacity change from 0 to 512
[  216.851377][   T48] Bluetooth: hci4: command 0x0406 tx timeout
[  216.876601][ T7560] loop3: detected capacity change from 0 to 32768
[  216.891041][ T7560] XFS: ikeep mount option is deprecated.
[  216.952640][ T7596] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1133: casefold flag without casefold feature
[  216.999689][ T7560] XFS (loop3): Mounting V5 Filesystem
[  217.020799][ T7596] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1133: couldn't read orphan inode 15 (err -117)
[  217.050691][ T7596] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  217.059003][ T7608] udevd[7608]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  217.143339][ T7551] BTRFS error (device loop1): target device �Wa��[X���`~�i&|_r8ͅ�����q��E���ԝ����ǧ��~�=�#�864�[mY��i�?׹�J?�Ϸ��D~%y����� is invalid!
[  217.162932][ T7560] XFS (loop3): Ending clean mount
[  217.168057][   T26] audit: type=1800 audit(1754053674.342:30): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1133" name="file1" dev="loop0" ino=18 res=0 errno=0
[  217.171068][ T7596] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.1133: directory missing '.'
[  217.217141][ T7560] XFS (loop3): Quotacheck needed: Please wait.
[  217.287488][ T7560] XFS (loop3): Quotacheck: Done.
[  217.385422][ T4269] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.398151][ T4268] EXT4-fs (loop0): unmounting filesystem.
[  217.414525][ T4280] XFS (loop3): Unmounting Filesystem
[  217.634235][ T7613] loop4: detected capacity change from 0 to 64
[  217.753975][ T7613] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  218.122654][ T7623] __sock_release: fasync list not empty!
[  218.210156][ T4791] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  218.391421][ T6828] Process accounting resumed
[  218.426919][ T4791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.469028][ T4791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.519985][ T4791] usb 6-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  218.540791][ T7632] Process accounting resumed
[  218.555097][ T7634] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  218.574650][ T4791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.596715][ T4791] usb 6-1: config 0 descriptor??
[  218.618151][ T7634] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  218.699666][ T7640] loop4: detected capacity change from 0 to 512
[  218.721886][ T7640] EXT4-fs: Ignoring removed nobh option
[  218.770137][ T7640] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  218.794521][ T7640] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.1148: attempt to clear invalid blocks 2 len 1
[  218.832435][ T7640] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  218.870270][ T7640] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1148: invalid indirect mapped block 1819239214 (level 0)
[  218.893625][ T4791] usbhid 6-1:0.0: can't add hid device: -71
[  218.899706][ T4791] usbhid: probe of 6-1:0.0 failed with error -71
[  218.918740][ T7640] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1148: invalid indirect mapped block 1819239214 (level 1)
[  218.962177][ T4791] usb 6-1: USB disconnect, device number 14
[  218.985884][ T7640] EXT4-fs (loop4): 1 truncate cleaned up
[  219.015903][ T7640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  219.102611][ T7640] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  219.208018][ T4267] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  219.333474][ T4267] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr
[  219.363307][ T4267] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz-executor: corrupted in-inode xattr
[  219.570349][ T4791] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  219.670979][ T4267] EXT4-fs (loop4): unmounting filesystem.
[  219.757649][ T4791] usb 1-1: Using ep0 maxpacket: 32
[  219.769576][ T4791] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  219.807425][ T4791] usb 1-1: config 0 has no interface number 0
[  219.853484][ T4791] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  219.880667][ T4791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.919348][ T4791] usb 1-1: Product: syz
[  219.940372][ T4791] usb 1-1: Manufacturer: syz
[  219.945051][ T4791] usb 1-1: SerialNumber: syz
[  220.010768][ T4969] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.023184][ T4791] usb 1-1: config 0 descriptor??
[  220.036580][ T4791] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[  220.238235][ T4791] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  220.257599][ T4969] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.311879][ T4791] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  220.628078][ T4969] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.151790][ T4969] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.403536][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  221.432854][ T6830] usb 1-1: USB disconnect, device number 13
[  221.443242][ T6830] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  221.486554][ T6830] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  221.502426][ T6830] quatech2 1-1:0.51: device disconnected
[  222.342058][ T4969] device hsr_slave_0 left promiscuous mode
[  222.349358][ T4969] device hsr_slave_1 left promiscuous mode
[  222.356430][ T4969] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.363987][ T4969] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.381517][ T4969] device bridge_slave_1 left promiscuous mode
[  222.387848][ T4969] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.397897][ T4969] device bridge_slave_0 left promiscuous mode
[  222.406479][ T4969] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.437569][ T4969] device veth1_macvtap left promiscuous mode
[  222.443870][ T4969] device veth0_macvtap left promiscuous mode
[  222.450208][ T4969] device veth1_vlan left promiscuous mode
[  222.456130][ T4969] device veth0_vlan left promiscuous mode
[  222.978305][ T4969] team0 (unregistering): Port device team_slave_1 removed
[  223.036135][ T4969] team0 (unregistering): Port device team_slave_0 removed
[  223.084049][ T4969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.137424][ T4969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.744333][ T4969] bond0 (unregistering): Released all slaves
[  224.266396][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.343948][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.415114][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.494523][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.617645][   T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.698531][   T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.781949][   T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.851607][   T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.047566][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.125794][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.208270][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.282013][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.461833][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.546546][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.632632][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.723033][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.383390][   T11] device hsr_slave_0 left promiscuous mode
[  228.389749][   T11] device hsr_slave_1 left promiscuous mode
[  228.396736][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.406437][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.414817][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.424503][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.435564][   T11] device bridge_slave_1 left promiscuous mode
[  228.442698][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.453200][   T11] device bridge_slave_0 left promiscuous mode
[  228.459441][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.476470][   T11] device hsr_slave_0 left promiscuous mode
[  228.483302][   T11] device hsr_slave_1 left promiscuous mode
[  228.489602][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.497296][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.505361][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.512986][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.522174][   T11] device bridge_slave_1 left promiscuous mode
[  228.529188][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.542216][   T11] device bridge_slave_0 left promiscuous mode
[  228.550366][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.585008][   T11] device hsr_slave_0 left promiscuous mode
[  228.591690][   T11] device hsr_slave_1 left promiscuous mode
[  228.598004][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.605978][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.614197][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.621902][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.643260][   T11] device bridge_slave_1 left promiscuous mode
[  228.649560][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.666241][   T11] device bridge_slave_0 left promiscuous mode
[  228.684751][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.699467][   T11] device hsr_slave_0 left promiscuous mode
[  228.706037][   T11] device hsr_slave_1 left promiscuous mode
[  228.713194][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.721047][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.728709][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.736468][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.744157][   T11] device bridge_slave_1 left promiscuous mode
[  228.750429][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.758946][   T11] device bridge_slave_0 left promiscuous mode
[  228.765213][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.868879][   T11] device veth1_macvtap left promiscuous mode
[  228.880185][   T11] device veth0_macvtap left promiscuous mode
[  228.886369][   T11] device veth1_vlan left promiscuous mode
[  228.892589][   T11] device veth0_vlan left promiscuous mode
[  228.901087][   T11] device veth1_macvtap left promiscuous mode
[  228.907364][   T11] device veth0_macvtap left promiscuous mode
[  228.916886][   T11] device veth1_vlan left promiscuous mode
[  228.923215][   T11] device veth0_vlan left promiscuous mode
[  228.933694][   T11] device veth1_macvtap left promiscuous mode
[  228.939738][   T11] device veth0_macvtap left promiscuous mode
[  228.946127][   T11] device veth1_vlan left promiscuous mode
[  228.952804][   T11] device veth0_vlan left promiscuous mode
[  228.961946][   T11] device veth1_macvtap left promiscuous mode
[  228.967981][   T11] device veth0_macvtap left promiscuous mode
[  228.974315][   T11] device veth1_vlan left promiscuous mode
[  228.980314][   T11] device veth0_vlan left promiscuous mode
[  229.806800][   T11] team0 (unregistering): Port device team_slave_1 removed
[  229.862909][   T11] team0 (unregistering): Port device team_slave_0 removed
[  229.912791][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.966716][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface