last executing test programs:

1m25.890165665s ago: executing program 2 (id=131):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000004180)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
ftruncate(r0, 0x201f)
ftruncate(r0, 0x6)

1m25.535895341s ago: executing program 2 (id=135):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x2, r2})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x278000003e7, 0x0, 0x1, r2, 0x1})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x278000003e7, 0x0, 0x1, r2})

1m25.303087425s ago: executing program 2 (id=138):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192}, 0x80)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x14)
syz_emit_ethernet(0x82, &(0x7f00000009c0)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "1e636b", 0x48, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast1, {[], {0x4e23, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "10feb51506e2f1ba93bc2b1c30bfa023b229bf1178416778", "9d74a5fe07865df8ca82ac9550fe226f157a04979461e40516d0a169a392fcfc"}}}}}}}, 0x0)

1m25.073860178s ago: executing program 2 (id=140):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000240)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000980)="$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")
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

1m24.766621023s ago: executing program 2 (id=142):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0xb7d4, 0x1001f0)
write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'w\x00'}, 0x8)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000880)={0x0, 0xfffffffeffc, 0x0, 0x0, 0x1})

1m24.159091194s ago: executing program 2 (id=146):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000b00)=ANY=[], 0x1e0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

1m23.706993681s ago: executing program 32 (id=146):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000b00)=ANY=[], 0x1e0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

24.938365989s ago: executing program 0 (id=607):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000540)=0xffd, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r0, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)

24.835477381s ago: executing program 0 (id=608):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
unshare(0x22020400)
ioctl$EVIOCGRAB(r0, 0x40044590, 0x0)

24.591429634s ago: executing program 0 (id=610):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xe})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040))

22.932390002s ago: executing program 0 (id=632):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b105f, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x9)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x201)

22.739343675s ago: executing program 0 (id=633):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f00000001c0)={r3}, 0x8)

22.471757169s ago: executing program 0 (id=635):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x31, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x19, 0x7}}}}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

22.170507904s ago: executing program 33 (id=635):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x145f, 0x212, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xf3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x31, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0x19, 0x7}}}}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

3.519397552s ago: executing program 4 (id=743):
unshare(0x2040400)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6", 0x3}], 0x1, 0x0)

2.540536228s ago: executing program 4 (id=746):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r2, 0x101, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x34}, 0x1, 0x0, 0x0, 0x884}, 0x4804)

2.372796501s ago: executing program 4 (id=748):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004)
accept4(r1, 0x0, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x800)

1.965205617s ago: executing program 1 (id=751):
mknodat(0xffffffffffffff9c, &(0x7f0000018300)='./file1\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r1 = dup(r0)
pipe2(&(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x88, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
splice(r2, 0x0, r1, 0x0, 0x91, 0x5)

1.964998457s ago: executing program 4 (id=752):
r0 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x46ad, 0x400, 0x1, 0x105}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet6(0x10, 0x3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010020})
io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1)

1.775000981s ago: executing program 4 (id=755):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000007600)=[{&(0x7f00000069c0)=""/23, 0x17}], 0x1}, 0x9}], 0x1, 0x0, 0x0)

1.694372332s ago: executing program 4 (id=756):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc000000000904000002030000000921000000012207000905810320"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]})
close_range(r1, 0xffffffffffffffff, 0x0)

1.677870982s ago: executing program 3 (id=757):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84)

1.471383255s ago: executing program 3 (id=759):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
close(0x3)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
unshare(0x2a020400)
listen(r0, 0x0)

1.411649936s ago: executing program 3 (id=760):
r0 = getpid()
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080))
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
io_setup(0x1, &(0x7f0000000b80)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

1.409220806s ago: executing program 5 (id=761):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
r2 = dup2(r1, r0)
open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c)
readv(r2, &(0x7f0000000480)=[{&(0x7f0000000040)=""/81, 0x51}], 0x1)

1.311480728s ago: executing program 5 (id=762):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10000, 0x5}, {}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1}}, 0xe8)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x1, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x24040800)

1.19127123s ago: executing program 3 (id=763):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0)

1.1909454s ago: executing program 5 (id=764):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x80000c, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRES16, @ANYRESHEX, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6065636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643de463ec1f39721d51ddc1d7344e6429d7ebea595bb892d812171dc9", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES8, @ANYRES8=0x0], 0x2, 0x6ee, &(0x7f0000032440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40010)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)

963.426403ms ago: executing program 1 (id=765):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
unshare(0x28000600)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x1, 0x6bd60be1, 0x7})
flock(r0, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020)

869.892215ms ago: executing program 3 (id=766):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed", 0x6e}], 0x1}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x5a, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x0)

751.311097ms ago: executing program 1 (id=767):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r0, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20004845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
shutdown(r0, 0x1)

734.754447ms ago: executing program 5 (id=768):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
io_setup(0x2278, &(0x7f0000000180)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
io_submit(r1, 0x2, &(0x7f0000000a40)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0xfffe, r2, &(0x7f00000000c0)="9c7b", 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x9f, r0, 0x0, 0x0, 0xfffffffffffffffd}])
syz_clone(0x24000600, 0x0, 0x0, 0x0, 0x0, 0x0)

652.423299ms ago: executing program 1 (id=769):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000002d00)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

587.42162ms ago: executing program 3 (id=770):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "973d5c58"}]}}, 0x0}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000140)={[{@gid}, {@check_relaxed}, {@check_relaxed}, {@showassoc}, {@gid}, {@unhide}, {@check_strict}, {@map_off}, {}, {@overriderock}, {@check_strict}, {@nojoliet}, {@mode={'mode', 0x3d, 0xe2f}}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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")
syz_usb_connect$printer(0x3, 0x0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")

462.203362ms ago: executing program 1 (id=771):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81)
readv(r1, &(0x7f0000000640)=[{&(0x7f0000002480)=""/4082, 0xff2}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0})

258.166085ms ago: executing program 5 (id=772):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x320, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

111.292007ms ago: executing program 1 (id=773):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @loopback}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

0s ago: executing program 5 (id=774):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000180)={[{@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@shortname_win95}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x216, &(0x7f0000000e00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e)

kernel console output (not intermixed with test programs):

 mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.156134][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.168800][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.222381][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.239107][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.251653][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.264776][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.323235][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.333402][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.374401][ T5784] veth0_macvtap: entered promiscuous mode
[   72.400757][ T5784] veth1_macvtap: entered promiscuous mode
[   72.453138][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.474611][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.499969][ T5874] syz.3.5[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   72.500872][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.529810][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.532929][ T5874] loop3: detected capacity change from 0 to 1024
[   72.558892][ T5874] =======================================================
[   72.558892][ T5874] WARNING: The mand mount option has been deprecated and
[   72.558892][ T5874]          and is ignored by this kernel. Remove the mand
[   72.558892][ T5874]          option from the mount to silence this warning.
[   72.558892][ T5874] =======================================================
[   72.561730][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.606989][ T5874] EXT4-fs: Ignoring removed oldalloc option
[   72.620641][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.630921][ T5874] EXT4-fs: Ignoring removed bh option
[   72.637029][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.647529][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.651325][ T5874] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   72.660629][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.742176][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.755496][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.766911][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.770429][ T5874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.777816][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.801162][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.811660][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.822994][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.857260][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.886751][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.920200][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.933487][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.938571][ T5874] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4036: comm syz.3.5: Allocating blocks 385-513 which overlap fs metadata
[   72.943015][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.993511][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.005622][ T5874] EXT4-fs (loop3): pa ffff88801ff36740: logic 16, phys. 129, len 24
[   73.014094][ T5874] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5377: group 0, free 0, pa_free 8
[   73.079739][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.126522][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.194949][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.255027][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.284304][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.341296][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.360297][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.596929][ T5795] Bluetooth: hci0: command tx timeout
[   73.679193][ T5795] Bluetooth: hci1: command tx timeout
[   73.683408][ T5791] Bluetooth: hci3: command tx timeout
[   73.684775][   T50] Bluetooth: hci2: command tx timeout
[   73.787533][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   73.898826][ T5880] loop1: detected capacity change from 0 to 32768
[   73.967473][ T5880]  loop1: p9 p11 p16
[   74.007799][    T9] usb 1-1: Using ep0 maxpacket: 32
[   74.025766][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.046509][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.103647][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   74.137811][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   74.178452][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.220291][    T9] usb 1-1: config 0 descriptor??
[   74.405485][ T5902] loop3: detected capacity change from 0 to 8192
[   74.494978][ T5902] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   74.583680][ T5902] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   74.682569][ T5902] REISERFS (device loop3): using ordered data mode
[   74.707725][ T5902] reiserfs: using flush barriers
[   74.736300][ T5902] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   74.774280][ T5902] REISERFS (device loop3): checking transaction log (loop3)
[   74.780657][    T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input5
[   74.814546][ T5902] REISERFS (device loop3): Using r5 hash to sort names
[   74.842638][ T5902] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   74.945114][    T9] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0001/input/input6
[   75.048105][    T9] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[   75.086571][ T5907] input: syz0 as /devices/virtual/input/input7
[   75.543480][    T8] usb 1-1: USB disconnect, device number 2
[   75.678873][ T5918] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET)
[   75.683663][ T5795] Bluetooth: hci0: command tx timeout
[   75.756406][ T5795] Bluetooth: hci3: command tx timeout
[   75.761870][ T5795] Bluetooth: hci1: command tx timeout
[   75.767618][   T50] Bluetooth: hci2: command tx timeout
[   76.113805][ T5922] loop3: detected capacity change from 0 to 128
[   76.523643][ T5926] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8
[   76.662047][ T5934] loop0: detected capacity change from 0 to 1024
[   76.670406][ T5934] EXT4-fs: Ignoring removed nobh option
[   76.682761][ T5934] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   76.767170][ T5934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.825910][ T5939] netlink: 'syz.1.25': attribute type 33 has an invalid length.
[   76.835179][ T5920] loop2: detected capacity change from 0 to 32768
[   76.845636][ T5920] XFS: noikeep mount option is deprecated.
[   76.869524][ T5939] netlink: 152 bytes leftover after parsing attributes in process `syz.1.25'.
[   76.933987][ T5920] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.991397][ T5939] netlink: 'syz.1.25': attribute type 10 has an invalid length.
[   77.158721][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.178129][ T5939] team0: Port device bond0 added
[   77.212086][ T5920] XFS (loop2): Ending clean mount
[   77.224563][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.379252][ T5920] XFS (loop2): Quotacheck needed: Please wait.
[   77.617403][ T5920] XFS (loop2): Quotacheck: Done.
[   77.618062][ T5956] block nbd3: server does not support multiple connections per device.
[   77.687645][ T5955] block nbd3: shutting down sockets
[   77.741275][ T5920] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.912460][ T5784] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.974432][ T5965] geneve2: entered promiscuous mode
[   77.983842][ T5965] geneve2: entered allmulticast mode
[   78.070854][ T5967] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   78.096174][ T5967] overlayfs: failed to set xattr on upper
[   78.101948][ T5967] overlayfs: ...falling back to redirect_dir=nofollow.
[   78.142569][ T5967] overlayfs: ...falling back to index=off.
[   78.634228][ T5982] loop0: detected capacity change from 0 to 2048
[   78.675066][ T5986] lo speed is unknown, defaulting to 1000
[   78.709047][ T5986] lo speed is unknown, defaulting to 1000
[   78.724436][ T5982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.765000][ T5986] lo speed is unknown, defaulting to 1000
[   78.778672][ T5982] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.813164][ T5986] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.833505][ T5982] fs-verity: sha512 using implementation "sha512-avx2"
[   78.862320][ T5986] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   78.917305][ T5986] lo speed is unknown, defaulting to 1000
[   78.966875][ T5986] lo speed is unknown, defaulting to 1000
[   78.977916][ T5986] lo speed is unknown, defaulting to 1000
[   78.985034][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.000398][ T5986] lo speed is unknown, defaulting to 1000
[   79.814435][ T6004] loop0: detected capacity change from 0 to 32768
[   79.834681][ T6020] netlink: 51 bytes leftover after parsing attributes in process `syz.2.56'.
[   79.839946][ T6004] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.47 (6004)
[   79.879225][ T6004] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   79.898524][ T6004] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   79.914564][ T6004] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   79.932627][   T28] audit: type=1326 audit(1753779989.782:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6021 comm="syz.1.57" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c2a78e9a9 code=0x0
[   79.958227][ T6004] BTRFS info (device loop0): use zstd compression, level 3
[   79.963550][  T966] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   79.967848][ T6004] BTRFS info (device loop0): using free space tree
[   80.033454][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   80.061185][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'.
[   80.075413][ T6037] Zero length message leads to an empty skb
[   80.081874][ T6004] BTRFS info (device loop0): enabling ssd optimizations
[   80.096003][ T6004] BTRFS info (device loop0): auto enabling async discard
[   80.175882][  T966] usb 4-1: Using ep0 maxpacket: 32
[   80.190493][  T966] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[   80.211040][  T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.236400][  T966] usb 4-1: Product: syz
[   80.246313][  T966] usb 4-1: Manufacturer: syz
[   80.250961][  T966] usb 4-1: SerialNumber: syz
[   80.289740][  T966] usb 4-1: config 0 descriptor??
[   80.304496][ T6045] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   80.319742][  T966] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[   80.520799][ T5783] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   80.796623][ T6054] loop0: detected capacity change from 0 to 512
[   80.836061][ T6054] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.870497][ T6054] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   80.935911][ T6054] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   80.953856][ T6054] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.975598][ T6054] EXT4-fs (loop0): 1 truncate cleaned up
[   80.983423][ T6054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.020138][   T28] audit: type=1800 audit(1753779990.892:3): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.60" name="file1" dev="loop0" ino=15 res=0 errno=0
[   81.425755][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.519399][  T966] gspca_ov534_9: reg_w failed -71
[   81.937058][  T966] gspca_ov534_9: Unknown sensor 0000
[   81.937143][  T966] ov534_9: probe of 4-1:0.0 failed with error -22
[   81.946108][ T1188] cfg80211: failed to load regulatory.db
[   81.990466][  T966] usb 4-1: USB disconnect, device number 2
[   82.080949][ T6075] loop0: detected capacity change from 0 to 32768
[   82.116079][ T6075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.69 (6075)
[   82.165088][ T6075] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   82.184440][ T6075] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   82.210442][ T6075] BTRFS info (device loop0): setting nodatacow, compression disabled
[   82.247015][ T6075] BTRFS info (device loop0): setting datacow
[   82.263983][ T6075] BTRFS info (device loop0): doing ref verification
[   82.280961][ T6075] BTRFS info (device loop0): setting nodatacow, compression disabled
[   82.304531][ T6075] BTRFS info (device loop0): turning off barriers
[   82.331911][ T6075] BTRFS info (device loop0): enabling ssd optimizations
[   82.351098][ T6075] BTRFS info (device loop0): using spread ssd allocation scheme
[   82.375412][ T6075] BTRFS info (device loop0): not using ssd optimizations
[   82.401599][ T6075] BTRFS info (device loop0): not using spread ssd allocation scheme
[   82.427364][ T6075] BTRFS info (device loop0): using free space tree
[   82.442042][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'.
[   82.477370][ T6097] sch_tbf: burst 0 is lower than device veth1_to_hsr mtu (1514) !
[   82.779692][   T28] audit: type=1800 audit(1753779992.652:4): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="bus" dev="loop0" ino=263 res=0 errno=0
[   82.966916][ T5783] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.121854][ T6129] Bluetooth: MGMT ver 1.22
[   83.136379][ T6129] Bluetooth: hci0: unsupported parameter 2327
[   83.144017][ T6129] Bluetooth: hci0: unsupported parameter 256
[   83.155238][ T6129] Bluetooth: hci0: unsupported parameter 2327
[   83.176800][ T6129] Bluetooth: hci0: unsupported parameter 256
[   83.452695][ T6133] loop2: detected capacity change from 0 to 2048
[   83.534738][ T6133] EXT4-fs (loop2): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.574721][ T6133] EXT4-fs error (device loop2): __ext4_iget:5053: inode #12: block 2: comm syz.2.89: invalid block
[   83.614828][ T6133] EXT4-fs error (device loop2): __ext4_iget:5053: inode #12: block 2: comm syz.2.89: invalid block
[   83.765177][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[   83.949015][ T6152] loop2: detected capacity change from 0 to 128
[   83.981647][ T6152] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   84.010856][ T6152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.033617][ T6156] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.082886][ T6156] netlink: 76 bytes leftover after parsing attributes in process `syz.3.97'.
[   84.293054][ T6162] loop2: detected capacity change from 0 to 1024
[   84.362391][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.426432][   T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   84.493427][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.638160][   T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   84.657995][   T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   84.676427][   T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   84.695522][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.722018][ T6158] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   84.749467][ T6178] loop3: detected capacity change from 0 to 64
[   84.761588][   T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[   84.890732][   T28] audit: type=1800 audit(1753779994.762:5): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.107" name="file1" dev="loop3" ino=21 res=0 errno=0
[   85.006167][   T27] usb 1-1: USB disconnect, device number 3
[   85.236262][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   85.249663][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'.
[   85.746183][ T6196] loop2: detected capacity change from 0 to 32768
[   85.775342][ T6196] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.114 (6196)
[   85.789070][ T1188] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.837994][ T6196] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   85.855637][ T6196] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   85.870104][ T6196] BTRFS info (device loop2): setting nodatacow, compression disabled
[   85.884702][ T6196] BTRFS info (device loop2): setting datacow
[   85.895920][ T6196] BTRFS info (device loop2): doing ref verification
[   85.902565][ T6196] BTRFS info (device loop2): force clearing of disk cache
[   85.914230][ T6196] BTRFS info (device loop2): turning off barriers
[   85.921818][ T6196] BTRFS info (device loop2): enabling ssd optimizations
[   85.933595][ T6196] BTRFS info (device loop2): using spread ssd allocation scheme
[   85.942801][ T6196] BTRFS info (device loop2): using free space tree
[   86.000132][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.029497][ T1188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   86.077681][ T1188] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[   86.082114][ T6196] BTRFS info (device loop2): rebuilding free space tree
[   86.103464][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.124843][ T1188] usb 2-1: config 0 descriptor??
[   86.400831][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[   86.433397][ T1188] usbhid 2-1:0.0: can't add hid device: -71
[   86.452874][ T1188] usbhid: probe of 2-1:0.0 failed with error -71
[   86.483509][ T6237] loop3: detected capacity change from 0 to 1024
[   86.492023][ T1188] usb 2-1: USB disconnect, device number 2
[   86.626690][ T5784] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.651842][ T6240] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   86.679902][ T6237] syz.3.124: attempt to access beyond end of device
[   86.679902][ T6237] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   86.729106][   T28] audit: type=1800 audit(1753779996.602:6): pid=6237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.124" name="file1" dev="loop3" ino=20 res=0 errno=0
[   86.752013][ T6237] syz.3.124: attempt to access beyond end of device
[   86.752013][ T6237] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   87.042510][ T6246] netlink: 'syz.2.126': attribute type 4 has an invalid length.
[   87.125920][   T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   87.339033][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.339960][ T6256] loop2: detected capacity change from 0 to 2048
[   87.360438][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.380837][   T27] usb 1-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[   87.398312][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.423442][ T6256] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   87.432978][   T27] usb 1-1: config 0 descriptor??
[   87.441582][ T6256] UDF-fs: Scanning with blocksize 512 failed
[   87.500878][ T6256] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.566821][  T966] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   87.778896][  T966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   87.814873][  T966] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   87.846517][  T966] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   87.867991][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.874755][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.884181][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.891957][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.900871][  T966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[   87.913570][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.922756][  T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[   87.932342][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.933159][ T6268] Illegal XDP return value 4218186966 on prog  (id 16) dev syz_tun, expect packet loss!
[   87.939181][  T966] usb 2-1: Product: syz
[   87.953443][   T27] elo 0003:04E7:0030.0002: unknown main item tag 0x0
[   87.960897][  T966] usb 2-1: Manufacturer: syz
[   87.965541][  T966] usb 2-1: SerialNumber: syz
[   87.981336][   T27] elo 0003:04E7:0030.0002: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.0-1/input0
[   88.091741][   T27] usb 1-1: USB disconnect, device number 4
[   88.154837][ T6275] loop2: detected capacity change from 0 to 1024
[   88.200485][ T6275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.248445][  T966] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   88.250072][ T6275] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz.2.140: path /: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0
[   88.362042][ T5784] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /36/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=792, inode=0, rec_len=0, size=1024 fake=0
[   88.390246][ T5784] VFS: Lookup of '.' in ext4 loop2 would have caused loop
[   88.403246][ T5784] VFS: Lookup of '.' in ext4 loop2 would have caused loop
[   88.463579][    T8] usb 2-1: USB disconnect, device number 3
[   88.491298][    T8] usblp0: removed
[   88.713795][ T6281] loop3: detected capacity change from 0 to 32768
[   88.725670][ T6281] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.141 (6281)
[   88.750668][ T6281] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   88.775960][ T6281] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   88.803332][ T6281] BTRFS info (device loop3): using free space tree
[   88.820723][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.933275][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.056809][ T6281] BTRFS info (device loop3): enabling ssd optimizations
[   89.076827][ T6281] BTRFS info (device loop3): auto enabling async discard
[   89.188964][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.414944][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.424752][ T5782] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   89.513077][ T6311] loop0: detected capacity change from 0 to 1024
[   89.524141][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   89.543889][ T6311] EXT4-fs: Ignoring removed nobh option
[   89.615645][ T6311] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   89.627951][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.702992][ T6311] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz.0.149: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[   89.843472][ T6311] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.149: couldn't read orphan inode 11 (err -117)
[   89.899428][ T6311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.087487][ T6311] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.149: Invalid block bitmap block 0 in block_group 0
[   90.142371][ T6311] Quota error (device loop0): write_blk: dquota write failed
[   90.146757][ T6325] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:478: comm syz.0.149: Invalid block bitmap block 0 in block_group 0
[   90.212645][ T6311] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   90.228988][ T6311] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.149: Failed to acquire dquot type 0
[   90.285268][   T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   90.296302][   T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   90.304673][   T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   90.312948][   T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   90.320971][   T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   90.328476][   T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   90.410981][ T2937] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm kworker/u4:8: Invalid inode table block 8589934593 in block_group 0
[   90.478801][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.534272][ T6328] lo speed is unknown, defaulting to 1000
[   90.541920][ T6335] loop3: detected capacity change from 0 to 16
[   90.618723][ T6335] erofs: (device loop3): mounted with root inode @ nid 36.
[   90.701069][   T28] audit: type=1800 audit(1753780000.572:7): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.157" name="file1" dev="loop3" ino=86 res=0 errno=0
[   90.918006][ T6350] loop3: detected capacity change from 0 to 8
[   90.995655][ T6350] process 'syz.3.159' launched './file0/file0' with NULL argv: empty string added
[   91.290631][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'.
[   91.849245][ T6379] loop0: detected capacity change from 0 to 4096
[   92.036246][ T6328] chnl_net:caif_netlink_parms(): no params data found
[   92.386438][ T6366] loop1: detected capacity change from 0 to 40427
[   92.397851][   T50] Bluetooth: hci1: command tx timeout
[   92.426886][ T6366] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff
[   92.509575][ T6366] F2FS-fs (loop1): invalid crc value
[   92.547346][ T6366] F2FS-fs (loop1): Found nat_bits in checkpoint
[   92.590619][ T6398] loop0: detected capacity change from 0 to 4096
[   92.678293][ T6366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   92.722535][ T6398] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[   92.747606][ T1188] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   92.818921][   T28] audit: type=1804 audit(1753780002.682:8): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.164" name="/newroot/43/file1/file1" dev="loop1" ino=10 res=1 errno=0
[   92.968336][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   92.983371][ T5781] syz-executor: attempt to access beyond end of device
[   92.983371][ T5781] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   93.013461][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.040684][ T1188] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   93.056223][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state
[   93.063394][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.078001][ T5781] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   93.108876][ T1188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.121608][ T1188] usb 4-1: config 0 descriptor??
[   93.146099][ T6328] bridge_slave_0: entered allmulticast mode
[   93.183988][ T6328] bridge_slave_0: entered promiscuous mode
[   93.222185][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state
[   93.256616][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.282951][ T6328] bridge_slave_1: entered allmulticast mode
[   93.295471][ T6328] bridge_slave_1: entered promiscuous mode
[   93.545611][ T1188] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   93.564961][ T1188] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   93.596541][ T6328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   93.615902][ T1188] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   93.623272][ T1188] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   93.634227][ T6328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   93.643653][ T1188] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[   93.644426][ T1188] cm6533_jd 0003:0D8C:0022.0003: No inputs registered, leaving
[   93.703963][ T1188] cm6533_jd 0003:0D8C:0022.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[   93.831636][ T1142] hsr_slave_0: left promiscuous mode
[   93.854614][ T1142] hsr_slave_1: left promiscuous mode
[   93.858711][ T1188] usb 4-1: USB disconnect, device number 3
[   93.883700][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.897510][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.928501][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.947582][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.960114][ T1142] bridge_slave_1: left allmulticast mode
[   93.968490][ T1142] bridge_slave_1: left promiscuous mode
[   93.976061][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.016774][ T1142] bridge_slave_0: left allmulticast mode
[   94.022553][ T1142] bridge_slave_0: left promiscuous mode
[   94.036529][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.097635][ T1142] veth1_macvtap: left promiscuous mode
[   94.103899][ T1142] veth0_macvtap: left promiscuous mode
[   94.124447][ T1142] veth1_vlan: left promiscuous mode
[   94.131172][ T1142] veth0_vlan: left promiscuous mode
[   94.454387][ T6428] sctp: [Deprecated]: syz.3.179 (pid 6428) Use of int in max_burst socket option deprecated.
[   94.454387][ T6428] Use struct sctp_assoc_value instead
[   94.483844][   T50] Bluetooth: hci1: command tx timeout
[   94.754889][ T1142] team0 (unregistering): Port device team_slave_1 removed
[   94.800128][ T1142] team0 (unregistering): Port device team_slave_0 removed
[   94.826159][ T1188] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   94.843207][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.888677][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.042072][ T1188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.065362][ T1188] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   95.085050][ T1188] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   95.098503][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.112479][ T1188] usb 4-1: Product: syz
[   95.119866][ T1188] usb 4-1: Manufacturer: syz
[   95.124502][ T1188] usb 4-1: SerialNumber: syz
[   95.135695][ T1188] cdc_ncm 4-1:1.0: skipping garbage
[   95.359712][ T6436] loop1: detected capacity change from 0 to 4096
[   95.429978][ T6436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.518042][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.835654][ T1142] bond0 (unregistering): Released all slaves
[   95.956540][ T6328] team0: Port device team_slave_0 added
[   95.988287][ T6328] team0: Port device team_slave_1 added
[   96.100292][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.126499][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.173379][ T1188] cdc_ncm 4-1:1.0: bind() failure
[   96.203016][ T6328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.222103][ T1188] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   96.236130][ T1188] cdc_ncm 4-1:1.1: bind() failure
[   96.254043][ T6328] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.276556][ T6328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.336237][ T6328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.391687][ T1188] usb 4-1: USB disconnect, device number 4
[   96.555286][ T6328] hsr_slave_0: entered promiscuous mode
[   96.561385][   T50] Bluetooth: hci1: command tx timeout
[   96.575056][ T6328] hsr_slave_1: entered promiscuous mode
[   96.581851][ T6328] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.589671][ T6328] Cannot create hsr debugfs directory
[   97.082200][ T6453] loop0: detected capacity change from 0 to 32768
[   97.129240][ T6328] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.160398][ T6328] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.286083][ T6453] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   97.326288][ T6328] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.394607][ T6328] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.472056][ T6468] loop1: detected capacity change from 0 to 32768
[   97.487348][ T6468] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (6468)
[   97.530599][ T6468] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.565652][ T6453] XFS (loop0): Ending clean mount
[   97.574036][ T6468] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   97.595090][ T6468] BTRFS info (device loop1): use zlib compression, level 3
[   97.645618][ T6468] BTRFS info (device loop1): using free space tree
[   97.754692][ T6328] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.872541][ T6468] BTRFS info (device loop1): enabling ssd optimizations
[   97.894398][ T6328] 8021q: adding VLAN 0 to HW filter on device team0
[   97.918903][ T6468] BTRFS info (device loop1): auto enabling async discard
[   97.957956][ T5783] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   97.988651][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.995869][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.085695][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.093046][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.350849][ T5781] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.641222][   T50] Bluetooth: hci1: command tx timeout
[   98.764174][   T28] audit: type=1326 audit(1753780008.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   98.866530][   T28] audit: type=1326 audit(1753780008.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   98.931646][   T28] audit: type=1326 audit(1753780008.642:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.009454][   T28] audit: type=1326 audit(1753780008.642:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.102484][ T6328] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.117840][   T28] audit: type=1326 audit(1753780008.652:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.265885][   T28] audit: type=1326 audit(1753780009.132:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.351568][   T28] audit: type=1326 audit(1753780009.132:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.415677][   T28] audit: type=1326 audit(1753780009.172:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.475980][   T28] audit: type=1326 audit(1753780009.172:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[   99.541612][   T28] audit: type=1326 audit(1753780009.172:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x7ffc0000
[  100.020226][ T6328] veth0_vlan: entered promiscuous mode
[  100.067534][ T6539] loop1: detected capacity change from 0 to 32768
[  100.070973][ T6328] veth1_vlan: entered promiscuous mode
[  100.084610][ T6566] loop3: detected capacity change from 0 to 2048
[  100.125302][ T6566] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=18576, location=18576
[  100.209706][ T6328] veth0_macvtap: entered promiscuous mode
[  100.248885][ T6566] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.276615][ T6328] veth1_macvtap: entered promiscuous mode
[  100.377430][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.426086][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.467049][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.495782][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.506187][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  100.517948][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.554575][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.593678][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.645896][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.666135][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.699966][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.732227][ T6328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.760552][ T6328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.795214][ T6328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.848700][ T6328] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.870815][ T6328] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.890362][ T6328] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.915872][ T6328] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.982550][ T6589] loop4: detected capacity change from 0 to 7
[  101.015678][ T6589] Dev loop4: unable to read RDB block 7
[  101.037202][ T6589]  loop4: AHDI p3 p4
[  101.043263][ T6589] loop4: partition table partially beyond EOD, truncated
[  101.059167][ T6589] loop4: p3 size 4227858431 extends beyond EOD, truncated
[  101.209908][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  101.245203][ T2937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.314478][ T2937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.343567][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.406686][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.993582][ T6622] loop0: detected capacity change from 0 to 1024
[  102.111482][ T6622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.185120][ T6630] dccp_v6_rcv: dropped packet with invalid checksum
[  102.341638][ T5783] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.405638][ T6596] loop3: detected capacity change from 0 to 40427
[  102.527818][ T6635] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  102.531426][ T6596] F2FS-fs (loop3): invalid crc value
[  102.579549][ T6596] F2FS-fs (loop3): Found nat_bits in checkpoint
[  102.788120][ T6596] F2FS-fs (loop3): Start checkpoint disabled!
[  102.790932][ T6637] loop1: detected capacity change from 0 to 4096
[  102.848508][ T6596] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  102.848669][ T6637] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  103.035476][ T6637] ntfs3: loop1: Failed to initialize $Extend/$Reparse.
[  103.037433][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  103.052308][ T6651] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.229'.
[  103.176137][   T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  103.318583][ T5781] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22.
[  103.385879][   T27] usb 1-1: Using ep0 maxpacket: 16
[  103.411053][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  103.432675][   T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  103.476413][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.517478][   T27] usb 1-1: config 0 descriptor??
[  103.714673][   T42] kworker/u4:2: attempt to access beyond end of device
[  103.714673][   T42] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  103.816178][   T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  104.054104][   T27] hid (null): nested delimiters
[  104.066977][   T27] hid (null): global environment stack underflow
[  104.240089][   T27] usb 1-1: USB disconnect, device number 5
[  104.545187][ T6690] netlink: 'syz.3.232': attribute type 64 has an invalid length.
[  104.576157][ T6690] netlink: 32 bytes leftover after parsing attributes in process `syz.3.232'.
[  104.642174][ T6694] netlink: 'syz.3.232': attribute type 64 has an invalid length.
[  104.667952][ T6694] netlink: 32 bytes leftover after parsing attributes in process `syz.3.232'.
[  105.066394][ T6708] netlink: 'syz.1.240': attribute type 4 has an invalid length.
[  105.132776][ T6711] tls_set_device_offload: netdev not found
[  106.442860][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  106.442873][   T28] audit: type=1326 audit(1753780016.312:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.482409][   T28] audit: type=1326 audit(1753780016.342:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.522431][   T28] audit: type=1326 audit(1753780016.342:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.553008][   T28] audit: type=1326 audit(1753780016.352:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.582277][   T28] audit: type=1326 audit(1753780016.382:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.643958][   T28] audit: type=1326 audit(1753780016.382:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.680448][    T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.688832][   T28] audit: type=1326 audit(1753780016.382:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6762 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  106.868673][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.868721][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.868746][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.868763][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  106.868799][    T8] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00
[  106.868819][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.875019][    T8] usb 2-1: config 0 descriptor??
[  107.053363][ T6788] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  107.162245][ T6791] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[  107.338790][    T8] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  107.378392][    T8] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0005/input/input9
[  107.396179][ T6802] netlink: 'syz.0.269': attribute type 10 has an invalid length.
[  107.458185][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.506937][ T6802] team0: Port device bond0 added
[  107.636663][    T8] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  107.733350][    T8] usb 2-1: USB disconnect, device number 4
[  107.902702][ T6812] fido_id[6812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  107.984686][ T6794] loop3: detected capacity change from 0 to 32768
[  108.105703][ T6794] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  108.174041][ T6794] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  108.260079][   T28] audit: type=1800 audit(1753780018.122:27): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.266" name="bus" dev="loop3" ino=17058 res=0 errno=0
[  108.549949][ T6794] syz.3.266 (6794) used greatest stack depth: 19888 bytes left
[  108.618740][ T5782] ocfs2: Unmounting device (7,3) on (node local)
[  109.413803][   T42] nci: nci_ntf_packet: unknown ntf opcode 0x107
[  109.468716][ T6843] loop4: detected capacity change from 0 to 8192
[  109.533832][ T6843] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  109.562878][ T6858] input: syz0 as /devices/virtual/input/input10
[  109.572663][ T6843] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  109.596899][ T6843] REISERFS (device loop4): using ordered data mode
[  109.603638][ T6843] reiserfs: using flush barriers
[  109.617364][ T6843] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  109.652028][ T6843] REISERFS (device loop4): checking transaction log (loop4)
[  109.677619][ T6843] REISERFS (device loop4): Using rupasov hash to sort names
[  109.693220][ T6843] REISERFS (device loop4): using 3.5.x disk format
[  109.702349][ T6843] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  109.720297][ T6843] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  109.734143][ T6843] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  109.746075][ T6843] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  110.270697][   T27] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  110.348930][ T6871] loop4: detected capacity change from 0 to 32768
[  110.379324][ T6871] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.294 (6871)
[  110.412728][ T6871] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  110.423041][ T6871] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  110.433479][ T6871] BTRFS info (device loop4): enabling auto defrag
[  110.440422][ T6871] BTRFS info (device loop4): doing ref verification
[  110.451596][ T6871] BTRFS info (device loop4): use no compression
[  110.466116][ T6871] BTRFS info (device loop4): force clearing of disk cache
[  110.473340][ T6871] BTRFS info (device loop4): max_inline at 4096
[  110.493176][   T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  110.503555][ T6871] BTRFS info (device loop4): disabling free space tree
[  110.510960][   T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  110.525889][   T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  110.535686][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.637254][ T6871] BTRFS info (device loop4): enabling ssd optimizations
[  110.644291][ T6871] BTRFS info (device loop4): auto enabling async discard
[  110.708832][ T6871] BTRFS info (device loop4): rebuilding free space tree
[  110.773220][ T6871] BTRFS info (device loop4): disabling free space tree
[  110.775941][   T27] usb 2-1: usb_control_msg returned -32
[  110.785936][   T27] usbtmc 2-1:16.0: can't read capabilities
[  110.786196][ T6871] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  110.803374][ T6871] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  111.048469][ T6328] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.166317][    T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  111.271384][ T6880] loop3: detected capacity change from 0 to 40427
[  111.323092][ T6880] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff
[  111.342715][ T6902] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -71
[  111.350236][  T966] usb 2-1: USB disconnect, device number 5
[  111.380065][ T6880] F2FS-fs (loop3): invalid crc value
[  111.396739][    T8] usb 1-1: Using ep0 maxpacket: 16
[  111.409107][    T8] usb 1-1: config 0 has no interfaces?
[  111.445893][ T6880] F2FS-fs (loop3): Found nat_bits in checkpoint
[  111.466190][    T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  111.486439][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.494528][    T8] usb 1-1: Product: syz
[  111.536164][    T8] usb 1-1: Manufacturer: syz
[  111.553760][ T6909] program syz.4.300 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.573245][    T8] usb 1-1: SerialNumber: syz
[  111.593550][    T8] usb 1-1: config 0 descriptor??
[  111.644312][ T6880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  111.719978][ T6880] syz.3.297: attempt to access beyond end of device
[  111.719978][ T6880] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  111.824186][ T5782] syz-executor: attempt to access beyond end of device
[  111.824186][ T5782] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  111.828798][    T8] usb 1-1: USB disconnect, device number 6
[  111.873983][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  112.754085][ T6952] loop3: detected capacity change from 0 to 2048
[  112.828915][ T6952] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.211159][   T28] audit: type=1326 audit(1753780023.072:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.221310][ T6965] warning: `syz.1.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  113.275756][   T28] audit: type=1326 audit(1753780023.132:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.331144][   T28] audit: type=1326 audit(1753780023.202:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.380649][   T28] audit: type=1326 audit(1753780023.252:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.440622][   T28] audit: type=1326 audit(1753780023.312:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.500648][   T28] audit: type=1326 audit(1753780023.372:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.565248][   T28] audit: type=1326 audit(1753780023.432:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.630564][   T28] audit: type=1326 audit(1753780023.492:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.642699][ T6973] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼	O€
[  113.682521][   T28] audit: type=1326 audit(1753780023.552:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  113.740633][   T28] audit: type=1326 audit(1753780023.612:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6961 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b8e9a9 code=0x7fc00000
[  114.151862][ T6998] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 (while UP)
[  115.636272][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  115.838359][    T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  115.857181][    T8] usb 4-1: config 0 has no interface number 0
[  115.883442][    T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  115.904213][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.935738][    T8] usb 4-1: config 0 descriptor??
[  115.948367][    T8] cp210x 4-1:0.1: cp210x converter detected
[  116.354588][    T8] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32
[  116.374919][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  116.384233][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[  116.406531][ T7057] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  116.415966][ T7057] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  116.424737][ T7057] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  116.433586][ T7057] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  116.488774][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  116.501441][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[  116.612340][    T8] usb 4-1: cp210x converter now attached to ttyUSB0
[  116.792719][   T27] usb 4-1: USB disconnect, device number 5
[  116.867843][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  116.915659][   T27] cp210x 4-1:0.1: device disconnected
[  117.136159][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  117.256176][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.436289][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.516255][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  117.579208][ T7088] loop4: detected capacity change from 0 to 16
[  117.593578][ T7088] erofs: (device loop4): mounted with root inode @ nid 36.
[  117.656503][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  118.610148][ T7113] syzkaller0: entered allmulticast mode
[  118.656600][ T7113] syzkaller0 (unregistering): left allmulticast mode
[  118.663622][ T7115] input: syz1 as /devices/virtual/input/input11
[  118.796811][ T7109] lo speed is unknown, defaulting to 1000
[  118.974627][ T7125] netlink: 11 bytes leftover after parsing attributes in process `syz.0.376'.
[  119.488658][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'.
[  119.508846][ T7145] netlink: 'syz.0.381': attribute type 13 has an invalid length.
[  119.546017][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[  119.577532][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'.
[  119.619226][ T7145] netlink: 'syz.0.381': attribute type 13 has an invalid length.
[  119.649667][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.381'.
[  120.149082][    T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  120.373084][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  120.409316][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.437079][    T8] usb 1-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  120.474457][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.514789][    T8] usb 1-1: config 0 descriptor??
[  120.972783][    T8] hid-generic 0003:04F3:0754.0006: unknown main item tag 0x0
[  121.009494][    T8] hid-generic 0003:04F3:0754.0006: unknown main item tag 0x0
[  121.031498][    T8] hid-generic 0003:04F3:0754.0006: unknown main item tag 0x0
[  121.055971][    T8] hid-generic 0003:04F3:0754.0006: unknown main item tag 0x0
[  121.063429][    T8] hid-generic 0003:04F3:0754.0006: unknown main item tag 0x0
[  121.096882][    T8] hid-generic 0003:04F3:0754.0006: failed to start in urb: -90
[  121.136346][    T8] hid-generic 0003:04F3:0754.0006: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.0-1/input0
[  121.164687][ T7191] loop3: detected capacity change from 0 to 4096
[  121.200690][    T8] usb 1-1: USB disconnect, device number 7
[  121.246690][ T7191] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  121.254387][ T7191] UDF-fs: Scanning with blocksize 512 failed
[  121.317755][ T7191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.341023][ T7194] fido_id[7194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  121.392514][ T7191] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  121.614089][ T7176] loop4: detected capacity change from 0 to 32768
[  121.747738][ T7176] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.038658][ T7225] overlayfs: failed to resolve './file0': -2
[  122.157556][ T7176] XFS (loop4): Ending clean mount
[  122.218754][ T7176] XFS (loop4): Quotacheck needed: Please wait.
[  122.302167][ T7176] XFS (loop4): Quotacheck: Done.
[  122.508001][   T28] kauditd_printk_skb: 4 callbacks suppressed
[  122.508015][   T28] audit: type=1800 audit(1753780032.382:42): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.390" name="bus" dev="loop4" ino=9290 res=0 errno=0
[  122.744624][ T6328] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.606944][ T5773] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  123.796260][ T5773] usb 5-1: Using ep0 maxpacket: 16
[  123.816991][ T5773] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  123.825289][ T5773] usb 5-1: config 1 has no interface number 0
[  123.850880][ T5773] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  123.870719][ T5773] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  123.898714][ T5773] usb 5-1: config 1 interface 105 has no altsetting 0
[  123.916439][ T5773] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  123.926028][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.934183][ T5773] usb 5-1: Product: syz
[  123.938840][ T5773] usb 5-1: Manufacturer: syz
[  123.943538][ T5773] usb 5-1: SerialNumber: syz
[  123.956974][ T7266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  123.964529][ T7266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  124.403801][ T7266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  124.428980][ T7266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  124.845510][ T5773] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  125.078776][ T5773] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  125.208655][ T5773] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:35:53:15:2b:a4
[  125.306192][ T5773] usb 5-1: USB disconnect, device number 2
[  125.313525][ T5773] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  125.447801][ T5773] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  125.503085][ T5773] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  125.545087][ T5773] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  125.895974][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  126.099898][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.134249][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.160617][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  126.196013][    T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  126.218502][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  126.227395][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  126.241886][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.271638][    T8] usb 2-1: config 0 descriptor??
[  126.733252][    T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  126.831999][    T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  126.911220][ T7356] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  127.355342][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  127.410141][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'.
[  127.585134][   T27] usb 2-1: USB disconnect, device number 6
[  127.856028][  T966] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.051242][  T966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.070237][  T966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.081194][  T966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  128.113398][  T966] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  128.135909][  T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.158575][  T966] usb 4-1: config 0 descriptor??
[  128.600434][  T966] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd
[  128.614042][  T966] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  128.642184][  T966] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  128.694551][ T7417] loop4: detected capacity change from 0 to 1024
[  128.723943][ T7417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  128.737653][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  128.745933][ T7417] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  128.774695][ T7417] EXT4-fs (loop4): orphan cleanup on readonly fs
[  128.820643][ T7417] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.452: Invalid inode table block 0 in block_group 0
[  128.845184][ T7417] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  128.858382][ T7417] EXT4-fs error (device loop4): ext4_quota_write:7327: inode #3: comm syz.4.452: mark_inode_dirty error
[  128.875319][ T7417] Quota error (device loop4): write_blk: dquota write failed
[  128.878463][    T9] usb 4-1: USB disconnect, device number 6
[  128.885564][ T7417] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  128.910154][ T7417] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.452: Failed to acquire dquot type 0
[  128.924607][ T7417] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.452: Invalid inode table block 0 in block_group 0
[  128.949832][ T7417] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  128.953804][   T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  128.962627][ T7417] EXT4-fs error (device loop4): ext4_ext_truncate:4451: inode #15: comm syz.4.452: mark_inode_dirty error
[  128.985048][   T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  128.987459][ T7417] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.452: Invalid inode table block 0 in block_group 0
[  129.005478][   T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  129.020600][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.025914][ T7417] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  129.040397][ T7417] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  129.051545][ T7411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  129.063743][   T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  129.064399][ T7417] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.452: Invalid inode table block 0 in block_group 0
[  129.122274][ T7417] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem
[  129.142107][ T7417] EXT4-fs error (device loop4): ext4_truncate:4288: inode #15: comm syz.4.452: mark_inode_dirty error
[  129.164027][ T7417] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  129.181846][ T7417] EXT4-fs (loop4): 1 truncate cleaned up
[  129.201104][ T7417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  129.303560][ T5823] usb 2-1: USB disconnect, device number 7
[  129.389252][ T6328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.890585][    T9] hid-generic 0000:0003:0001.0009: unknown main item tag 0x0
[  129.899934][    T9] hid-generic 0000:0003:0001.0009: unknown main item tag 0x0
[  129.931907][    T9] hid-generic 0000:0003:0001.0009: hidraw0: <UNKNOWN> HID v0.03 Device [syz0] on syz1
[  129.990518][ T7442] fido_id[7442]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  130.098962][ T7445] sctp: [Deprecated]: syz.3.462 (pid 7445) Use of int in max_burst socket option deprecated.
[  130.098962][ T7445] Use struct sctp_assoc_value instead
[  130.193862][ T7449] loop3: detected capacity change from 0 to 512
[  130.263353][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.277401][ T7449] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.303287][ T7451] netlink: 96 bytes leftover after parsing attributes in process `syz.1.465'.
[  130.429526][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.713301][ T7464] veth0: entered promiscuous mode
[  130.755978][ T7467] serio: Serial port ptm0
[  130.764646][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'.
[  130.989148][ T7478] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  131.571826][ T7496] overlayfs: failed to resolve './file0': -2
[  131.621971][ T7498] syzkaller1: tun_chr_ioctl cmd 1074025680
[  131.632031][ T7498] syzkaller1: tun_chr_ioctl cmd 1074025677
[  131.639368][ T7498] syzkaller1: linktype set to 1
[  131.769286][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'.
[  131.801096][ T7500] IPVS: Error joining to the multicast group
[  132.003793][ T7507] netlink: 830 bytes leftover after parsing attributes in process `syz.0.488'.
[  132.032580][ T7509] loop4: detected capacity change from 0 to 512
[  132.076912][ T7509] EXT4-fs: Ignoring removed bh option
[  132.135718][ T7509] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  132.184506][ T7509] EXT4-fs (loop4): 1 truncate cleaned up
[  132.196330][ T7509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.598121][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801eb3d800: rx timeout, send abort
[  132.906060][ T7529] capability: warning: `syz.3.495' uses 32-bit capabilities (legacy support in use)
[  133.000436][ T6328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.035281][   T28] audit: type=1326 audit(1753780042.902:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7532 comm="syz.0.498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b8818e9a9 code=0x0
[  133.056987][    C0] vkms_vblank_simulate: vblank timer overrun
[  133.108319][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801eb3d800: abort rx timeout. Force session deactivation
[  133.126671][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.133297][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.357858][   T50] block nbd1: Receive control failed (result -32)
[  133.373371][ T7541] block nbd1: shutting down sockets
[  133.526114][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  133.625920][  T966] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  133.748395][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.778729][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  133.794197][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.803641][    T9] usb 4-1: Product: syz
[  133.805904][  T966] usb 5-1: Using ep0 maxpacket: 16
[  133.808061][    T9] usb 4-1: Manufacturer: syz
[  133.817778][    T9] usb 4-1: SerialNumber: syz
[  133.832803][  T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.856196][  T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.882551][  T966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  133.905646][  T966] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  133.930871][  T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.951815][  T966] usb 5-1: config 0 descriptor??
[  134.055008][ T7555] overlayfs: failed to resolve './file0': -2
[  134.123542][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'.
[  134.247244][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  134.386128][  T966] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  134.393141][  T966] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  134.405595][  T966] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  134.414602][  T966] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  134.422006][  T966] shield 0003:0955:7214.000A: unknown main item tag 0x0
[  134.432518][  T966] input: HID 0955:7214 Haptics as /devices/virtual/input/input14
[  134.446508][    T8] usb 1-1: Using ep0 maxpacket: 32
[  134.460723][    T8] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  134.470257][    T8] usb 1-1: config 0 has no interface number 0
[  134.477011][    T8] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  134.490928][    T8] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  134.501507][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.509985][    T8] usb 1-1: Product: syz
[  134.514893][    T8] usb 1-1: Manufacturer: syz
[  134.520832][    T8] usb 1-1: SerialNumber: syz
[  134.530478][  T966] shield 0003:0955:7214.000A: Registered Thunderstrike controller
[  134.542063][  T966] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  134.547742][    T8] usb 1-1: config 0 descriptor??
[  134.568851][    T8] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  134.580195][    T8] em28xx 1-1:0.132: Video interface 132 found:
[  134.583419][ T7546] netlink: 'syz.4.503': attribute type 2 has an invalid length.
[  134.594745][ T7546] netlink: 244 bytes leftover after parsing attributes in process `syz.4.503'.
[  134.631475][   T27] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  134.653512][  T966] usb 5-1: USB disconnect, device number 3
[  134.664716][   T27] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  134.686024][   T27] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  134.705464][   T27] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  134.859623][    T9] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  134.866220][    T9] cdc_ncm 4-1:1.0: setting tx_max = 76
[  134.879979][    T9] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  134.971339][    T8] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  135.036402][    C1] Dead loop on virtual device ipvlan1, fix it urgently!
[  135.070847][    T9] usb 4-1: USB disconnect, device number 7
[  135.091142][    T9] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  135.155284][ T7544] syz.4.503 (7544) used greatest stack depth: 14472 bytes left
[  136.156432][    T8] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  136.180513][    T8] em28xx 1-1:0.132: board has no eeprom
[  136.266153][    T8] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  136.296117][    T8] em28xx 1-1:0.132: analog set to bulk mode.
[  136.304445][ T5786] em28xx 1-1:0.132: Registering V4L2 extension
[  136.326290][    T8] usb 1-1: USB disconnect, device number 8
[  136.333129][    T8] em28xx 1-1:0.132: Disconnecting em28xx
[  136.556155][ T5786] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  136.591392][ T5786] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  136.609070][ T5786] em28xx 1-1:0.132: No AC97 audio processor
[  136.644193][ T5786] usb 1-1: Decoder not found
[  136.669554][ T5786] em28xx 1-1:0.132: failed to create media graph
[  136.692235][ T5786] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  136.724272][ T5786] em28xx 1-1:0.132: Remote control support is not available for this card.
[  136.741798][    T8] em28xx 1-1:0.132: Closing input extension
[  136.863938][    T8] em28xx 1-1:0.132: Freeing device
[  137.096703][ T5786] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.120580][ T7623] loop3: detected capacity change from 0 to 8
[  137.127909][ T7623] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  137.162840][ T5798] udevd[5798]: incorrect cramfs checksum on /dev/loop3
[  137.182950][ T7623] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  137.220701][ T5798] udevd[5798]: incorrect cramfs checksum on /dev/loop3
[  137.235208][ T7623] cramfs: bad data blocksize 4294967224
[  137.247784][ T7623] cramfs: bad data blocksize 4294967224
[  137.310459][ T5786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.330805][ T5786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  137.359111][ T5786] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  137.384443][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.409393][ T5786] usb 5-1: config 0 descriptor??
[  137.760812][ T7631] loop3: detected capacity change from 0 to 8192
[  137.812454][ T7631]  loop3: p1 p2 p4 < >
[  137.822946][ T7631] loop3: partition table partially beyond EOD, truncated
[  137.834259][ T7631] loop3: p1 start 16777216 is beyond EOD, truncated
[  137.843693][ T7631] loop3: p2 size 515840 extends beyond EOD, truncated
[  137.856211][ T7631] loop3: p4 start 16777216 is beyond EOD, truncated
[  137.862770][ T5786] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  137.900837][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  138.105934][    T8] usb 2-1: Using ep0 maxpacket: 32
[  138.118523][    T8] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  138.129309][    T8] usb 2-1: config 0 has no interface number 0
[  138.135522][    T8] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  138.168037][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  138.183828][    T8] usb 2-1: config 0 interface 85 has no altsetting 0
[  138.208104][    T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  138.227099][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.245379][    T8] usb 2-1: Product: syz
[  138.254349][    T8] usb 2-1: Manufacturer: syz
[  138.268117][    T8] usb 2-1: SerialNumber: syz
[  138.283082][    T8] usb 2-1: config 0 descriptor??
[  138.468500][ T5786] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device
[  138.488094][ T5786] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse
[  138.510978][ T5786] kovaplus: probe of 0003:1E7D:2D50.000B failed with error -71
[  138.556338][ T5786] usb 5-1: USB disconnect, device number 4
[  138.607985][ T7651] loop3: detected capacity change from 0 to 512
[  138.666575][ T7651] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.533: iget: bad i_size value: 38620345925642
[  138.706846][ T7651] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.533: couldn't read orphan inode 15 (err -117)
[  138.761553][ T7651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.884127][ T7651] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.533: bg 0: block 5: invalid block bitmap
[  138.924184][    T8] appletouch 2-1:0.85: Geyser mode initialized.
[  138.939415][    T8] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input15
[  138.945414][ T7651] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 36 with max blocks 1 with error 28
[  138.978445][ T7651] EXT4-fs (loop3): This should not happen!! Data will be lost
[  138.978445][ T7651] 
[  139.023430][ T7651] EXT4-fs (loop3): Total free blocks count 0
[  139.055887][ T7651] EXT4-fs (loop3): Free/Dirty block details
[  139.072455][ T7651] EXT4-fs (loop3): free_blocks=0
[  139.096574][ T7651] EXT4-fs (loop3): dirty_blocks=37
[  139.112710][ T7651] EXT4-fs (loop3): Block reservation details
[  139.135582][ T7651] EXT4-fs (loop3): i_reserved_data_blocks=37
[  139.166052][ T5838] usb 2-1: USB disconnect, device number 8
[  139.166059][    C0] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  139.257331][ T5838] appletouch 2-1:0.85: input: appletouch disconnected
[  139.310340][   T42] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 36 with error 28
[  139.479724][ T7668] loop3: detected capacity change from 0 to 512
[  139.531513][ T5776] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  140.368841][ T7675] loop3: detected capacity change from 0 to 40427
[  140.390478][ T7675] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  140.404402][ T7675] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  140.449769][ T7675] F2FS-fs (loop3): Found nat_bits in checkpoint
[  140.582126][ T7675] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  140.596313][ T7675] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  140.706444][ T5782] syz-executor: attempt to access beyond end of device
[  140.706444][ T5782] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  140.723169][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  140.732373][ T5782] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  140.766016][ T5786] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  140.965877][ T5786] usb 2-1: Using ep0 maxpacket: 8
[  140.979825][ T5786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.001936][ T5786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  141.025968][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  141.045181][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  141.065339][ T5786] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  141.080418][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.112330][ T5786] hub 2-1:1.0: bad descriptor, ignoring hub
[  141.137640][ T5786] hub: probe of 2-1:1.0 failed with error -5
[  141.144194][ T5786] cdc_wdm 2-1:1.0: skipping garbage
[  141.154696][ T5786] cdc_wdm 2-1:1.0: skipping garbage
[  141.187638][ T5786] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  141.193608][ T5786] cdc_wdm 2-1:1.0: Unknown control protocol
[  141.327016][ T7699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.353601][ T7699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.674060][   T50] Bluetooth: hci0: unexpected event 0x06 length: 5 > 3
[  141.834931][ T7699] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  141.861818][ T7699] usb 2-1: device reset changed ep0 maxpacket size!
[  141.895409][ T7699] cdc_wdm 2-1:1.0: Error autopm - -16
[  141.895564][ T5786] usb 2-1: USB disconnect, device number 9
[  142.000528][   T28] audit: type=1326 audit(1753780051.872:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  142.023105][   T28] audit: type=1326 audit(1753780051.872:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  142.024834][ T7732] loop4: detected capacity change from 0 to 512
[  142.045253][    C1] vkms_vblank_simulate: vblank timer overrun
[  142.045613][ T5823] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  142.068578][   T28] audit: type=1326 audit(1753780051.872:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f266dd8e9a9 code=0x7ffc0000
[  142.092642][   T28] audit: type=1326 audit(1753780051.872:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f266dd8e9e3 code=0x7ffc0000
[  142.117229][   T28] audit: type=1326 audit(1753780051.882:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f266dd8d45f code=0x7ffc0000
[  142.140196][ T5786] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  142.142052][   T28] audit: type=1326 audit(1753780051.882:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f266dd8ea37 code=0x7ffc0000
[  142.148884][ T5773] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  142.179893][   T28] audit: type=1326 audit(1753780051.892:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f266dd8d310 code=0x7ffc0000
[  142.202998][   T28] audit: type=1326 audit(1753780051.892:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f266dd8e5ab code=0x7ffc0000
[  142.226058][   T28] audit: type=1326 audit(1753780051.932:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f266dd8d60a code=0x7ffc0000
[  142.231228][ T7732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.248586][   T28] audit: type=1326 audit(1753780051.932:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7731 comm="syz.4.565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f266dd8d60a code=0x7ffc0000
[  142.282679][ T7732] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.293353][ T5823] usb 4-1: Using ep0 maxpacket: 16
[  142.302311][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.320495][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.362441][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  142.375955][ T5773] usb 1-1: Using ep0 maxpacket: 16
[  142.384283][ T5786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.385699][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.395094][ T5773] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  142.417503][ T5786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.427658][ T6328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.428568][ T5773] usb 1-1: config 0 has no interface number 0
[  142.446844][ T5823] usb 4-1: config 0 descriptor??
[  142.454255][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  142.469709][ T5786] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  142.483250][ T5786] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  142.492941][ T5773] usb 1-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  142.502541][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.534798][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.543604][ T5773] usb 1-1: Product: syz
[  142.553777][ T5773] usb 1-1: Manufacturer: syz
[  142.580013][ T5773] usb 1-1: SerialNumber: syz
[  142.598582][ T5786] cdc_wdm 2-1:1.0: skipping garbage
[  142.604192][ T5786] cdc_wdm 2-1:1.0: skipping garbage
[  142.611209][ T5773] usb 1-1: config 0 descriptor??
[  142.640546][ T5786] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  142.653443][ T5786] cdc_wdm 2-1:1.0: Unknown control protocol
[  142.756293][ T7740] loop4: detected capacity change from 0 to 4096
[  142.796137][ T5786] usb 2-1: USB disconnect, device number 10
[  142.813674][ T7740] NILFS (loop4): invalid segment: Checksum error in segment payload
[  142.829255][ T7740] NILFS (loop4): trying rollback from an earlier position
[  142.864613][ T5823] HID 045e:07da: Invalid code 65791 type 1
[  142.888774][ T7740] NILFS (loop4): recovery complete
[  142.892580][ T5823] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input16
[  142.922999][ T7741] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.968552][ T5823] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  143.703020][ T5786] usb 4-1: USB disconnect, device number 8
[  144.301849][ T7769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.577'.
[  144.495281][ T7773] loop3: detected capacity change from 0 to 1024
[  144.502064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  144.559116][ T7773] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  144.569844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  144.578531][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  144.627864][ T7773] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.578: Invalid block bitmap block 0 in block_group 0
[  144.679719][ T7773] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.578: Failed to acquire dquot type 0
[  144.692220][ T7773] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.578: Freeing blocks not in datazone - block = 0, count = 4096
[  144.714031][ T7773] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.578: Invalid inode bitmap blk 0 in block_group 0
[  144.740638][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'.
[  144.750585][ T7773] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem
[  144.755549][   T42] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0
[  144.774687][ T7773] EXT4-fs (loop3): 1 orphan inode deleted
[  144.781987][ T7773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.847249][ T7773] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  144.902798][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.910548][  T966] usb 1-1: USB disconnect, device number 9
[  145.501596][ T7792] loop3: detected capacity change from 0 to 8192
[  145.582597][ T7792] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.782201][ T7792] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  145.791599][ T7792] FAT-fs (loop3): Filesystem has been set read-only
[  145.799574][ T7792] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  145.808588][ T7792] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  145.926205][ T5786] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  146.136243][ T5786] usb 1-1: Using ep0 maxpacket: 8
[  146.200709][ T5786] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  146.230272][ T5786] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  146.243292][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.284880][ T5786] usb 1-1: Product: syz
[  146.318294][ T5786] usb 1-1: Manufacturer: syz
[  146.340781][ T5786] usb 1-1: SerialNumber: syz
[  146.359555][ T5786] usb 1-1: config 0 descriptor??
[  146.377771][ T7819] loop3: detected capacity change from 0 to 512
[  146.386438][ T5786] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  146.416019][ T5773] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  146.453983][ T7819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.498479][ T7819] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.627573][ T5773] usb 2-1: config 0 has no interfaces?
[  146.653000][ T5773] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  146.693500][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.763754][ T5773] usb 2-1: config 0 descriptor??
[  146.923263][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.040682][    T9] usb 2-1: USB disconnect, device number 11
[  147.229795][ T7824] loop4: detected capacity change from 0 to 32768
[  147.238118][ T7824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.598 (7824)
[  147.261559][ T7824] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.284602][ T7824] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  147.295096][ T7824] BTRFS info (device loop4): force clearing of disk cache
[  147.307207][ T7824] BTRFS info (device loop4): enabling auto defrag
[  147.317987][ T7824] BTRFS info (device loop4): max_inline at 0
[  147.324090][ T7824] BTRFS info (device loop4): enabling disk space caching
[  147.341837][ T7824] BTRFS info (device loop4): disk space caching is enabled
[  147.418555][ T5786] gspca_zc3xx: reg_w_i err -71
[  147.474770][ T7824] BTRFS info (device loop4): enabling ssd optimizations
[  147.514727][ T7824] BTRFS info (device loop4): rebuilding free space tree
[  147.583463][ T7824] BTRFS info (device loop4): disabling free space tree
[  147.596011][ T7824] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  147.605724][ T7824] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  147.759522][ T5795] Bluetooth: hci0: command 0x0406 tx timeout
[  147.992340][   T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  148.040325][ T6328] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.051705][ T5786] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  148.063935][ T5786] gspca_zc3xx: probe of 1-1:0.0 failed with error -71
[  148.092030][ T5786] usb 1-1: USB disconnect, device number 10
[  148.563433][ T7875] loop4: detected capacity change from 0 to 4096
[  148.629111][ T7875] NILFS (loop4): invalid segment: Checksum error in segment payload
[  148.638577][ T7875] NILFS (loop4): trying rollback from an earlier position
[  148.672531][ T7875] NILFS (loop4): recovery complete
[  148.696836][ T7882] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.833812][ T5773] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  149.036017][ T5773] usb 1-1: Using ep0 maxpacket: 8
[  149.047888][ T5773] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.071720][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.092060][ T5773] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.111544][ T5773] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.136020][ T5773] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  149.145322][ T5773] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.393244][ T5773] usb 1-1: GET_CAPABILITIES returned 0
[  149.416254][ T5773] usbtmc 1-1:16.0: can't read capabilities
[  149.464723][ T7903] netlink: 165 bytes leftover after parsing attributes in process `syz.3.620'.
[  149.601706][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  149.614113][ T5773] usb 1-1: USB disconnect, device number 11
[  150.198319][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.436461][    T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  150.445556][    T9] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  150.490350][    T9] usb 5-1: Product: syz
[  150.494586][    T9] usb 5-1: Manufacturer: syz
[  150.507057][    T9] usb 5-1: SerialNumber: syz
[  150.517772][    T9] usb 5-1: config 0 descriptor??
[  150.712126][   T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.744421][    T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  150.758729][   T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.770007][    T9] asix: probe of 5-1:0.0 failed with error -61
[  150.888841][   T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  150.907012][   T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.030877][   T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.052926][   T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.167906][   T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.182989][   T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.222516][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  151.234936][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  151.243941][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  151.257178][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  151.265636][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  151.273361][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  151.304783][ T7943] loop4: detected capacity change from 0 to 1024
[  151.341473][ T7943] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  151.353170][ T7943] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  151.374254][ T7941] lo speed is unknown, defaulting to 1000
[  151.377027][ T7943] JBD2: no valid journal superblock found
[  151.387393][ T7943] EXT4-fs (loop4): Could not load journal inode
[  151.547994][ T7941] chnl_net:caif_netlink_parms(): no params data found
[  151.651095][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.658589][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.667603][ T7941] bridge_slave_0: entered allmulticast mode
[  151.681884][ T7941] bridge_slave_0: entered promiscuous mode
[  151.690108][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.700883][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.708476][ T7941] bridge_slave_1: entered allmulticast mode
[  151.715226][ T7941] bridge_slave_1: entered promiscuous mode
[  151.726442][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'.
[  151.746881][ T7952] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  151.756107][ T7952] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  151.764887][ T7952] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  151.773671][ T7952] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  151.785086][ T7952] vxlan0: entered promiscuous mode
[  151.823711][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.846805][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.930690][ T7955] loop3: detected capacity change from 0 to 512
[  151.935985][ T7941] team0: Port device team_slave_0 added
[  151.944876][ T7955] EXT4-fs: Ignoring removed bh option
[  151.949134][ T7941] team0: Port device team_slave_1 added
[  151.966902][ T7955] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  152.008757][ T7955] EXT4-fs (loop3): 1 truncate cleaned up
[  152.025031][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.027751][ T7955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.033588][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.089225][ T7941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.119449][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.130409][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.158817][ T7941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.222310][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.260497][ T7941] hsr_slave_0: entered promiscuous mode
[  152.282282][ T7941] hsr_slave_1: entered promiscuous mode
[  152.299591][ T7941] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.319889][ T7941] Cannot create hsr debugfs directory
[  152.464396][ T7941] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  152.475642][ T7941] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  152.489604][ T7941] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  152.501062][ T7941] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  152.576351][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  152.656921][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0
[  152.699851][ T7941] 8021q: adding VLAN 0 to HW filter on device team0
[  152.711747][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.718958][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  152.763395][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.771869][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  152.789215][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.816260][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  152.843432][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  152.855560][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  152.887248][    T9] usb 4-1: SerialNumber: syz
[  153.010719][ T5786] usb 5-1: USB disconnect, device number 5
[  153.122989][    T9] usb 4-1: 0:2 : does not exist
[  153.155743][ T7974] netlink: 'syz.1.645': attribute type 3 has an invalid length.
[  153.176570][    T9] usb 4-1: unit 252 not found!
[  153.276311][    T9] usb 4-1: USB disconnect, device number 9
[  153.325427][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.382113][ T5795] Bluetooth: hci3: command tx timeout
[  153.721262][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.209276][ T8012] tipc: Started in network mode
[  154.214470][ T8012] tipc: Node identity 7f000001, cluster identity 4711
[  154.261609][ T8012] tipc: Enabled bearer <udp:syz2>, priority 10
[  154.538914][ T8020] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  154.748684][ T8003] loop3: detected capacity change from 0 to 32768
[  154.805187][ T8003] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  154.911131][ T7941] veth0_vlan: entered promiscuous mode
[  154.930842][ T8003] XFS (loop3): Ending clean mount
[  154.962808][ T3485] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  154.989377][ T8003] XFS (loop3): Quotacheck needed: Please wait.
[  155.021822][ T7941] veth1_vlan: entered promiscuous mode
[  155.157935][ T8003] XFS (loop3): Quotacheck: Done.
[  155.275786][   T28] kauditd_printk_skb: 24 callbacks suppressed
[  155.296457][   T28] audit: type=1804 audit(1753780066.139:75): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.650" name="/newroot/179/bus/file1" dev="loop3" ino=1062 res=1 errno=0
[  155.342474][   T42] hsr_slave_0: left promiscuous mode
[  155.358229][   T42] hsr_slave_1: left promiscuous mode
[  155.379604][   T27] tipc: Node number set to 2130706433
[  155.397618][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.406497][ T5782] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  155.436310][ T5795] Bluetooth: hci3: command tx timeout
[  155.446021][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.477325][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.484809][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.537344][   T42] bridge_slave_1: left allmulticast mode
[  155.543039][   T42] bridge_slave_1: left promiscuous mode
[  155.551585][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.577192][   T42] bridge_slave_0: left allmulticast mode
[  155.582895][   T42] bridge_slave_0: left promiscuous mode
[  155.618736][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.824991][ T8064] vxcan0: tx drop: invalid da for name 0x0000000000000003
[  155.896983][   T42] veth1_macvtap: left promiscuous mode
[  155.902584][   T42] veth0_macvtap: left promiscuous mode
[  155.927236][   T42] veth1_vlan: left promiscuous mode
[  155.956417][   T42] veth0_vlan: left promiscuous mode
[  157.015300][   T42] team0 (unregistering): Port device team_slave_1 removed
[  157.073811][   T42] team0 (unregistering): Port device team_slave_0 removed
[  157.076058][  T966] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  157.131965][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.188715][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.276065][  T966] usb 2-1: Using ep0 maxpacket: 16
[  157.284654][  T966] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.298305][  T966] usb 2-1: config 0 interface 0 has no altsetting 0
[  157.305018][  T966] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  157.314408][  T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.329152][  T966] usb 2-1: config 0 descriptor??
[  157.516061][ T5795] Bluetooth: hci3: command tx timeout
[  157.645682][   T42] team0 (unregistering): Port device bond0 removed
[  157.795372][  T966] corsair 0003:1B1C:1B34.000D: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.1-1/input0
[  157.888269][   T42] bond0 (unregistering): Released all slaves
[  157.954168][    T9] usb 2-1: USB disconnect, device number 12
[  158.061246][ T7941] veth0_macvtap: entered promiscuous mode
[  158.089431][ T7941] veth1_macvtap: entered promiscuous mode
[  158.135250][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.196494][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.225915][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.263437][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.277299][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  158.298603][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.363067][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.397378][ T8089] nbd3: detected capacity change from 0 to 4294967296
[  158.408792][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.416771][ T8091] block nbd3: shutting down sockets
[  158.429745][   T54] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.435972][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.440942][   T54] Buffer I/O error on dev nbd3, logical block 0, async page read
[  158.472482][ T5776] ldm_validate_partition_table(): Disk read failed.
[  158.489928][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.522704][ T5776] Dev nbd3: unable to read RDB block 0
[  158.565918][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.578242][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  158.589273][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  158.613245][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.633415][ T5776]  nbd3: unable to read partition table
[  158.656233][ T5776] nbd3: partition table beyond EOD, truncated
[  158.659520][ T7941] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.691822][ T7941] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.711583][ T7941] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.732704][ T7941] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.213966][ T8108] loop4: detected capacity change from 0 to 2048
[  159.215631][ T8111] loop3: detected capacity change from 0 to 1024
[  159.260884][   T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.299134][   T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.327830][ T8111] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.382398][ T8108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.480639][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.535858][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.596030][ T5795] Bluetooth: hci3: command tx timeout
[  159.625998][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  160.215901][ T1188] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  160.316150][ T5786] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  160.428915][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.446730][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.461262][ T1188] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.477419][ T1188] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.487363][ T8133] loop5: detected capacity change from 0 to 32768
[  160.492431][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.516087][ T5786] usb 5-1: Using ep0 maxpacket: 32
[  160.525315][ T5786] usb 5-1: too many configurations: 29, using maximum allowed: 8
[  160.540439][ T5786] usb 5-1: config 0 has no interfaces?
[  160.555006][ T1188] usb 2-1: config 0 descriptor??
[  160.562132][ T5786] usb 5-1: config 0 has no interfaces?
[  160.569478][ T5786] usb 5-1: config 0 has no interfaces?
[  160.585702][ T5786] usb 5-1: config 0 has no interfaces?
[  160.601044][ T5786] usb 5-1: config 0 has no interfaces?
[  160.615224][ T5786] usb 5-1: config 0 has no interfaces?
[  160.630836][ T5786] usb 5-1: config 0 has no interfaces?
[  160.641648][ T5786] usb 5-1: config 0 has no interfaces?
[  160.660038][ T5786] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[  160.675396][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.695178][ T5786] usb 5-1: Product: syz
[  160.737188][ T5786] usb 5-1: Manufacturer: syz
[  160.765595][ T5786] usb 5-1: SerialNumber: syz
[  160.807631][ T5786] usb 5-1: config 0 descriptor??
[  160.957816][ T8162] loop3: detected capacity change from 0 to 512
[  160.979579][ T1188] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  160.988814][ T1188] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  160.999483][ T1188] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  161.008413][ T1188] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  161.034859][ T1188] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  161.043513][ T1188] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0
[  161.052277][ T1188] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  161.075717][ T1188] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  161.114298][ T8162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.188096][ T8162] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.384032][ T8162] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  161.513694][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.533664][ T5786] usb 5-1: USB disconnect, device number 6
[  161.801342][ T8176] loop3: detected capacity change from 0 to 2048
[  161.833118][ T8176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.559824][ T3485] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  162.658973][ T8208] loop5: detected capacity change from 0 to 512
[  163.041034][ T8119] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  163.119735][ T8208] EXT4-fs (loop5): Test dummy encryption mode enabled
[  163.131198][ T8208] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  163.185898][ T1188] usb 2-1: USB disconnect, device number 13
[  163.190667][ T8208] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.693: bad orphan inode 131083
[  163.255418][ T8208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.370543][ T8208] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  163.523344][ T7941] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.832611][ T8250] lo speed is unknown, defaulting to 1000
[  163.870258][ T8220] loop3: detected capacity change from 0 to 32768
[  163.911182][ T8220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.696 (8220)
[  163.965894][ T8220] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.000897][ T8220] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  164.027395][ T8220] BTRFS info (device loop3): using free space tree
[  164.214220][ T8220] BTRFS info (device loop3): enabling ssd optimizations
[  164.256137][ T8220] BTRFS info (device loop3): auto enabling async discard
[  164.684237][ T5782] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.767698][ T8288] binder: BINDER_SET_CONTEXT_MGR already set
[  164.798281][ T8288] binder: 8287:8288 ioctl 4018620d 200000000040 returned -16
[  165.459654][ T8304] bond0: entered promiscuous mode
[  165.501219][ T8304] bond_slave_0: entered promiscuous mode
[  165.519844][ T8304] bond_slave_1: entered promiscuous mode
[  165.734367][ T8314] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0
[  166.713367][ T8336] loop3: detected capacity change from 0 to 1024
[  166.779402][ T8336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.205563][ T5782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.620332][ T8370] xt_hashlimit: max too large, truncated to 1048576
[  168.485822][    C0] sched: RT throttling activated
[  168.897990][ T8388] loop5: detected capacity change from 0 to 256
[  168.982546][ T8388] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.075858][ T8388] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  169.129761][ T8388] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  169.756180][ T5786] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  169.956076][ T1188] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  169.971757][ T5786] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  169.983365][ T5786] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  169.993510][ T5786] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  170.002896][ T5786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.017058][ T8395] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  170.031453][ T5786] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  170.154584][ T1188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.173843][ T1188] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.184002][ T1188] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  170.198718][ T1188] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.208963][ T1188] usb 6-1: config 0 descriptor??
[  170.241258][ T5786] usb 2-1: USB disconnect, device number 14
[  170.652518][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  170.656974][ T8402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.691105][ T8402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.713016][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'.
[  170.733043][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.747'.
[  170.762794][ T1188] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0
[  170.770334][ T1188] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0
[  170.780521][ T1188] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.000F/input/input17
[  170.810822][ T1188] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  171.017448][ T5786] usb 6-1: USB disconnect, device number 2
[  171.250682][ T8431] pimreg3: entered allmulticast mode
[  171.539832][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'.
[  171.549457][ T8443] netlink: 'syz.3.757': attribute type 1 has an invalid length.
[  171.560766][ T8443] netlink: 'syz.3.757': attribute type 2 has an invalid length.
[  171.661342][ T8447] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  171.756233][ T1188] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  171.835202][ T8453] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  171.946924][ T1188] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  171.966247][ T1188] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204
[  171.975372][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.987019][ T8456] loop5: detected capacity change from 0 to 1024
[  172.004049][ T1188] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  172.023244][ T1188] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  172.049508][ T8458] smc: net device bond0 applied user defined pnetid SYZ2
[  172.061723][ T1188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.093997][ T8458] smc: net device bond0 erased user defined pnetid SYZ2
[  172.097923][ T1188] usb 5-1: config 0 descriptor??
[  172.374798][ T1124] hfsplus: b-tree write err: -5, ino 4
[  172.569551][ T1188] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.0010/input/input18
[  172.620395][ T1188] uclogic 0003:28BD:0909.0010: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0
[  172.824651][  T966] usb 5-1: USB disconnect, device number 7
[  172.865908][ T5786] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  173.077961][ T5786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.125609][ T5786] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  173.140958][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.181411][ T5786] usb 4-1: config 0 descriptor??
[  173.204241][ T1124] wlan1: Trigger new scan to find an IBSS to join
[  173.212686][ T8499] loop5: detected capacity change from 0 to 256
[  173.282272][   T78] ------------[ cut here ]------------
[  173.288207][   T78] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40
[  173.299362][   T78] WARNING: CPU: 0 PID: 78 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  173.309284][   T78] Modules linked in:
[  173.313218][   T78] CPU: 0 PID: 78 Comm: kworker/u4:5 Not tainted 6.6.100-syzkaller #0
[  173.321352][   T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.331471][   T78] Workqueue: events_unbound cfg80211_wiphy_work
[  173.337831][   T78] RIP: 0010:__rate_control_send_low+0x635/0x880
[  173.344115][   T78] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 7b be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 5b ef 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  173.363805][   T78] RSP: 0018:ffffc900015d7380 EFLAGS: 00010246
[  173.369935][   T78] RAX: d81c2a5cd70ffb00 RBX: 000000000000000c RCX: ffff888017940000
[  173.378077][   T78] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  173.386105][   T78] RBP: 0000000000000084 R08: ffffc900015d6f87 R09: 1ffff920002badf0
[  173.394145][   T78] R10: dffffc0000000000 R11: fffff520002badf1 R12: 0000000000000040
[  173.402212][   T78] R13: dffffc0000000000 R14: ffff88805dad3358 R15: ffff88807e6a1028
[  173.410248][   T78] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  173.419258][   T78] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.425900][   T78] CR2: 00007ffe3bc68f98 CR3: 00000000776b1000 CR4: 00000000003506f0
[  173.433906][   T78] Call Trace:
[  173.437260][   T78]  <TASK>
[  173.440242][   T78]  rate_control_send_low+0x194/0x790
[  173.445650][   T78]  rate_control_get_rate+0x20b/0x5c0
[  173.451028][   T78]  ieee80211_tx_h_rate_ctrl+0xb2d/0x1770
[  173.456745][   T78]  ? ieee80211_tx_h_select_key+0x18f0/0x18f0
[  173.462759][   T78]  ? __lock_acquire+0x1260/0x7c80
[  173.467870][   T78]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  173.473999][   T78]  invoke_tx_handlers_late+0xb6/0x1810
[  173.479553][   T78]  ? ieee80211_tx_h_select_key+0x13cc/0x18f0
[  173.485583][   T78]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  173.491487][   T78]  ieee80211_tx+0x2ad/0x420
[  173.496071][   T78]  ? ieee80211_skb_resize+0x630/0x630
[  173.501499][   T78]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  173.507045][   T78]  ? __bpf_trace_tasklet+0x140/0x140
[  173.512367][   T78]  ? ieee80211_xmit+0x310/0x3f0
[  173.517312][   T78]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  173.523335][   T78]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  173.529573][   T78]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  173.535962][   T78]  ieee80211_scan_state_send_probe+0x560/0x930
[  173.542178][   T78]  ieee80211_scan_work+0x4e8/0x1c30
[  173.547594][   T78]  cfg80211_wiphy_work+0x225/0x260
[  173.552749][   T78]  ? process_scheduled_works+0x957/0x15b0
[  173.558551][   T78]  process_scheduled_works+0xa45/0x15b0
[  173.564169][   T78]  ? assign_work+0x400/0x400
[  173.568854][   T78]  ? assign_work+0x39e/0x400
[  173.573567][   T78]  worker_thread+0xa55/0xfc0
[  173.578563][   T78]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  173.584521][   T78]  kthread+0x2fa/0x390
[  173.588666][   T78]  ? pr_cont_work+0x560/0x560
[  173.593378][   T78]  ? kthread_blkcg+0xd0/0xd0
[  173.598051][   T78]  ret_from_fork+0x48/0x80
[  173.602494][   T78]  ? kthread_blkcg+0xd0/0xd0
[  173.607246][   T78]  ret_from_fork_asm+0x11/0x20
[  173.612083][   T78]  </TASK>
[  173.615128][   T78] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  173.622516][   T78] CPU: 0 PID: 78 Comm: kworker/u4:5 Not tainted 6.6.100-syzkaller #0
[  173.630600][   T78] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.640674][   T78] Workqueue: events_unbound cfg80211_wiphy_work
[  173.646953][   T78] Call Trace:
[  173.650246][   T78]  <TASK>
[  173.653189][   T78]  dump_stack_lvl+0x16c/0x230
[  173.657894][   T78]  ? show_regs_print_info+0x20/0x20
[  173.663120][   T78]  ? load_image+0x3b0/0x3b0
[  173.667660][   T78]  panic+0x2c0/0x710
[  173.671594][   T78]  ? bpf_jit_dump+0xd0/0xd0
[  173.676137][   T78]  ? ret_from_fork_asm+0x11/0x20
[  173.681096][   T78]  __warn+0x2e0/0x470
[  173.685093][   T78]  ? __rate_control_send_low+0x635/0x880
[  173.690815][   T78]  ? __rate_control_send_low+0x635/0x880
[  173.696448][   T78]  report_bug+0x2be/0x4f0
[  173.700774][   T78]  ? __rate_control_send_low+0x635/0x880
[  173.706409][   T78]  ? __rate_control_send_low+0x635/0x880
[  173.712038][   T78]  ? __rate_control_send_low+0x637/0x880
[  173.717666][   T78]  handle_bug+0xcf/0x120
[  173.721909][   T78]  exc_invalid_op+0x1a/0x50
[  173.726406][   T78]  asm_exc_invalid_op+0x1a/0x20
[  173.731258][   T78] RIP: 0010:__rate_control_send_low+0x635/0x880
[  173.737503][   T78] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 60 7b be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 5b ef 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  173.757114][   T78] RSP: 0018:ffffc900015d7380 EFLAGS: 00010246
[  173.763180][   T78] RAX: d81c2a5cd70ffb00 RBX: 000000000000000c RCX: ffff888017940000
[  173.771153][   T78] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  173.779125][   T78] RBP: 0000000000000084 R08: ffffc900015d6f87 R09: 1ffff920002badf0
[  173.787096][   T78] R10: dffffc0000000000 R11: fffff520002badf1 R12: 0000000000000040
[  173.795068][   T78] R13: dffffc0000000000 R14: ffff88805dad3358 R15: ffff88807e6a1028
[  173.803069][   T78]  rate_control_send_low+0x194/0x790
[  173.808362][   T78]  rate_control_get_rate+0x20b/0x5c0
[  173.813651][   T78]  ieee80211_tx_h_rate_ctrl+0xb2d/0x1770
[  173.819297][   T78]  ? ieee80211_tx_h_select_key+0x18f0/0x18f0
[  173.825276][   T78]  ? __lock_acquire+0x1260/0x7c80
[  173.830310][   T78]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  173.836401][   T78]  invoke_tx_handlers_late+0xb6/0x1810
[  173.841859][   T78]  ? ieee80211_tx_h_select_key+0x13cc/0x18f0
[  173.847842][   T78]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  173.853653][   T78]  ieee80211_tx+0x2ad/0x420
[  173.858161][   T78]  ? ieee80211_skb_resize+0x630/0x630
[  173.863546][   T78]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  173.869043][   T78]  ? __bpf_trace_tasklet+0x140/0x140
[  173.874326][   T78]  ? ieee80211_xmit+0x310/0x3f0
[  173.879182][   T78]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  173.885162][   T78]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  173.890978][   T78]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  173.897297][   T78]  ieee80211_scan_state_send_probe+0x560/0x930
[  173.903461][   T78]  ieee80211_scan_work+0x4e8/0x1c30
[  173.908679][   T78]  cfg80211_wiphy_work+0x225/0x260
[  173.913819][   T78]  ? process_scheduled_works+0x957/0x15b0
[  173.919545][   T78]  process_scheduled_works+0xa45/0x15b0
[  173.925123][   T78]  ? assign_work+0x400/0x400
[  173.929711][   T78]  ? assign_work+0x39e/0x400
[  173.934299][   T78]  worker_thread+0xa55/0xfc0
[  173.938887][   T78]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  173.944799][   T78]  kthread+0x2fa/0x390
[  173.948948][   T78]  ? pr_cont_work+0x560/0x560
[  173.953621][   T78]  ? kthread_blkcg+0xd0/0xd0
[  173.958216][   T78]  ret_from_fork+0x48/0x80
[  173.962631][   T78]  ? kthread_blkcg+0xd0/0xd0
[  173.967213][   T78]  ret_from_fork_asm+0x11/0x20
[  173.971986][   T78]  </TASK>
[  173.975231][   T78] Kernel Offset: disabled
[  173.979649][   T78] Rebooting in 86400 seconds..