last executing test programs:

19m35.756368068s ago: executing program 32 (id=235):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1})

19m26.373167047s ago: executing program 33 (id=260):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000100)=0xb)
syz_open_dev$vcsu(0x0, 0x122, 0x40)

18m47.551033669s ago: executing program 34 (id=343):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b)

16m25.074686845s ago: executing program 35 (id=803):
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

11m36.817308989s ago: executing program 36 (id=1878):
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004040)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065"], 0x15)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)

10m30.377758958s ago: executing program 37 (id=2048):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41100}, 0x94)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20880, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x7, 0x5, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

9m25.308064128s ago: executing program 38 (id=2179):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
r1 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(r1, 0x0)
read(r0, &(0x7f0000000000)=""/43, 0x2b)

8m53.391398378s ago: executing program 39 (id=2247):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000001a95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

7m2.548465635s ago: executing program 40 (id=2537):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
read$FUSE(r0, &(0x7f0000002700)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000002680)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000026c0), 0x2, &(0x7f0000004740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125)
preadv(r1, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/229, 0xe5}], 0x1, 0x3, 0x0)

6m58.138456835s ago: executing program 41 (id=2545):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r1, &(0x7f00000011c0)='./file0\x00', 0x0)

6m24.082209607s ago: executing program 42 (id=2617):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0)

4m32.350301169s ago: executing program 43 (id=2947):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = socket$inet6(0xa, 0x802, 0x88)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4)

3m53.789374195s ago: executing program 44 (id=3057):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x4000}, 0x4004000)

3m53.586633203s ago: executing program 1 (id=3062):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x24, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf0ae90057bd21762ae3fe8892b69c17f3f453", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

3m52.940965452s ago: executing program 1 (id=3064):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20040800)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x10)
writev(r0, &(0x7f0000000040), 0x2)
close(r0)

3m52.010941434s ago: executing program 1 (id=3067):
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

3m51.081063821s ago: executing program 1 (id=3068):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001500)=ANY=[@ANYBLOB='iocharset=iso8859-9,fmask=00000000000000000000240,errors=remount-ro,discard,fmask=00000000000000000000005,dmask=00000000000000000000002,dmask=00000000000000000000010,dmask=00000000000000000000001,errors=continue,utf8,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x152f, &(0x7f00000037c0)="$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")
creat(&(0x7f0000000200)='./bus\x00', 0x268)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100)
preadv2(r0, &(0x7f0000003780)=[{&(0x7f0000003800)=""/158, 0x9e}], 0x1, 0x0, 0x0, 0xf)

3m49.700637859s ago: executing program 1 (id=3071):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000007c0)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x30044000)

3m47.286663248s ago: executing program 1 (id=3076):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=<r2=>r0], 0x38}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0xc80)

3m44.57854242s ago: executing program 45 (id=3076):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=<r2=>r0], 0x38}}, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8)
open_by_handle_at(r3, &(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0xc80)

3m40.328957878s ago: executing program 3 (id=3094):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0})

3m39.532983233s ago: executing program 3 (id=3096):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3000c014}, 0x200000d0)

3m38.722158625s ago: executing program 3 (id=3098):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x6743, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000540)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0xa2, 0x40012162, 0x0)

3m37.832931214s ago: executing program 3 (id=3101):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1, 0x2})
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)

3m36.888178586s ago: executing program 3 (id=3104):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noquota}]}, 0x1, 0x440, &(0x7f0000000780)="$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")

3m35.767139407s ago: executing program 3 (id=3108):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0], &(0x7f0000000000), 0x3, r1, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x4, r2, r1, 0xeeeeeeee})

3m20.483760117s ago: executing program 46 (id=3108):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, <r2=>0x0], &(0x7f0000000000), 0x3, r1, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000000)={0x4, r2, r1, 0xeeeeeeee})

2m24.607289367s ago: executing program 2 (id=3288):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @loopback, 0xffff}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xfffffffb, @loopback, 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)='+', 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x7f, 0x2, 0x0, 0x26, 0xe3, 0x9, 0x7, 0x1, 0xdb, 0x0, 0xfd, 0x6, 0x9}, 0xe)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

2m23.433048174s ago: executing program 2 (id=3291):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
r0 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2})

2m22.120174044s ago: executing program 2 (id=3295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)
renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2)

2m21.373438407s ago: executing program 2 (id=3299):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x0, 0x1201, &(0x7f0000003680)="$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")
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

2m19.178162008s ago: executing program 2 (id=3305):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, '\x00\x00M'}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)

2m18.290461652s ago: executing program 2 (id=3309):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

2m14.671964723s ago: executing program 47 (id=3309):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

1m40.781944327s ago: executing program 8 (id=3395):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x2, 0x1, 0x5, "8be0"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_4={0x3, 0x2, 0x1, '41%4'}, @global=@item_012={0x1, 0x1, 0x1, "84"}]}}, 0x0}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000080)={0x1, 0x200, 0x5, 0xfffffff3, 0x0, 0x62d4f3, 0x8, 0x4, 0x8, 0x32, 0xffff, 0xd54, 0x1, 0x2})

1m37.458016157s ago: executing program 8 (id=3400):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0)

1m36.161651547s ago: executing program 8 (id=3402):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES8], 0x1, 0xc5a, &(0x7f0000001040)="$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")
syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0016150b3f000000000000f0d4354b5a255ada7999001fc8f9e982365349739b3c7c9b5e8deb88405cc272b3be8ccfb503a2273297f601e86c6be6fb632414e1d0e9b21ce82dbf007799fe5492a936da23ab3b6539199a736055c647615f7cac5c45e94860a05844b846a6f8254252a17f35c8f5355bfdd3f62dd2f30f129a"], 0xff, 0x521, &(0x7f00000013c0)="$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")
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

1m33.704050889s ago: executing program 8 (id=3405):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
read$FUSE(r0, 0x0, 0x0)

1m31.50281618s ago: executing program 8 (id=3408):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})

1m30.079252365s ago: executing program 8 (id=3414):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020)

1m26.496708667s ago: executing program 48 (id=3414):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000028c0)={0x2020}, 0x2020)

1m11.52895666s ago: executing program 4 (id=3463):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f00000000c0)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$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")
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0xe4)
truncate(&(0x7f0000000000)='./file1\x00', 0xf0ffff)
write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x5, 0x40, 0x8}}, 0x28)
truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc)

1m9.124010063s ago: executing program 4 (id=3470):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
writev(r0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)="dc03c5", 0x3}], 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40)

1m7.908555925s ago: executing program 4 (id=3473):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1m6.189128806s ago: executing program 4 (id=3477):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32)
read$FUSE(r0, 0x0, 0x0)

1m4.035433956s ago: executing program 4 (id=3480):
r0 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x2d)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xffffffffffffffff)

1m3.29620213s ago: executing program 4 (id=3491):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x4, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040094)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000802)

1m0.120383186s ago: executing program 49 (id=3491):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x4, 0x25dfdbff, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x4}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040094)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc000802)

15.837295396s ago: executing program 9 (id=3594):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

15.749231042s ago: executing program 5 (id=3596):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='PU', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb", 0x1}, {0x0}], 0x2}}], 0x2, 0x20004810)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xfdef)

14.567629557s ago: executing program 9 (id=3601):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x4000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x728, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000300)=0x2, 0x54)
sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="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", 0x861}], 0x1}}], 0x1, 0x24000015)

14.546414414s ago: executing program 5 (id=3602):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x8}}, 0x20)

13.488149557s ago: executing program 9 (id=3604):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
syz_io_uring_complete(r0)
syz_io_uring_setup(0x2b26, &(0x7f0000000040)={0x0, 0xa294, 0x8, 0x0, 0x1be}, &(0x7f0000ffd000), 0x0)

12.561055789s ago: executing program 5 (id=3607):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r0, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0)

12.220854069s ago: executing program 0 (id=3608):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
creat(&(0x7f0000000000)='./file0/file0\x00', 0xce)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

11.7469394s ago: executing program 9 (id=3609):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f00006e5000/0x3000)=nil, &(0x7f0000572000/0x1000)=nil, 0x3000, 0x1})

10.136753235s ago: executing program 9 (id=3613):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x40000000}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="ec", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)

10.055951169s ago: executing program 0 (id=3614):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
syz_clone3(&(0x7f0000000540)={0x146100180, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)

9.521649721s ago: executing program 5 (id=3616):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1})
fcntl$lock(r1, 0x26, &(0x7f0000000080))
close_range(r0, 0xffffffffffffffff, 0x0)

9.258589023s ago: executing program 9 (id=3618):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x200408, &(0x7f0000000ac0)=ANY=[], 0x1, 0x1d3, &(0x7f0000000580)="$eJzs3cFqE1EUBuAzsTapIHYniOCAG1dBfYKKRBAHRCULXSm0bhoRks3oxvoWPqAPIF11IyNmxsaWZGxjzJj0+zb5yTmTey+ESTY5eX3z3f7u+9Hbr9e/RKeTRGsnduIoie1oxS8HAQCsk6OiiG9FsdH0PgCA5ak+/8dmtHyvu94XBwBYPS9evnryIMt6z9O0E3F4kPfzfvlY1h89znp307HtyVWHed6/dFy/V9bTk/XLcSUitiLr3Z9a34w7t8fXf/5Ze/g0O1Vvx+6/Pz4AAAAAAAAAAAAAAAAAAAAAADSimx6bOt+n251VL9Nv84FOze/ZiBuGAwIAAAAAAAAAAAAAAAAAAMCZjD583H8zGOwNJ6EdESefmS8U12YuMS2kEfH3i543tGJ5a61aSP6PbZwzRDV1oqbn1mLe4c+u/qkn5nvlzYio79mqP+AiwuQe0W7m1gQAAAAAAAAAAAAAAAAAABdO9VvfZDhqeicAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Jzy//8He8N5wqeIOENztVTS8FEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYYz8CAAD//x8yIRo=")
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x145042, 0x2ba)
sendfile(r1, r1, 0x0, 0xe3aa6ea)

8.357961878s ago: executing program 5 (id=3620):
r0 = socket(0x2, 0x80805, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

7.141995025s ago: executing program 5 (id=3624):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

5.826311624s ago: executing program 7 (id=3626):
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

4.954677764s ago: executing program 6 (id=3627):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = socket(0x2, 0x2, 0x1)
bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10)

4.302692837s ago: executing program 7 (id=3628):
write(0xffffffffffffffff, &(0x7f0000000440)="96", 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0})
statx(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', 0x0, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.165226649s ago: executing program 6 (id=3629):
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
open_by_handle_at(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r', @ANYRES64=r0, @ANYRES32=r2], 0x0)

3.609934587s ago: executing program 0 (id=3630):
io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x6}])
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f0000001b00)=[{&(0x7f00000004c0)="ff", 0x1}, {0x0}], 0x2}}], 0x1, 0x881)

2.861601571s ago: executing program 6 (id=3631):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r0, 0x204)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

2.820941085s ago: executing program 7 (id=3632):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x9, 0x5, [0x2, 0x9, 0x2, 0x8, 0x5]}, 0x12)

2.81720779s ago: executing program 0 (id=3633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', 0x0, 0x0)

2.050474252s ago: executing program 6 (id=3634):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28)

1.875483745s ago: executing program 0 (id=3635):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.701017442s ago: executing program 7 (id=3636):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000cc0)="e1", 0x1}], 0x1)
r1 = syz_io_uring_setup(0x233, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

1.175079901s ago: executing program 6 (id=3637):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x39071, 0xffffffffffffffff, 0xa807000)
mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)

909.250477ms ago: executing program 7 (id=3638):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)

796.775776ms ago: executing program 0 (id=3639):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x208010, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file1\x00', 0x8800d0, 0x0, 0x0, 0x0, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], &(0x7f0000000000), 0x0)
symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00')
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x264f03)

274.888911ms ago: executing program 6 (id=3640):
prlimit64(0x0, 0xe, 0x0, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023892)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

0s ago: executing program 7 (id=3641):
r0 = socket(0x1d, 0x2, 0x6)
socket$packet(0x11, 0xa, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000001340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)='^', 0x1}], 0x1}, 0x40000c0)

kernel console output (not intermixed with test programs):

111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 16:17:47:18:ac:ab
[ 1184.113059][    T9] usb 2-1: USB disconnect, device number 11
[ 1184.176786][    T9] aqc111 2-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1184.537006][    T9] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1184.625180][    T9] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1184.728904][    T9] aqc111 2-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1186.646185][T15252] vcan0: tx address claim with different name
[ 1187.140921][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1188.182953][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1188.267015][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.383527][ T6479] tipc: Subscription rejected, illegal request
[ 1188.559228][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1188.612968][T15276] loop4: detected capacity change from 0 to 512
[ 1188.616915][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.694983][T15276] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1188.737135][T15276] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 1188.799745][T15276] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[ 1188.838537][T15276] System zones: 0-2, 18-18, 34-35
[ 1188.968514][T15276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1189.039426][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1189.116678][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.214058][T15276] fscrypt (loop4, inode 12): Error -61 getting encryption context
[ 1189.356836][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1189.405651][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.729779][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1190.320222][   T12] bridge_slave_1: left allmulticast mode
[ 1190.326127][   T12] bridge_slave_1: left promiscuous mode
[ 1190.337317][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1190.454032][   T12] bridge_slave_0: left allmulticast mode
[ 1190.467125][   T12] bridge_slave_0: left promiscuous mode
[ 1190.473844][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1191.592559][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1191.649705][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1191.716915][   T12] bond0 (unregistering): Released all slaves
[ 1192.855898][T15303] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[ 1192.937429][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1192.988350][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1192.999324][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1193.027169][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1193.050459][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1194.155397][   T12] hsr_slave_0: left promiscuous mode
[ 1194.210300][   T12] hsr_slave_1: left promiscuous mode
[ 1194.264076][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1194.383902][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1194.455614][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1194.480131][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1194.671238][   T12] veth1_macvtap: left promiscuous mode
[ 1194.709516][   T12] veth0_macvtap: left promiscuous mode
[ 1194.715488][   T12] veth0_vlan: left promiscuous mode
[ 1195.107318][T12594] Bluetooth: hci0: command tx timeout
[ 1195.393047][T15331] loop2: detected capacity change from 0 to 128
[ 1195.530751][T15331] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1195.656995][T15331] hpfs: filesystem error: improperly stopped
[ 1195.665247][T15331] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1195.896532][T15331] hpfs: You really don't want any checks? You are crazy...
[ 1195.956974][T15331] hpfs: hpfs_map_sector(): read error
[ 1195.962575][T15331] hpfs: code page support is disabled
[ 1196.077697][T15331] hpfs: hpfs_map_4sectors(): unaligned read
[ 1196.084060][T15331] hpfs: hpfs_map_4sectors(): unaligned read
[ 1196.206653][T15331] hpfs: filesystem error: unable to find root dir
[ 1196.462493][T15331] hpfs: hpfs_map_4sectors(): unaligned read
[ 1196.529710][T15331] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[ 1197.192084][T12594] Bluetooth: hci0: command tx timeout
[ 1197.278908][   T12] team0 (unregistering): Port device team_slave_1 removed
[ 1197.538556][   T12] team0 (unregistering): Port device team_slave_0 removed
[ 1198.256049][T15359] loop5: detected capacity change from 0 to 128
[ 1199.070065][T15366] skbuff: bad partial csum: csum=65506/2 headroom=168 headlen=65526
[ 1199.272174][T12594] Bluetooth: hci0: command tx timeout
[ 1199.390502][T15368] loop2: detected capacity change from 0 to 1024
[ 1199.688024][T15368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1199.719897][T15374] loop1: detected capacity change from 0 to 512
[ 1199.838172][   T12] IPVS: stop unused estimator thread 0...
[ 1200.345378][T15305] chnl_net:caif_netlink_parms(): no params data found
[ 1200.480704][T12519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1201.239342][T15393] loop1: detected capacity change from 0 to 512
[ 1201.250031][T15393] EXT4-fs: Ignoring removed i_version option
[ 1201.287138][T15393] EXT4-fs: Ignoring removed oldalloc option
[ 1201.346616][T12594] Bluetooth: hci0: command tx timeout
[ 1201.354180][T15395] Bluetooth: MGMT ver 1.23
[ 1201.474158][T15393] EXT4-fs (loop1): 1 truncate cleaned up
[ 1201.551030][T15393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1202.208087][T13816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1203.096619][T15305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.120425][T15305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.153862][T15305] bridge_slave_0: entered allmulticast mode
[ 1203.236066][T15305] bridge_slave_0: entered promiscuous mode
[ 1203.300053][T15305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.351113][T15305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.401564][T15305] bridge_slave_1: entered allmulticast mode
[ 1203.441453][T15305] bridge_slave_1: entered promiscuous mode
[ 1203.993050][T15305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1204.093747][T15305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1204.133328][T15428] loop5: detected capacity change from 0 to 512
[ 1204.569272][T15305] team0: Port device team_slave_0 added
[ 1204.688618][T15305] team0: Port device team_slave_1 added
[ 1205.093751][T15305] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1205.132384][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.210038][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1205.215788][T15305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1205.276228][T15305] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1205.303292][T15305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.376739][T15305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1205.416054][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 1205.499531][   T24] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 1205.520280][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.546452][   T24] usb 3-1: Product: syz
[ 1205.550879][   T24] usb 3-1: Manufacturer: syz
[ 1205.568682][   T24] usb 3-1: SerialNumber: syz
[ 1205.594800][   T24] usb 3-1: config 0 descriptor??
[ 1205.719487][   T24] gspca_main: se401-2.14.0 probing 047d:5003
[ 1206.100071][   T24] gspca_se401: Frame size: 0x2 bayer
[ 1206.127001][   T24] gspca_se401: Frame size: 0x127 bayer
[ 1206.132712][   T24] gspca_se401: Frame size: 256x0 bayer
[ 1206.152346][T15305] hsr_slave_0: entered promiscuous mode
[ 1206.161113][   T24] gspca_se401: Frame size: 0x0 1/16th janggu
[ 1206.185462][T15305] hsr_slave_1: entered promiscuous mode
[ 1206.311968][T15448] loop1: detected capacity change from 0 to 512
[ 1206.333407][   T24] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39
[ 1206.509659][T15448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1206.592162][   T24] usb 3-1: USB disconnect, device number 10
[ 1206.592679][T15448] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1206.851168][   T29] audit: type=1800 audit(1772180982.799:287): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2999" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1206.990399][T15456] loop4: detected capacity change from 0 to 256
[ 1207.260565][T13816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1207.319265][T15456] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[ 1209.888265][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3010'.
[ 1209.922703][T15487] loop2: detected capacity change from 0 to 128
[ 1210.087623][T15487] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1210.203090][T15487] ext4 filesystem being mounted at /149/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1210.569146][T15487] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 18: comm syz.2.3011: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=0
[ 1210.579986][T15305] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1210.714523][T15487] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem
[ 1210.740750][T15305] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1210.850808][T15305] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1211.035271][T15305] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1211.175246][T12519] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1211.737250][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1211.928522][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1211.994325][    T9] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1212.045882][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1212.078579][    T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1212.106497][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1212.154150][    T9] usb 2-1: config 0 descriptor??
[ 1212.771583][T15305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1212.783773][    T9] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0
[ 1212.856970][    T9] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0
[ 1212.886822][    T9] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0
[ 1212.927260][    T9] corsair-cpro 0003:1B1C:0C10.002E: unknown main item tag 0x0
[ 1213.051452][    T9] corsair-cpro 0003:1B1C:0C10.002E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[ 1213.130160][    C0] usb 2-1: input irq status -75 received
[ 1213.204215][T15305] 8021q: adding VLAN 0 to HW filter on device team0
[ 1213.221272][    T9] corsair-cpro 0003:1B1C:0C10.002E: probe with driver corsair-cpro failed with error -38
[ 1213.327768][    T9] usb 2-1: USB disconnect, device number 12
[ 1213.361505][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1213.369164][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1213.544244][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1213.551972][ T6479] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1213.623203][T15520] Invalid argument reading file caps for ./file0
[ 1213.747295][ T5777] Bluetooth: hci0: command 0x0405 tx timeout
[ 1214.552516][T15521] fido_id[15521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1215.246959][T11617] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1215.469212][T11617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1215.536448][T11617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1215.588051][T11617] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1215.661501][T11617] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1215.713057][T11617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.782723][T11617] usb 2-1: config 0 descriptor??
[ 1216.122451][T15544] netlink: 'syz.2.3026': attribute type 10 has an invalid length.
[ 1216.417371][T11617] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1216.824579][T15544] team0: Port device macvlan0 added
[ 1217.433819][T15305] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1217.678741][    C1] plantronics 0003:047F:FFFF.002F: usb_submit_urb(ctrl) failed: -1
[ 1218.072347][T15556] vxcan1: tx address claim with dlc 0
[ 1218.265768][T15305] veth0_vlan: entered promiscuous mode
[ 1218.436121][T15305] veth1_vlan: entered promiscuous mode
[ 1218.473768][   T24] usb 2-1: USB disconnect, device number 13
[ 1218.828240][T15554] loop5: detected capacity change from 0 to 8192
[ 1218.931534][T15562] loop2: detected capacity change from 0 to 128
[ 1218.991569][T15562] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1219.042984][T15305] veth0_macvtap: entered promiscuous mode
[ 1219.067626][T15562] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1219.144847][T15305] veth1_macvtap: entered promiscuous mode
[ 1219.418342][T15305] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1219.644900][T15305] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1219.894786][T15566] loop1: detected capacity change from 0 to 64
[ 1220.017564][ T6462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.076801][ T6462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.086166][ T6462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.172908][ T6462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1220.199695][T15566] hfs: keylen 1794 too large
[ 1220.205645][T15566] hfs: keylen 1794 too large
[ 1220.361836][T15573] hfs: keylen 1794 too large
[ 1220.423709][T15572] loop2: detected capacity change from 0 to 512
[ 1220.603857][T15572] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[ 1220.687593][T15572] System zones: 1-12
[ 1220.700947][   T13] hfs: keylen 1794 too large
[ 1220.753872][T15572] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.3036: Directory hole found for htree index block 0
[ 1220.880257][T15572] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[ 1220.890995][T15572] EXT4-fs (loop2): Remounting filesystem read-only
[ 1220.900435][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1220.900529][    C0] EXT4-fs (loop2): initial error at time 1772180996: dx_probe:791: inode 2
[ 1220.900721][    C0] EXT4-fs (loop2): last error at time 1772180996: dx_probe:791: inode 2
[ 1221.126901][T15572] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[ 1221.177215][T15572] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[ 1221.231057][T15572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1222.049641][T12519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1222.836187][T15589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3041'.
[ 1222.887747][T15589] netlink: 'syz.4.3041': attribute type 7 has an invalid length.
[ 1222.895843][T15589] netlink: 'syz.4.3041': attribute type 8 has an invalid length.
[ 1223.047041][T15589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3041'.
[ 1223.194313][T15589] erspan0: entered promiscuous mode
[ 1223.270778][T15589] gretap0: entered promiscuous mode
[ 1223.304078][T15589] erspan0: left promiscuous mode
[ 1223.352801][T15589] gretap0: left promiscuous mode
[ 1225.593472][T15620] loop4: detected capacity change from 0 to 128
[ 1226.721202][   T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.130280][   T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.292954][   T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.457410][T11326] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1227.519684][   T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1227.719228][T11326] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1227.763618][T11326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1227.821941][T11326] usb 3-1: config 0 descriptor??
[ 1227.852604][T11326] cp210x 3-1:0.0: cp210x converter detected
[ 1228.284781][T11326] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1228.293509][   T35] bridge_slave_1: left allmulticast mode
[ 1228.313636][   T35] bridge_slave_1: left promiscuous mode
[ 1228.364714][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1228.389046][T11326] usb 3-1: cp210x converter now attached to ttyUSB0
[ 1228.457929][   T35] bridge_slave_0: left allmulticast mode
[ 1228.463877][   T35] bridge_slave_0: left promiscuous mode
[ 1228.515575][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1228.557166][T11326] usb 3-1: USB disconnect, device number 11
[ 1228.608055][T11326] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1228.700263][T11326] cp210x 3-1:0.0: device disconnected
[ 1229.778273][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1229.826123][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1229.858953][   T35] bond0 (unregistering): Released all slaves
[ 1230.215295][ T5891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1230.279093][ T5891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1230.782148][T15653] loop4: detected capacity change from 0 to 4096
[ 1230.904790][T15653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1231.258467][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1231.322051][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1231.442489][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1231.459077][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1231.472904][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1231.490336][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1231.501909][T15661] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 363: padding at end of block bitmap is not set
[ 1231.520184][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1231.547062][   T35] hsr_slave_0: left promiscuous mode
[ 1231.616597][   T35] hsr_slave_1: left promiscuous mode
[ 1231.624898][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1231.663930][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1231.721461][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1231.738962][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1231.797118][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1231.945564][   T35] veth1_macvtap: left promiscuous mode
[ 1231.986752][   T35] veth0_macvtap: left promiscuous mode
[ 1231.992795][   T35] veth1_vlan: left promiscuous mode
[ 1232.046744][   T35] veth0_vlan: left promiscuous mode
[ 1232.567791][T11326] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[ 1232.763478][T11326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1232.861417][T11326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 205, setting to 64
[ 1232.916721][T11326] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1232.986793][T11326] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1233.031801][T11326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.101427][T15681] loop1: detected capacity change from 0 to 256
[ 1233.116087][T11326] usb 5-1: config 0 descriptor??
[ 1233.158614][T15675] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1233.193874][T15681] exfat: Deprecated parameter 'utf8'
[ 1233.384696][T15681] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1233.593773][ T5777] Bluetooth: hci2: command tx timeout
[ 1233.746877][T11326] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 1234.027078][T11404] usb 5-1: USB disconnect, device number 27
[ 1234.495743][T15686] fido_id[15686]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1234.821381][   T35] team0 (unregistering): Port device team_slave_1 removed
[ 1234.922089][T15694] loop2: detected capacity change from 0 to 256
[ 1235.000509][   T35] team0 (unregistering): Port device team_slave_0 removed
[ 1235.137423][T15694] FAT-fs (loop2): Directory bread(block 64) failed
[ 1235.144228][T15694] FAT-fs (loop2): Directory bread(block 65) failed
[ 1235.187102][T15694] FAT-fs (loop2): Directory bread(block 66) failed
[ 1235.195947][T15694] FAT-fs (loop2): Directory bread(block 67) failed
[ 1235.231965][T15694] FAT-fs (loop2): Directory bread(block 68) failed
[ 1235.258928][T15694] FAT-fs (loop2): Directory bread(block 69) failed
[ 1235.273472][T15694] FAT-fs (loop2): Directory bread(block 70) failed
[ 1235.294670][T15694] FAT-fs (loop2): Directory bread(block 71) failed
[ 1235.304308][T15694] FAT-fs (loop2): Directory bread(block 72) failed
[ 1235.315055][T15694] FAT-fs (loop2): Directory bread(block 73) failed
[ 1235.671611][ T5777] Bluetooth: hci2: command tx timeout
[ 1235.844041][ T6473] Bluetooth: hci3: Frame reassembly failed (-84)
[ 1236.784534][T15709] loop3: detected capacity change from 0 to 512
[ 1236.918956][T15709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1237.213584][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.500706][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.583051][T15305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1237.733675][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1237.768626][T12594] Bluetooth: hci2: command tx timeout
[ 1237.826727][ T5777] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1237.983690][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1238.763304][T15667] chnl_net:caif_netlink_parms(): no params data found
[ 1238.891379][   T13] bridge_slave_1: left allmulticast mode
[ 1238.906766][   T13] bridge_slave_1: left promiscuous mode
[ 1238.913507][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1238.957209][   T13] bridge_slave_0: left allmulticast mode
[ 1238.976644][   T13] bridge_slave_0: left promiscuous mode
[ 1238.985635][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1239.425685][T15729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3078'.
[ 1239.830896][ T5777] Bluetooth: hci2: command tx timeout
[ 1240.101537][T12594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1240.117945][T12594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1240.130888][T12594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1240.153937][T12594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1240.168708][T12594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1240.254590][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1240.320297][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1240.357282][   T13] bond0 (unregistering): Released all slaves
[ 1240.552032][T15741] sctp: [Deprecated]: syz.2.3082 (pid 15741) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1240.552032][T15741] Use struct sctp_sack_info instead
[ 1241.152301][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'.
[ 1241.799956][   T13] hsr_slave_0: left promiscuous mode
[ 1241.852965][   T13] hsr_slave_1: left promiscuous mode
[ 1241.861348][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1241.876618][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1241.929373][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1241.966642][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1242.065104][   T13] veth1_macvtap: left promiscuous mode
[ 1242.106539][   T13] veth0_macvtap: left promiscuous mode
[ 1242.112532][   T13] veth1_vlan: left promiscuous mode
[ 1242.169975][   T13] veth0_vlan: left promiscuous mode
[ 1242.240412][T12594] Bluetooth: hci3: command tx timeout
[ 1243.896666][T11326] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1244.102158][T11326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1244.126775][T11326] usb 3-1: config 1 has no interface number 0
[ 1244.133153][T11326] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1244.233924][T11326] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1244.246886][T11326] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1244.319388][T12594] Bluetooth: hci3: command tx timeout
[ 1244.331279][T11326] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1244.347395][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1244.356523][T11326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.364769][T11326] usb 3-1: Product: syz
[ 1244.388852][T11326] usb 3-1: Manufacturer: syz
[ 1244.394056][T11326] usb 3-1: SerialNumber: syz
[ 1244.574547][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1244.647078][T15787] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3096'.
[ 1244.689449][T15787] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3096'.
[ 1245.359840][T11326] cdc_ncm 3-1:1.1: bind() failure
[ 1245.586810][T11404] usb 3-1: USB disconnect, device number 12
[ 1246.213419][T15667] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1246.232536][T15667] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1246.263393][T15667] bridge_slave_0: entered allmulticast mode
[ 1246.297137][T15667] bridge_slave_0: entered promiscuous mode
[ 1246.391677][T12594] Bluetooth: hci3: command tx timeout
[ 1246.446151][T15667] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1246.487836][T15667] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1246.495595][T15667] bridge_slave_1: entered allmulticast mode
[ 1246.550475][T15667] bridge_slave_1: entered promiscuous mode
[ 1247.042730][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1247.121065][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1247.353068][T15813] loop3: detected capacity change from 0 to 512
[ 1247.436509][T15813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1247.546186][T15813] EXT4-fs (loop3): 1 truncate cleaned up
[ 1247.619200][T15813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1247.936813][T15667] team0: Port device team_slave_0 added
[ 1247.959733][T15305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1248.077690][T15667] team0: Port device team_slave_1 added
[ 1248.442366][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1248.455472][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1248.483277][T12594] Bluetooth: hci3: command tx timeout
[ 1248.508933][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1248.560154][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1248.567882][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1248.595770][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1248.619919][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1248.941836][T15736] chnl_net:caif_netlink_parms(): no params data found
[ 1249.146754][T11404] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1249.292227][T15667] hsr_slave_0: entered promiscuous mode
[ 1249.311040][T15667] hsr_slave_1: entered promiscuous mode
[ 1249.316997][T11404] usb 3-1: Using ep0 maxpacket: 32
[ 1249.355652][T11404] usb 3-1: config 0 has an invalid interface number: 188 but max is 0
[ 1249.368501][T15667] debugfs: 'hsr0' already exists in 'hsr'
[ 1249.374434][T15667] Cannot create hsr debugfs directory
[ 1249.380971][T11404] usb 3-1: config 0 has no interface number 0
[ 1249.387765][T11404] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1249.442217][T11404] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1249.476846][T11404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.485147][T11404] usb 3-1: Product: syz
[ 1249.501383][T11404] usb 3-1: Manufacturer: syz
[ 1249.506218][T11404] usb 3-1: SerialNumber: syz
[ 1249.539493][T11404] usb 3-1: config 0 descriptor??
[ 1249.550834][T15832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1249.822773][T15832] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1250.483675][T11404] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1250.517209][T11404] asix 3-1:0.188: probe with driver asix failed with error -71
[ 1250.575746][T11404] usb 3-1: USB disconnect, device number 13
[ 1250.711959][T15736] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1250.737046][T15736] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1250.744862][T15736] bridge_slave_0: entered allmulticast mode
[ 1250.787719][T15736] bridge_slave_0: entered promiscuous mode
[ 1250.831075][T15736] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1250.839316][T15736] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1250.852560][T15736] bridge_slave_1: entered allmulticast mode
[ 1250.874552][T15736] bridge_slave_1: entered promiscuous mode
[ 1251.343490][T15736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1251.453315][T15736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1251.533197][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1251.628873][T15853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1251.690045][T15855] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1251.714028][T15855] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3112'.
[ 1251.908797][T15736] team0: Port device team_slave_0 added
[ 1251.976226][T15736] team0: Port device team_slave_1 added
[ 1252.211671][T15859] loop2: detected capacity change from 0 to 256
[ 1252.404010][T15859] FAT-fs (loop2): Directory bread(block 64) failed
[ 1252.432349][T15859] FAT-fs (loop2): Directory bread(block 65) failed
[ 1252.447029][T15859] FAT-fs (loop2): Directory bread(block 66) failed
[ 1252.453805][T15859] FAT-fs (loop2): Directory bread(block 67) failed
[ 1252.502980][T15859] FAT-fs (loop2): Directory bread(block 68) failed
[ 1252.518597][T15736] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1252.537314][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1252.546773][T15859] FAT-fs (loop2): Directory bread(block 69) failed
[ 1252.574675][T15736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1252.593943][T15736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1252.619752][T15859] FAT-fs (loop2): Directory bread(block 70) failed
[ 1252.627763][T15859] FAT-fs (loop2): Directory bread(block 71) failed
[ 1252.634725][T15859] FAT-fs (loop2): Directory bread(block 72) failed
[ 1252.641542][T15736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1252.648210][T15859] FAT-fs (loop2): Directory bread(block 73) failed
[ 1252.705715][T15736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1253.128575][T15667] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1253.313815][T15736] hsr_slave_0: entered promiscuous mode
[ 1253.361464][T15736] hsr_slave_1: entered promiscuous mode
[ 1253.394578][T15736] debugfs: 'hsr0' already exists in 'hsr'
[ 1253.428104][T15736] Cannot create hsr debugfs directory
[ 1253.442999][T15667] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1253.505814][T15667] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1253.696646][T15667] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1253.815695][T15871] loop2: detected capacity change from 0 to 4096
[ 1255.163992][T15884] input: syz0 as /devices/virtual/input/input40
[ 1256.024888][T15667] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1256.362135][T15667] 8021q: adding VLAN 0 to HW filter on device team0
[ 1256.458550][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1256.466109][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1256.504090][T15736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1256.601923][T15736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1256.745197][T15736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1256.861121][T15736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1256.978488][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1256.986148][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1257.305486][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3123'.
[ 1258.147677][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'.
[ 1258.219180][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'.
[ 1258.316671][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3124'.
[ 1258.775995][T15736] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1259.063021][T15736] 8021q: adding VLAN 0 to HW filter on device team0
[ 1259.205357][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1259.213140][ T6479] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1259.391715][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1259.399560][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1260.164461][T15667] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1260.469690][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3127'.
[ 1261.505586][T15945] loop2: detected capacity change from 0 to 128
[ 1261.617939][T15945] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1261.697284][T15945] hpfs: filesystem error: improperly stopped
[ 1261.717069][T15945] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1261.725089][T15945] hpfs: You really don't want any checks? You are crazy...
[ 1261.791409][T15945] hpfs: hpfs_map_sector(): read error
[ 1261.854307][T15945] hpfs: code page support is disabled
[ 1261.904157][T15945] hpfs: hpfs_map_4sectors(): unaligned read
[ 1261.927692][T15945] hpfs: hpfs_map_4sectors(): unaligned read
[ 1261.933830][T15945] hpfs: filesystem error: unable to find root dir
[ 1261.965017][T15736] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1262.557333][T15736] veth0_vlan: entered promiscuous mode
[ 1262.780019][T15736] veth1_vlan: entered promiscuous mode
[ 1263.263446][T15667] veth0_vlan: entered promiscuous mode
[ 1263.496058][T15667] veth1_vlan: entered promiscuous mode
[ 1263.614264][T15736] veth0_macvtap: entered promiscuous mode
[ 1263.732049][T15736] veth1_macvtap: entered promiscuous mode
[ 1264.155355][T15736] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1264.333279][T15736] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1264.584713][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.605018][   T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.665952][T15667] veth0_macvtap: entered promiscuous mode
[ 1264.733784][   T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.781985][   T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1264.970707][ T5777] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1264.995631][T15667] veth1_macvtap: entered promiscuous mode
[ 1265.004829][ T5777] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1265.022230][ T5777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1265.059864][ T5777] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1265.157370][ T5777] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1265.495471][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1265.520580][T15980] loop2: detected capacity change from 0 to 64
[ 1265.644866][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1265.801174][T15985] block nbd4: shutting down sockets
[ 1266.020278][ T5891] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.046980][ T5891] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.056043][ T5891] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1266.265663][ T5891] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1267.269254][T12594] Bluetooth: hci5: command tx timeout
[ 1268.051816][T16011] loop2: detected capacity change from 0 to 512
[ 1268.106850][T16011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[ 1268.225798][T16011] EXT4-fs (loop2): 1 truncate cleaned up
[ 1268.239447][T16011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1268.464321][   T29] audit: type=1800 audit(1772181044.409:288): pid=16011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3143" name="file2" dev="loop2" ino=16 res=0 errno=0
[ 1268.612428][ T6473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.805097][T15975] chnl_net:caif_netlink_parms(): no params data found
[ 1268.944637][T12519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1269.132535][ T6473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1269.350093][T12594] Bluetooth: hci5: command tx timeout
[ 1269.385805][T16025] bridge0: entered allmulticast mode
[ 1269.535107][ T6473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1269.703317][T16026] pim6reg: entered allmulticast mode
[ 1269.986056][ T6473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1270.870531][ T6473] bridge_slave_1: left allmulticast mode
[ 1270.895418][ T6473] bridge_slave_1: left promiscuous mode
[ 1270.937316][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1270.987451][ T6473] bridge_slave_0: left allmulticast mode
[ 1271.006678][ T6473] bridge_slave_0: left promiscuous mode
[ 1271.013347][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1271.437706][T12594] Bluetooth: hci5: command tx timeout
[ 1271.786498][T16059] loop4: detected capacity change from 0 to 512
[ 1271.839453][T16059] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1271.891220][T16059] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1271.940066][T16059] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3149: bad orphan inode 131083
[ 1271.981869][T16059] loop4: lost filesystem error report for type 5 error -117
[ 1271.986545][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1272.000910][    C1] EXT4-fs (loop4): initial error at time 1772181047: ext4_orphan_get:1417
[ 1272.009853][    C1] EXT4-fs (loop4): last error at time 1772181047: ext4_orphan_get:1417
[ 1272.059851][T16059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1272.432942][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1272.614317][ T6473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1272.679015][ T6473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1272.704886][ T6473] bond0 (unregistering): Released all slaves
[ 1272.837649][T16069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'.
[ 1273.512588][T12594] Bluetooth: hci5: command tx timeout
[ 1273.577446][T15975] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1273.611515][T15975] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1273.649495][T15975] bridge_slave_0: entered allmulticast mode
[ 1273.669921][T15975] bridge_slave_0: entered promiscuous mode
[ 1273.810730][T15975] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1273.818974][T15975] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1273.836669][T11326] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1273.856173][T15975] bridge_slave_1: entered allmulticast mode
[ 1273.872466][T15975] bridge_slave_1: entered promiscuous mode
[ 1274.047411][T11326] usb 3-1: Using ep0 maxpacket: 32
[ 1274.062694][T11326] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[ 1274.095829][T11326] usb 3-1: config 0 has no interface number 0
[ 1274.126990][T11326] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1274.195358][T11326] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1274.226482][T11326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.249094][T11326] usb 3-1: Product: syz
[ 1274.254029][ T6473] hsr_slave_0: left promiscuous mode
[ 1274.278310][T11326] usb 3-1: Manufacturer: syz
[ 1274.286202][T11326] usb 3-1: SerialNumber: syz
[ 1274.295623][ T6473] hsr_slave_1: left promiscuous mode
[ 1274.332096][T11326] usb 3-1: config 0 descriptor??
[ 1274.338727][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1274.368144][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1274.429230][ T6473] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1274.440472][T11326] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1274.473910][ T6473] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1274.487132][T11326] em28xx 3-1:0.132: Video interface 132 found:
[ 1274.605040][ T6473] veth1_macvtap: left promiscuous mode
[ 1274.649610][ T6473] veth0_macvtap: left promiscuous mode
[ 1274.655571][ T6473] veth1_vlan: left promiscuous mode
[ 1274.686083][ T6473] veth0_vlan: left promiscuous mode
[ 1274.865513][T11326] em28xx 3-1:0.132: unknown em28xx chip ID (0)
[ 1275.506021][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3155'.
[ 1275.547396][T11326] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[ 1275.574979][T11326] em28xx 3-1:0.132: failed to read eeprom (err=-5)
[ 1275.619158][T11326] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[ 1275.697106][T11326] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1275.705250][T11326] em28xx 3-1:0.132: analog set to bulk mode.
[ 1275.742824][T11617] em28xx 3-1:0.132: Registering V4L2 extension
[ 1275.821868][T11326] usb 3-1: USB disconnect, device number 14
[ 1275.838512][T11326] em28xx 3-1:0.132: Disconnecting em28xx
[ 1276.503761][T11617] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[ 1276.516742][T11617] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[ 1276.524206][T11617] em28xx 3-1:0.132: No AC97 audio processor
[ 1276.577268][T11617] usb 3-1: Decoder not found
[ 1276.582126][T11617] em28xx 3-1:0.132: failed to create media graph
[ 1276.600286][T11617] em28xx 3-1:0.132: V4L2 device video103 deregistered
[ 1276.621018][T11617] em28xx 3-1:0.132: Remote control support is not available for this card.
[ 1276.683525][T11326] em28xx 3-1:0.132: Closing input extension
[ 1276.728685][T11326] em28xx 3-1:0.132: Freeing device
[ 1276.848895][ T6473] team0 (unregistering): Port device team_slave_1 removed
[ 1276.952196][ T6473] team0 (unregistering): Port device team_slave_0 removed
[ 1278.626105][T15975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1278.706766][T15975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1279.465090][T15975] team0: Port device team_slave_0 added
[ 1279.514244][T15975] team0: Port device team_slave_1 added
[ 1279.548891][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1279.579074][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1280.066764][T15975] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1280.073937][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1280.122572][T15975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1280.185798][ T6470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1280.201280][T15975] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1280.216184][ T6470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1280.251827][T15975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1280.362286][T15975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1280.766560][ T6470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1280.797760][ T6470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1280.840973][T15975] hsr_slave_0: entered promiscuous mode
[ 1280.880933][T15975] hsr_slave_1: entered promiscuous mode
[ 1281.443709][T16145] kernel read not supported for file /sg0 (pid: 16145 comm: syz.0.3077)
[ 1281.710316][T16150] loop4: detected capacity change from 0 to 512
[ 1281.756198][T16150] EXT4-fs: Ignoring removed orlov option
[ 1281.795066][ T6473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1281.802422][T16150] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1281.819878][ T6473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1281.955764][T16150] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3164: corrupted in-inode xattr: e_value size too large
[ 1282.038879][T16150] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1282.040546][T16150] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3164: couldn't read orphan inode 15 (err -117)
[ 1282.050584][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1282.050694][    C0] EXT4-fs (loop4): initial error at time 1772181057: ext4_iget_extra_inode:5025: inode 15
[ 1282.050877][    C0] EXT4-fs (loop4): last error at time 1772181057: ext4_iget_extra_inode:5025: inode 15
[ 1282.250102][T16150] loop4: lost filesystem error report for type 5 error -117
[ 1282.271128][T16150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1282.599655][T16150] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #2: block 12: comm syz.4.3164: lblock 3 mapped to illegal pblock 12 (length 1)
[ 1283.058268][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1284.133022][T15975] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1284.334977][T11404] IPVS: starting estimator thread 0...
[ 1284.456849][T16175] IPVS: using max 192 ests per chain, 9600 per kthread
[ 1284.567430][T15975] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1284.675596][T15975] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1284.888227][T15975] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1286.448820][T15975] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1286.625418][T15975] 8021q: adding VLAN 0 to HW filter on device team0
[ 1286.818486][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1286.826047][ T6470] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1287.024905][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1287.032553][ T6470] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1287.173562][T16202] loop2: detected capacity change from 0 to 256
[ 1287.204084][T16202] exfat: Deprecated parameter 'utf8'
[ 1287.375974][T16202] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[ 1287.680172][   T29] audit: type=1800 audit(1772181063.629:289): pid=16208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3178" name="bus" dev="loop2" ino=1048860 res=0 errno=0
[ 1287.795194][T15975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1288.188422][T16212] mkiss: ax0: crc mode is auto.
[ 1290.402360][T15975] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1290.627266][T16247] loop9: detected capacity change from 0 to 1024
[ 1290.654728][T16247] EXT4-fs: Ignoring removed orlov option
[ 1290.825539][T16247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1291.328827][T16261] syzkaller1: entered promiscuous mode
[ 1291.377127][T16261] syzkaller1: entered allmulticast mode
[ 1291.411439][T15667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1291.753430][T16266] netlink: 'syz.2.3194': attribute type 4 has an invalid length.
[ 1291.796794][T16266] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3194'.
[ 1292.233828][T11617] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[ 1292.504749][T11617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1292.551201][T11617] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1292.600772][T11617] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1292.670220][T11617] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1292.726482][T11617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.800225][T11617] usb 1-1: config 0 descriptor??
[ 1292.815835][ T5826] kernel read not supported for file /input/event2 (pid: 5826 comm: kworker/1:3)
[ 1293.436638][T11617] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1293.633589][ T5826] usb 1-1: USB disconnect, device number 10
[ 1294.155411][T15975] veth0_vlan: entered promiscuous mode
[ 1294.344421][T15975] veth1_vlan: entered promiscuous mode
[ 1294.658876][T16294] fido_id[16294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1295.040810][T15975] veth0_macvtap: entered promiscuous mode
[ 1295.229104][T15975] veth1_macvtap: entered promiscuous mode
[ 1295.407544][T16311] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3205'.
[ 1295.561264][T15975] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1295.778959][T15975] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1295.956521][T11681] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1296.051042][T11681] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1296.137341][T11681] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1296.256687][T11681] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1303.664307][T11617] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1303.882759][T11617] usb 1-1: Using ep0 maxpacket: 16
[ 1303.925016][T11617] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1303.956871][T11617] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 1304.026824][T11617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1304.093282][T11617] usb 1-1: config 0 descriptor??
[ 1304.301437][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1304.355580][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1304.743660][T11617] hid (null): bogus close delimiter
[ 1304.804488][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1304.851535][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1305.087463][T11617] hid (null): unknown global tag 0xd
[ 1305.258825][T11617] usb 1-1: USB disconnect, device number 11
[ 1305.602470][T16441] loop2: detected capacity change from 0 to 512
[ 1305.686746][T16441] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[ 1305.766834][T16441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102]
[ 1305.829827][T16441] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.3240: corrupted in-inode xattr: e_value size too large
[ 1305.896028][T16441] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1305.906450][    C1] EXT4-fs (loop2): error count since last fsck: 1
[ 1305.922540][    C1] EXT4-fs (loop2): initial error at time 1772181081: ext4_iget_extra_inode:5025: inode 15
[ 1305.933005][    C1] EXT4-fs (loop2): last error at time 1772181081: ext4_iget_extra_inode:5025: inode 15
[ 1305.963156][T16441] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3240: couldn't read orphan inode 15 (err -117)
[ 1306.036658][T16441] loop2: lost filesystem error report for type 5 error -117
[ 1306.041586][T16441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1306.819791][T12519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1307.494632][T16463] loop2: detected capacity change from 0 to 512
[ 1307.560358][T16464] loop8: detected capacity change from 0 to 128
[ 1307.601962][T16464] EXT4-fs: Ignoring removed nobh option
[ 1307.634564][T16464] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1307.669629][T16464] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1308.240938][T15975] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1309.471208][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3252'.
[ 1309.530048][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3252'.
[ 1309.606085][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3252'.
[ 1310.007937][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1310.336524][T16491] 9pnet: p9_errstr2errno: server reported unknown error 0x0000
[ 1311.589848][T12594] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1312.449148][T16523] sctp: [Deprecated]: syz.0.3264 (pid 16523) Use of int in max_burst socket option deprecated.
[ 1312.449148][T16523] Use struct sctp_assoc_value instead
[ 1314.365175][T16546] loop9: detected capacity change from 0 to 128
[ 1314.446523][T16546] FAT-fs (loop9): bogus number of FAT sectors
[ 1314.477461][T16546] FAT-fs (loop9): Can't find a valid FAT filesystem
[ 1314.721855][T16552] loop4: detected capacity change from 0 to 512
[ 1314.813538][T16552] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[ 1314.839572][ T6473] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1314.893238][T16552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0102]
[ 1314.937032][T16552] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3274: corrupted in-inode xattr: e_value size too large
[ 1315.059089][T16552] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1315.065847][T16552] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3274: couldn't read orphan inode 15 (err -117)
[ 1315.075532][    C0] EXT4-fs (loop4): error count since last fsck: 1
[ 1315.075635][    C0] EXT4-fs (loop4): initial error at time 1772181091: ext4_iget_extra_inode:5025: inode 15
[ 1315.075819][    C0] EXT4-fs (loop4): last error at time 1772181091: ext4_iget_extra_inode:5025: inode 15
[ 1315.207530][T16552] loop4: lost filesystem error report for type 5 error -117
[ 1315.298269][T16552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1315.664917][T16563] loop8: detected capacity change from 0 to 1024
[ 1315.742170][T16563] EXT4-fs: Ignoring removed orlov option
[ 1315.854565][T16563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1315.996947][T16563] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1316.011929][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1316.152870][   T29] audit: type=1800 audit(1772181092.099:290): pid=16563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3276" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1316.192319][T16563] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: comm syz.8.3276: lblock 0 mapped to illegal pblock 0 (length 1)
[ 1316.699222][T15975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1316.871487][T12594] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1316.877885][ T5777] Bluetooth: hci0: command 0x1003 tx timeout
[ 1317.866958][ T5826] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[ 1318.039228][ T5826] usb 9-1: Using ep0 maxpacket: 32
[ 1318.087509][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1318.156866][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1318.207024][ T5826] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 1318.275499][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.371736][ T5826] usb 9-1: config 0 descriptor??
[ 1318.702550][T16588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1318.738179][T16588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1319.099067][ T5826] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[ 1319.128287][ T5826] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[ 1319.135421][ T5826] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[ 1319.198408][ T5826] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[ 1319.205601][ T5826] kone 0003:1E7D:2CED.0033: unknown main item tag 0x0
[ 1319.318888][ T5826] kone 0003:1E7D:2CED.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.8-1/input0
[ 1319.391158][ T5826] kone 0003:1E7D:2CED.0033: couldn't init struct kone_device
[ 1319.421533][ T5826] kone 0003:1E7D:2CED.0033: couldn't install mouse
[ 1319.480457][ T5826] kone 0003:1E7D:2CED.0033: probe with driver kone failed with error -5
[ 1319.541838][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'.
[ 1319.565156][ T5826] usb 9-1: USB disconnect, device number 19
[ 1319.682227][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'.
[ 1320.376063][T16609] fido_id[16609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1321.114944][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[ 1322.764558][T16638] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3296'.
[ 1323.557976][T16647] loop7: detected capacity change from 0 to 16384
[ 1323.773149][T16647] loop7: detected capacity change from 16384 to 0
[ 1323.797454][T16649] syzkaller1: entered promiscuous mode
[ 1323.804175][    C1] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[ 1323.858237][T16649] syzkaller1: entered allmulticast mode
[ 1323.907519][T16642] loop2: detected capacity change from 0 to 8192
[ 1325.485745][ T6462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1325.765464][ T6462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1326.109610][ T6462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1326.259971][T16655] loop0: detected capacity change from 0 to 8192
[ 1326.372270][ T6462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1326.726780][   T29] audit: type=1800 audit(1772181102.649:291): pid=16679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3302" name="file2" dev="loop0" ino=1048876 res=0 errno=0
[ 1327.387224][ T6462] bridge_slave_1: left allmulticast mode
[ 1327.393147][ T6462] bridge_slave_1: left promiscuous mode
[ 1327.425893][ T6462] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.543969][ T6462] bridge_slave_0: left allmulticast mode
[ 1327.550560][ T6462] bridge_slave_0: left promiscuous mode
[ 1327.617808][ T6462] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1328.939129][ T6462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1329.022928][ T6462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1329.063580][ T6462] bond0 (unregistering): Released all slaves
[ 1329.549161][T16695] loop9: detected capacity change from 0 to 512
[ 1329.759295][T16695] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3313: inode has both inline data and extents flags
[ 1329.947600][T16695] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1329.956404][    C0] EXT4-fs (loop9): error count since last fsck: 1
[ 1329.972491][    C0] EXT4-fs (loop9): initial error at time 1772181105: ext4_orphan_get:1391: inode 15
[ 1329.982269][    C0] EXT4-fs (loop9): last error at time 1772181105: ext4_orphan_get:1391: inode 15
[ 1329.996126][T16695] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3313: couldn't read orphan inode 15 (err -117)
[ 1330.054168][T16695] loop9: lost filesystem error report for type 5 error -117
[ 1330.110203][T16695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1330.499586][T16707] loop4: detected capacity change from 0 to 64
[ 1330.586954][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1330.602672][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1330.614824][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1330.651973][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1330.667580][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1330.899525][T16707] hfs: keylen 1794 too large
[ 1330.905503][T16707] hfs: keylen 1794 too large
[ 1331.113338][T15667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1331.126064][T16707] hfs: keylen 1794 too large
[ 1331.175605][ T6462] hsr_slave_0: left promiscuous mode
[ 1331.274243][ T6462] hsr_slave_1: left promiscuous mode
[ 1331.282552][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1331.316813][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1331.599329][ T6462] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1331.617490][ T6462] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1331.689774][T11681] hfs: keylen 1794 too large
[ 1331.777053][T16720] input: syz1 as /devices/virtual/input/input41
[ 1331.807226][ T6462] veth1_macvtap: left promiscuous mode
[ 1331.812892][ T6462] veth0_macvtap: left promiscuous mode
[ 1331.886924][ T6462] veth1_vlan: left promiscuous mode
[ 1331.913856][ T6462] veth0_vlan: left promiscuous mode
[ 1332.707113][T12594] Bluetooth: hci0: command tx timeout
[ 1334.178725][ T6462] team0 (unregistering): Port device macvlan0 removed
[ 1334.794734][T12594] Bluetooth: hci0: command tx timeout
[ 1334.908092][ T6462] team0 (unregistering): Port device team_slave_1 removed
[ 1335.022646][ T6462] team0 (unregistering): Port device team_slave_0 removed
[ 1335.798328][    T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1335.936606][ T5823] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1335.986663][    T9] usb 9-1: Using ep0 maxpacket: 32
[ 1336.039178][    T9] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1336.093815][    T9] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1336.176757][ T5823] usb 5-1: Using ep0 maxpacket: 8
[ 1336.196149][    T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1336.238390][ T5823] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1336.277513][    T9] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1336.286700][    T9] usb 9-1: Product: syz
[ 1336.306423][ T5823] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1336.317350][    T9] usb 9-1: Manufacturer: syz
[ 1336.383084][ T5823] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1336.407897][    T9] hub 9-1:4.0: USB hub found
[ 1336.444504][ T5823] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1336.526726][ T5823] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1336.596574][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.752341][    T9] hub 9-1:4.0: 2 ports detected
[ 1336.879347][T12594] Bluetooth: hci0: command tx timeout
[ 1336.977724][ T5823] usb 5-1: usb_control_msg returned -32
[ 1336.983685][ T5823] usbtmc 5-1:16.0: can't read capabilities
[ 1337.204303][    T9] hub 9-1:4.0: set hub depth failed
[ 1337.297448][    T9] usb 9-1: USB disconnect, device number 20
[ 1338.672757][T16709] chnl_net:caif_netlink_parms(): no params data found
[ 1338.742946][T11617] usb 5-1: USB disconnect, device number 28
[ 1338.780301][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3334'.
[ 1338.850816][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3334'.
[ 1338.949606][ T5777] Bluetooth: hci0: command tx timeout
[ 1338.957559][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3334'.
[ 1338.973791][T16782] netlink: 240 bytes leftover after parsing attributes in process `syz.9.3335'.
[ 1340.471100][T16797] loop8: detected capacity change from 0 to 4096
[ 1340.500099][T16797] EXT4-fs: inline encryption not supported
[ 1340.674037][T16797] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003]
[ 1340.784351][T16797] System zones: 0-5
[ 1340.860865][T16797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1340.897042][T16709] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1340.927052][T16709] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1340.934891][T16709] bridge_slave_0: entered allmulticast mode
[ 1341.024176][T16709] bridge_slave_0: entered promiscuous mode
[ 1341.112643][T16709] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1341.146851][T16709] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1341.197639][T16709] bridge_slave_1: entered allmulticast mode
[ 1341.236107][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3340'.
[ 1341.262862][T16709] bridge_slave_1: entered promiscuous mode
[ 1341.747304][T16709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1341.875040][T16709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1342.114029][T16816] loop4: detected capacity change from 0 to 1024
[ 1342.165657][T15975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1342.222807][T16816] EXT4-fs: inline encryption not supported
[ 1342.420847][T16709] team0: Port device team_slave_0 added
[ 1342.428307][T16816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1342.448850][T16709] team0: Port device team_slave_1 added
[ 1342.642902][T16709] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1342.671695][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1342.829841][T16709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1342.937631][T16709] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1342.944821][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1343.070018][T16709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1343.205729][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1343.858860][T16709] hsr_slave_0: entered promiscuous mode
[ 1343.913649][T16709] hsr_slave_1: entered promiscuous mode
[ 1343.992057][T16709] debugfs: 'hsr0' already exists in 'hsr'
[ 1344.026969][T16709] Cannot create hsr debugfs directory
[ 1345.109144][T16849] input: syz0 as /devices/virtual/input/input42
[ 1346.466620][ T5826] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 1346.699446][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1346.766551][ T5826] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 205, setting to 64
[ 1346.856573][ T5826] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1346.918165][ T5826] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1346.966455][ T5826] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.079663][ T5826] usb 10-1: config 0 descriptor??
[ 1347.103214][T16863] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1347.367540][T16873] fuse: Bad value for 'fd'
[ 1347.394650][T16709] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1347.501175][T16709] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1347.681928][T16709] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1347.719626][ T5826] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1347.843525][T16709] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1347.873210][ T5826] usb 10-1: USB disconnect, device number 6
[ 1348.803867][T16880] fido_id[16880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1349.135338][T16884] loop4: detected capacity change from 0 to 512
[ 1349.261973][T16884] EXT4-fs: inline encryption not supported
[ 1349.336757][T16884] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1349.443570][T16884] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3359: bad orphan inode 131083
[ 1349.476750][T16884] loop4: lost filesystem error report for type 5 error -117
[ 1349.486411][    C1] EXT4-fs (loop4): error count since last fsck: 1
[ 1349.500868][    C1] EXT4-fs (loop4): initial error at time 1772181125: ext4_orphan_get:1417
[ 1349.509726][    C1] EXT4-fs (loop4): last error at time 1772181125: ext4_orphan_get:1417
[ 1349.588611][T16884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1349.771127][T16709] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1350.120095][T16709] 8021q: adding VLAN 0 to HW filter on device team0
[ 1350.263849][T16896] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3362'.
[ 1350.438351][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1350.463961][ T6462] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1350.471876][ T6462] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1350.623335][ T6462] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1350.631057][ T6462] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1350.816906][T16752] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[ 1351.039602][T16752] usb 10-1: config 220 has an invalid interface number: 76 but max is 2
[ 1351.068826][T16752] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1351.137482][T16752] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1351.193446][T16752] usb 10-1: config 220 has no interface number 2
[ 1351.256930][T16752] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1351.322911][T16752] usb 10-1: config 220 interface 0 has no altsetting 0
[ 1351.391046][T16752] usb 10-1: config 220 interface 76 has no altsetting 0
[ 1351.421898][T16752] usb 10-1: config 220 interface 1 has no altsetting 0
[ 1351.485269][T16752] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1351.548447][T16752] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1351.592126][T16752] usb 10-1: Product: syz
[ 1351.617646][T16752] usb 10-1: Manufacturer: syz
[ 1351.656809][T16752] usb 10-1: SerialNumber: syz
[ 1352.014310][T16752] usb 10-1: selecting invalid altsetting 0
[ 1352.046554][ T5826] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1352.057964][T16752] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1352.065776][T16752] uvcvideo 10-1:220.0: No valid video chain found.
[ 1352.193183][T16752] usb 10-1: selecting invalid altsetting 0
[ 1352.238823][T16752] usbtest 10-1:220.1: probe with driver usbtest failed with error -22
[ 1352.290135][ T5826] usb 9-1: Using ep0 maxpacket: 32
[ 1352.329136][ T5826] usb 9-1: config 0 has an invalid interface number: 188 but max is 0
[ 1352.352211][T16752] usb 10-1: USB disconnect, device number 7
[ 1352.406686][ T5826] usb 9-1: config 0 has no interface number 0
[ 1352.413072][ T5826] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1352.534655][ T5826] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1352.599197][ T5826] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1352.624355][ T5826] usb 9-1: Product: syz
[ 1352.659473][ T5826] usb 9-1: Manufacturer: syz
[ 1352.664332][ T5826] usb 9-1: SerialNumber: syz
[ 1352.775567][ T5826] usb 9-1: config 0 descriptor??
[ 1352.845029][T16910] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1353.191799][T16910] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1353.891070][ T5826] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1353.932692][ T5826] asix 9-1:0.188: probe with driver asix failed with error -71
[ 1353.943110][T16709] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1354.034332][ T5826] usb 9-1: USB disconnect, device number 21
[ 1354.081064][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1354.318785][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1354.361541][    T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1354.401160][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1354.422479][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1354.433663][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1354.455145][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1354.493306][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1354.523638][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.460477][ T5826] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[ 1355.689466][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1355.737056][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 205, setting to 64
[ 1355.766796][T16925] usbtmc 1-1:16.0: simple usb_control_msg returned 0
[ 1355.785034][ T5826] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1355.846657][ T5826] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1355.873540][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.954022][T16948] loop4: detected capacity change from 0 to 128
[ 1355.961827][ T5826] usb 9-1: config 0 descriptor??
[ 1355.978279][ T5828] usb 1-1: USB disconnect, device number 12
[ 1355.997808][T16939] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1356.165138][T16948] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1356.297284][T16948] hpfs: filesystem error: improperly stopped
[ 1356.303752][T16948] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1356.407234][T16948] hpfs: You really don't want any checks? You are crazy...
[ 1356.415153][T16948] hpfs: hpfs_map_sector(): read error
[ 1356.492270][T16948] hpfs: code page support is disabled
[ 1356.577947][T16948] hpfs: hpfs_map_4sectors(): unaligned read
[ 1356.642777][T16948] hpfs: hpfs_map_4sectors(): unaligned read
[ 1356.683654][T16948] hpfs: filesystem error: unable to find root dir
[ 1356.709466][ T5826] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1356.898074][ T5826] usb 9-1: USB disconnect, device number 22
[ 1357.617795][T16709] veth0_vlan: entered promiscuous mode
[ 1357.755865][T16954] fido_id[16954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1357.815659][T16709] veth1_vlan: entered promiscuous mode
[ 1358.156464][T12594] Bluetooth: hci2: command 0x0406 tx timeout
[ 1358.432790][T16709] veth0_macvtap: entered promiscuous mode
[ 1358.571604][T16709] veth1_macvtap: entered promiscuous mode
[ 1358.840778][T16709] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1358.971313][T16709] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1359.137448][ T5891] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.207711][ T6462] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.279422][ T6462] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1359.321087][ T6462] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1362.488350][T17014] Bluetooth: MGMT ver 1.23
[ 1363.062068][T17020] loop9: detected capacity change from 0 to 1024
[ 1363.122021][T17020] EXT4-fs: Ignoring removed orlov option
[ 1363.177734][T17020] EXT4-fs: Ignoring removed bh option
[ 1363.266617][T12594] Bluetooth: hci3: command 0x0406 tx timeout
[ 1363.334000][T17020] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1363.473935][   T29] audit: type=1800 audit(1772181139.419:292): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3393" name="bus" dev="loop9" ino=18 res=0 errno=0
[ 1363.536917][ T5826] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1363.775427][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1363.810438][ T5826] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1363.863935][ T5826] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1363.955014][ T5826] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1363.999376][T15667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1364.042930][ T5826] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.123802][ T5826] usb 9-1: config 0 descriptor??
[ 1364.779045][ T5826] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0
[ 1365.074662][    T9] usb 9-1: USB disconnect, device number 23
[ 1365.141200][ T5826] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1365.218637][T17039] loop9: detected capacity change from 0 to 2048
[ 1365.356914][T17039] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1365.385083][ T5826] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1365.433371][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.487414][T17039] syz.9.3397: attempt to access beyond end of device
[ 1365.487414][T17039] loop9: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[ 1365.509472][T17047] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1365.523663][ T5826] usb 5-1: config 0 descriptor??
[ 1365.603258][ T5826] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1365.700746][T17039] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[ 1365.791794][T17039] Remounting filesystem read-only
[ 1365.821184][ T5826] gp8psk: usb in 128 operation failed.
[ 1365.841194][T17048] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[ 1365.880706][ T5826] gp8psk: usb in 137 operation failed.
[ 1365.909688][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1365.933907][ T5826] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1365.947544][T17039] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[ 1366.004375][ T5826] usb 5-1: media controller created
[ 1366.065198][T17049] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[ 1366.246806][T17043] fido_id[17043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1366.250446][T17051] NILFS error (device loop9): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0
[ 1366.303733][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1366.403652][T17044] loop0: detected capacity change from 0 to 4096
[ 1366.510032][T17044] EXT4-fs: inline encryption not supported
[ 1366.764051][ T5826] gp8psk_fe: Frontend attached
[ 1366.794156][ T5826] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)...
[ 1366.844312][ T5826] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1367.000074][T17044] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a84ec018, mo2=0003]
[ 1367.011128][T17044] System zones: 0-5
[ 1367.159651][T17044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1367.243279][ T5826] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1367.300519][ T5826] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1367.505767][    T9] usb 5-1: USB disconnect, device number 29
[ 1368.276872][T16752] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1368.350497][ T5891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1368.408755][ T5891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1368.491415][T16752] usb 10-1: Using ep0 maxpacket: 32
[ 1368.577809][T16752] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1368.637344][T16752] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1368.657218][T17067] loop8: detected capacity change from 0 to 2048
[ 1368.704517][T16752] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1368.767681][T16752] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.864128][T16752] usb 10-1: config 0 descriptor??
[ 1368.876918][T17067] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1368.900478][ T5891] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1368.932481][T16752] hub 10-1:0.0: USB hub found
[ 1368.958468][ T5891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1369.194809][T16752] hub 10-1:0.0: 1 port detected
[ 1369.431000][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1369.811780][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1369.896171][T16752] hub 10-1:0.0: activate --> -90
[ 1369.996666][    T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1370.272962][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1370.316822][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1370.354676][T11617] usb 10-1: USB disconnect, device number 8
[ 1370.376117][    T9] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1370.406598][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.453006][    T9] usb 5-1: config 0 descriptor??
[ 1370.609094][T17079] loop8: detected capacity change from 0 to 512
[ 1370.659206][T17079] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1370.819957][T17079] EXT4-fs (loop8): 1 truncate cleaned up
[ 1370.938488][T17079] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1370.993615][    T9] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0
[ 1371.048355][    T9] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0
[ 1371.111340][    T9] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0
[ 1371.136661][    T9] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0
[ 1371.196700][    T9] playstation 0003:054C:0DF2.0037: unknown main item tag 0x0
[ 1371.321499][   T29] audit: type=1800 audit(1772181147.269:293): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3405" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1371.342957][    T9] playstation 0003:054C:0DF2.0037: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0
[ 1371.451414][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1371.494171][    T9] playstation 0003:054C:0DF2.0037: Invalid byte count transferred, expected 20 got 0
[ 1371.566765][    T9] playstation 0003:054C:0DF2.0037: Failed to retrieve DualSense pairing info: -22
[ 1371.605955][    T9] playstation 0003:054C:0DF2.0037: Failed to get MAC address from DualSense
[ 1371.666719][    T9] playstation 0003:054C:0DF2.0037: Failed to create dualsense.
[ 1371.722259][    T9] playstation 0003:054C:0DF2.0037: probe with driver playstation failed with error -22
[ 1371.890251][    T9] usb 5-1: USB disconnect, device number 30
[ 1372.193884][T17091] loop9: detected capacity change from 0 to 128
[ 1372.329603][T17091] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1372.387184][T17091] hpfs: filesystem error: improperly stopped
[ 1372.432846][T17091] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1372.513279][T17091] hpfs: You really don't want any checks? You are crazy...
[ 1372.564425][T17091] hpfs: Code page index out of array
[ 1372.636896][T17091] hpfs: code page support is disabled
[ 1372.643218][T17091] hpfs: hpfs_map_4sectors(): unaligned read
[ 1372.688768][T17091] hpfs: hpfs_map_4sectors(): unaligned read
[ 1372.694906][T17091] hpfs: filesystem error: unable to find root dir
[ 1372.799877][T17097] binder: 17096:17097 ioctl c0306201 80000640 returned -22
[ 1373.080744][T17092] fido_id[17092]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1373.379500][T15975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1373.688004][ T6470] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1374.012783][T17100] loop4: detected capacity change from 0 to 2048
[ 1374.172782][ T6470] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1374.274364][T17100] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1374.602582][ T6470] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1375.032152][ T6470] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1375.842383][ T6470] bridge_slave_1: left allmulticast mode
[ 1375.867481][ T6470] bridge_slave_1: left promiscuous mode
[ 1375.874150][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1375.930126][ T6470] bridge_slave_0: left allmulticast mode
[ 1375.936035][ T6470] bridge_slave_0: left promiscuous mode
[ 1375.945038][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1376.868655][ T6470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1376.928008][ T6470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1376.958420][ T6470] bond0 (unregistering): Released all slaves
[ 1377.814691][T17130] loop0: detected capacity change from 0 to 256
[ 1377.883693][T17130] exfat: Deprecated parameter 'utf8'
[ 1377.971934][T17130] exfat: Deprecated parameter 'utf8'
[ 1378.068915][T17130] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[ 1378.240501][ T6470] hsr_slave_0: left promiscuous mode
[ 1378.393374][ T6470] hsr_slave_1: left promiscuous mode
[ 1378.430579][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1378.513325][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1378.597575][ T6470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1378.651479][ T6470] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1378.917001][ T6470] veth1_macvtap: left promiscuous mode
[ 1378.922770][ T6470] veth0_macvtap: left promiscuous mode
[ 1378.976741][ T6470] veth1_vlan: left promiscuous mode
[ 1378.982389][ T6470] veth0_vlan: left promiscuous mode
[ 1379.040738][T12594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1379.066926][T12594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1379.086910][T12594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1379.138640][T12594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1379.201850][T12594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1381.276670][ T5777] Bluetooth: hci1: command tx timeout
[ 1381.589605][ T6470] team0 (unregistering): Port device team_slave_1 removed
[ 1381.764948][ T6470] team0 (unregistering): Port device team_slave_0 removed
[ 1383.346503][ T5777] Bluetooth: hci1: command tx timeout
[ 1385.288540][T17138] chnl_net:caif_netlink_parms(): no params data found
[ 1385.427131][ T5777] Bluetooth: hci1: command tx timeout
[ 1387.410141][T17138] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1387.410991][T17138] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1387.411645][T17138] bridge_slave_0: entered allmulticast mode
[ 1387.415342][T17138] bridge_slave_0: entered promiscuous mode
[ 1387.473693][T17138] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1387.478198][T17138] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1387.478837][T17138] bridge_slave_1: entered allmulticast mode
[ 1387.482544][T17138] bridge_slave_1: entered promiscuous mode
[ 1387.509862][T12594] Bluetooth: hci1: command tx timeout
[ 1387.586602][ T5777] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1387.586729][T12594] Bluetooth: hci5: command 0x1003 tx timeout
[ 1387.633877][T17236] syz_tun: entered allmulticast mode
[ 1387.820800][T17236] dvmrp6: entered allmulticast mode
[ 1387.889244][T17138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1387.941259][T17138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1388.091701][T17233] syz_tun: left allmulticast mode
[ 1388.256156][T17138] team0: Port device team_slave_0 added
[ 1388.350161][T17138] team0: Port device team_slave_1 added
[ 1388.851617][T17138] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1388.917280][T17138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1389.016546][T17138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1389.085248][T17138] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1389.168514][T17138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1389.287689][T17138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1389.941500][T17138] hsr_slave_0: entered promiscuous mode
[ 1389.984733][T17138] hsr_slave_1: entered promiscuous mode
[ 1392.790053][T17291] loop5: detected capacity change from 0 to 4096
[ 1393.099018][T17293] loop6: detected capacity change from 0 to 1024
[ 1393.309379][T17293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1393.353859][T17289] loop4: detected capacity change from 0 to 4096
[ 1393.684887][T17293] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: comm syz.6.3465: inode #65328: comm syz.6.3465: iget: illegal inode #
[ 1393.723240][T17138] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1393.763246][T17303] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1393.810183][T17293] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.3465: error while reading EA inode 65328 err=-117
[ 1393.904401][T17138] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1394.172187][T17138] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1394.362499][T17138] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1394.565563][T16709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1394.844214][ T5777] Bluetooth: hci2: unexpected event for opcode 0x2027
[ 1395.583093][T17319] loop6: detected capacity change from 0 to 256
[ 1396.260620][T17319] FAT-fs (loop6): Directory bread(block 64) failed
[ 1396.337433][T17319] FAT-fs (loop6): Directory bread(block 65) failed
[ 1396.381433][T17138] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1396.399206][T17319] FAT-fs (loop6): Directory bread(block 66) failed
[ 1396.405991][T17319] FAT-fs (loop6): Directory bread(block 67) failed
[ 1396.503326][T17328] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3473'.
[ 1396.522363][T17319] FAT-fs (loop6): Directory bread(block 68) failed
[ 1396.579240][T17319] FAT-fs (loop6): Directory bread(block 69) failed
[ 1396.603416][T17319] FAT-fs (loop6): Directory bread(block 70) failed
[ 1396.632050][T17319] FAT-fs (loop6): Directory bread(block 71) failed
[ 1396.660379][T17319] FAT-fs (loop6): Directory bread(block 72) failed
[ 1396.702995][T17138] 8021q: adding VLAN 0 to HW filter on device team0
[ 1396.716803][T17319] FAT-fs (loop6): Directory bread(block 73) failed
[ 1396.745679][T17331] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1396.869821][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1396.877623][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1397.185014][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1397.192685][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1398.233766][T17341] loop4: detected capacity change from 0 to 512
[ 1398.305317][T17341] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1398.369126][T17342] loop9: detected capacity change from 0 to 7
[ 1398.471095][T17341] EXT4-fs (loop4): 1 truncate cleaned up
[ 1398.478467][T17342] Dev loop9: unable to read RDB block 7
[ 1398.577017][T17342]  loop9: unable to read partition table
[ 1398.601607][T17341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1398.631873][T17342] loop9: partition table beyond EOD, truncated
[ 1398.682040][T17342] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1398.910212][T17351] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz.4.3477: invalid fast symlink length 39
[ 1400.060818][    T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1400.078960][T13843] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1400.135003][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1400.352034][    T9] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1400.396580][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.404851][    T9] usb 7-1: Product: syz
[ 1400.452691][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1400.462690][    T9] usb 7-1: Manufacturer: syz
[ 1400.477655][    T9] usb 7-1: SerialNumber: syz
[ 1400.528230][    T9] usb 7-1: config 0 descriptor??
[ 1400.591358][    T9] ch341 7-1:0.0: ch341-uart converter detected
[ 1400.728177][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1400.903655][T17138] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1401.085639][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1401.639701][    T9] usb 7-1: ch341-uart converter now attached to ttyUSB0
[ 1401.828014][ T5826] usb 7-1: USB disconnect, device number 23
[ 1401.895574][ T5826] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[ 1401.943152][   T13] bridge_slave_1: left allmulticast mode
[ 1401.979071][   T13] bridge_slave_1: left promiscuous mode
[ 1401.996706][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1402.017677][ T5826] ch341 7-1:0.0: device disconnected
[ 1402.176446][   T13] bridge_slave_0: left allmulticast mode
[ 1402.182347][   T13] bridge_slave_0: left promiscuous mode
[ 1402.198904][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1403.099880][   T13] bridge0 (unregistering): left allmulticast mode
[ 1403.258101][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1403.300175][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1403.354056][   T13] bond0 (unregistering): Released all slaves
[ 1403.902779][T17390] netlink: 'syz.6.3486': attribute type 12 has an invalid length.
[ 1403.935382][T17390] netlink: 'syz.6.3486': attribute type 29 has an invalid length.
[ 1404.016774][T17390] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3486'.
[ 1404.026086][T17390] netlink: 'syz.6.3486': attribute type 1 has an invalid length.
[ 1404.123104][T17390] netlink: 'syz.6.3486': attribute type 2 has an invalid length.
[ 1404.132836][T17386] loop9: detected capacity change from 0 to 2048
[ 1404.208107][T17390] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3486'.
[ 1404.224382][T17386] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1404.246391][T17386] UDF-fs: Scanning with blocksize 512 failed
[ 1404.393851][T17386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1405.084438][T12594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1405.095712][T12594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1405.107604][T12594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1405.122844][T12594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1405.136127][T12594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1405.280640][   T13] hsr_slave_0: left promiscuous mode
[ 1405.338713][   T13] hsr_slave_1: left promiscuous mode
[ 1405.392896][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1405.416651][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1405.500239][   T13] veth1_macvtap: left promiscuous mode
[ 1405.505979][   T13] veth0_macvtap: left promiscuous mode
[ 1405.556774][   T13] veth1_vlan: left promiscuous mode
[ 1405.569961][   T13] veth0_vlan: left promiscuous mode
[ 1405.704253][T17406] o2cb: This node has not been configured.
[ 1405.714592][T17409] loop0: detected capacity change from 0 to 8
[ 1405.743916][T17406] o2cb: Cluster check failed. Fix errors before retrying.
[ 1405.837762][T17406] (syz.9.3490,17406,1):user_dlm_register:674 ERROR: status = -22
[ 1405.892933][T17406] (syz.9.3490,17406,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[ 1406.860555][   T13] pim6reg (unregistering): left allmulticast mode
[ 1407.269578][T12594] Bluetooth: hci4: command tx timeout
[ 1407.673364][   T13] team0 (unregistering): Port device team_slave_1 removed
[ 1407.761203][   T13] team0 (unregistering): Port device team_slave_0 removed
[ 1407.796824][ T5828] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1407.995328][ T5828] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1408.015822][ T5828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1408.094329][ T5828] usb 7-1: config 0 descriptor??
[ 1408.216858][ T5828] cp210x 7-1:0.0: cp210x converter detected
[ 1408.585561][ T5828] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1408.630589][T17415] netlink: 'syz.9.3495': attribute type 3 has an invalid length.
[ 1408.929789][ T5828] usb 7-1: cp210x converter now attached to ttyUSB0
[ 1409.346937][T12594] Bluetooth: hci4: command tx timeout
[ 1409.387321][T17138] veth0_vlan: entered promiscuous mode
[ 1409.863523][T17138] veth1_vlan: entered promiscuous mode
[ 1410.010487][ T5828] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1410.236662][ T5828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1410.276573][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.284857][ T5828] usb 1-1: Product: syz
[ 1410.347377][ T5828] usb 1-1: Manufacturer: syz
[ 1410.352273][ T5828] usb 1-1: SerialNumber: syz
[ 1410.727984][ T5826] usb 7-1: USB disconnect, device number 24
[ 1410.900159][ T5826] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1411.144149][ T5826] cp210x 7-1:0.0: device disconnected
[ 1411.230968][T17138] veth0_macvtap: entered promiscuous mode
[ 1411.344035][T17138] veth1_macvtap: entered promiscuous mode
[ 1411.427281][T12594] Bluetooth: hci4: command tx timeout
[ 1411.654292][ T5828] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[ 1411.689918][ T5828] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[ 1411.716398][ T5828] cdc_ncm 1-1:1.0: setting rx_max = 2048
[ 1411.803092][T17399] chnl_net:caif_netlink_parms(): no params data found
[ 1411.945886][T17138] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1412.057343][ T5828] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[ 1412.160353][ T5828] usb 1-1: USB disconnect, device number 13
[ 1412.205026][ T5828] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[ 1412.742470][T17138] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1413.151725][ T6473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.328367][T17471] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1413.410162][T11681] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.448293][T11681] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1413.506938][T12594] Bluetooth: hci4: command tx timeout
[ 1413.691031][T11681] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1414.780305][T17399] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1414.828576][T17399] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1414.876710][T17399] bridge_slave_0: entered allmulticast mode
[ 1414.918350][T17399] bridge_slave_0: entered promiscuous mode
[ 1415.018620][T17399] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1415.058487][T17399] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1415.084572][T17399] bridge_slave_1: entered allmulticast mode
[ 1415.101301][T17399] bridge_slave_1: entered promiscuous mode
[ 1415.244597][T17489] loop0: detected capacity change from 0 to 1024
[ 1415.526704][T17399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1415.657712][T17399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1416.085037][T17399] team0: Port device team_slave_0 added
[ 1416.175460][T17399] team0: Port device team_slave_1 added
[ 1416.638286][T17399] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1416.680341][T17399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1416.783963][T17399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1416.869079][T17399] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1416.896636][T17399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1417.049114][T17399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1417.713986][T17399] hsr_slave_0: entered promiscuous mode
[ 1417.758623][T17399] hsr_slave_1: entered promiscuous mode
[ 1417.808311][T17399] debugfs: 'hsr0' already exists in 'hsr'
[ 1417.814282][T17399] Cannot create hsr debugfs directory
[ 1418.104648][T17513] loop0: detected capacity change from 0 to 4096
[ 1418.268236][T17513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1418.907679][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1421.348582][T17399] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1421.472234][T17399] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1421.510304][T17555] loop0: detected capacity change from 0 to 512
[ 1421.577001][T17555] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1421.638889][T17399] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1421.722332][T17555] EXT4-fs (loop0): 1 truncate cleaned up
[ 1421.755387][T17399] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1421.802211][T17555] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1422.320961][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1423.121855][T17576] input: syz0 as /devices/virtual/input/input43
[ 1423.632732][T11681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1423.684912][T11681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1423.953528][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3532'.
[ 1424.004390][T17586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3532'.
[ 1424.066533][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1424.088949][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1424.180833][T17399] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1424.442163][T17399] 8021q: adding VLAN 0 to HW filter on device team0
[ 1424.514971][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1424.522702][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1424.665512][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1424.673224][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1426.219648][T17609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3537'.
[ 1426.902829][T17624] loop9: detected capacity change from 0 to 128
[ 1427.144799][T17621] loop6: detected capacity change from 0 to 2048
[ 1428.382206][T17399] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1428.948103][T17621] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1428.994522][T17624] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1429.179825][T17624] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1429.316834][T17621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1430.048064][T17712] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1430.525138][T15667] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1431.135307][T17724] loop9: detected capacity change from 0 to 16
[ 1431.241075][T17724] erofs (device loop9): mounted with root inode @ nid 36.
[ 1432.448846][T17737] loop0: detected capacity change from 0 to 1024
[ 1432.689703][T17737] hfsplus: b-tree write err: -5, ino 2
[ 1432.778526][T17737] hfsplus: b-tree write err: -5, ino 2
[ 1432.909171][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1433.174081][T17399] veth0_vlan: entered promiscuous mode
[ 1433.381795][T17399] veth1_vlan: entered promiscuous mode
[ 1433.450858][T15677] hfsplus: b-tree write err: -5, ino 25
[ 1433.507018][T15677] hfsplus: b-tree write err: -5, ino 4
[ 1433.513518][T15677] hfsplus: b-tree write err: -5, ino 2
[ 1433.519872][T17746] input: syz0 as /devices/virtual/input/input44
[ 1433.568159][T15677] hfsplus: b-tree write err: -5, ino 26
[ 1433.574100][T15677] hfsplus: b-tree write err: -5, ino 27
[ 1434.100069][T17399] veth0_macvtap: entered promiscuous mode
[ 1434.238526][T17399] veth1_macvtap: entered promiscuous mode
[ 1434.557400][T16878] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[ 1434.601886][T17399] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1434.788158][T16878] usb 8-1: Using ep0 maxpacket: 32
[ 1434.803343][T17399] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1434.830245][T16878] usb 8-1: config 0 has an invalid interface number: 67 but max is 0
[ 1434.885271][T16878] usb 8-1: config 0 has no interface number 0
[ 1434.916478][T16878] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1434.961801][T16878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1435.019634][T17686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.028983][T16878] usb 8-1: Product: syz
[ 1435.033368][T16878] usb 8-1: Manufacturer: syz
[ 1435.044354][T17686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.063729][T16878] usb 8-1: SerialNumber: syz
[ 1435.141468][T16878] usb 8-1: config 0 descriptor??
[ 1435.160438][T17662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.190741][T17686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1435.296574][ T5828] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[ 1435.480339][ T5828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1435.546454][ T5828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1435.555868][ T5828] usb 7-1: config 1 has no interface number 0
[ 1435.621345][ T5828] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1435.697527][ T5828] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1435.736537][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1435.745058][ T5828] usb 7-1: Product: syz
[ 1435.811086][ T5828] usb 7-1: Manufacturer: syz
[ 1435.860604][ T5828] usb 7-1: SerialNumber: syz
[ 1435.951178][ T5828] cdc_ncm 7-1:1.1: skipping garbage
[ 1435.972679][ T5828] cdc_ncm 7-1:1.1: NCM or ECM functional descriptors missing
[ 1436.024966][ T5828] cdc_ncm 7-1:1.1: bind() failure
[ 1436.339237][   T29] audit: type=1326 audit(1772181212.269:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1436.372643][T17777] loop0: detected capacity change from 0 to 16
[ 1436.466963][T17777] erofs (device loop0): mounted with root inode @ nid 36.
[ 1436.507319][T16878] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[ 1436.529763][   T29] audit: type=1326 audit(1772181212.289:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000
[ 1436.530032][   T29] audit: type=1326 audit(1772181212.289:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703ef6c code=0x7ffc0000
[ 1436.530284][   T29] audit: type=1326 audit(1772181212.369:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1436.530525][   T29] audit: type=1326 audit(1772181212.429:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1436.831040][T16878] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[ 1436.864475][T16878] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 1436.881690][T16878] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71
[ 1436.920664][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 1437.049908][T16878] usb 8-1: USB disconnect, device number 25
[ 1437.056948][   T29] audit: type=1326 audit(1772181212.579:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1437.219670][   T29] audit: type=1326 audit(1772181212.579:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1437.386651][   T29] audit: type=1326 audit(1772181212.579:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1437.499240][   T29] audit: type=1326 audit(1772181212.579:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1437.632481][   T29] audit: type=1326 audit(1772181212.579:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17772 comm="syz.9.3567" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703ef78 code=0x7ffc0000
[ 1438.200894][T17792] loop7: detected capacity change from 0 to 128
[ 1438.324354][ T5828] usb 7-1: USB disconnect, device number 25
[ 1438.551580][T17792] syz.7.3561: attempt to access beyond end of device
[ 1438.551580][T17792] loop7: rw=8390657, sector=171, nr_sectors = 1 limit=128
[ 1438.620882][T17792] Buffer I/O error on dev loop7, logical block 171, lost async page write
[ 1440.065224][T17809] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 1441.162047][T17824] overlay: filesystem on ./file0 not supported
[ 1441.995718][T17836] loop9: detected capacity change from 0 to 512
[ 1442.086966][T17836] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1442.250840][T17836] EXT4-fs (loop9): 1 truncate cleaned up
[ 1442.268659][T17836] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1442.441294][T17840] syzkaller0: tun_chr_ioctl cmd 1074812118
[ 1442.487469][T17840] syzkaller0: tun_chr_ioctl cmd 1074812117
[ 1442.527833][T17840] syzkaller0: tun_chr_ioctl cmd 1074025681
[ 1442.690755][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3577'.
[ 1442.718484][T17850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3577'.
[ 1443.361549][T15667] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1444.618637][T17686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1444.666765][T17686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1444.776793][T11617] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1444.986625][T11617] usb 1-1: Using ep0 maxpacket: 16
[ 1445.037989][T11617] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[ 1445.083224][T11617] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1445.141622][T11617] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1445.150131][T11617] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[ 1445.159849][T11617] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1445.168821][T17686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1445.196426][T17686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1445.238051][T11617] usb 1-1: config 0 descriptor??
[ 1445.654279][T11617] usbhid 1-1:0.0: can't add hid device: -71
[ 1445.684942][T11617] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1445.797485][T11617] usb 1-1: USB disconnect, device number 14
[ 1448.412007][T17911] loop9: detected capacity change from 0 to 128
[ 1449.756936][T11617] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[ 1449.908947][T17932] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3602'.
[ 1449.976913][T11617] usb 8-1: Using ep0 maxpacket: 32
[ 1450.013191][T11617] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[ 1450.044401][T11617] usb 8-1: config 0 has no interface number 0
[ 1450.080490][T11617] usb 8-1: config 0 interface 184 has no altsetting 0
[ 1450.120501][T11617] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1450.145370][T11617] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.164266][T11617] usb 8-1: Product: syz
[ 1450.174728][T11617] usb 8-1: Manufacturer: syz
[ 1450.180033][T11617] usb 8-1: SerialNumber: syz
[ 1450.225663][T11617] usb 8-1: config 0 descriptor??
[ 1450.983048][T11617] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1451.003180][T17942] loop6: detected capacity change from 0 to 512
[ 1451.009244][T11617] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1451.230196][T17942] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1451.307741][T17942] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1451.477911][T11617] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[ 1451.557188][T11617] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[ 1451.646489][T11617] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1451.714260][T11617] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[ 1451.833961][T11617] usb 8-1: USB disconnect, device number 26
[ 1452.141495][T17955] loop0: detected capacity change from 0 to 1024
[ 1452.211985][T17955] EXT4-fs: Ignoring removed orlov option
[ 1452.246447][    T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1452.283030][T16709] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1452.298857][T17955] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1452.526520][    T9] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[ 1452.556542][    T9] usb 6-1: config 0 has no interface number 0
[ 1452.562914][    T9] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1452.611501][    T9] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1452.643266][    T9] usb 6-1: config 0 interface 255 has no altsetting 0
[ 1452.649270][T17955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1452.662146][    T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1452.682743][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1452.849833][    T9] usb 6-1: config 0 descriptor??
[ 1452.904793][    T9] ums-realtek 6-1:0.255: USB Mass Storage device detected
[ 1453.079001][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3610'.
[ 1453.104629][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3610'.
[ 1453.120268][T17969] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3610'.
[ 1453.241335][    T9] usb 6-1: USB disconnect, device number 26
[ 1453.587736][T15736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1454.974330][T17992] loop9: detected capacity change from 0 to 256
[ 1455.426906][ T5777] Bluetooth: hci0: command 0x0406 tx timeout
[ 1457.858061][T18023] netlink: 'syz.6.3625': attribute type 3 has an invalid length.
[ 1460.178092][T18036] loop6: detected capacity change from 0 to 256
[ 1463.369491][T18067] loop0: detected capacity change from 0 to 128
[ 1463.427149][T18067] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1463.526744][T18067] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1463.836703][T17693] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1464.004713][T11681] =====================================================
[ 1464.013497][T11681] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xe7b/0xc820
[ 1464.023053][T11681]  n_tty_receive_buf_standard+0xe7b/0xc820
[ 1464.029526][T11681]  n_tty_receive_buf_common+0x1a59/0x2610
[ 1464.035847][T11681]  n_tty_receive_buf2+0x4c/0x60
[ 1464.041771][T11681]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1464.047983][T11681]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1464.100402][T11681]  flush_to_ldisc+0x43e/0xe40
[ 1464.105650][T11681]  process_scheduled_works+0xb21/0x1e30
[ 1464.125929][T11681]  worker_thread+0xede/0x1580
[ 1464.131548][T11681]  kthread+0x53f/0x600
[ 1464.136442][T11681]  ret_from_fork+0x20f/0x910
[ 1464.141516][T11681]  ret_from_fork_asm+0x1a/0x30
[ 1464.147031][T11681] 
[ 1464.149555][T11681] Uninit was stored to memory at:
[ 1464.155186][T11681]  n_tty_receive_buf_standard+0xe74/0xc820
[ 1464.175767][T11681]  n_tty_receive_buf_common+0x1a59/0x2610
[ 1464.182830][T11681]  n_tty_receive_buf2+0x4c/0x60
[ 1464.188537][T11681]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1464.194226][T11681]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1464.200822][T11681]  flush_to_ldisc+0x43e/0xe40
[ 1464.205924][T11681]  process_scheduled_works+0xb21/0x1e30
[ 1464.212087][T11681]  worker_thread+0xede/0x1580
[ 1464.217560][T11681]  kthread+0x53f/0x600
[ 1464.222116][T11681]  ret_from_fork+0x20f/0x910
[ 1464.227494][T11681]  ret_from_fork_asm+0x1a/0x30
[ 1464.232733][T11681] 
[ 1464.235246][T11681] Uninit was created at:
[ 1464.240038][T11681]  __kmalloc_noprof+0x486/0x1680
[ 1464.245164][T11681]  __tty_buffer_request_room+0x3d4/0x7a0
[ 1464.251244][T11681]  __tty_insert_flip_string_flags+0x157/0x6e0
[ 1464.257677][T11681]  uart_insert_char+0x368/0x930
[ 1464.267887][T11681]  serial8250_read_char+0x1ba/0x670
[ 1464.273367][T11681]  serial8250_handle_irq+0x930/0x1110
[ 1464.279102][T11681]  serial8250_default_handle_irq+0x116/0x370
[ 1464.285359][T11681]  serial8250_interrupt+0xcb/0x420
[ 1464.290884][T11681]  __handle_irq_event_percpu+0x13c/0xf90
[ 1464.297873][T11681]  handle_irq_event+0xe0/0x2a0
[ 1464.302849][T11681]  handle_edge_irq+0x2a9/0xb30
[ 1464.308423][T11681]  __common_interrupt+0x9d/0x180
[ 1464.313620][T11681]  common_interrupt+0x94/0xb0
[ 1464.318652][T11681]  asm_common_interrupt+0x2b/0x40
[ 1464.323885][T11681] 
[ 1464.327426][T11681] CPU: 1 UID: 0 PID: 11681 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1464.339262][T11681] Tainted: [L]=SOFTLOCKUP
[ 1464.343743][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1464.354162][T11681] Workqueue: events_unbound flush_to_ldisc
[ 1464.365389][T11681] =====================================================
[ 1464.374122][T11681] Disabling lock debugging due to kernel taint
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1465.021515][T17992] FAT-fs (loop9): error, fat_get_cluster: detected the cluster chain loop (i_pos 194)
[ 1465.106542][T17992] FAT-fs (loop9): Filesystem has been set read-only
[ 1465.115112][T17992] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 194)
[ 1465.557503][T11681] Kernel panic - not syncing: kmsan.panic set ...
[ 1465.564130][T11681] CPU: 1 UID: 0 PID: 11681 Comm: kworker/u8:4 Tainted: G    B        L      syzkaller #0 PREEMPT(full) 
[ 1465.575493][T11681] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP
[ 1465.581166][T11681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1465.591495][T11681] Workqueue: events_unbound flush_to_ldisc
[ 1465.597552][T11681] Call Trace:
[ 1465.600965][T11681]  <TASK>
[ 1465.604044][T11681]  __dump_stack+0x26/0x30
[ 1465.608700][T11681]  dump_stack_lvl+0x50/0x1c0
[ 1465.613509][T11681]  ? dump_stack+0x12/0x25
[ 1465.618066][T11681]  dump_stack+0x1e/0x25
[ 1465.622436][T11681]  vpanic+0x7b4/0x1430
[ 1465.626746][T11681]  panic+0x15d/0x160
[ 1465.630919][T11681]  kmsan_report+0x31a/0x320
[ 1465.635693][T11681]  ? __msan_warning+0x1b/0x30
[ 1465.640688][T11681]  ? n_tty_receive_buf_standard+0xe7b/0xc820
[ 1465.646952][T11681]  ? n_tty_receive_buf_common+0x1a59/0x2610
[ 1465.653129][T11681]  ? n_tty_receive_buf2+0x4c/0x60
[ 1465.658533][T11681]  ? tty_ldisc_receive_buf+0xc6/0x2c0
[ 1465.664137][T11681]  ? tty_port_default_receive_buf+0xd7/0x1a0
[ 1465.670362][T11681]  ? flush_to_ldisc+0x43e/0xe40
[ 1465.675439][T11681]  ? process_scheduled_works+0xb21/0x1e30
[ 1465.681383][T11681]  ? worker_thread+0xede/0x1580
[ 1465.686534][T11681]  ? kthread+0x53f/0x600
[ 1465.691005][T11681]  ? ret_from_fork+0x20f/0x910
[ 1465.695988][T11681]  ? ret_from_fork_asm+0x1a/0x30
[ 1465.701223][T11681]  ? ret_from_fork_asm+0x1a/0x30
[ 1465.706428][T11681]  ? kmsan_get_metadata+0xf1/0x160
[ 1465.711800][T11681]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1465.717915][T11681]  ? kmsan_get_metadata+0xf1/0x160
[ 1465.723353][T11681]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1465.729964][T11681]  ? kmsan_get_metadata+0x146/0x160
[ 1465.735445][T11681]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1465.741549][T11681]  ? n_tty_receive_char+0x1223/0x14f0
[ 1465.747191][T11681]  ? __wake_up+0x29d/0x2f0
[ 1465.751816][T11681]  ? kmsan_get_metadata+0xf1/0x160
[ 1465.757209][T11681]  __msan_warning+0x1b/0x30
[ 1465.761942][T11681]  n_tty_receive_buf_standard+0xe7b/0xc820
[ 1465.768172][T11681]  n_tty_receive_buf_common+0x1a59/0x2610
[ 1465.774275][T11681]  n_tty_receive_buf2+0x4c/0x60
[ 1465.779401][T11681]  ? __pfx_n_tty_receive_buf2+0x10/0x10
[ 1465.785242][T11681]  tty_ldisc_receive_buf+0xc6/0x2c0
[ 1465.790693][T11681]  tty_port_default_receive_buf+0xd7/0x1a0
[ 1465.796766][T11681]  flush_to_ldisc+0x43e/0xe40
[ 1465.801685][T11681]  ? __pfx_tty_port_default_receive_buf+0x10/0x10
[ 1465.808375][T11681]  ? __pfx_flush_to_ldisc+0x10/0x10
[ 1465.813825][T11681]  process_scheduled_works+0xb21/0x1e30
[ 1465.819673][T11681]  worker_thread+0xede/0x1580
[ 1465.824627][T11681]  kthread+0x53f/0x600
[ 1465.828978][T11681]  ? __pfx_worker_thread+0x10/0x10
[ 1465.834331][T11681]  ? __pfx_kthread+0x10/0x10
[ 1465.839205][T11681]  ret_from_fork+0x20f/0x910
[ 1465.844019][T11681]  ? __switch_to+0x51c/0x750
[ 1465.848979][T11681]  ? __pfx_kthread+0x10/0x10
[ 1465.853813][T11681]  ret_from_fork_asm+0x1a/0x30
[ 1465.858857][T11681]  </TASK>
[ 1465.862677][T11681] Kernel Offset: disabled
[ 1465.867174][T11681] Rebooting in 86400 seconds..