last executing test programs:

2m44.67703915s ago: executing program 3 (id=825):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@sysvgroups}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nolazytime}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")

2m43.424013237s ago: executing program 3 (id=832):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10)

2m42.608433689s ago: executing program 3 (id=836):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3})

2m41.723962795s ago: executing program 3 (id=842):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

2m41.378013751s ago: executing program 2 (id=845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0)

2m40.619888437s ago: executing program 2 (id=850):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000001480)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@nobarrier}, {@force}, {@type={'type', 0x3d, "05f2875e"}}, {@barrier}]}, 0x3, 0x632, &(0x7f0000000800)="$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")
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1fc, &(0x7f0000001280)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

2m40.322897948s ago: executing program 3 (id=852):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x124)
fcntl$notify(r0, 0x402, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0xd)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0)

2m39.560235909s ago: executing program 2 (id=857):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0)

2m39.431151725s ago: executing program 3 (id=858):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8080, &(0x7f00000000c0)=ANY=[], 0x0, 0x31b, &(0x7f0000001300)="$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")
fchdir(0xffffffffffffffff)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
close(0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18)
syz_emit_vhci(0x0, 0xf)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x0, 0x22}}}}, 0x11)
fsync(r0)

2m38.24440294s ago: executing program 32 (id=858):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8080, &(0x7f00000000c0)=ANY=[], 0x0, 0x31b, &(0x7f0000001300)="$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")
fchdir(0xffffffffffffffff)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4)
close(0xffffffffffffffff)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18)
syz_emit_vhci(0x0, 0xf)
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x0, 0x22}}}}, 0x11)
fsync(r0)

2m38.215355912s ago: executing program 2 (id=862):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)

2m37.299673227s ago: executing program 2 (id=866):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18)
recvmmsg(r0, &(0x7f0000009d80)=[{{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)=""/13, 0xd}], 0x1}, 0x7530312a}], 0x1, 0x2, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x20, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x0, @void}}}}}}}, 0x0)

2m36.360468753s ago: executing program 2 (id=870):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x6)

2m33.930900922s ago: executing program 33 (id=870):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCAPPLICATION(r1, 0x4802, 0x6)

1m58.429504546s ago: executing program 1 (id=961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000000000"], 0x1c}}, 0x0)

1m57.532713901s ago: executing program 1 (id=966):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x164)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$nbd(r1, &(0x7f0000000140)={0x67446698, 0x0, 0x1, 0x0, 0x3}, 0x10)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c00c, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1m56.031930541s ago: executing program 1 (id=971):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0)

1m55.195164798s ago: executing program 1 (id=975):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
llistxattr(&(0x7f0000000180)='./file2\x00', 0x0, 0x0)

1m53.279202977s ago: executing program 1 (id=983):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24048180)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x2c}}, 0x20000050)

1m52.150970967s ago: executing program 1 (id=986):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000380)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})

1m48.35836875s ago: executing program 34 (id=986):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000380)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})

57.255837241s ago: executing program 7 (id=1148):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setfsgid(0xee00)

52.412649021s ago: executing program 7 (id=1162):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = syz_open_dev$vim2m(0x0, 0x280000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

51.729255409s ago: executing program 7 (id=1165):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000000)={[{@fat=@discard}, {@fat=@dmask={'dmask', 0x3d, 0x87a3}}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x401}}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000680)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=")
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

51.187572649s ago: executing program 6 (id=1167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x28}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x68}}, 0x0)

50.762648403s ago: executing program 7 (id=1169):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@usrquota}, {@nodiscard}, {@noinit_itable}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
open(&(0x7f0000000240)='.\x00', 0x0, 0x80)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

50.404243229s ago: executing program 6 (id=1171):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, 0x0)

49.419215828s ago: executing program 7 (id=1175):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = syz_open_dev$vim2m(0x0, 0x280000000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

47.992315996s ago: executing program 7 (id=1180):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

47.827413611s ago: executing program 6 (id=1182):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
ioctl$sock_bt_hci(r0, 0x400448c8, &(0x7f0000000000))

45.915343943s ago: executing program 35 (id=1180):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x20}}], 0x1, 0x80)

45.89735745s ago: executing program 6 (id=1185):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@usrquota}, {@nodiscard}, {@noinit_itable}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000008)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

43.890295374s ago: executing program 6 (id=1192):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSABS20(r1, 0x401845e0, 0x0)

42.32367953s ago: executing program 6 (id=1197):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {}, {@max_inline={'max_inline', 0x3d, [0x33, 0x5b32ed2feab8b119, 0x70, 0x74, 0x65, 0x38]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x100000000000000)

39.161314866s ago: executing program 36 (id=1197):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000040)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {}, {@max_inline={'max_inline', 0x3d, [0x33, 0x5b32ed2feab8b119, 0x70, 0x74, 0x65, 0x38]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x100000000000000)

6.47595836s ago: executing program 4 (id=1297):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)

6.341627942s ago: executing program 8 (id=1299):
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7041, 0x0)

5.713469905s ago: executing program 5 (id=1300):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x0, 0x4}]}}}}}}}}, 0x0)

5.308206664s ago: executing program 8 (id=1301):
setreuid(0x0, 0xee01)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x6, 0x6, 0xe30, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfc})

5.249265251s ago: executing program 0 (id=1302):
r0 = socket$igmp(0x2, 0x3, 0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000700)=0xffffffff, 0x4)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

4.93801635s ago: executing program 5 (id=1303):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800)
ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0x100, 0x64a})

4.878820815s ago: executing program 9 (id=1304):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf)

4.639617854s ago: executing program 4 (id=1305):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000640)=ANY=[@ANYBLOB="757466382c696f636861727365743d63703836352c6d61703d61636f726e2c63727566742c6d61703d6f66662c756e686964652c636865636b3d7374726963742c6d61703d6f66662c6d61703d61636f726e2c6d6f64653d3078303030303030303030303030303030382c636865636b3d72656c617865642c6d61703d61636f726e2c756e686964652c73686f776173736f632c003a97f293ea4818905051ca3c7c5d4b5999c2ff48306a695db2764a356812ebb7612cd886030d7ce9bc27bbd64580966cdb907082f5c17358ccd2c4"], 0x4, 0xa07, &(0x7f0000001f80)="$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")
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

4.438577216s ago: executing program 8 (id=1306):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a0300000000357c000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000e60028000000000a01040000000000000000030000000900010073797a30000000"], 0xb0}}, 0x0)

4.321282181s ago: executing program 0 (id=1307):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x28, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

4.140373384s ago: executing program 9 (id=1308):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x7, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x0})

3.746710239s ago: executing program 5 (id=1309):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000011c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x6}, 0xfffffffa}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000980)="d9", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000fc0)="9e", 0x1}], 0x1}}], 0x2, 0x40000c5)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x3}, &(0x7f0000000100)=0x90)

3.659694723s ago: executing program 4 (id=1310):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0x5450, 0x0)

3.624811262s ago: executing program 9 (id=1311):
mkdir(&(0x7f0000000100)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binfmt_misc\x00', 0x3000005, 0x0)
chroot(&(0x7f0000000200)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)

3.554256651s ago: executing program 8 (id=1312):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

3.412402059s ago: executing program 0 (id=1313):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x0, 0x4}]}}}}}}}}, 0x0)

2.989288621s ago: executing program 4 (id=1314):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x24, 0x28, 0x5b1c90f1fc49f939, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8, 0x5}, {0x7, 0xa}}}, 0x24}}, 0x0)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x4000001)
execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

2.957915333s ago: executing program 5 (id=1315):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.776629997s ago: executing program 9 (id=1316):
r0 = syz_open_dev$cec(0x0, 0x0, 0x121240)
setreuid(0x0, 0xee01)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x6, 0x6, 0xe30, 0x3ff, "c2a0da871813beebb98f6cd3bde10363", 0x8, 0x9, 0x9, 0x2, 0x2, 0x0, 0xfc})

2.301724282s ago: executing program 0 (id=1317):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)

1.852942431s ago: executing program 4 (id=1318):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xf)

1.727832115s ago: executing program 8 (id=1319):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18)
acct(0x0)

1.622523787s ago: executing program 9 (id=1320):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@multicast2, 0x4d5}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0)

1.062813204s ago: executing program 5 (id=1321):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x7, 0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), 0x0})

750.119303ms ago: executing program 0 (id=1322):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a0300000000357c000000030000000900030073797a30000000000900010073797a3000000000140004800800024000000000080001400000e60028000000000a01040000000000000000030000000900010073797a30000000"], 0xb0}}, 0x0)

583.836472ms ago: executing program 8 (id=1323):
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0)

583.688278ms ago: executing program 4 (id=1324):
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000301"])
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4)

452.251781ms ago: executing program 9 (id=1325):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080), 0x4)
sendmsg$802154_dgram(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={&(0x7f00000023c0)="3aa69ff85d0ce6af14f959d64b689751d9c5992be6bdd563da341e6da515f020f90e58e8baead0cbc0d24ca94c523520dcaf9bfd68fe984a5befa8c17a7e6ae0c50197178920533e1d6d3da8e4152376291efb90bd966e7d679a420e99bfdb3fc140", 0x62}}, 0x4040044)

404.989808ms ago: executing program 5 (id=1326):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004180)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000ffdbdf253000000008000300", @ANYRES32=r1, @ANYBLOB="060036003c000000060036"], 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x800)

0s ago: executing program 0 (id=1327):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x0)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x1, 0x0, 0x4}]}}}}}}}}, 0x0)

kernel console output (not intermixed with test programs):

_slave_1: left allmulticast mode
[  267.690463][ T6442] bridge_slave_1: left promiscuous mode
[  267.697212][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.921072][ T6442] bridge_slave_0: left allmulticast mode
[  267.927289][ T6442] bridge_slave_0: left promiscuous mode
[  267.937702][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.356702][ T6454] loop1: detected capacity change from 0 to 256
[  268.387799][ T6454] exfat: Bad value for 'gid'
[  268.403749][ T6454] exfat: Bad value for 'gid'
[  269.267755][ T6463] netlink: 56 bytes leftover after parsing attributes in process `syz.3.212'.
[  269.579629][ T5852] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  269.769929][ T5852] usb 3-1: Using ep0 maxpacket: 8
[  269.805969][ T5852] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  269.814875][ T5852] usb 3-1: config 179 has no interface number 0
[  269.821965][ T5852] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  269.836004][ T5852] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  269.848796][ T5852] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  269.860460][ T5852] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  269.872335][ T5852] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  269.886022][ T5852] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  269.895654][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.153979][ T6466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  270.365242][ T6472] loop4: detected capacity change from 0 to 4096
[  270.415057][ T5852] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5
[  270.499893][ T6472] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  270.619671][ T1864] usb 3-1: USB disconnect, device number 2
[  270.619833][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  270.638906][    C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending?
[  271.035615][ T6481] loop3: detected capacity change from 0 to 256
[  271.036153][ T6472] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  271.058767][ T6472] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  271.129192][ T6481] exfat: Bad value for 'gid'
[  271.134220][ T6481] exfat: Bad value for 'gid'
[  271.312700][ T6472] ntfs3(loop4): ino=1e, mi_enum_attr
[  271.318495][ T6472] ntfs3(loop4): ino=1e, mi_enum_attr
[  271.324706][ T6472] ntfs3(loop4): ino=1e, "file1" mi_enum_attr
[  271.331328][ T6472] ntfs3(loop4): ino=1e, "file1" mi_enum_attr
[  271.466517][ T6472] ntfs3(loop4): ino=1e, "file1" mi_enum_attr
[  271.473925][ T6472] ntfs3(loop4): ino=1e, "file1" mi_enum_attr
[  271.480430][ T6472] ntfs3(loop4): ino=1e, "file1" ni_find_attr
[  272.029086][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  272.232493][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.243074][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  272.253515][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.359981][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.370495][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  272.380619][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.455264][ T6493] loop4: detected capacity change from 0 to 256
[  272.506238][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.517132][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  272.527752][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  272.609093][ T6493] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  272.707837][ T5852] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  272.717433][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.725955][ T5852] usb 3-1: Product: syz
[  272.730543][ T5852] usb 3-1: Manufacturer: syz
[  272.735351][ T5852] usb 3-1: SerialNumber: syz
[  272.759491][   T30] audit: type=1800 audit(1763586826.267:7): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.226" name="file2" dev="loop4" ino=1048615 res=0 errno=0
[  272.780984][   T30] audit: type=1800 audit(1763586826.287:8): pid=6493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.226" name="file2" dev="loop4" ino=1048615 res=0 errno=0
[  272.877239][ T5852] usb 3-1: config 0 descriptor??
[  272.941844][ T5852] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  272.952845][ T5852] usb 3-1: Detected SIO
[  272.957260][ T5852] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  273.163493][ T5852] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  273.178684][ T6501] netlink: 56 bytes leftover after parsing attributes in process `syz.1.228'.
[  273.239990][ T5852] usb 3-1: USB disconnect, device number 3
[  273.275250][ T5852] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  273.287933][ T5852] ftdi_sio 3-1:0.0: device disconnected
[  274.565269][ T6514] loop4: detected capacity change from 0 to 256
[  274.760416][ T6514] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  275.731319][ T6531] netlink: 56 bytes leftover after parsing attributes in process `syz.4.242'.
[  276.247556][ T6535] loop2: detected capacity change from 0 to 512
[  276.479470][ T6540] binder: 6539:6540 ioctl 4018620d 0 returned -22
[  277.773716][ T6556] loop3: detected capacity change from 0 to 256
[  277.980017][ T6556] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  278.006057][ T6559] Zero length message leads to an empty skb
[  278.862709][ T6565] netlink: 56 bytes leftover after parsing attributes in process `syz.3.256'.
[  279.425144][ T6569] loop3: detected capacity change from 0 to 512
[  279.466169][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'.
[  279.499871][ T6571] bridge_slave_1: left allmulticast mode
[  279.505776][ T6571] bridge_slave_1: left promiscuous mode
[  279.512812][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.623798][ T6571] bridge_slave_0: left allmulticast mode
[  279.630130][ T6571] bridge_slave_0: left promiscuous mode
[  279.636925][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.881791][ T6582] sctp: [Deprecated]: syz.0.265 (pid 6582) Use of struct sctp_assoc_value in delayed_ack socket option.
[  280.881791][ T6582] Use struct sctp_sack_info instead
[  280.944641][ T6583] loop3: detected capacity change from 0 to 256
[  281.105808][ T6583] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  281.787003][ T6585] loop1: detected capacity change from 0 to 2048
[  282.172083][ T6594] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.258136][ T6599] netlink: 56 bytes leftover after parsing attributes in process `syz.0.270'.
[  285.631242][ T5791] Bluetooth: hci4: link tx timeout
[  285.636595][ T5791] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  285.645359][ T5791] Bluetooth: hci4: link tx timeout
[  285.650916][ T5791] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  286.190891][ T6618] loop3: detected capacity change from 0 to 1024
[  286.445706][ T6618] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  286.452655][ T6618] hfsplus: xattr search failed
[  286.828088][ T6594] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  286.839877][ T6594] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  286.929237][ T6594] Remounting filesystem read-only
[  286.971067][   T58] hfsplus: b-tree write err: -5, ino 4
[  287.087099][ T6626] loop0: detected capacity change from 0 to 256
[  287.110046][ T5788] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  287.307503][ T6630] netlink: 56 bytes leftover after parsing attributes in process `syz.4.283'.
[  287.380881][ T6626] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  287.693926][ T5791] Bluetooth: hci4: command 0x0406 tx timeout
[  288.030663][ T6634] loop2: detected capacity change from 0 to 512
[  289.438872][ T6651] netlink: 'syz.4.292': attribute type 1 has an invalid length.
[  289.447118][ T6651] netlink: 'syz.4.292': attribute type 2 has an invalid length.
[  289.455623][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'.
[  289.768609][ T5791] Bluetooth: hci4: command 0x0406 tx timeout
[  290.572548][ T6661] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[  290.742727][ T6663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.298'.
[  291.088124][ T6666] loop2: detected capacity change from 0 to 512
[  291.379504][ T5419] kernel read not supported for file [fscontext] (pid: 5419 comm: kworker/1:3)
[  291.609433][ T1864] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  291.829174][ T1864] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  291.838764][ T1864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.972027][ T1864] usb 5-1: config 0 descriptor??
[  292.136113][ T6675] loop2: detected capacity change from 0 to 512
[  292.248693][ T1864] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0e
[  292.265258][ T1864] hackrf 5-1:0.0: Could not detect board
[  292.273914][ T1864] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[  292.324336][ T6675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  292.338050][ T6675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  292.380647][ T1864] usb 5-1: USB disconnect, device number 3
[  292.473780][ T6675] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  292.534787][ T6675] EXT4-fs (loop2): 1 truncate cleaned up
[  292.542967][ T6675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.774966][ T6675] EXT4-fs (loop2): shut down requested (1)
[  292.825082][ T6675] syz.2.303 (pid 6675) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  293.185634][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.723970][ T6695] netlink: 56 bytes leftover after parsing attributes in process `syz.3.312'.
[  294.143144][ T6699] loop4: detected capacity change from 0 to 512
[  294.615843][ T5852] kernel read not supported for file [fscontext] (pid: 5852 comm: kworker/0:5)
[  296.442120][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  296.453623][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  299.814026][ T6744] loop3: detected capacity change from 0 to 1024
[  299.978189][ T6744] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  299.989496][ T6744] hfsplus: xattr searching failed
[  300.055554][ T6747] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  300.063433][ T6747] hfsplus: xattr search failed
[  300.457267][ T6749] loop0: detected capacity change from 0 to 1024
[  300.502382][ T6749] EXT4-fs: Ignoring removed bh option
[  300.517504][ T4273] hfsplus: b-tree write err: -5, ino 4
[  300.641377][ T6749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.286633][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.194291][ T6778] loop0: detected capacity change from 0 to 1024
[  303.452533][ T6778] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  303.459457][ T6778] hfsplus: xattr searching failed
[  303.477461][ T6785] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  303.485130][ T6785] hfsplus: xattr search failed
[  304.020373][  T145] hfsplus: b-tree write err: -5, ino 4
[  305.074932][ T6804] loop4: detected capacity change from 0 to 128
[  305.134841][ T6804] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  305.176265][ T6804] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  305.646393][ T6806] misc userio: Invalid payload size
[  305.684194][ T6806] misc userio: The device must be registered before sending interrupts
[  305.704735][ T6806] misc userio: The device must be registered before sending interrupts
[  306.271791][ T6811] netlink: 84 bytes leftover after parsing attributes in process `syz.3.364'.
[  306.918476][ T6816] loop4: detected capacity change from 0 to 1024
[  307.030634][ T6819] loop2: detected capacity change from 0 to 1024
[  307.071712][ T6819] EXT4-fs: Ignoring removed bh option
[  307.170990][ T6816] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  307.177799][ T6816] hfsplus: xattr searching failed
[  307.241381][ T6819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.342178][ T6823] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  307.348987][ T6823] hfsplus: xattr search failed
[  307.744928][  T133] hfsplus: b-tree write err: -5, ino 4
[  307.756933][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.269881][ T6832] loop2: detected capacity change from 0 to 256
[  308.487504][ T6832] loop2: detected capacity change from 256 to 0
[  308.509528][    C0] I/O error, dev loop2, sector 120 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  308.553849][ T6835] FAT-fs (loop2): unable to read boot sector to mark fs as dirty
[  308.879392][ T6838] misc userio: Invalid payload size
[  308.966038][ T5792] FAT-fs (loop2): unable to read boot sector to mark fs as dirty
[  309.358873][ T6844] netlink: 84 bytes leftover after parsing attributes in process `syz.2.377'.
[  310.149767][ T6852] loop2: detected capacity change from 0 to 1024
[  310.185014][ T6852] EXT4-fs: Ignoring removed bh option
[  310.310262][ T6852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.022466][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.158034][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'.
[  311.609900][ T6874] netlink: 84 bytes leftover after parsing attributes in process `syz.4.391'.
[  311.645663][ T6873] misc userio: Invalid payload size
[  312.077089][ T6878] loop3: detected capacity change from 0 to 1024
[  313.251076][ T6890] loop4: detected capacity change from 0 to 1024
[  313.315755][ T6890] EXT4-fs: Ignoring removed bh option
[  313.445257][ T6890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  314.199044][   T11] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  314.232729][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.431668][   T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  314.443615][   T11] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  314.444350][ T6907] netlink: 84 bytes leftover after parsing attributes in process `syz.0.404'.
[  314.505609][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[  314.604632][   T11] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  314.614485][   T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  314.623856][   T11] usb 4-1: SerialNumber: syz
[  314.717118][   T11] usb 4-1: bad CDC descriptors
[  314.725045][   T11] usb-storage 4-1:1.0: USB Mass Storage device detected
[  314.800274][   T11] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  314.833758][   T11] scsi host1: usb-storage 4-1:1.0
[  314.964140][   T11] usb 4-1: USB disconnect, device number 2
[  316.689214][ T6932] nbd0: detected capacity change from 0 to 549764202496
[  316.752802][   T51] block nbd0: Receive control failed (result -32)
[  316.846934][ T6936] netlink: 84 bytes leftover after parsing attributes in process `syz.0.417'.
[  316.946396][ T6091] block nbd0: Dead connection, failed to find a fallback
[  316.954116][ T6091] block nbd0: shutting down sockets
[  316.959892][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  316.969483][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  316.977759][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  316.987188][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  316.995550][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.004976][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.013414][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.022834][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.038924][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.050408][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.058733][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.068020][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.076519][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.086082][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.094421][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.103816][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.111988][ T6091] ldm_validate_partition_table(): Disk read failed.
[  317.119049][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.128646][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.144593][ T6091] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.155897][ T6091] Buffer I/O error on dev nbd0, logical block 0, async page read
[  317.164614][ T6091] Dev nbd0: unable to read RDB block 0
[  317.171474][ T6091]  nbd0: unable to read partition table
[  317.187649][ T6091] ldm_validate_partition_table(): Disk read failed.
[  317.195477][ T6091] Dev nbd0: unable to read RDB block 0
[  317.202237][ T6091]  nbd0: unable to read partition table
[  317.853568][   T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  318.053019][   T11] usb 1-1: Using ep0 maxpacket: 16
[  318.110145][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.121709][   T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.132099][   T11] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  318.141533][   T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.221771][   T11] usb 1-1: config 0 descriptor??
[  318.611372][ T6949] loop1: detected capacity change from 0 to 2048
[  318.745152][   T11] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  318.901812][ T6950] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  319.044208][   T11] usb 1-1: USB disconnect, device number 3
[  319.210203][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  320.849013][   T11] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  321.078456][   T11] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  321.087898][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.096754][   T11] usb 2-1: Product: syz
[  321.101337][   T11] usb 2-1: Manufacturer: syz
[  321.106236][   T11] usb 2-1: SerialNumber: syz
[  321.191818][   T11] usb 2-1: config 0 descriptor??
[  321.217654][   T11] asix 2-1:0.0: probe with driver asix failed with error -22
[  322.048411][    C0] hrtimer: interrupt took 299869 ns
[  322.870543][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  324.719628][ T5803] Bluetooth: hci3: command 0x0406 tx timeout
[  324.720680][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  324.732698][ T5086] Bluetooth: hci0: command 0x0406 tx timeout
[  324.739004][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  327.198946][   T11] usb 2-1: USB disconnect, device number 3
[  329.567239][ T7002] loop4: detected capacity change from 0 to 128
[  329.659068][ T7002] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  330.161628][ T7010] misc userio: Invalid payload size
[  331.123305][ T7017] loop0: detected capacity change from 0 to 1024
[  331.209575][ T7017] EXT4-fs: Ignoring removed orlov option
[  331.215644][ T7017] EXT4-fs: Ignoring removed nomblk_io_submit option
[  331.821614][ T7017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.847284][ T7023] loop1: detected capacity change from 0 to 256
[  332.388926][ T7025] loop4: detected capacity change from 0 to 256
[  332.989958][ T7025] FAT-fs (loop4): Directory bread(block 64) failed
[  333.004049][ T7025] FAT-fs (loop4): Directory bread(block 65) failed
[  333.017404][ T7025] FAT-fs (loop4): Directory bread(block 66) failed
[  333.026797][ T7025] FAT-fs (loop4): Directory bread(block 67) failed
[  333.034378][ T7025] FAT-fs (loop4): Directory bread(block 68) failed
[  333.041273][ T7025] FAT-fs (loop4): Directory bread(block 69) failed
[  333.048668][ T7025] FAT-fs (loop4): Directory bread(block 70) failed
[  333.055484][ T7025] FAT-fs (loop4): Directory bread(block 71) failed
[  333.062535][ T7025] FAT-fs (loop4): Directory bread(block 72) failed
[  333.069427][ T7025] FAT-fs (loop4): Directory bread(block 73) failed
[  333.563042][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.992854][ T7033] loop0: detected capacity change from 0 to 256
[  334.454389][ T7033] FAT-fs (loop0): Directory bread(block 64) failed
[  334.461569][ T7033] FAT-fs (loop0): Directory bread(block 65) failed
[  334.468833][ T7033] FAT-fs (loop0): Directory bread(block 66) failed
[  334.475586][ T7033] FAT-fs (loop0): Directory bread(block 67) failed
[  334.482683][ T7033] FAT-fs (loop0): Directory bread(block 68) failed
[  334.489698][ T7033] FAT-fs (loop0): Directory bread(block 69) failed
[  334.496629][ T7033] FAT-fs (loop0): Directory bread(block 70) failed
[  334.503596][ T7033] FAT-fs (loop0): Directory bread(block 71) failed
[  334.510745][ T7033] FAT-fs (loop0): Directory bread(block 72) failed
[  334.517487][ T7033] FAT-fs (loop0): Directory bread(block 73) failed
[  335.328907][   T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  335.402983][ T7050] loop3: detected capacity change from 0 to 256
[  335.569582][   T11] usb 3-1: config 6 has an invalid interface number: 174 but max is 0
[  335.578038][   T11] usb 3-1: config 6 has no interface number 0
[  335.579099][ T1864] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  335.584824][   T11] usb 3-1: config 6 interface 174 has no altsetting 0
[  335.662160][   T11] usb 3-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=9c.1f
[  335.674749][   T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.684049][   T11] usb 3-1: Product: syz
[  335.688793][   T11] usb 3-1: Manufacturer: syz
[  335.693610][   T11] usb 3-1: SerialNumber: syz
[  335.798956][ T1864] usb 5-1: Using ep0 maxpacket: 8
[  335.840589][ T1864] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  335.892730][ T1864] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  335.902457][ T1864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.910846][ T1864] usb 5-1: Product: syz
[  335.915257][ T1864] usb 5-1: Manufacturer: syz
[  335.920232][ T1864] usb 5-1: SerialNumber: syz
[  335.997537][ T1864] usb 5-1: config 0 descriptor??
[  336.092054][   T11] rtl8150 3-1:6.174: couldn't find required endpoints
[  336.100243][   T11] rtl8150 3-1:6.174: probe with driver rtl8150 failed with error -5
[  336.103837][ T1864] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  336.116781][ T1864] usb 5-1: setting power ON
[  336.121626][ T1864] dvb-usb: bulk message failed: -22 (2/0)
[  336.228557][   T11] usb 3-1: USB disconnect, device number 4
[  336.249505][ T7051] dvb-usb: bulk message failed: -22 (3/0)
[  336.294192][ T1864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  336.349265][ T7056] dvb-usb: bulk message failed: -22 (3/0)
[  336.355543][ T7056] dvb-usb: bulk message failed: -22 (7/0)
[  336.364462][ T1864] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  336.374047][ T1864] usb 5-1: media controller created
[  336.481579][ T1864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  336.821124][ T1864] usb 5-1: selecting invalid altsetting 6
[  336.827349][ T1864] usb 5-1: digital interface selection failed (-22)
[  336.834436][ T1864] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  336.957959][ T1864] usb 5-1: setting power OFF
[  336.964606][ T1864] dvb-usb: bulk message failed: -22 (2/0)
[  336.974278][ T1864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  336.984421][ T1864] (NULL device *): no alternate interface
[  337.784255][ T1864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  337.895986][ T1864] usb 5-1: USB disconnect, device number 4
[  338.389594][ T7074] loop4: detected capacity change from 0 to 1024
[  338.482432][ T7074] EXT4-fs: Ignoring removed oldalloc option
[  338.489343][ T7074] EXT4-fs: Ignoring removed bh option
[  338.600644][ T7076] hugetlbfs: syz.3.474 (7076): Using mlock ulimits for SHM_HUGETLB is obsolete
[  338.969718][ T7074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.209778][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.867225][ T7099] loop4: detected capacity change from 0 to 512
[  343.915132][ T7099] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  344.085085][ T7099] EXT4-fs (loop4): 1 orphan inode deleted
[  344.091999][ T7099] EXT4-fs (loop4): 1 truncate cleaned up
[  344.100155][ T7099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.610669][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.670334][ T7129] loop2: detected capacity change from 0 to 512
[  345.778717][ T7129] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  345.958902][ T7129] EXT4-fs (loop2): 1 truncate cleaned up
[  345.966866][ T7129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.460658][ T7137] loop3: detected capacity change from 0 to 256
[  346.485482][ T7137] exfat: Deprecated parameter 'utf8'
[  346.491723][ T7137] exfat: Deprecated parameter 'utf8'
[  346.498066][ T7137] exfat: Deprecated parameter 'utf8'
[  346.586557][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.742134][ T7137] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  347.101571][ T7141] loop1: detected capacity change from 0 to 1024
[  347.348869][ T7145] loop4: detected capacity change from 0 to 512
[  347.382148][ T7145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  347.670666][ T7145] EXT4-fs (loop4): 1 orphan inode deleted
[  347.676651][ T7145] EXT4-fs (loop4): 1 truncate cleaned up
[  347.686972][ T7145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  347.863457][ T7150] loop2: detected capacity change from 0 to 512
[  347.947548][ T7150] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  347.996920][ T7150] EXT4-fs (loop2): invalid journal inode
[  348.003150][ T7150] EXT4-fs (loop2): can't get journal size
[  348.045491][ T7150] EXT4-fs (loop2): orphan cleanup on readonly fs
[  348.065881][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.501'.
[  348.143721][ T7150] EXT4-fs (loop2): 1 truncate cleaned up
[  348.153024][ T7150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  348.237896][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.563816][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.110244][   T11] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  350.364762][   T11] usb 2-1: unable to get BOS descriptor or descriptor too short
[  350.440107][   T11] usb 2-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice=ae.13
[  350.449726][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.458066][   T11] usb 2-1: Product: syz
[  350.462637][   T11] usb 2-1: Manufacturer: syz
[  350.467463][   T11] usb 2-1: SerialNumber: syz
[  350.578970][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'.
[  350.802290][   T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  350.973587][   T11] snd-usb-audio 2-1:8.0: probe with driver snd-usb-audio failed with error -2
[  351.041974][   T11] usb 2-1: USB disconnect, device number 4
[  351.346386][ T6091] udevd[6091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.990473][ T7222] loop2: detected capacity change from 0 to 256
[  353.106099][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.4.529'.
[  353.350435][ T7222] FAT-fs (loop2): Directory bread(block 64) failed
[  353.358613][ T7222] FAT-fs (loop2): Directory bread(block 65) failed
[  353.369122][ T7222] FAT-fs (loop2): Directory bread(block 66) failed
[  353.375901][ T7222] FAT-fs (loop2): Directory bread(block 67) failed
[  353.389430][ T7222] FAT-fs (loop2): Directory bread(block 68) failed
[  353.396223][ T7222] FAT-fs (loop2): Directory bread(block 69) failed
[  353.407136][ T7222] FAT-fs (loop2): Directory bread(block 70) failed
[  353.414431][ T7222] FAT-fs (loop2): Directory bread(block 71) failed
[  353.421583][ T7222] FAT-fs (loop2): Directory bread(block 72) failed
[  353.428676][ T7222] FAT-fs (loop2): Directory bread(block 73) failed
[  353.960938][   T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  354.208924][   T11] usb 2-1: Using ep0 maxpacket: 16
[  354.232418][   T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.244097][   T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.254711][   T11] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  354.264117][   T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.385004][   T11] usb 2-1: config 0 descriptor??
[  354.925120][   T11] usbhid 2-1:0.0: can't add hid device: -71
[  354.939034][   T11] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  355.003563][   T11] usb 2-1: USB disconnect, device number 5
[  355.654271][ T7255] loop4: detected capacity change from 0 to 1024
[  355.707960][ T7255] EXT4-fs: Ignoring removed oldalloc option
[  355.715065][ T7255] EXT4-fs: Ignoring removed bh option
[  355.930378][ T7255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.477133][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.673307][ T7283] loop1: detected capacity change from 0 to 1024
[  357.805369][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  357.813981][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  357.839397][ T7289] loop2: detected capacity change from 0 to 1024
[  357.897126][ T7283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  358.406526][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  358.876103][ T7298] loop3: detected capacity change from 0 to 1024
[  358.972111][ T7305] loop2: detected capacity change from 0 to 256
[  359.041286][ T7298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  359.154001][ T7303] loop1: detected capacity change from 0 to 2048
[  359.391302][ T7298] EXT4-fs error (device loop3): ext4_empty_dir:3109: inode #11: block 623: comm syz.3.559: Attempting to read directory block (623) that is past i_size (638464)
[  359.467795][ T7310] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  359.611978][ T7303] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  359.718645][ T7303] Remounting filesystem read-only
[  359.819080][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.747407][ T7321] loop1: detected capacity change from 0 to 512
[  360.818785][ T7321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  361.005587][ T7321] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.565: corrupted xattr entries
[  361.136486][ T7321] EXT4-fs (loop1): Remounting filesystem read-only
[  361.143836][ T7321] EXT4-fs (loop1): 1 truncate cleaned up
[  361.193813][ T7328] loop0: detected capacity change from 0 to 1024
[  361.203529][ T7321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.343933][ T7328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  361.837437][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.983727][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  362.268850][ T7339] loop4: detected capacity change from 0 to 1024
[  362.514369][ T7344] loop0: detected capacity change from 0 to 256
[  365.042056][ T7377] loop2: detected capacity change from 0 to 1024
[  366.094386][ T1864] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  366.319414][ T1864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.332353][ T1864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.345362][ T1864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  366.360921][ T1864] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  366.371151][ T1864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.565527][ T1864] usb 2-1: config 0 descriptor??
[  367.081060][ T1864] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  369.264082][ T7410] loop3: detected capacity change from 0 to 65536
[  369.356012][ T7410] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  369.369984][   T11] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  369.603247][   T11] usb 2-1: device descriptor read/64, error -32
[  369.711910][ T7410] XFS (loop3): Ending clean mount
[  369.820950][ T7410] XFS (loop3): Quotacheck needed: Please wait.
[  369.917272][   T11] usb 2-1: reset high-speed USB device number 6 using dummy_hcd
[  370.206682][ T7410] XFS (loop3): Quotacheck: Done.
[  370.275008][   T11] usb 2-1: device descriptor read/64, error -32
[  370.386488][ T5797] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  371.289117][ T5852] usb 2-1: USB disconnect, device number 6
[  371.725427][ T7434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.605'.
[  372.031422][ T7435] loop4: detected capacity change from 0 to 1024
[  372.186256][ T7435] EXT4-fs: Ignoring removed orlov option
[  372.192537][ T7435] EXT4-fs: Ignoring removed nomblk_io_submit option
[  372.772546][ T7435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.883175][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.348697][ T1864] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  374.570443][ T1864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.587758][ T1864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.600670][ T1864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  374.614745][ T1864] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  374.624990][ T1864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.808807][ T1864] usb 3-1: config 0 descriptor??
[  375.164793][ T7453] loop1: detected capacity change from 0 to 8192
[  375.471847][ T1864] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  376.679501][ T5852] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  376.920856][ T5852] usb 5-1: Using ep0 maxpacket: 32
[  376.964110][ T5852] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  376.976133][ T5852] usb 5-1: config 0 has no interface number 0
[  376.984198][ T5852] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  377.122507][ T5852] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  377.139309][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.154446][ T5852] usb 5-1: Product: syz
[  377.159644][ T5852] usb 5-1: Manufacturer: syz
[  377.164872][ T5852] usb 5-1: SerialNumber: syz
[  377.308048][ T1864] usb 3-1: USB disconnect, device number 5
[  377.364262][ T5852] usb 5-1: config 0 descriptor??
[  377.406176][ T5852] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  377.417919][ T5852] em28xx 5-1:0.132: Video interface 132 found:
[  377.897771][ T5852] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  378.556969][ T5852] em28xx 5-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5)
[  378.567544][ T5852] em28xx 5-1:0.132: failed to read eeprom (err=-5)
[  378.579585][ T5852] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  378.718745][ T5852] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  378.727172][ T5852] em28xx 5-1:0.132: analog set to bulk mode.
[  378.736363][   T11] em28xx 5-1:0.132: Registering V4L2 extension
[  378.854589][ T5852] usb 5-1: USB disconnect, device number 5
[  378.864308][ T5852] em28xx 5-1:0.132: Disconnecting em28xx
[  380.057078][   T11] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  380.064846][   T11] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  380.073057][   T11] em28xx 5-1:0.132: No AC97 audio processor
[  380.136997][   T11] usb 5-1: Decoder not found
[  380.142258][   T11] em28xx 5-1:0.132: failed to create media graph
[  380.149334][   T11] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  380.184829][   T11] em28xx 5-1:0.132: Remote control support is not available for this card.
[  380.241950][ T5852] em28xx 5-1:0.132: Closing input extension
[  380.273312][ T5852] em28xx 5-1:0.132: Freeing device
[  381.615201][ T7537] loop1: detected capacity change from 0 to 256
[  381.661168][ T7536] loop2: detected capacity change from 0 to 1024
[  381.967757][ T7541] loop3: detected capacity change from 0 to 64
[  382.077151][ T7541] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  382.122387][ T7537] FAT-fs (loop1): Directory bread(block 64) failed
[  382.130519][ T7537] FAT-fs (loop1): Directory bread(block 65) failed
[  382.138043][ T7537] FAT-fs (loop1): Directory bread(block 66) failed
[  382.145256][ T7537] FAT-fs (loop1): Directory bread(block 67) failed
[  382.152716][ T7537] FAT-fs (loop1): Directory bread(block 68) failed
[  382.165476][ T7537] FAT-fs (loop1): Directory bread(block 69) failed
[  382.177626][ T7537] FAT-fs (loop1): Directory bread(block 70) failed
[  382.188518][ T7537] FAT-fs (loop1): Directory bread(block 71) failed
[  382.195617][ T7537] FAT-fs (loop1): Directory bread(block 72) failed
[  382.203774][ T7537] FAT-fs (loop1): Directory bread(block 73) failed
[  382.392391][  T145] hfsplus: b-tree write err: -5, ino 3
[  382.420315][ T5792] hfsplus: node 4:3 still has 3 user(s)!
[  383.627836][ T7559] netlink: 'syz.2.657': attribute type 4 has an invalid length.
[  384.057592][ T7567] loop3: detected capacity change from 0 to 512
[  384.274453][ T7567] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.661: corrupted in-inode xattr: invalid ea_ino
[  384.339825][ T7567] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.661: couldn't read orphan inode 15 (err -117)
[  384.431410][ T7574] loop2: detected capacity change from 0 to 64
[  384.465375][ T7567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.508678][ T7574] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  384.660546][ T7577] loop4: detected capacity change from 0 to 256
[  384.931692][ T7577] FAT-fs (loop4): Directory bread(block 64) failed
[  384.938792][ T7577] FAT-fs (loop4): Directory bread(block 65) failed
[  384.946097][ T7577] FAT-fs (loop4): Directory bread(block 66) failed
[  384.953426][ T7577] FAT-fs (loop4): Directory bread(block 67) failed
[  384.960658][ T7577] FAT-fs (loop4): Directory bread(block 68) failed
[  384.968112][ T7577] FAT-fs (loop4): Directory bread(block 69) failed
[  384.975308][ T7577] FAT-fs (loop4): Directory bread(block 70) failed
[  384.982664][ T7577] FAT-fs (loop4): Directory bread(block 71) failed
[  384.990116][ T7577] FAT-fs (loop4): Directory bread(block 72) failed
[  384.996967][ T7577] FAT-fs (loop4): Directory bread(block 73) failed
[  385.175411][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.520970][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.668'.
[  386.319522][ T7597] netlink: 'syz.3.673': attribute type 4 has an invalid length.
[  386.621890][ T7604] loop2: detected capacity change from 0 to 8
[  386.684660][ T7605] loop4: detected capacity change from 0 to 64
[  386.748537][ T7605] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  387.400936][ T7610] loop1: detected capacity change from 0 to 512
[  387.459897][ T7610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  387.620404][ T7610] EXT4-fs (loop1): 1 truncate cleaned up
[  387.702697][ T7610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.006527][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.683'.
[  388.372627][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.695448][ T7633] netlink: 'syz.3.688': attribute type 4 has an invalid length.
[  390.050291][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'.
[  390.740422][ T7666] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  391.716179][ T7676] loop4: detected capacity change from 0 to 512
[  391.799692][ T7676] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.708: invalid block
[  391.838441][ T7676] EXT4-fs (loop4): Remounting filesystem read-only
[  391.849793][ T7676] EXT4-fs (loop4): 2 truncates cleaned up
[  391.857879][ T7676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.555675][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.064854][ T7707] loop2: detected capacity change from 0 to 1024
[  394.206739][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.631695][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  395.239741][ T7724] netlink: 12 bytes leftover after parsing attributes in process `syz.3.727'.
[  396.097374][ T7739] loop4: detected capacity change from 0 to 512
[  396.166765][ T7739] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  396.208588][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  396.208835][ T7740] loop2: detected capacity change from 0 to 2048
[  396.260397][ T7739] EXT4-fs (loop4): 1 truncate cleaned up
[  396.269070][ T7739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.315392][ T7740] EXT4-fs (loop2): failed to initialize system zone (-117)
[  396.354589][ T7740] EXT4-fs (loop2): mount failed
[  396.398658][ T5852] usb 2-1: device descriptor read/64, error -71
[  396.612877][ T7745] loop3: detected capacity change from 0 to 256
[  396.694069][ T5852] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  396.792075][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.867550][ T7745] FAT-fs (loop3): Directory bread(block 64) failed
[  396.874584][ T7745] FAT-fs (loop3): Directory bread(block 65) failed
[  396.881891][ T7745] FAT-fs (loop3): Directory bread(block 66) failed
[  396.888855][ T7745] FAT-fs (loop3): Directory bread(block 67) failed
[  396.895822][ T7745] FAT-fs (loop3): Directory bread(block 68) failed
[  396.899319][ T5852] usb 2-1: device descriptor read/64, error -71
[  396.909558][ T7745] FAT-fs (loop3): Directory bread(block 69) failed
[  396.909855][ T7745] FAT-fs (loop3): Directory bread(block 70) failed
[  396.909978][ T7745] FAT-fs (loop3): Directory bread(block 71) failed
[  396.910231][ T7745] FAT-fs (loop3): Directory bread(block 72) failed
[  396.910346][ T7745] FAT-fs (loop3): Directory bread(block 73) failed
[  397.099183][ T5852] usb usb2-port1: attempt power cycle
[  397.489287][ T5852] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  397.555761][ T5852] usb 2-1: device descriptor read/8, error -71
[  397.828724][ T5852] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  397.901441][ T5852] usb 2-1: device descriptor read/8, error -71
[  398.140255][ T5852] usb usb2-port1: unable to enumerate USB device
[  398.527396][ T7757] loop3: detected capacity change from 0 to 512
[  398.992270][ T7757] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  399.088904][ T7757] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.739: invalid indirect mapped block 2683928664 (level 1)
[  399.380199][ T7757] EXT4-fs (loop3): Remounting filesystem read-only
[  399.387854][ T7757] EXT4-fs (loop3): 1 truncate cleaned up
[  399.396190][ T7757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.614891][ T7770] loop4: detected capacity change from 0 to 1024
[  399.801443][ T7770] EXT4-fs: Ignoring removed orlov option
[  399.807555][ T7770] EXT4-fs: Ignoring removed nomblk_io_submit option
[  400.013619][ T7770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.444252][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  400.596134][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  401.485845][ T7788] loop1: detected capacity change from 0 to 1024
[  401.535440][ T7788] EXT4-fs: inline encryption not supported
[  401.541768][ T7788] EXT4-fs: Ignoring removed i_version option
[  401.583687][ T7788] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  401.787326][ T7788] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.750: lblock 2 mapped to illegal pblock 2 (length 1)
[  401.881550][ T7788] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  401.890357][ T7788] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.750: lblock 0 mapped to illegal pblock 48 (length 1)
[  401.929067][ T7788] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  401.938463][ T7788] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.750: Failed to acquire dquot type 0
[  402.036545][ T7788] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  402.039215][ T7798] usb usb8: usbfs: process 7798 (+}[@) did not claim interface 0 before use
[  402.097659][ T7788] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.750: mark_inode_dirty error
[  402.112692][ T7788] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  402.123613][ T7788] EXT4-fs (loop1): 1 orphan inode deleted
[  402.161625][   T59] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1)
[  402.213401][ T7788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.237233][   T59] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  402.246129][   T59] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0
[  402.635242][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.668680][ T1864] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  402.702285][ T5788] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[  402.750892][ T5788] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem
[  402.774815][ T5788] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[  402.828583][ T1864] usb 5-1: device descriptor read/64, error -71
[  403.003506][ T7809] loop2: detected capacity change from 0 to 128
[  403.109214][ T1864] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  403.278700][ T1864] usb 5-1: device descriptor read/64, error -71
[  403.393687][ T1864] usb usb5-port1: attempt power cycle
[  403.587247][ T7814] loop1: detected capacity change from 0 to 1024
[  403.789251][ T1864] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  403.893275][ T1864] usb 5-1: device descriptor read/8, error -71
[  404.160972][ T7814] EXT4-fs: Ignoring removed orlov option
[  404.168061][ T7814] EXT4-fs: Ignoring removed nomblk_io_submit option
[  404.534827][ T7814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.683537][ T1864] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  404.720931][ T1864] usb 5-1: device descriptor read/8, error -71
[  404.896753][ T1864] usb usb5-port1: unable to enumerate USB device
[  405.644044][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.665885][ T7855] loop3: detected capacity change from 0 to 256
[  411.787111][ T7862] loop4: detected capacity change from 0 to 1024
[  411.866109][ T7862] EXT4-fs: Ignoring removed orlov option
[  411.872454][ T7862] EXT4-fs: Ignoring removed nomblk_io_submit option
[  412.248784][ T5852] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  412.438992][ T5852] usb 1-1: device descriptor read/64, error -71
[  412.696552][ T7862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.723573][ T5852] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  412.911107][ T5852] usb 1-1: device descriptor read/64, error -71
[  413.022955][ T5852] usb usb1-port1: attempt power cycle
[  413.380985][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  413.518672][ T5852] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  413.580859][ T5852] usb 1-1: device descriptor read/8, error -71
[  413.832705][ T7882] loop2: detected capacity change from 0 to 256
[  413.849305][ T5852] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  413.906089][ T5852] usb 1-1: device descriptor read/8, error -71
[  414.039392][ T5852] usb usb1-port1: unable to enumerate USB device
[  414.272344][ T7887] debugfs: Bad value for 'mode'
[  416.108869][ T5852] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  416.366627][ T5852] usb 5-1: Using ep0 maxpacket: 32
[  416.942179][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.953818][ T5852] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.964079][ T5852] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  416.977973][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.994832][ T7903] loop1: detected capacity change from 0 to 1024
[  417.031451][ T7903] EXT4-fs: Ignoring removed orlov option
[  417.037606][ T7903] EXT4-fs: Ignoring removed nomblk_io_submit option
[  417.131888][ T5852] usb 5-1: config 0 descriptor??
[  417.626297][ T7903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.699574][ T5852] usbhid 5-1:0.0: can't add hid device: -71
[  417.706237][ T5852] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  417.772543][ T7911] loop3: detected capacity change from 0 to 1024
[  417.823165][ T5852] usb 5-1: USB disconnect, device number 10
[  417.905395][ T7911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  417.918426][ T7911] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  418.155950][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  418.277604][ T7911] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 7: comm syz.3.796: lblock 7 mapped to illegal pblock 7 (length 9)
[  418.374224][ T7911] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117
[  418.387189][ T7911] EXT4-fs (loop3): This should not happen!! Data will be lost
[  418.387189][ T7911] 
[  418.851202][ T7926] sch_tbf: burst 21990 is lower than device lo mtu (65550) !
[  418.916449][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  419.242065][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  419.251649][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  420.508142][ T7945] loop3: detected capacity change from 0 to 1024
[  420.585161][ T7945] EXT4-fs: Ignoring removed orlov option
[  420.591419][ T7945] EXT4-fs: Ignoring removed nomblk_io_submit option
[  421.056528][ T7945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.757006][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.964356][ T7955] loop2: detected capacity change from 0 to 512
[  422.041407][ T7955] EXT4-fs: Ignoring removed mblk_io_submit option
[  422.048708][ T7955] EXT4-fs: Ignoring removed nomblk_io_submit option
[  422.211196][ T7955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  422.223786][ T7955] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  422.526930][ T7955] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.812: Allocating blocks 41-42 which overlap fs metadata
[  422.659062][ T7955] Quota error (device loop2): write_blk: dquota write failed
[  422.666924][ T7955] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  422.676795][ T7955] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.812: Allocating blocks 41-42 which overlap fs metadata
[  422.793053][ T7955] Quota error (device loop2): write_blk: dquota write failed
[  422.801398][ T7955] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  422.815792][ T7955] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.812: Failed to acquire dquot type 1
[  422.934594][ T7955] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  422.950036][ T7955] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.812: corrupted inode contents
[  423.083376][ T7955] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #12: comm syz.2.812: mark_inode_dirty error
[  423.097677][ T7955] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.812: corrupted inode contents
[  423.148070][ T7955] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.812: mark_inode_dirty error
[  423.212539][ T7955] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.812: corrupted inode contents
[  423.296284][ T7955] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  423.335499][ T7966] loop4: detected capacity change from 0 to 1024
[  423.350021][ T7955] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #12: comm syz.2.812: corrupted inode contents
[  423.389552][ T7955] EXT4-fs error (device loop2): ext4_truncate:4637: inode #12: comm syz.2.812: mark_inode_dirty error
[  423.466035][ T7955] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  423.520186][ T7955] EXT4-fs (loop2): 1 truncate cleaned up
[  423.531740][ T7955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.691624][ T7955] Quota error (device loop2): write_blk: dquota write failed
[  423.700868][ T7955] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  423.711236][ T7955] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.812: Failed to acquire dquot type 1
[  424.139576][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.236564][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.822'.
[  424.928557][   T30] audit: type=1326 audit(1763586978.457:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e658f749 code=0x7ffc0000
[  425.060359][   T30] audit: type=1326 audit(1763586978.517:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e658f749 code=0x7ffc0000
[  425.060969][ T7985] loop3: detected capacity change from 0 to 1024
[  425.088121][   T30] audit: type=1326 audit(1763586978.527:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f00e658f749 code=0x7ffc0000
[  425.115214][   T30] audit: type=1326 audit(1763586978.527:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00e658f749 code=0x7ffc0000
[  425.207846][ T7985] EXT4-fs: Ignoring removed orlov option
[  425.214026][ T7985] EXT4-fs: Ignoring removed nomblk_io_submit option
[  425.413082][ T7985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.556303][ T7994] loop2: detected capacity change from 0 to 256
[  425.703305][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  425.748819][ T7994] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000fc03)
[  426.529293][ T8005] loop1: detected capacity change from 0 to 1024
[  426.793426][ T8011] loop3: detected capacity change from 0 to 128
[  426.922978][ T8011] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  427.041609][ T8011] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  427.400632][ T5797] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  427.889963][ T8024] loop3: detected capacity change from 0 to 512
[  428.097351][ T8024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  428.111008][ T8024] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  428.903447][ T5797] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  428.979448][ T5797] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  429.022062][ T8043] loop2: detected capacity change from 0 to 1024
[  429.398665][ T5419] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  429.545516][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.589710][ T5419] usb 1-1: device descriptor read/64, error -71
[  429.838849][ T5419] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  430.059456][ T5419] usb 1-1: device descriptor read/64, error -71
[  430.170398][ T5419] usb usb1-port1: attempt power cycle
[  430.538817][ T5419] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  430.560791][ T5419] usb 1-1: device descriptor read/8, error -71
[  430.803089][ T5419] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  430.844892][ T5419] usb 1-1: device descriptor read/8, error -71
[  430.960601][ T5419] usb usb1-port1: unable to enumerate USB device
[  431.066510][ T8061] loop1: detected capacity change from 0 to 128
[  431.133663][ T8062] loop2: detected capacity change from 0 to 512
[  431.168827][ T8061] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  431.265078][ T8061] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  431.393452][ T8061] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks
[  431.401441][ T8061] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  431.471703][ T8062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.485182][ T8062] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  431.566441][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  431.590907][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  431.600791][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  431.602741][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  431.666178][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  431.683662][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  431.884799][ T5792] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  431.945538][ T5792] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  432.545308][ T5792] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  432.604775][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  432.962262][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.202245][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.384038][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  433.747723][ T8069] chnl_net:caif_netlink_parms(): no params data found
[  433.798684][ T5794] Bluetooth: hci4: command tx timeout
[  433.899631][   T12] bridge_slave_1: left allmulticast mode
[  433.905743][   T12] bridge_slave_1: left promiscuous mode
[  433.912830][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  434.016016][   T12] bridge_slave_0: left allmulticast mode
[  434.022244][   T12] bridge_slave_0: left promiscuous mode
[  434.029129][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.563406][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.630136][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.654634][   T12] bond0 (unregistering): Released all slaves
[  435.449779][   T12] hsr_slave_0: left promiscuous mode
[  435.499796][   T12] hsr_slave_1: left promiscuous mode
[  435.511503][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  435.519280][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  435.571198][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  435.579111][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  435.749200][   T12] veth1_macvtap: left promiscuous mode
[  435.754988][   T12] veth0_macvtap: left promiscuous mode
[  435.761224][   T12] veth1_vlan: left promiscuous mode
[  435.766818][   T12] veth0_vlan: left promiscuous mode
[  435.848639][ T5794] Bluetooth: hci4: command tx timeout
[  436.853061][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  436.870852][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  436.881899][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  436.895628][   T12] team0 (unregistering): Port device team_slave_1 removed
[  436.919786][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  436.964079][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  437.065895][   T12] team0 (unregistering): Port device team_slave_0 removed
[  437.100180][ T8116] loop1: detected capacity change from 0 to 1024
[  438.081267][ T5795] Bluetooth: hci4: command tx timeout
[  438.393021][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state
[  438.400925][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state
[  438.409414][ T8069] bridge_slave_0: entered allmulticast mode
[  438.460213][ T8069] bridge_slave_0: entered promiscuous mode
[  438.531431][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state
[  438.539382][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state
[  438.547165][ T8069] bridge_slave_1: entered allmulticast mode
[  438.557323][ T8069] bridge_slave_1: entered promiscuous mode
[  439.050767][ T5795] Bluetooth: hci1: command tx timeout
[  439.052955][ T8141] loop4: detected capacity change from 0 to 64
[  439.128426][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  439.263791][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  439.702521][ T8069] team0: Port device team_slave_0 added
[  439.803484][ T8069] team0: Port device team_slave_1 added
[  439.839612][ T8112] chnl_net:caif_netlink_parms(): no params data found
[  440.106742][ T5795] Bluetooth: hci4: command tx timeout
[  440.234495][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.241947][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.269546][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.441468][ T8156] warning: `syz.4.893' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  441.195135][ T5795] Bluetooth: hci1: command tx timeout
[  441.267109][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.274421][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.300863][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  442.314411][ T8069] hsr_slave_0: entered promiscuous mode
[  442.324974][ T8069] hsr_slave_1: entered promiscuous mode
[  442.334219][ T8069] debugfs: 'hsr0' already exists in 'hsr'
[  442.340418][ T8069] Cannot create hsr debugfs directory
[  443.209383][ T5795] Bluetooth: hci1: command tx timeout
[  443.546965][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state
[  443.555669][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state
[  443.564012][ T8112] bridge_slave_0: entered allmulticast mode
[  443.573951][ T8112] bridge_slave_0: entered promiscuous mode
[  443.673217][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state
[  443.681264][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.689309][ T8112] bridge_slave_1: entered allmulticast mode
[  443.699319][ T8112] bridge_slave_1: entered promiscuous mode
[  444.093129][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  444.201990][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  444.506274][ T8069] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  444.653847][ T8069] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  444.697089][ T8112] team0: Port device team_slave_0 added
[  444.720280][ T8069] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  444.774655][ T8112] team0: Port device team_slave_1 added
[  444.955745][ T8069] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  445.144253][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  445.151963][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.178589][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  445.231067][ T8198] loop4: detected capacity change from 0 to 128
[  445.295322][ T5795] Bluetooth: hci1: command tx timeout
[  445.381741][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  445.389635][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  445.391933][ T8198] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  445.416166][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  445.599821][ T8198] ext4 filesystem being mounted at /184/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  445.697150][ T8112] hsr_slave_0: entered promiscuous mode
[  445.709437][ T8112] hsr_slave_1: entered promiscuous mode
[  445.719326][ T8112] debugfs: 'hsr0' already exists in 'hsr'
[  445.725287][ T8112] Cannot create hsr debugfs directory
[  446.163787][ T5796] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  447.125534][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0
[  447.400764][ T8069] 8021q: adding VLAN 0 to HW filter on device team0
[  447.523557][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.531407][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.607223][ T8112] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  447.663724][ T8112] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  447.746386][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.754069][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.818914][ T8112] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  447.932302][ T8112] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  448.849041][ T8216] program syz.0.910 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  448.988991][ T8232] loop4: detected capacity change from 0 to 128
[  449.017781][ T8233] loop1: detected capacity change from 0 to 512
[  449.123398][ T8233] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  449.201118][ T8232] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  449.251683][ T8233] EXT4-fs (loop1): 1 truncate cleaned up
[  449.260095][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.336643][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0
[  449.349762][ T8232] ext4 filesystem being mounted at /188/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  449.482834][ T8112] 8021q: adding VLAN 0 to HW filter on device team0
[  449.646440][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.654175][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.803433][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.811163][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.912538][ T5796] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  450.499940][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.690578][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0
[  451.146789][ T8256] loop1: detected capacity change from 0 to 512
[  451.262476][ T8256] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  451.516843][ T8256] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.920: corrupted xattr entries
[  451.599453][ T8256] EXT4-fs (loop1): Remounting filesystem read-only
[  451.606366][ T8256] EXT4-fs (loop1): 1 truncate cleaned up
[  451.614628][ T8256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.231717][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.323817][ T5844] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  452.571906][ T5844] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  452.599952][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.661742][ T5844] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  452.701158][ T5844] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  452.816866][ T5844] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  452.826381][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.834870][ T5844] usb 1-1: Product: syz
[  452.839385][ T5844] usb 1-1: Manufacturer: syz
[  452.844208][ T5844] usb 1-1: SerialNumber: syz
[  452.957632][ T8281] team0: Port device veth0_to_bridge added
[  452.966866][ T8281] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check.
[  453.297601][ T5844] adutux 1-1:168.0: interrupt endpoints not found
[  453.371704][ T5844] usb 1-1: USB disconnect, device number 12
[  453.737196][ T8069] veth0_vlan: entered promiscuous mode
[  453.856919][ T8069] veth1_vlan: entered promiscuous mode
[  454.136863][ T8277] loop1: detected capacity change from 0 to 8192
[  454.245981][ T8069] veth0_macvtap: entered promiscuous mode
[  454.300335][ T8277] FAT-fs (loop1): bogus logical sector size 0
[  454.306733][ T8277] FAT-fs (loop1): Can't find a valid FAT filesystem
[  454.359868][ T8069] veth1_macvtap: entered promiscuous mode
[  454.458782][ T8277] program syz.1.925 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  454.631753][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0
[  454.774937][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1
[  454.941922][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  455.020138][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  455.074598][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  455.139744][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.050070][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'.
[  456.060070][ T8310] netlink: 20 bytes leftover after parsing attributes in process `syz.1.931'.
[  456.248765][ T8112] veth0_vlan: entered promiscuous mode
[  456.392600][ T8112] veth1_vlan: entered promiscuous mode
[  456.769865][ T8112] veth0_macvtap: entered promiscuous mode
[  456.883038][ T8112] veth1_macvtap: entered promiscuous mode
[  457.157262][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.278883][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.348762][ T8326] loop4: detected capacity change from 0 to 128
[  457.405060][ T3941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.508712][ T3941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.517977][ T3941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.541497][ T8326] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  457.646067][  T151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.258046][ T8333] loop1: detected capacity change from 0 to 8192
[  459.416792][ T8333] FAT-fs (loop1): bogus logical sector size 0
[  459.423517][ T8333] FAT-fs (loop1): Can't find a valid FAT filesystem
[  459.490683][ T8344] netlink: 'syz.0.941': attribute type 4 has an invalid length.
[  459.576463][ T8346] netlink: 'syz.0.941': attribute type 4 has an invalid length.
[  459.894623][ T8333] program syz.1.939 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  461.689802][ T8358] loop4: detected capacity change from 0 to 512
[  461.860342][ T8358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  462.257621][ T8358] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.943: corrupted xattr entries
[  462.311132][ T8358] EXT4-fs (loop4): Remounting filesystem read-only
[  462.318352][ T8358] EXT4-fs (loop4): 1 truncate cleaned up
[  462.326313][ T8358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  464.605521][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  466.140178][ T8388] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 747
[  468.874270][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.882816][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  469.257654][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  469.266417][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.452624][ T8428] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 747
[  470.480483][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.493759][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.816730][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.825500][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  472.131889][ T8457] fuse: Bad value for 'fd'
[  472.744977][ T8460] loop4: detected capacity change from 0 to 1024
[  472.979032][ T8460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.261831][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.619238][ T8487] loop1: detected capacity change from 0 to 16
[  474.818089][ T8487] erofs (device loop1): mounted with root inode @ nid 36.
[  475.121417][ T8487] overlayfs: failed to get redirect (-117)
[  475.285147][ T8494] loop5: detected capacity change from 0 to 512
[  475.389118][ T8494] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  475.724868][ T8494] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.979: corrupted xattr entries
[  475.847189][ T8494] EXT4-fs (loop5): Remounting filesystem read-only
[  475.865547][ T8494] EXT4-fs (loop5): 1 truncate cleaned up
[  475.884901][ T8494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.155088][ T8506] loop4: detected capacity change from 0 to 1024
[  476.482541][ T8506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  476.622723][ T8069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.844363][   T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.104169][   T14] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.447054][ T5796] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.473300][   T14] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  477.762393][   T14] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.329300][ T8522] loop6: detected capacity change from 0 to 2048
[  478.522058][ T8522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  478.754954][   T14] bridge_slave_1: left allmulticast mode
[  478.763826][   T14] bridge_slave_1: left promiscuous mode
[  478.774992][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[  478.913396][   T14] bridge_slave_0: left allmulticast mode
[  478.920507][   T14] bridge_slave_0: left promiscuous mode
[  478.936443][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.994765][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.077648][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.141892][   T14] bond0 (unregistering): Released all slaves
[  480.676888][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  480.685624][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  481.018863][   T14] hsr_slave_0: left promiscuous mode
[  481.043329][   T14] hsr_slave_1: left promiscuous mode
[  481.052632][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.061018][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.141807][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.150919][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.352597][   T14] veth1_macvtap: left promiscuous mode
[  481.358624][   T14] veth0_macvtap: left promiscuous mode
[  481.364585][   T14] veth1_vlan: left promiscuous mode
[  481.370999][   T14] veth0_vlan: left promiscuous mode
[  481.861152][ T8544] loop5: detected capacity change from 0 to 512
[  482.084760][ T8544] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  482.290383][ T8544] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.995: corrupted xattr entries
[  482.418900][ T8544] EXT4-fs (loop5): Remounting filesystem read-only
[  482.425913][ T8544] EXT4-fs (loop5): 1 truncate cleaned up
[  482.434546][ T8544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.463076][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  482.476916][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  482.488757][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  482.503632][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  482.687081][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  482.784407][   T14] team0 (unregistering): Port device team_slave_1 removed
[  482.822292][   T14] team0 (unregistering): Port device team_slave_0 removed
[  483.715929][ T8565] loop6: detected capacity change from 0 to 1024
[  483.984311][ T8069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.178987][ T8565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.904774][ T5795] Bluetooth: hci0: command tx timeout
[  485.066067][ T8112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.429793][ T8557] chnl_net:caif_netlink_parms(): no params data found
[  485.824324][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1003'.
[  486.968857][ T5795] Bluetooth: hci0: command tx timeout
[  487.419223][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state
[  487.433552][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state
[  487.441994][ T8557] bridge_slave_0: entered allmulticast mode
[  487.451983][ T8557] bridge_slave_0: entered promiscuous mode
[  487.550002][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state
[  487.557813][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state
[  487.565914][ T8557] bridge_slave_1: entered allmulticast mode
[  487.576534][ T8557] bridge_slave_1: entered promiscuous mode
[  487.983442][ T8617] loop5: detected capacity change from 0 to 1024
[  488.167478][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.183177][ T8617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.199196][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.452300][ T8557] team0: Port device team_slave_0 added
[  488.522261][ T8557] team0: Port device team_slave_1 added
[  488.741013][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1016'.
[  488.910965][ T8069] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  489.022303][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0
[  489.029877][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.056454][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  489.098381][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1
[  489.100309][ T5795] Bluetooth: hci0: command tx timeout
[  489.105631][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  489.138707][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  489.352648][ T8630] loop6: detected capacity change from 0 to 1024
[  489.453117][ T8557] hsr_slave_0: entered promiscuous mode
[  489.464052][ T8557] hsr_slave_1: entered promiscuous mode
[  489.789445][ T5146] udevd[5146]: worker [5978] terminated by signal 33 (Unknown signal 33)
[  489.839136][ T5146] udevd[5146]: worker [5978] failed while handling '/devices/virtual/block/loop6'
[  490.589822][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1023'.
[  491.139229][ T8557] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  491.140486][ T5795] Bluetooth: hci0: command tx timeout
[  491.228838][ T8557] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  491.262073][ T8557] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  492.022943][ T8557] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  492.196928][ T8660] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  492.230927][ T5419] IPVS: starting estimator thread 0...
[  492.408675][ T8662] IPVS: using max 192 ests per chain, 9600 per kthread
[  493.016080][ T8664] loop6: detected capacity change from 0 to 1024
[  493.414778][ T8664] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  494.621026][ T8112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.847080][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.073032][ T8680] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1029'.
[  495.097570][ T8557] 8021q: adding VLAN 0 to HW filter on device team0
[  495.226426][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.234140][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.377957][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.385640][ T3941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.452232][ T8688] loop6: detected capacity change from 0 to 512
[  495.599847][ T8688] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  498.270502][ T8724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1042'.
[  498.366505][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.829141][ T5852] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  499.018854][ T5852] usb 1-1: Using ep0 maxpacket: 8
[  499.055633][ T5852] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  499.064475][ T5852] usb 1-1: config 179 has no interface number 0
[  499.071325][ T5852] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  499.082795][ T5852] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  499.094523][ T5852] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  499.107528][ T5852] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  499.122290][ T5852] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  499.132032][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.382545][ T8730] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  499.696648][ T5852] usb 1-1: USB disconnect, device number 13
[  500.649473][ T8751] loop6: detected capacity change from 0 to 128
[  500.762263][ T8751] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  500.817765][ T8751] hpfs: filesystem error: improperly stopped
[  500.824420][ T8751] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  500.832843][ T8751] hpfs: You really don't want any checks? You are crazy...
[  500.936964][ T8751] hpfs: hpfs_map_sector(): read error
[  500.948580][ T8751] hpfs: code page support is disabled
[  500.991623][ T8751] hpfs: hpfs_map_4sectors(): unaligned read
[  501.011299][ T8756] loop7: detected capacity change from 0 to 7
[  501.051238][ T8751] hpfs: hpfs_map_4sectors(): unaligned read
[  501.054505][    C0] blk_print_req_error: 24 callbacks suppressed
[  501.054604][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.057396][ T8751] hpfs: filesystem error: unable to find root dir
[  501.063931][    C0] buffer_io_error: 23 callbacks suppressed
[  501.064025][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.097527][ T8751] 
[  501.119342][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.128976][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.164768][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.174401][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.225300][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.235012][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.263522][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.273199][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.284302][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.294040][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.304093][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.313588][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.322258][ T8756] ldm_validate_partition_table(): Disk read failed.
[  501.359376][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.368864][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.391509][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.401075][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.429069][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  501.438654][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  501.477363][ T8756] Dev loop7: unable to read RDB block 0
[  501.581216][ T8557] veth0_vlan: entered promiscuous mode
[  501.668881][ T8756]  loop7: unable to read partition table
[  501.675501][ T8756] loop7: partition table beyond EOD, truncated
[  501.682334][ T8756] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%�֐�ȵ4FLQk݊5) failed (rc=-5)
[  501.829113][ T8557] veth1_vlan: entered promiscuous mode
[  502.437972][ T8762] ptrace attach of "./syz-executor exec"[8112] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  502.455632][ T8762] hpfs: hpfs_map_4sectors(): unaligned read
[  502.666561][ T8763] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  502.699703][ T8763] bond1 (unregistering): Released all slaves
[  503.065841][ T8557] veth0_macvtap: entered promiscuous mode
[  503.310282][ T8557] veth1_macvtap: entered promiscuous mode
[  503.777286][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0
[  503.993862][ T8770] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1053'.
[  504.077417][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.411804][  T133] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.738357][  T133] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.749185][  T133] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.763141][  T133] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.396160][ T8784] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1056'.
[  506.377462][ T5419] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  506.580908][ T5419] usb 1-1: Using ep0 maxpacket: 8
[  506.608852][ T5419] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  506.617581][ T5419] usb 1-1: config 179 has no interface number 0
[  506.624446][ T5419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  506.636133][ T5419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  506.647821][ T5419] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  506.660160][ T5419] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  506.674341][ T5419] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  506.688672][ T5419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.973231][ T8797] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  507.313820][ T5419] usb 1-1: USB disconnect, device number 14
[  508.400749][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1067'.
[  508.411480][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1067'.
[  509.214523][ T8835] 9pnet_fd: Insufficient options for proto=fd
[  511.158497][ T5852] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  511.374211][ T5852] usb 6-1: Using ep0 maxpacket: 8
[  511.414627][ T5852] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  511.424677][ T5852] usb 6-1: config 179 has no interface number 0
[  511.431459][ T5852] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  511.443051][ T5852] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  511.454893][ T5852] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  511.466590][ T5852] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  511.477081][ T5852] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  511.493542][ T5852] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  511.494380][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'.
[  511.503880][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.561145][ T8866] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1080'.
[  511.570825][ T8866] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1080'.
[  511.604834][ T8857] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  511.685720][ T5852] xpad 6-1:179.65: probe with driver xpad failed with error -5
[  511.937407][ T5852] usb 6-1: USB disconnect, device number 2
[  512.764378][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.773186][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.370072][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.378864][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.499968][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1086'.
[  515.457275][ T8906] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1092'.
[  515.467023][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1092'.
[  516.198039][ T5419] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  516.433886][ T5419] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  516.442776][ T5419] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.453404][ T5419] usb 7-1: config 0 has no interface number 0
[  516.536351][ T5419] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  516.546426][ T5419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.555091][ T5419] usb 7-1: Product: syz
[  516.559681][ T5419] usb 7-1: Manufacturer: syz
[  516.564499][ T5419] usb 7-1: SerialNumber: syz
[  516.694944][ T5419] usb 7-1: config 0 descriptor??
[  516.742930][ T5419] hub 7-1:0.31: bad descriptor, ignoring hub
[  516.749390][ T5419] hub 7-1:0.31: probe with driver hub failed with error -5
[  516.764729][ T5419] uvcvideo 7-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  516.772516][ T5419] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized!
[  516.781807][ T5419] uvcvideo 7-1:0.31: Failed to create links for entity 6
[  516.789374][ T5419] uvcvideo 7-1:0.31: Failed to register entities (-22).
[  517.030750][ T5419] usb 7-1: USB disconnect, device number 2
[  519.499432][ T5419] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  519.724220][ T5419] usb 8-1: Using ep0 maxpacket: 32
[  519.789623][ T5419] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  519.797996][ T5419] usb 8-1: config 0 has no interface number 0
[  519.804924][ T5419] usb 8-1: too many endpoints for config 0 interface 51 altsetting 17: 253, using maximum allowed: 30
[  519.816411][ T5419] usb 8-1: config 0 interface 51 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  519.830236][ T5419] usb 8-1: config 0 interface 51 has no altsetting 0
[  519.922594][ T5419] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  519.932317][ T5419] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.940838][ T5419] usb 8-1: Product: syz
[  519.945236][ T5419] usb 8-1: Manufacturer: syz
[  519.950422][ T5419] usb 8-1: SerialNumber: syz
[  520.020156][ T5419] usb 8-1: config 0 descriptor??
[  520.043134][ T5419] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  520.272658][ T5419] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  520.393398][ T5419] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  520.664068][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  520.680142][ T5419] usb 8-1: USB disconnect, device number 2
[  520.751965][ T5419] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  520.860234][ T5419] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  520.875284][ T5419] quatech2 8-1:0.51: device disconnected
[  521.838889][ T5419] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  522.023709][ T5419] usb 6-1: Using ep0 maxpacket: 8
[  522.070555][ T5419] usb 6-1: config index 0 descriptor too short (expected 30, got 18)
[  522.156849][ T5419] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  522.166863][ T5419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.175883][ T5419] usb 6-1: Product: syz
[  522.180438][ T5419] usb 6-1: Manufacturer: syz
[  522.185258][ T5419] usb 6-1: SerialNumber: syz
[  522.272388][ T5419] usb 6-1: config 0 descriptor??
[  522.309181][ T5419] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  522.317622][ T5419] usb 6-1: setting power ON
[  522.322982][ T5419] dvb-usb: bulk message failed: -22 (2/0)
[  522.417887][ T5419] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  522.486482][ T5419] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  522.496191][ T5419] usb 6-1: media controller created
[  522.657991][ T5419] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  522.939848][ T8994] kernel profiling enabled (shift: 6)
[  523.095451][ T5419] usb 6-1: selecting invalid altsetting 6
[  523.101889][ T5419] usb 6-1: digital interface selection failed (-22)
[  523.108911][ T5419] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  523.241203][ T5419] usb 6-1: setting power OFF
[  523.246041][ T5419] dvb-usb: bulk message failed: -22 (2/0)
[  523.252380][ T5419] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  523.262220][ T5419] (NULL device *): no alternate interface
[  524.031651][ T5419] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  524.205222][ T5419] usb 6-1: USB disconnect, device number 3
[  534.534516][ T5419] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  534.725999][ T5419] usb 7-1: Using ep0 maxpacket: 8
[  534.805670][ T5419] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  534.814263][ T5419] usb 7-1: config 179 has no interface number 0
[  534.821270][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  534.838780][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  534.852433][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  534.864059][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  534.876118][ T5419] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  534.889886][ T5419] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  534.899413][ T5419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.190751][ T9079] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  535.515568][ T5419] usb 7-1: USB disconnect, device number 3
[  535.524528][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  535.535134][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  537.236648][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'.
[  537.309191][ T9103] tipc: Started in network mode
[  537.314994][ T9103] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  537.325535][ T9103] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  537.846233][ T9109] loop7: detected capacity change from 0 to 512
[  538.635160][ T9115] loop5: detected capacity change from 0 to 1764
[  538.923473][ T9115] iso9660: Corrupted directory entry in block 2 of inode 1920
[  539.004819][ T9119] loop7: detected capacity change from 0 to 1024
[  539.183594][ T9119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.283306][ T5419] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  539.461948][ T5419] usb 7-1: Using ep0 maxpacket: 8
[  539.500153][ T5419] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  539.510094][ T5419] usb 7-1: config 179 has no interface number 0
[  539.516872][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  539.528610][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  539.545592][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  539.559037][ T5419] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  539.571186][ T5419] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  539.585106][ T5419] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  539.594835][ T5419] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.790674][ T9130] process 'syz.4.1174' launched './file0' with NULL argv: empty string added
[  539.845990][ T9124] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  539.884416][ T8557] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  539.962707][ T8557] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  540.343348][ T5419] usb 7-1: USB disconnect, device number 4
[  540.350369][    C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  540.358974][    C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  540.677936][ T9139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1176'.
[  540.784726][ T9139] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  540.867772][ T8557] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.870265][  T133] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.017367][  T133] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.233576][  T133] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.421015][  T133] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.046449][  T133] bridge_slave_1: left allmulticast mode
[  542.052570][  T133] bridge_slave_1: left promiscuous mode
[  542.059310][  T133] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.114734][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  542.121769][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  542.157072][  T133] bridge_slave_0: left allmulticast mode
[  542.169945][  T133] bridge_slave_0: left promiscuous mode
[  542.176859][  T133] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.763870][  T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.782952][  T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  542.824857][  T133] bond0 (unregistering): Released all slaves
[  543.408441][  T133] hsr_slave_0: left promiscuous mode
[  543.443718][  T133] hsr_slave_1: left promiscuous mode
[  543.452978][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.461896][  T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.549635][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.560524][  T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.648939][  T133] veth1_macvtap: left promiscuous mode
[  543.655166][  T133] veth0_macvtap: left promiscuous mode
[  543.661484][  T133] veth1_vlan: left promiscuous mode
[  543.667085][  T133] veth0_vlan: left promiscuous mode
[  543.762654][ T9160] loop6: detected capacity change from 0 to 1024
[  544.198217][ T9160] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.839895][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'.
[  544.931188][  T133] team0 (unregistering): Port device team_slave_1 removed
[  545.012531][  T133] team0 (unregistering): Port device team_slave_0 removed
[  545.101784][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  545.112505][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  545.122199][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  545.136410][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  545.148211][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  545.443074][ T9173] tipc: Started in network mode
[  545.448358][ T9173] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  545.460062][ T9173] tipc: Enabled bearer <udp:syz0>, priority 10
[  545.692824][ T8112] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  545.800387][ T8112] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  546.449557][ T5852] tipc: Node number set to 1
[  546.635620][ T8112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.744799][ T8351] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.164423][ T8351] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.219328][ T5794] Bluetooth: hci0: command tx timeout
[  547.434400][ T8351] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.603858][ T8351] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  547.855323][ T9174] chnl_net:caif_netlink_parms(): no params data found
[  548.487462][ T8351] bridge_slave_1: left allmulticast mode
[  548.493770][ T8351] bridge_slave_1: left promiscuous mode
[  548.500760][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.668848][ T8351] bridge_slave_0: left allmulticast mode
[  548.674772][ T8351] bridge_slave_0: left promiscuous mode
[  548.682235][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.291618][ T5795] Bluetooth: hci0: command tx timeout
[  549.430794][ T8351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.452744][ T8351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.476174][ T8351] bond0 (unregistering): Released all slaves
[  550.153389][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.161619][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.169782][ T9174] bridge_slave_0: entered allmulticast mode
[  550.179749][ T9174] bridge_slave_0: entered promiscuous mode
[  550.347738][ T8351] hsr_slave_0: left promiscuous mode
[  550.548753][ T8351] hsr_slave_1: left promiscuous mode
[  550.557480][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.565081][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.637523][ T8351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.645148][ T8351] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.722062][ T8351] veth1_macvtap: left promiscuous mode
[  550.728120][ T8351] veth0_macvtap: left promiscuous mode
[  550.734084][ T8351] veth1_vlan: left promiscuous mode
[  550.740088][ T8351] veth0_vlan: left promiscuous mode
[  551.352541][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  551.360881][ T5794] Bluetooth: hci0: command tx timeout
[  551.385501][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  551.439325][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  551.537199][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1203'.
[  551.567314][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  551.707589][ T8351] team0 (unregistering): Port device team_slave_1 removed
[  551.708430][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  551.874812][ T8351] team0 (unregistering): Port device team_slave_0 removed
[  552.278056][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.290064][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.300327][ T9174] bridge_slave_1: entered allmulticast mode
[  552.313770][ T9174] bridge_slave_1: entered promiscuous mode
[  552.626702][ T9227] tipc: Started in network mode
[  552.632126][ T9227] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  552.645145][ T9227] tipc: Enabled bearer <udp:syz0>, priority 10
[  552.970277][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  553.132463][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  553.454808][ T5794] Bluetooth: hci0: command tx timeout
[  553.678756][ T9174] team0: Port device team_slave_0 added
[  553.687104][ T9096] tipc: Node number set to 1
[  553.788405][ T9174] team0: Port device team_slave_1 added
[  553.836103][ T5794] Bluetooth: hci1: command tx timeout
[  554.162649][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.171899][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.207964][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.303808][ T9222] chnl_net:caif_netlink_parms(): no params data found
[  554.364889][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.373197][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.406761][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.411591][ T5794] Bluetooth: hci4: command 0x0406 tx timeout
[  554.981261][ T9174] hsr_slave_0: entered promiscuous mode
[  554.992933][ T9174] hsr_slave_1: entered promiscuous mode
[  555.914418][ T5795] Bluetooth: hci1: command tx timeout
[  556.034231][ T9096] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  556.152684][ T9222] bridge0: port 1(bridge_slave_0) entered blocking state
[  556.163229][ T9222] bridge0: port 1(bridge_slave_0) entered disabled state
[  556.171416][ T9222] bridge_slave_0: entered allmulticast mode
[  556.181467][ T9222] bridge_slave_0: entered promiscuous mode
[  556.214244][ T9096] usb 6-1: Using ep0 maxpacket: 16
[  556.284825][ T9096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  556.295670][ T9096] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  556.306085][ T9096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.407280][ T9222] bridge0: port 2(bridge_slave_1) entered blocking state
[  556.415386][ T9222] bridge0: port 2(bridge_slave_1) entered disabled state
[  556.423238][ T9222] bridge_slave_1: entered allmulticast mode
[  556.440296][ T9222] bridge_slave_1: entered promiscuous mode
[  556.450615][ T9096] usb 6-1: config 0 descriptor??
[  556.548118][ T9096] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  556.702289][ T9222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  556.717289][ T9174] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  556.793037][ T9222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.825865][ T9174] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  556.990014][ T9174] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  557.105598][ T9174] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  557.164151][ T9222] team0: Port device team_slave_0 added
[  557.226259][ T9222] team0: Port device team_slave_1 added
[  557.631882][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.639228][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.667085][ T9222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.819886][ T9222] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.827526][ T9222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  557.854728][ T9222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  557.993394][ T5795] Bluetooth: hci1: command tx timeout
[  558.358763][ T9222] hsr_slave_0: entered promiscuous mode
[  558.370335][ T9222] hsr_slave_1: entered promiscuous mode
[  558.387271][ T9222] debugfs: 'hsr0' already exists in 'hsr'
[  558.393446][ T9222] Cannot create hsr debugfs directory
[  559.066482][ T9096] usb 6-1: USB disconnect, device number 4
[  559.216783][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.273036][ T5795] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  559.281660][ T5795] Bluetooth: hci2: Injecting HCI hardware error event
[  559.289854][ T5795] Bluetooth: hci2: hardware error 0x00
[  559.646656][ T9174] 8021q: adding VLAN 0 to HW filter on device team0
[  559.755161][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1226'.
[  560.019916][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.027601][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.089664][ T5794] Bluetooth: hci1: command tx timeout
[  560.146142][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.153845][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  560.779807][ T9222] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  560.872485][ T9222] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  561.018508][ T9222] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  561.158940][ T9222] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  561.371490][ T5795] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  561.772023][ T1864] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  561.951903][ T1864] usb 6-1: Using ep0 maxpacket: 16
[  562.005345][ T1864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  562.016855][ T1864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  562.027165][ T1864] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  562.036662][ T1864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.231279][ T1864] usb 6-1: config 0 descriptor??
[  562.739350][ T1864] usbhid 6-1:0.0: can't add hid device: -71
[  562.746288][ T1864] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  562.931834][ T1864] usb 6-1: USB disconnect, device number 5
[  563.895116][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  565.306659][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.952997][ T9222] 8021q: adding VLAN 0 to HW filter on device team0
[  566.039540][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.047127][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.190891][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.198440][ T3941] bridge0: port 2(bridge_slave_1) entered forwarding state
[  568.623280][ T9174] veth0_vlan: entered promiscuous mode
[  568.770252][ T9174] veth1_vlan: entered promiscuous mode
[  568.901316][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.204941][ T9174] veth0_macvtap: entered promiscuous mode
[  569.278215][ T9174] veth1_macvtap: entered promiscuous mode
[  569.519343][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  569.656809][ T9174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  569.770193][ T4273] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  569.870800][ T4273] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  569.961995][   T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  570.027826][   T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  572.421139][ T9222] veth0_vlan: entered promiscuous mode
[  572.556662][ T9222] veth1_vlan: entered promiscuous mode
[  572.847796][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1261'.
[  573.037752][ T9222] veth0_macvtap: entered promiscuous mode
[  573.178485][ T9222] veth1_macvtap: entered promiscuous mode
[  573.465064][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_0
[  573.540445][ T9222] batman_adv: batadv0: Interface activated: batadv_slave_1
[  573.774739][  T145] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  573.865318][   T59] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  573.874529][   T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  573.949295][   T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  575.220668][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'.
[  575.303253][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'.
[  576.433469][ T9500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'.
[  578.584541][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'.
[  578.692763][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'.
[  578.839144][ T8351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  578.848455][ T8351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.303916][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  579.312133][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  579.557559][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1283'.
[  581.208142][ T9570] syz_tun: entered allmulticast mode
[  582.698581][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.707055][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.964439][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.972847][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.246928][ T9599] capability: warning: `syz.8.1299' uses deprecated v2 capabilities in a way that may be insecure
[  584.336378][ T9609] syz_tun: entered allmulticast mode
[  585.067336][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1306'.
[  588.789962][ T9661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'.
[  589.169362][ T9669] =====================================================
[  589.176756][ T9669] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9ac/0xa30
[  589.187546][ T9669]  ieee802154_hdr_push+0x9ac/0xa30
[  589.192921][ T9669]  ieee802154_header_create+0x854/0xb90
[  589.200829][ T9669]  dgram_sendmsg+0xb40/0x16d0
[  589.205737][ T9669]  ieee802154_sock_sendmsg+0x92/0xd0
[  589.211559][ T9669]  __sock_sendmsg+0x333/0x3d0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  589.216459][ T9669]  ____sys_sendmsg+0x7e0/0xd80
[  589.221616][ T9669]  ___sys_sendmsg+0x271/0x3b0
[  589.226534][ T9669]  __x64_sys_sendmsg+0x211/0x3e0
[  589.232001][ T9669]  x64_sys_call+0x1dfd/0x3e30
[  589.236933][ T9669]  do_syscall_64+0xd9/0xfa0
[  589.241900][ T9669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.248120][ T9669] 
[  589.250997][ T9669] Uninit was stored to memory at:
[  589.256312][ T9669]  ieee802154_hdr_push+0x9a5/0xa30
[  589.261963][ T9669]  ieee802154_header_create+0x854/0xb90
[  589.268920][ T9669]  dgram_sendmsg+0xb40/0x16d0
[  589.273814][ T9669]  ieee802154_sock_sendmsg+0x92/0xd0
[  589.279499][ T9669]  __sock_sendmsg+0x333/0x3d0
[  589.286799][ T9669]  ____sys_sendmsg+0x7e0/0xd80
[  589.292585][ T9669]  ___sys_sendmsg+0x271/0x3b0
[  589.297832][ T9669]  __x64_sys_sendmsg+0x211/0x3e0
[  589.303087][ T9669]  x64_sys_call+0x1dfd/0x3e30
[  589.308309][ T9669]  do_syscall_64+0xd9/0xfa0
[  589.313058][ T9669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.319490][ T9669] 
[  589.321922][ T9669] Local variable hdr created at:
[  589.326975][ T9669]  ieee802154_header_create+0x4e/0xb90
[  589.332773][ T9669]  dgram_sendmsg+0xb40/0x16d0
[  589.337824][ T9669] 
[  589.340314][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.9.1325 Not tainted syzkaller #0 PREEMPT(none) 
[  589.349943][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  589.360344][ T9669] =====================================================
[  589.367587][ T9669] Disabling lock debugging due to kernel taint
[  589.373888][ T9669] Kernel panic - not syncing: kmsan.panic set ...
[  589.380484][ T9669] CPU: 0 UID: 0 PID: 9669 Comm: syz.9.1325 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  589.391675][ T9669] Tainted: [B]=BAD_PAGE
[  589.395955][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  589.406204][ T9669] Call Trace:
[  589.409633][ T9669]  <TASK>
[  589.412666][ T9669]  __dump_stack+0x26/0x30
[  589.417202][ T9669]  dump_stack_lvl+0x53/0x270
[  589.422054][ T9669]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  589.428109][ T9669]  dump_stack+0x1e/0x25
[  589.432482][ T9669]  vpanic+0x435/0xd30
[  589.436683][ T9669]  panic+0x15d/0x160
[  589.440818][ T9669]  kmsan_report+0x31c/0x320
[  589.445508][ T9669]  ? stack_depot_save+0x12/0x20
[  589.450544][ T9669]  ? __msan_warning+0x1b/0x30
[  589.455406][ T9669]  ? ieee802154_hdr_push+0x9ac/0xa30
[  589.460906][ T9669]  ? ieee802154_header_create+0x854/0xb90
[  589.466822][ T9669]  ? dgram_sendmsg+0xb40/0x16d0
[  589.471857][ T9669]  ? ieee802154_sock_sendmsg+0x92/0xd0
[  589.477533][ T9669]  ? __sock_sendmsg+0x333/0x3d0
[  589.482662][ T9669]  ? ____sys_sendmsg+0x7e0/0xd80
[  589.487835][ T9669]  ? ___sys_sendmsg+0x271/0x3b0
[  589.492949][ T9669]  ? __x64_sys_sendmsg+0x211/0x3e0
[  589.498313][ T9669]  ? x64_sys_call+0x1dfd/0x3e30
[  589.503403][ T9669]  ? do_syscall_64+0xd9/0xfa0
[  589.508285][ T9669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.514544][ T9669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.520792][ T9669]  ? ____sys_sendmsg+0x7e0/0xd80
[  589.526034][ T9669]  ? ___sys_sendmsg+0x271/0x3b0
[  589.531102][ T9669]  ? __x64_sys_sendmsg+0x211/0x3e0
[  589.536436][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.541748][ T9669]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[  589.548320][ T9669]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  589.554643][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.559957][ T9669]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  589.566452][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.571756][ T9669]  ? kmsan_internal_memmove_metadata+0x181/0x230
[  589.578346][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.583693][ T9669]  __msan_warning+0x1b/0x30
[  589.588369][ T9669]  ieee802154_hdr_push+0x9ac/0xa30
[  589.593737][ T9669]  ? __msan_memcpy+0x108/0x1c0
[  589.598785][ T9669]  ieee802154_header_create+0x854/0xb90
[  589.604586][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.609905][ T9669]  ? __pfx_ieee802154_header_create+0x10/0x10
[  589.616441][ T9669]  dgram_sendmsg+0xb40/0x16d0
[  589.621418][ T9669]  ? __pfx_dgram_sendmsg+0x10/0x10
[  589.626793][ T9669]  ieee802154_sock_sendmsg+0x92/0xd0
[  589.632382][ T9669]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  589.638652][ T9669]  ? __pfx_ieee802154_sock_sendmsg+0x10/0x10
[  589.644966][ T9669]  __sock_sendmsg+0x333/0x3d0
[  589.650007][ T9669]  ____sys_sendmsg+0x7e0/0xd80
[  589.655202][ T9669]  ___sys_sendmsg+0x271/0x3b0
[  589.660299][ T9669]  ? __rcu_read_unlock+0x6d/0xd0
[  589.665417][ T9669]  ? __fget_files+0x3b4/0x4a0
[  589.670266][ T9669]  ? __fget_files+0x3b9/0x4a0
[  589.675136][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.680708][ T9669]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  589.687220][ T9669]  __x64_sys_sendmsg+0x211/0x3e0
[  589.692429][ T9669]  ? kmsan_get_metadata+0xfb/0x160
[  589.697945][ T9669]  x64_sys_call+0x1dfd/0x3e30
[  589.702910][ T9669]  do_syscall_64+0xd9/0xfa0
[  589.707814][ T9669]  ? irqentry_exit+0x16/0x60
[  589.712637][ T9669]  ? clear_bhb_loop+0x40/0x90
[  589.717535][ T9669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.723891][ T9669] RIP: 0033:0x7fc53958f749
[  589.728472][ T9669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  589.749059][ T9669] RSP: 002b:00007fc53a3c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  589.757941][ T9669] RAX: ffffffffffffffda RBX: 00007fc5397e5fa0 RCX: 00007fc53958f749
[  589.766444][ T9669] RDX: 0000000004040044 RSI: 0000200000002480 RDI: 0000000000000004
[  589.774843][ T9669] RBP: 00007fc539613f91 R08: 0000000000000000 R09: 0000000000000000
[  589.783129][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.791355][ T9669] R13: 00007fc5397e6038 R14: 00007fc5397e5fa0 R15: 00007ffc28f51848
[  589.799620][ T9669]  </TASK>
[  589.803049][ T9669] Kernel Offset: disabled
[  589.807737][ T9669] Rebooting in 86400 seconds..