last executing test programs:

2m4.740374774s ago: executing program 3 (id=628):
r0 = socket$inet(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

2m4.430620277s ago: executing program 3 (id=631):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
close(r0)

2m4.188395058s ago: executing program 3 (id=632):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000)

1m59.537306627s ago: executing program 3 (id=650):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)={0x1a4, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x17e, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00\x91d\xe6,\xd3@I\x17\xf3\xbeeI8bz\xdb\xb8s0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\xacs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=40\xe8R\x83p,J\xca\x85\xcb\xfa:\xdb\xda\x05\xed\xc8\xad\xa2\xfc0C\x9e3\x8e*\xae\x91\xa4\xc7)\xc0\x87\x9b\xee~\xdb\xac\x03\x90\xb1\x05\x81\xb1j\xfaO`\xa7\xa0\xeb\x83\x13 \xc8\x98\xdb\v \x95\x8eD\xc3\xc6:\xcc%\x88\xc7\xa5\xe5\xfc\xccl\x96F_\x92\xa2\xc3\xea@\"\xb1\x1b`o~B\xb4W\xd8\v\xabCBL\x81A\x92D\xd5{K\xf0\xd5\x91\n\x94\x9b\xd9\xdb2E\\\xb1\x90\xf1\xfc\xc1}\x96\xf4\xba3g\xc8\xf7j\xbc\xf1\x11\xe3\x05\xean9M\xeb&\xd2\xdf\xbe\xa1\xe8[\x91\xa5\x90uX\xd0IH!\xe3\x8a9k\x94\xc8\xde\xea\xc6^\x96\xceV\xb2\xcba\x8b\xbc\xe9'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x2}, 0x4000840)

1m59.310281096s ago: executing program 3 (id=652):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x418, &(0x7f0000002600)=ANY=[@ANYRES8=0x0], 0xff, 0x6a8, &(0x7f0000001dc0)="$eJzs3c1vHGcdB/DvrDd2Ni0hSZM2oEq1GgkQEYkTKy3mQkAI5VBVVTlwthKnseKkxXGRWyHi8HrtoX9AOeSCOCFx4hKpcOBCb70hH5GQuJQD4cKimZ2117vrzbpN/EI/n2j2eZt55je/mdk3K9oAn1tXzqb5IEWunH1ltWyv359dWr8/e6tTf7WZZCrJWlJWG0mKf7fb7Q+Ty0mxMU3RVw54f3Hu9Y8/Wf97p9Wsl2r9xqjt+tTrrfV1r3X7ppNM1OVnsGW+q595vmIj8stJztQl7LlDSdpb/OgvT2+M9GgN2/rwrsQIPFlF53VzwLHkSH2jl+8Duq+8jd2NbjwT3SDH0P8OAgAAAA6a6jNwc6B7S88XH+ZhVoujuxgWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHGhryWT98/lFvTS69ekU3d//n6z7Utf3lxd2tvqDJxUHAAAAAAAAAOyiFx7mYVZztNtuF9Xf/F+sGierx6fydu5kIcs5l9XMZyUrWc6FJMd6JppcnV9Zmeq2Rm15cdiWyxcfEWh36tZjOGgAAAAAAAAA+P/zs1zZ/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsB0Uy0SlS3OvpPpZGM8nhJJNlx1ryUbd+kD3Y6wAAAABgF0wlD7Oao912u8jJJM9W3wEcztu5nZUsZiVLWci16nuBzqf+xvr92aX1+7O3ymVw3u/8c0dhVDOm893D8D2frtZo5XoWq55zuZo3s5RraVRblk7X8XRn7YvrXhlT8e3ay+NFdq0uyyN/ry4H3N3RwW5nh1+mHKsycqiTkYlkpo6tzMbx7pkZfoZ2eHa27CkLuZDGRrAn+/Y0ufVgtuZ8c8rGqP0dqcvyeH61Xc73RCcT/213LORiz9X37OicJ1/9w+9+OFPX988hjWeiLtvVY2vwmpjtycRz42TixtLtmzeu3zl70DIxYKbKxKmN9pV8Pz/I2UzntSxnMT/OfFaykOl8r6rN1ye/6Lnlt8nU5S2t1x4VyWR9hXZO1s5ierHa9mgW82rezLUs5KXq38VcyMu5lEuZ6znDp0af4equbwze9ZX2F4YGf+ZrdaWV5Nd1uT+UeT3ek9fNq36myvfxLT11lopmToyRpSHPjaM0v1xXyn38/FFPpLuqPxMXeq6XZ0Zn4jfV08qdpds3l2/MvzXe7k68V1fK++iXyfT+eSIpr5cT5cmqWlNbro5y7JmNsa35KsdObow1BsZO5Y9pNrt7WczatnfqZP0ebnCmi9XYc0PHZqux0z1jw95vAbDvHfn6kcnWP1p/bX3Q+kXrRuuVw9+d+ubU85M59KdD32rOTHyl8Xzx+3yQn25+/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD69O++8e3N+aWlhua/SbrfvfjR8aMxK9/dqPuXm/ZXur0KNsXKm//ZUueqQoYm0724z9KQqX3o62a197d/Kf9rtdt1TbLPOb//cn6ip7FHq6t/5a++L1I2oHH5899dAZc+ekoBdcn7l1lvn77zz7jcWb82/sfDGwu25S5fmZuYuvTR7/vri0sJM53GvowSehM0X/b2OBAAAAAAAAAAAABjXY/4/A2vDhvb6GAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICD7crZNB+kyIWZczNle/3+7FK5dOubazaTNJIUP0mKD5PL6Sw51jNdsd1+3l+ce/3jT9b/1e6o56vWb4zabjxr9ZLpJBOd8t7jmu9qXY5UjDqEYuMIy4Sd6SYO9tr/AgAA///XgQ6S")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

1m59.035879688s ago: executing program 3 (id=654):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x7fff, 0x0)

1m43.795677132s ago: executing program 32 (id=654):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r0, 0x7fff, 0x0)

8.030344306s ago: executing program 4 (id=1189):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x1, 0xab6, &(0x7f0000000ec0)="$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")
r0 = open(&(0x7f00000002c0)='./file2\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x8c, 0x2, 0x3, 0xb, 0xa9, 0x6, 0x6, 0x5f, 0x9, 0x80005, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x1, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x6, 0x6, 0x20003, 0x8, 0x9, 0x10000, 0x242, 0x2, 0xe, 0x4, 0x8000806e, 0x7, 0x17, 0x7, 0x2, 0xb7, 0x3e, 0x18f, 0x2, 0x4, 0x0, 0x6, 0x80004, 0x8, 0x3ff, 0x7ff, 0x0, 0x5, 0x0, 0x8, 0x3, 0x1, 0x40], [0x10000007, 0x9, 0x5, 0x8004, 0x5, 0xfffffff3, 0x3, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x4, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x7ff, 0xea4, 0x0, 0x4, 0x6, 0xb3, 0x6, 0x400, 0x401, 0x3, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x3ff, 0x5, 0xa, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x800004, 0x9, 0x1, 0x3, 0x4000009, 0x6, 0x8, 0x75a, 0x9c45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x80000005, 0x3, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x3, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xe9c, 0x3, 0x303c, 0xfffffffa, 0xf, 0x3, 0x4, 0x2, 0x400001, 0x0, 0x800, 0x6d01, 0x4, 0x38, 0x800003, 0x200, 0x80, 0xffffffff, 0x0, 0x1, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0x2b1, 0x1, 0x1, 0x2, 0x3, 0x200007ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x7, 0x81, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x4b, 0x7, 0x4, 0x5, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0xc, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7, 0xffff, 0xa620, 0x1, 0x5, 0x23c2, 0x2000002, 0x14c, 0xa0, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xca, 0x1, 0x1, 0xffff, 0x0, 0x7e, 0x100, 0x9620, 0x100, 0xb3, 0x20000008, 0xffffffff, 0x226, 0x2, 0x5, 0x200, 0x30b1d693, 0x7, 0xf40, 0x6, 0x530e, 0x6c1b, 0x0, 0x4, 0x8001, 0x803, 0xd7, 0x200, 0x6, 0x10001]}, 0x45c)

6.913418434s ago: executing program 4 (id=1197):
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede)
fcntl$setpipe(r0, 0x407, 0xc000)

5.682737857s ago: executing program 4 (id=1204):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x102c41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
write$cgroup_subtree(r0, 0x0, 0x0)
write$cgroup_subtree(r0, 0x0, 0x0)

5.493412505s ago: executing program 5 (id=1207):
r0 = socket(0x840000000002, 0x3, 0xff)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0, <r2=>0x0}, &(0x7f00000003c0)=0xc)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14fa, &(0x7f0000002a80)="$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")
removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00')

5.180939178s ago: executing program 0 (id=1210):
r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}})
io_uring_enter(r0, 0x68be, 0x5002, 0x4, 0x0, 0x0)

4.90353139s ago: executing program 0 (id=1212):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

4.547948105s ago: executing program 0 (id=1213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x3, 0x11, 0x0, @private=0xa010101, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0)

4.253401478s ago: executing program 0 (id=1214):
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000001480)={[{@nls={'nls', 0x3d, 'iso8859-13'}}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@nobarrier}, {@force}, {@type={'type', 0x3d, "05f2875e"}}, {@barrier}]}, 0x3, 0x632, &(0x7f0000000800)="$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")
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1fc, &(0x7f0000001280)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

4.083102855s ago: executing program 5 (id=1215):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000008600)=0x1, 0x4)
recvmmsg(r0, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/122, 0x7a}, 0x7fffffff}], 0x1, 0x8020, 0x0)
sendmsg$802154_dgram(r0, &(0x7f000000b8c0)={&(0x7f000000b800)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f000000b880)={0x0}}, 0x0)

3.760762519s ago: executing program 5 (id=1217):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x154, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x2}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xc8, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x60, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x54, 0x1, [@m_ctinfo={0x50, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x21, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

3.760578059s ago: executing program 1 (id=1218):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6e5, &(0x7f0000000f00)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x64)
lsetxattr$security_capability(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540), 0x0, 0x0, 0x3)

3.490256451s ago: executing program 5 (id=1220):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x0, 0x2, '\x00', 0x9, 0xf8})

3.453286772s ago: executing program 0 (id=1221):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)

3.353407456s ago: executing program 2 (id=1222):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fchmod(0xffffffffffffffff, 0x0)

3.293319849s ago: executing program 5 (id=1223):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000084)
r1 = syz_open_procfs(0x0, &(0x7f0000001080)='net/icmp6\x00')
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4081, 0xff1}], 0x1, 0x9, 0x20000003)

2.994878922s ago: executing program 5 (id=1224):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000380), &(0x7f0000000640)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="000b9240c8aee6631ad071808fe5ec25c497c626f69d02a71d1d27602d048db08101209e5e4cce0e9628b0636f3baa"], 0x1, 0x639, &(0x7f0000000680)="$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")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2710, 0x0, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil})

2.942737974s ago: executing program 1 (id=1225):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0)

2.237069584s ago: executing program 1 (id=1226):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = syz_open_dev$media(&(0x7f0000000040), 0x310, 0x2001)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x249249249249269, 0x0, &(0x7f0000003080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.703062387s ago: executing program 2 (id=1227):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x48, 0x10d, 0x5, "ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff"}], 0x48}, 0x0, 0xe3d08660d3cd4684})
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e4b56"}, 0x5, 0x4, {}, 0x5c000000})

1.481590997s ago: executing program 4 (id=1228):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x12, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20)

1.421129819s ago: executing program 2 (id=1229):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r0, 0x407, 0x4000000)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
pipe2(&(0x7f0000001440), 0x0)

1.16690194s ago: executing program 4 (id=1230):
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0x0)
keyctl$setperm(0x5, r0, 0x112012)
keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0)

1.125981002s ago: executing program 2 (id=1231):
r0 = syz_io_uring_setup(0x1eb2, &(0x7f0000000480)={0x0, 0x100000, 0x80}, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
io_uring_enter(r0, 0x1818, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1)

726.435059ms ago: executing program 4 (id=1232):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x517102, 0x1ae)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000440)={{r0}, "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"})

648.918682ms ago: executing program 0 (id=1233):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d000000000001090224000100000000090400000103000200092100000001220500090581030014"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x44200)

601.061604ms ago: executing program 1 (id=1234):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0))

378.571984ms ago: executing program 2 (id=1235):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x1)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

335.929816ms ago: executing program 1 (id=1236):
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

96.597636ms ago: executing program 2 (id=1237):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d40)=ANY=[@ANYBLOB="18"], 0x18}}, 0x4000000)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

0s ago: executing program 1 (id=1238):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x1, 0x0, [{0x7, 0x0, 0x3, 0xa, 0x4}]})

kernel console output (not intermixed with test programs):

p2): udf_process_sequence: Primary Volume Descriptor not found!
[  121.333108][ T4374] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[  121.377020][ T4374] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  121.450330][ T5760] UDF-fs: unknown compression code (0)
[  121.461221][ T4374] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[  121.506843][ T4374] usb 2-1: media controller created
[  121.570819][ T4374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  121.977277][ T4374] DVB: Unable to find symbol dib7000p_attach()
[  121.993943][ T4374] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[  122.289844][ T4374] rc_core: IR keymap rc-dib0700-rc5 not found
[  122.296207][ T4374] Registered IR keymap rc-empty
[  122.306309][ T4374] dvb-usb: could not initialize remote control.
[  122.338514][ T4374] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[  122.350301][ T5786] loop2: detected capacity change from 0 to 256
[  122.435921][ T4374] dib0700: There's no endpoint for remote controller
[  122.571575][ T5766] loop0: detected capacity change from 0 to 32768
[  122.734393][ T4374] usb 2-1: USB disconnect, device number 6
[  122.827955][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  122.827969][   T26] audit: type=1107 audit(1763552890.948:39): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  122.841134][ T4374] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[  123.204041][ T5766] XFS (loop0): Mounting V5 Filesystem
[  123.816512][ T5786] FAT-fs (loop2): Directory bread(block 64) failed
[  123.840853][ T5786] FAT-fs (loop2): Directory bread(block 65) failed
[  123.857570][ T5786] FAT-fs (loop2): Directory bread(block 66) failed
[  123.882963][ T5786] FAT-fs (loop2): Directory bread(block 67) failed
[  123.910031][ T5786] FAT-fs (loop2): Directory bread(block 68) failed
[  123.917455][ T5786] FAT-fs (loop2): Directory bread(block 69) failed
[  123.938157][ T5786] FAT-fs (loop2): Directory bread(block 70) failed
[  123.960687][ T5786] FAT-fs (loop2): Directory bread(block 71) failed
[  123.986672][ T5806] loop4: detected capacity change from 0 to 4096
[  124.012999][ T5786] FAT-fs (loop2): Directory bread(block 72) failed
[  124.039369][ T5786] FAT-fs (loop2): Directory bread(block 73) failed
[  124.084210][ T5806] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  124.194278][ T5799] loop1: detected capacity change from 0 to 32768
[  124.258087][    C1] net_ratelimit: 14820 callbacks suppressed
[  124.258104][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  124.269684][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.276345][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  124.288382][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.300265][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  124.312156][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.324161][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  124.336891][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  124.348049][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  124.360243][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  124.392005][ T5799] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  124.566330][ T5766] XFS (loop0): Ending clean mount
[  124.692947][ T4265] XFS (loop0): Unmounting Filesystem
[  124.895330][ T5818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'.
[  125.251832][ T5824] netlink: 'syz.1.584': attribute type 1 has an invalid length.
[  125.290523][ T5824] nbd: error processing sock list
[  125.558630][ T4713] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10
[  126.094867][ T5838] trusted_key: encrypted_key: key user:syz not found
[  126.335768][ T4270] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  126.406389][ T5820] loop2: detected capacity change from 0 to 32768
[  126.461204][ T4270] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  126.467813][ T4270] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  126.481495][ T5820] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.582 (5820)
[  126.617224][ T5820] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  126.636897][ T5820] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  126.686604][ T5820] BTRFS info (device loop2): enabling auto defrag
[  126.712727][ T5820] BTRFS info (device loop2): force clearing of disk cache
[  126.772922][ T5820] BTRFS info (device loop2): enabling disk space caching
[  126.829869][ T5820] BTRFS info (device loop2): max_inline at 0
[  126.863238][ T5820] BTRFS info (device loop2): disk space caching is enabled
[  127.513478][ T5820] BTRFS info (device loop2): enabling ssd optimizations
[  127.622771][ T5820] BTRFS info (device loop2): rebuilding free space tree
[  127.776129][ T5820] BTRFS info (device loop2): disabling free space tree
[  127.783968][ T5820] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  127.849259][ T5820] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.211664][ T4269] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  128.744885][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready
[  129.039392][ T5876] loop4: detected capacity change from 0 to 32768
[  129.144244][ T5917] loop1: detected capacity change from 0 to 512
[  129.247924][ T5917] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  129.263323][    C0] net_ratelimit: 11702 callbacks suppressed
[  129.263341][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  129.273194][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  129.281906][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  129.293632][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  129.305924][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.317504][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  129.329421][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.341431][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  129.353375][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  129.365282][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  129.555431][ T5876] XFS (loop4): Mounting V5 Filesystem
[  129.699866][ T5917] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.617: corrupted in-inode xattr
[  129.810193][ T5917] EXT4-fs (loop1): Remounting filesystem read-only
[  129.896255][ T5917] EXT4-fs (loop1): 1 truncate cleaned up
[  129.902008][ T5917] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  130.047971][ T5942] program syz.3.624 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.071014][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  130.158551][ T5944] loop0: detected capacity change from 0 to 1024
[  130.281372][ T5946] loop1: detected capacity change from 0 to 256
[  130.786016][ T5944] hfsplus: small dir entry
[  130.831431][ T5876] XFS (loop4): Ending clean mount
[  130.968317][ T4270] XFS (loop4): Unmounting Filesystem
[  131.163627][ T5952] EXT4-fs: Conflicting test_dummy_encryption options
[  131.461101][ T5958] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  131.801369][ T5946] FAT-fs (loop1): Directory bread(block 64) failed
[  131.812744][ T5946] FAT-fs (loop1): Directory bread(block 65) failed
[  131.851166][ T5946] FAT-fs (loop1): Directory bread(block 66) failed
[  131.870590][ T5946] FAT-fs (loop1): Directory bread(block 67) failed
[  131.907139][ T5946] FAT-fs (loop1): Directory bread(block 68) failed
[  131.918883][ T5946] FAT-fs (loop1): Directory bread(block 69) failed
[  131.962783][ T5946] FAT-fs (loop1): Directory bread(block 70) failed
[  131.993287][ T5946] FAT-fs (loop1): Directory bread(block 71) failed
[  131.999938][ T5946] FAT-fs (loop1): Directory bread(block 72) failed
[  132.029078][ T5946] FAT-fs (loop1): Directory bread(block 73) failed
[  132.071491][ T5968] Bluetooth: MGMT ver 1.22
[  132.199810][ T5970] loop2: detected capacity change from 0 to 2048
[  132.262330][ T5970] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  132.470036][ T5973] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.511611][ T4687] udevd[4687]: incorrect nilfs2 checksum on /dev/loop2
[  132.643625][ T5970] NILFS error (device loop2): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  132.692619][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.699033][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  132.831951][ T5970] Remounting filesystem read-only
[  133.687330][ T4312] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  133.793157][ T5979] loop0: detected capacity change from 0 to 40427
[  133.878584][ T5979] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  133.949125][ T5979] F2FS-fs (loop0): invalid crc value
[  134.073949][ T5979] F2FS-fs (loop0): Found nat_bits in checkpoint
[  134.107790][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  134.118943][ T4312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  134.190050][ T4312] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  134.212531][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.239684][ T5979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  134.255091][ T4312] usb 3-1: config 0 descriptor??
[  134.273052][    C1] net_ratelimit: 14811 callbacks suppressed
[  134.273067][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  134.273266][ T5989] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  134.279305][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  134.310596][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  134.313754][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  134.322780][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  134.335009][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.346643][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  134.358490][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.370378][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  134.382392][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  134.545272][ T4265] syz-executor: attempt to access beyond end of device
[  134.545272][ T4265] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  135.071581][ T5997] loop4: detected capacity change from 0 to 32768
[  135.120887][ T4312] nzxt-kraken2 0003:1E71:170E.000B: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0
[  135.284172][ T5997] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  135.323859][ T5997] XFS (loop4): Mounting V5 Filesystem
[  135.432052][ T4312] usb 3-1: USB disconnect, device number 4
[  135.601289][ T6005] fido_id[6005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  135.725858][ T3653] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  136.099173][ T3653] usb 1-1: Using ep0 maxpacket: 8
[  136.250667][ T5997] XFS (loop4): Ending clean mount
[  136.303051][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  136.324360][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  136.367690][ T3653] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  136.401255][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  136.434773][ T3653] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  136.467948][ T3653] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  136.484642][ T6017] mmap: syz.2.653 (6017): VmData 49221632 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  136.506342][ T3653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.522496][ T3653] usb 1-1: config 0 descriptor??
[  136.550216][ T6007] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  136.590221][ T5997] XFS (loop4): Quotacheck needed: Please wait.
[  136.889143][ T5997] XFS (loop4): Quotacheck: Done.
[  137.064326][ T4268] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  137.144855][ T4384] usb 1-1: USB disconnect, device number 6
[  137.244937][ T4270] XFS (loop4): Unmounting Filesystem
[  137.255206][ T6019] loop2: detected capacity change from 0 to 4096
[  137.290815][ T6019] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  139.116466][ T6024] loop1: detected capacity change from 0 to 32768
[  139.146602][ T4312] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  139.230686][ T4269] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  139.293981][    C0] net_ratelimit: 14468 callbacks suppressed
[  139.293997][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  139.294193][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  139.300411][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.312241][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  139.324154][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.336074][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  139.347972][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.359970][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  139.371860][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  139.383918][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  139.487795][ T4269] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  139.497310][ T4269] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  139.812799][ T4312] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  139.821024][ T4312] usb 5-1: config 0 has no interface number 0
[  140.074312][ T4312] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  140.085966][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.117795][ T4312] usb 5-1: Product: syz
[  140.122011][ T4312] usb 5-1: Manufacturer: syz
[  140.149787][ T4312] usb 5-1: SerialNumber: syz
[  140.185977][ T4312] usb 5-1: config 0 descriptor??
[  140.198540][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  140.280269][ T6039] loop0: detected capacity change from 0 to 256
[  140.457078][ T4312] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  140.468033][ T4312] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  140.502697][ T4312] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  140.519621][ T4312] usb 5-1: media controller created
[  140.572007][ T6024] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  140.587743][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.744833][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.772897][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.820811][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  140.908844][ T5910] usb 3-1: New USB device found, idVendor=0463, idProduct=ffff, bcdDevice= 0.00
[  140.940099][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.991472][ T5910] usb 3-1: config 0 descriptor??
[  141.067447][ T5326] usb 5-1: USB disconnect, device number 5
[  141.070490][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  141.542259][ T6046] loop1: detected capacity change from 0 to 1024
[  141.545277][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.581728][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.623228][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.660922][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.716787][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.737052][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.761687][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.820608][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.828372][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.852926][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.886264][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.922370][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.948073][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  141.982924][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  142.012461][ T5910] hid-generic 0003:0463:FFFF.000C: unknown main item tag 0x0
[  142.100230][ T5910] hid-generic 0003:0463:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 0463:ffff] on usb-dummy_hcd.2-1/input0
[  142.203028][ T5910] usb 3-1: USB disconnect, device number 5
[  142.219492][ T6044] loop0: detected capacity change from 0 to 32768
[  142.578227][ T6051] fido_id[6051]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  142.610062][ T6044] XFS (loop0): Mounting V5 Filesystem
[  143.617923][ T6060] loop4: detected capacity change from 0 to 32768
[  143.784261][ T6044] XFS (loop0): Ending clean mount
[  143.970384][ T6060] syz.4.670: attempt to access beyond end of device
[  143.970384][ T6060] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  143.995047][ T6060] metapage_write_end_io: I/O error
[  144.011339][ T6060] ERROR: (device loop4): diWrite: ixpxd invalid
[  144.011339][ T6060] 
[  144.048868][ T6060] ERROR: (device loop4): remounting filesystem as read-only
[  144.071271][ T6060] ERROR: (device loop4): txCommit: 
[  144.071271][ T6060] 
[  144.222897][ T6060] blkno = 8ed2c, nblocks = 1
[  144.229278][ T6060] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  144.229278][ T6060] 
[  144.288303][ T6060] UFO tlock:0xffffc9000289a090
[  144.302922][    C1] net_ratelimit: 12527 callbacks suppressed
[  144.302940][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  144.321304][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  144.333726][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  144.343725][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.346291][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  144.358087][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  144.369978][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  144.382488][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  144.393956][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  144.406173][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  144.440156][ T4265] XFS (loop0): Unmounting Filesystem
[  144.453719][ T6060] ERROR: (device loop4): dtSearch: DT_GETPAGE: dtree page corrupt
[  144.453719][ T6060] 
[  144.494937][ T6060] jfs_lookup: dtSearch returned -5
[  144.741748][  T106] blkno = 8ed2c, nblocks = 4
[  144.754021][  T106] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  144.754021][  T106] 
[  144.811462][ T4270] syz-executor: attempt to access beyond end of device
[  144.811462][ T4270] loop4: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  144.842906][ T4270] metapage_write_end_io: I/O error
[  144.865894][ T4270] JFS: metapage_get_blocks failed
[  144.871012][ T4270] JFS: metapage_get_blocks failed
[  144.911053][ T4270] JFS: metapage_get_blocks failed
[  144.926635][ T4270] JFS: metapage_get_blocks failed
[  145.495394][ T6095] sp0: Synchronizing with TNC
[  146.356700][ T4374] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  146.606935][ T6099] loop0: detected capacity change from 0 to 32768
[  146.670361][ T4374] usb 5-1: Using ep0 maxpacket: 16
[  146.828958][ T4374] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  146.853851][ T4374] usb 5-1: config 1 has no interface number 0
[  146.860154][ T4374] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  146.886137][ T4374] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  146.906199][ T4374] usb 5-1: config 1 interface 105 has no altsetting 0
[  147.005769][ T4374] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  147.014883][ T4374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.038531][ T4374] usb 5-1: Product: syz
[  147.042738][ T4374] usb 5-1: Manufacturer: syz
[  147.055155][ T4374] usb 5-1: SerialNumber: syz
[  147.093343][ T6101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  147.116706][ T6101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  147.301339][ T6099] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  147.359629][ T6103] loop1: detected capacity change from 0 to 32768
[  147.606529][ T6103] XFS (loop1): Mounting V5 Filesystem
[  147.655704][ T6101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  147.681499][ T6101] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  147.733704][ T4265] ocfs2: Unmounting device (7,0) on (node local)
[  147.955378][ T4374] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  148.006245][ T4374] aqc111: probe of 5-1:1.105 failed with error -71
[  148.079478][ T4374] usb 5-1: USB disconnect, device number 6
[  148.492975][   T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  148.714955][ T6103] XFS (loop1): Ending clean mount
[  148.796954][ T6103] XFS (loop1): Quotacheck needed: Please wait.
[  149.117087][ T6103] XFS (loop1): Quotacheck: Done.
[  149.207974][   T41] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  149.222898][   T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.248803][   T41] usb 1-1: Product: syz
[  149.270451][   T41] usb 1-1: Manufacturer: syz
[  149.275363][   T41] usb 1-1: SerialNumber: syz
[  149.331640][    C0] net_ratelimit: 13973 callbacks suppressed
[  149.331655][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  149.350384][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  149.351510][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  149.362998][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.374591][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  149.386463][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.398355][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  149.410357][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.422267][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  149.434147][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  149.459346][   T41] usb 1-1: config 0 descriptor??
[  149.763385][ T4277] XFS (loop1): Unmounting Filesystem
[  149.768056][ T6136] program syz.2.698 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.121515][   T41] mos7840 1-1:0.0: required endpoints missing
[  150.162935][   T41] usb 1-1: USB disconnect, device number 7
[  150.256275][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'.
[  150.513321][ T6148] process 'syz.2.704' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  150.818217][ T4312] kernel read not supported for file /vcs (pid: 4312 comm: kworker/0:5)
[  151.314548][ T6163] loop2: detected capacity change from 0 to 256
[  151.400318][   T41] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  151.452833][ T6163] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.468749][ T6163] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  151.907383][ T6163] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  152.122317][   T41] usb 1-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  152.134615][   T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.196484][   T41] usb 1-1: Product: syz
[  152.200743][   T41] usb 1-1: Manufacturer: syz
[  152.241179][   T41] usb 1-1: SerialNumber: syz
[  152.272825][   T41] usb 1-1: config 0 descriptor??
[  152.303922][ T6155] loop4: detected capacity change from 0 to 32768
[  152.365204][   T41] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  152.483644][ T6176] device veth1_macvtap left promiscuous mode
[  152.598252][ T6178] device veth1_macvtap entered promiscuous mode
[  152.844717][   T41] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  152.875324][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  153.101245][   T41] usb 1-1: USB disconnect, device number 8
[  153.110042][   T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.122377][   T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.130526][   T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.139073][ T4278] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.147475][ T4278] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  153.154910][ T4278] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.178532][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  153.212113][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  153.220044][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  153.228438][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  153.236204][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  153.243651][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  153.309367][ T6155] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  153.770006][ T4270] ocfs2: Unmounting device (7,4) on (node local)
[  153.905203][ T6198] loop2: detected capacity change from 0 to 16
[  154.010748][ T6198] erofs: (device loop2): mounted with root inode @ nid 36.
[  154.343011][    C1] net_ratelimit: 12062 callbacks suppressed
[  154.343038][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  154.361356][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  154.373654][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  154.374133][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.385847][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  154.397757][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.409655][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  154.421696][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.433703][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  154.445587][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  154.490541][ T6184] chnl_net:caif_netlink_parms(): no params data found
[  154.650524][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'.
[  154.859279][ T6184] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.890735][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.911731][ T6184] device bridge_slave_0 entered promiscuous mode
[  154.971978][ T6184] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.007153][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.021052][ T6184] device bridge_slave_1 entered promiscuous mode
[  155.155943][ T6184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.197097][ T6184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.316260][ T6184] team0: Port device team_slave_0 added
[  155.331464][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[  155.420246][ T6184] team0: Port device team_slave_1 added
[  155.581876][ T4384] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  155.590940][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.603088][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.676788][ T6184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.704026][ T6184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.732896][ T6184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.809286][ T6184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  155.940791][ T6184] device hsr_slave_0 entered promiscuous mode
[  155.971894][ T4384] usb 2-1: Using ep0 maxpacket: 16
[  155.978585][ T6184] device hsr_slave_1 entered promiscuous mode
[  156.002780][ T6184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.026148][ T6184] Cannot create hsr debugfs directory
[  156.120481][ T4384] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  156.138954][ T4384] usb 2-1: config 0 has no interface number 0
[  156.173189][ T4384] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.198972][ T4384] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.217805][ T4384] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.263160][ T4384] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  156.346387][ T4384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.393673][ T6241] loop4: detected capacity change from 0 to 1024
[  156.414129][ T4384] usb 2-1: config 0 descriptor??
[  156.750139][ T6184] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.803742][ T6184] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  156.832974][ T6184] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  156.851560][ T6184] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.973196][ T4384] holtek_mouse 0003:04D9:A072.000D: item fetching failed at offset 0/4
[  156.981958][ T4384] holtek_mouse 0003:04D9:A072.000D: hid parse failed: -22
[  157.010903][ T4384] holtek_mouse: probe of 0003:04D9:A072.000D failed with error -22
[  157.223329][ T6184] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.294274][ T3653] usb 2-1: USB disconnect, device number 7
[  157.348828][ T6184] 8021q: adding VLAN 0 to HW filter on device team0
[  157.434995][ T4268] Bluetooth: hci3: command 0x041b tx timeout
[  157.476166][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.486312][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.527283][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.572661][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.642816][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.650078][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.718501][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.742944][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.778675][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.833430][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.840621][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.966751][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.983655][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.020079][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.043762][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.086760][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.144775][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.167347][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.192127][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.249502][ T6184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.279018][ T6184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.334609][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.343652][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.367324][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.066286][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.074455][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.116817][ T6184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.353093][    C1] net_ratelimit: 14002 callbacks suppressed
[  159.353109][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  159.363985][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  159.371301][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  159.383469][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.395121][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  159.407184][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.431231][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.435039][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  159.443934][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  159.455913][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  159.530255][   T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.754457][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[  160.115409][ T6281] loop0: detected capacity change from 0 to 4096
[  160.201106][ T6281] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  160.429495][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  160.443641][ T6277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.496682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  160.538784][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.595272][ T6184] device veth0_vlan entered promiscuous mode
[  160.608992][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  160.659968][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  160.705558][ T6184] device veth1_vlan entered promiscuous mode
[  160.775878][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  160.784636][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  160.818442][ T6184] device veth0_macvtap entered promiscuous mode
[  160.876910][ T6184] device veth1_macvtap entered promiscuous mode
[  160.976035][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.035807][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.092894][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.132575][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.178631][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.211784][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.242283][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.302951][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.328864][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.351921][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.387344][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.415073][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  161.439714][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  161.464262][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  161.507123][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  161.542187][ T6298] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update
[  161.547476][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.591870][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.619821][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.656092][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.722890][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.753642][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.795155][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.812915][ T4268] Bluetooth: hci3: command 0x0419 tx timeout
[  161.835482][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.887226][ T6184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.929400][ T6184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.976983][ T6295] loop2: detected capacity change from 0 to 32768
[  161.992513][    T9] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update
[  162.002608][ T6184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.033439][ T6184] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.042343][ T6184] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.086626][ T6184] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.108913][ T6184] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.133123][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.147101][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.386699][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.413170][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.490793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  162.500648][ T6302] Invalid ELF header magic: != ELF
[  162.512303][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.529373][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.579876][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  162.735097][ T6295] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  163.131307][ T4269] ocfs2: Unmounting device (7,2) on (node local)
[  163.600885][ T6324] loop2: detected capacity change from 0 to 512
[  163.757586][ T6324] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  163.806137][ T6324] EXT4-fs (loop2): invalid journal inode
[  163.812004][ T6324] EXT4-fs (loop2): can't get journal size
[  163.957997][ T6324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c119, mo2=0002]
[  164.003437][ T6324] System zones: 1-12, 13-13
[  164.115539][ T6324] EXT4-fs (loop2): 1 truncate cleaned up
[  164.121250][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  164.230111][   T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.363502][    C1] net_ratelimit: 12590 callbacks suppressed
[  164.363521][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  164.373580][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.381743][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  164.394145][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  164.405683][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  164.417799][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  164.429464][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  164.441672][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.453315][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  164.465317][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  164.664206][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  165.119901][ T6350] Zero length message leads to an empty skb
[  165.578639][ T5910] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  165.627363][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'.
[  165.655509][ T6338] loop1: detected capacity change from 0 to 32768
[  166.033643][ T6368] netlink: 27 bytes leftover after parsing attributes in process `syz.4.788'.
[  166.131817][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  166.162911][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  166.176375][ T6343] loop5: detected capacity change from 0 to 40427
[  166.220095][ T5910] usb 1-1: New USB device found, idVendor=056a, idProduct=0219, bcdDevice= 0.f7
[  166.220946][ T6343] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  166.249580][ T6343] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  166.267484][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.327696][ T5910] usb 1-1: config 0 descriptor??
[  166.558256][ T6343] F2FS-fs (loop5): Found nat_bits in checkpoint
[  166.618076][ T6381] loop4: detected capacity change from 0 to 512
[  166.730307][ T6381] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  166.805706][ T5910] wacom 0003:056A:0219.000E: Unknown device_type for 'HID 056a:0219'. Ignoring.
[  166.897157][ T6381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002]
[  166.950759][ T6381] System zones: 1-12
[  166.966554][ T6343] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  166.974632][ T6338] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  166.996366][ T6381] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2196: inode #15: comm syz.4.793: corrupted in-inode xattr
[  167.016805][ T6343] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  167.072089][ T5910] usb 1-1: USB disconnect, device number 9
[  167.084833][ T6381] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.793: couldn't read orphan inode 15 (err -117)
[  167.252240][ T6381] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  167.291394][   T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.392248][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  167.446069][ T4312] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  167.577206][ T4277] ocfs2: Unmounting device (7,1) on (node local)
[  167.621829][ T6184] syz-executor: attempt to access beyond end of device
[  167.621829][ T6184] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  168.051939][ T6397] loop1: detected capacity change from 0 to 2048
[  168.095852][ T4312] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  168.107196][ T4312] usb 3-1: config 0 has no interface number 0
[  168.376865][ T4312] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  168.418086][ T6397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.422907][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.492907][ T4312] usb 3-1: Product: syz
[  168.497121][ T4312] usb 3-1: Manufacturer: syz
[  168.501745][ T4312] usb 3-1: SerialNumber: syz
[  168.594116][ T4312] usb 3-1: config 0 descriptor??
[  168.857635][ T4312] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  168.888437][ T4312] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  168.940293][ T4312] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  168.973542][ T6396] loop0: detected capacity change from 0 to 32768
[  168.982950][ T4312] usb 3-1: media controller created
[  169.067915][ T6389] usb 3-1: dvb_usb_ec168: I2C read not implemented
[  169.081210][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.263164][ T4312] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  169.310465][ T6396] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  169.310465][ T6396] 
[  169.341789][ T6396] ERROR: (device loop0): remounting filesystem as read-only
[  169.372971][    C1] net_ratelimit: 12851 callbacks suppressed
[  169.372990][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  169.379326][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  169.391284][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  169.403538][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  169.415185][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  169.427492][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.439509][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  169.451387][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.463308][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  169.475285][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.514210][ T4312] usb 3-1: USB disconnect, device number 6
[  170.029562][ T6391] loop4: detected capacity change from 0 to 65536
[  170.216390][ T6391] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  170.249382][ T6391] XFS (loop4): Mounting V5 Filesystem
[  170.361381][   T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.448796][ T6405] loop1: detected capacity change from 0 to 32768
[  170.665738][   T26] audit: type=1326 audit(1763552938.788:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6406 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aaf38f749 code=0x7fc00000
[  171.422192][ T6438] loop2: detected capacity change from 0 to 256
[  171.960124][ T6446] loop5: detected capacity change from 0 to 4096
[  171.999185][ T6446] EXT4-fs: Ignoring removed mblk_io_submit option
[  172.103836][ T6391] XFS (loop4): Ending clean mount
[  172.196498][ T6391] XFS (loop4): Quotacheck needed: Please wait.
[  172.413424][ T6391] XFS (loop4): Quotacheck: Done.
[  172.442015][ T6446] EXT4-fs (loop5): Test dummy encryption mode enabled
[  172.624455][ T4270] XFS (loop4): Unmounting Filesystem
[  172.681220][ T6446] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  172.719058][ T6455] loop1: detected capacity change from 0 to 4096
[  172.916622][   T26] audit: type=1326 audit(1763552941.038:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.2.824" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7faee57865e7 code=0x0
[  173.231404][ T6462] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.278795][ T6184] EXT4-fs (loop5): unmounting filesystem.
[  174.383146][    C0] net_ratelimit: 12956 callbacks suppressed
[  174.383166][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  174.401852][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  174.414579][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.426910][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.439308][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.451730][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.464717][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  174.486024][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  174.498778][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.511114][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  174.824320][ T6474] loop2: detected capacity change from 0 to 131072
[  174.900277][ T6474] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[  174.907975][ T6474] F2FS-fs (loop2): QUOTA feature is enabled, so ignore jquota_fmt
[  174.915843][ T6474] F2FS-fs (loop2): inline_xattr_size option should be set with inline_xattr option
[  175.234579][ T6485] loop5: detected capacity change from 0 to 1024
[  175.287201][ T6485] EXT4-fs: Ignoring removed nomblk_io_submit option
[  175.555900][ T6485] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  175.892361][ T6485] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  176.138578][ T6500] EXT4-fs error (device loop5): ext4_lookup:1858: inode #14: comm syz.5.831: iget: bad extra_isize 17960 (inode size 256)
[  176.358706][ T6485] overlayfs: failed index dir cleanup (-512)
[  176.409560][ T6485] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  176.675561][ T6489] loop2: detected capacity change from 0 to 40427
[  176.752163][ T6184] EXT4-fs (loop5): unmounting filesystem.
[  176.792900][ T6489] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  176.803379][ T6489] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  176.918344][ T6489] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x3ffff
[  176.966159][ T6489] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  177.076231][ T6489] F2FS-fs (loop2): invalid crc value
[  177.221577][ T6489] F2FS-fs (loop2): Found nat_bits in checkpoint
[  177.563161][ T6489] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  177.570256][ T6489] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  177.694458][ T6527] team0: Port device ip6gretap1 added
[  177.709372][   T26] audit: type=1800 audit(1763552945.828:42): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.832" name="file1" dev="loop2" ino=10 res=0 errno=0
[  177.945092][ T4269] syz-executor: attempt to access beyond end of device
[  177.945092][ T4269] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  178.148372][ T6535] option changes via remount are deprecated (pid=6534 comm=syz.0.843)
[  178.603586][ T4384] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  178.972299][ T4384] usb 6-1: Using ep0 maxpacket: 16
[  178.996622][    T9] Bluetooth: hci5: Frame reassembly failed (-84)
[  179.194625][ T6531] loop4: detected capacity change from 0 to 32768
[  179.271071][ T4384] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.290647][ T4384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  179.311801][ T4384] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  179.374078][ T4384] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  179.378552][ T6531] XFS (loop4): Mounting V5 Filesystem
[  179.393255][    C0] net_ratelimit: 11079 callbacks suppressed
[  179.393274][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  179.403734][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  179.411858][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.423451][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  179.435485][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.447421][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  179.459532][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.471423][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  179.483289][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  179.495394][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  179.514074][ T4384] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  179.580189][ T4384] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  179.617487][ T4384] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  179.672922][ T4384] usb 6-1: Manufacturer: syz
[  179.704407][ T4384] usb 6-1: config 0 descriptor??
[  180.189177][ T4384] rc_core: IR keymap rc-hauppauge not found
[  180.201081][ T4384] Registered IR keymap rc-empty
[  180.241694][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.361127][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.422778][ T4384] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  180.469050][ T4384] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14
[  180.567745][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.656424][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.673928][ T6531] XFS (loop4): Ending clean mount
[  180.722608][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.788223][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.815182][ T6531] XFS (loop4): Quotacheck needed: Please wait.
[  180.840976][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.936802][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  180.993096][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  181.025353][ T4268] Bluetooth: hci5: command 0x1003 tx timeout
[  181.043663][ T4278] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  181.050783][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  181.114479][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  181.145525][ T6531] XFS (loop4): Quotacheck: Done.
[  181.152467][ T4384] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  181.202662][ T4384] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  181.206031][ T4374] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  181.246642][ T4384] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  181.372672][ T4384] usb 6-1: USB disconnect, device number 2
[  181.406681][ T4270] XFS (loop4): Unmounting Filesystem
[  181.492591][ T6595] cifs: Unknown parameter 'mode'
[  181.565581][ T4374] usb 2-1: Using ep0 maxpacket: 16
[  181.642347][ T4374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8
[  181.665279][ T4374] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  181.693604][ T4374] usb 2-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00
[  181.702721][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.727460][ T4374] usb 2-1: config 0 descriptor??
[  182.241752][ T4374] hid_mf 0003:0079:1803.000F: unknown main item tag 0x0
[  182.272935][ T4374] hid_mf 0003:0079:1803.000F: unknown main item tag 0x0
[  182.321971][ T4374] hid_mf 0003:0079:1803.000F: hidraw0: USB HID v0.05 Device [HID 0079:1803] on usb-dummy_hcd.1-1/input0
[  182.370963][ T4374] hid_mf 0003:0079:1803.000F: Invalid report, this should never happen!
[  182.379719][ T4374] hid_mf 0003:0079:1803.000F: Force feedback init failed.
[  182.553339][ T4374] usb 2-1: USB disconnect, device number 8
[  182.577402][ T4312] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  182.921942][ T6616] fido_id[6616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  183.090419][ T4312] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  183.098689][ T4312] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  183.124162][ T4312] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  183.155868][ T4312] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  183.228588][ T4312] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  183.298281][ T4312] usb 3-1: config 0 interface 0 has no altsetting 0
[  183.396564][ T4312] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  183.437099][ T4312] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  183.469131][ T4312] usb 3-1: Product: syz
[  183.525198][ T4312] usb 3-1: Manufacturer: syz
[  183.529845][ T4312] usb 3-1: SerialNumber: syz
[  183.551537][ T4312] usb 3-1: config 0 descriptor??
[  183.573142][ T6610] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  183.616630][ T4312] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  183.646096][ T4312] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  184.050881][ T6632] loop1: detected capacity change from 0 to 256
[  184.090584][ T6632] exfat: Deprecated parameter 'utf8'
[  184.404563][    C1] net_ratelimit: 12774 callbacks suppressed
[  184.404578][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  184.418036][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  184.422819][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  184.435009][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  184.446633][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  184.458902][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.470543][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  184.482472][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.494364][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  184.506338][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  184.588589][ T4312] usb 3-1: USB disconnect, device number 7
[  184.597858][ T4312] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  185.289026][ T6632] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  185.599153][ T6674] loop2: detected capacity change from 0 to 164
[  186.335997][ T4384] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  186.343081][ T5910] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  186.718754][ T5910] usb 1-1: Using ep0 maxpacket: 16
[  186.850748][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.891839][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.912446][ T6698] loop5: detected capacity change from 0 to 1024
[  186.946598][ T5910] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  186.979595][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.039621][ T5910] usb 1-1: config 0 descriptor??
[  187.096551][ T4384] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  187.105770][ T4384] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  187.147248][ T4384] usb 3-1: Product: syz
[  187.151461][ T4384] usb 3-1: Manufacturer: syz
[  187.159841][ T4384] usb 3-1: SerialNumber: syz
[  187.192653][ T4384] usb 3-1: config 0 descriptor??
[  187.272344][ T6698] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.521717][ T5910] usbhid 1-1:0.0: can't add hid device: -71
[  187.529543][ T5910] usbhid: probe of 1-1:0.0 failed with error -71
[  187.642307][ T5910] usb 1-1: USB disconnect, device number 10
[  187.648714][ T3653] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  188.073971][ T3653] usb 5-1: Using ep0 maxpacket: 16
[  188.157968][ T4384] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  188.182906][ T4384] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  188.233082][ T4384] asix: probe of 3-1:0.0 failed with error -71
[  188.285282][ T3653] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.298858][ T3653] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.338033][ T3653] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  188.363091][ T4384] usb 3-1: USB disconnect, device number 8
[  188.512800][ T3653] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  188.521929][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  188.542911][ T3653] usb 5-1: SerialNumber: syz
[  188.593464][ T3653] cdc_ether: probe of 5-1:1.0 failed with error -22
[  188.639563][ T6720] loop0: detected capacity change from 0 to 4096
[  188.929199][ T3653] usb 5-1: USB disconnect, device number 7
[  189.023830][ T6726] sp0: Synchronizing with TNC
[  189.250315][ T6730] loop2: detected capacity change from 0 to 64
[  189.299888][ T6708] loop1: detected capacity change from 0 to 32768
[  189.423062][    C1] net_ratelimit: 12267 callbacks suppressed
[  189.423080][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  189.428740][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  189.429382][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  189.441482][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  189.453288][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  189.465453][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.477185][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  189.489565][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.500995][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  189.513164][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.648685][ T6708] XFS (loop1): Mounting V5 Filesystem
[  190.477187][ T6758] loop4: detected capacity change from 0 to 512
[  190.748800][ T4265] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  190.758985][ T4265] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  190.839574][ T6765] mmap: syz.2.902 (6765) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  191.132955][ T6708] XFS (loop1): Ending clean mount
[  191.171991][ T6768] loop0: detected capacity change from 0 to 4096
[  191.179464][ T6758] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  191.292476][ T6708] XFS (loop1): Quotacheck needed: Please wait.
[  191.570387][ T6708] XFS (loop1): Quotacheck: Done.
[  191.749586][ T4277] XFS (loop1): Unmounting Filesystem
[  192.535618][ T6768] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  193.389153][ T6768] ntfs3: loop0: Failed to load $Extend.
[  193.441829][ T6812] loop4: detected capacity change from 0 to 1024
[  193.814215][   T26] audit: type=1800 audit(1763552961.928:43): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.915" name="file1" dev="loop4" ino=20 res=0 errno=0
[  194.052234][ T4312] kernel read not supported for file /rfkill (pid: 4312 comm: kworker/0:5)
[  194.156023][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.162383][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.432915][    C0] net_ratelimit: 11962 callbacks suppressed
[  194.432931][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.441968][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  194.451123][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.463008][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  194.475550][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  194.486954][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  194.499392][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  194.512420][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  194.525027][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.536599][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  194.637256][ T6831] loop4: detected capacity change from 0 to 512
[  194.934146][ T6831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  194.958066][ T6831] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.393444][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  195.980754][ T6834] loop0: detected capacity change from 0 to 32768
[  196.716788][ T6866] loop4: detected capacity change from 0 to 1024
[  196.740861][ T6866] EXT4-fs: Ignoring removed orlov option
[  196.746658][ T6866] EXT4-fs: Ignoring removed oldalloc option
[  196.777349][ T6866] EXT4-fs (loop4): Test dummy encryption mode enabled
[  197.042948][ T6866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  197.291565][ T6858] loop1: detected capacity change from 0 to 32768
[  197.507538][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  198.072693][ T6870] loop0: detected capacity change from 0 to 32768
[  198.086576][   T22] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  198.430391][   T22] usb 5-1: Using ep0 maxpacket: 16
[  198.671794][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.703265][   T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.803427][   T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  198.884119][   T22] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  198.920346][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.968384][   T22] usb 5-1: config 0 descriptor??
[  199.007855][ T6894] tap0: tun_chr_ioctl cmd 2147767521
[  199.023692][ T6883] loop2: detected capacity change from 0 to 32768
[  199.084076][ T6870] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  199.395361][ T5910] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  199.442902][    C1] net_ratelimit: 12971 callbacks suppressed
[  199.442919][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  199.443710][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  199.449127][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  199.461346][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  199.473128][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  199.485288][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.497005][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  199.508893][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.520881][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  199.532722][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.591901][   T22] microsoft 0003:045E:07DA.0010: ignoring exceeding usage max
[  199.618629][   T22] microsoft 0003:045E:07DA.0010: No inputs registered, leaving
[  199.628499][   T22] microsoft 0003:045E:07DA.0010: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  199.656836][   T22] microsoft 0003:045E:07DA.0010: no inputs found
[  199.682818][   T22] microsoft 0003:045E:07DA.0010: could not initialize ff, continuing anyway
[  199.807110][ T4265] (syz-executor,4265,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  199.900329][ T5326] usb 5-1: USB disconnect, device number 8
[  199.979379][ T5910] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  200.000005][ T4265] ocfs2: Unmounting device (7,0) on (node local)
[  200.008455][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.073542][ T5910] usb 2-1: config 0 descriptor??
[  200.101472][ T6901] fido_id[6901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  200.200479][ T5910] gspca_main: cpia1-2.14.0 probing 0813:0001
[  201.112401][ T6921] loop0: detected capacity change from 0 to 512
[  201.147686][ T5910] gspca_cpia1: usb_control_msg 02, error -71
[  201.177460][ T5910] gspca_cpia1: usb_control_msg 05, error -71
[  201.183504][ T6923] loop2: detected capacity change from 0 to 128
[  201.209690][ T6921] EXT4-fs: inline encryption not supported
[  201.252936][ T5910] gspca_cpia1: usb_control_msg 04, error -71
[  201.259044][ T5910] cpia1: probe of 2-1:0.0 failed with error -71
[  201.267829][ T6921] EXT4-fs: Ignoring removed i_version option
[  201.325219][ T6923] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  201.330798][ T5910] usb 2-1: USB disconnect, device number 9
[  201.348356][ T6923] hpfs: filesystem error: improperly stopped
[  201.373785][ T6923] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  201.394191][ T6923] hpfs: You really don't want any checks? You are crazy...
[  201.401776][ T6923] hpfs: hpfs_map_sector(): read error
[  201.444646][ T6923] hpfs: code page support is disabled
[  201.451436][ T6923] hpfs: hpfs_map_4sectors(): unaligned read
[  201.471197][ T6921] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.942: inode has both inline data and extents flags
[  201.490863][ T6923] hpfs: hpfs_map_4sectors(): unaligned read
[  201.538277][ T6923] hpfs: filesystem error: unable to find root dir
[  201.555603][ T6921] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.942: couldn't read orphan inode 15 (err -117)
[  201.602942][ T6921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  201.879314][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  202.664699][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  204.025853][ T6950] loop0: detected capacity change from 0 to 32768
[  204.273037][ T6950] XFS (loop0): Mounting V5 Filesystem
[  204.453044][    C1] net_ratelimit: 13323 callbacks suppressed
[  204.453063][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  204.457225][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.459231][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  204.471202][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.483178][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  204.495099][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  204.507163][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  204.519282][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.531385][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  204.543759][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  205.146419][ T7002] netlink: 'syz.4.965': attribute type 15 has an invalid length.
[  205.577527][ T7011] loop4: detected capacity change from 0 to 4096
[  205.663169][ T7011] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid end of sector marker.
[  205.829174][   T22] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  205.864505][ T6950] XFS (loop0): Ending clean mount
[  205.976361][ T4265] XFS (loop0): Unmounting Filesystem
[  206.254676][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.265771][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.297828][   T22] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  206.329106][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.354012][   T22] usb 2-1: config 0 descriptor??
[  206.670003][ T7011] ntfs: volume version 3.1.
[  206.857552][   T22] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0
[  206.878844][   T22] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  206.945496][   T22] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0
[  207.006727][   T22] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  207.170340][   T22] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected
[  207.209454][   T22] usb 2-1: USB disconnect, device number 10
[  207.218549][ T7026] loop5: detected capacity change from 0 to 1024
[  207.244620][   T22] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected
[  207.293680][ T7026] EXT4-fs: inline encryption not supported
[  207.299544][ T7026] EXT4-fs: Ignoring removed i_version option
[  207.448602][ T7026] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  207.478522][ T7030] fido_id[7030]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  207.781570][ T7026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  208.041071][ T7048] loop4: detected capacity change from 0 to 64
[  208.087564][ T6184] EXT4-fs (loop5): unmounting filesystem.
[  208.412290][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'.
[  208.558261][ T7058] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  208.725172][ T7063] loop5: detected capacity change from 0 to 512
[  209.282981][ T7063] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  209.292085][ T7063] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.463135][    C1] net_ratelimit: 13532 callbacks suppressed
[  209.463162][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  209.476775][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  209.481470][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  209.493410][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.505344][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  209.517798][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  209.529275][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  209.541476][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  209.553119][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  209.565384][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.630567][ T7063] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  209.680914][ T7079] Quota error (device loop5): do_check_range: Getting block 67108864 out of range 0-8
[  209.715970][ T7063] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  209.750271][ T7063] EXT4-fs error (device loop5): ext4_acquire_dquot:6809: comm syz.5.986: Failed to acquire dquot type 0
[  209.923043][ T7061] loop2: detected capacity change from 0 to 32768
[  210.154619][ T6184] EXT4-fs (loop5): unmounting filesystem.
[  210.159950][ T7061] XFS (loop2): Mounting V5 Filesystem
[  210.183722][ T7068] loop4: detected capacity change from 0 to 32768
[  210.503303][ T7068] XFS (loop4): Mounting V5 Filesystem
[  211.231259][ T7124] loop1: detected capacity change from 0 to 256
[  211.526299][ T7131] loop0: detected capacity change from 0 to 64
[  211.783990][   T26] audit: type=1800 audit(1763552979.908:44): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1000" name="bus" dev="loop0" ino=1 res=0 errno=0
[  212.721697][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'.
[  212.963929][ T7156] netlink: 'syz.0.1006': attribute type 39 has an invalid length.
[  213.396478][ T3653] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  213.707514][ T3653] usb 2-1: Using ep0 maxpacket: 32
[  213.839211][ T3653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.860462][ T3653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.892913][ T3653] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  213.914560][ T3653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.961869][ T3653] usb 2-1: config 0 descriptor??
[  213.994349][ T3653] hub 2-1:0.0: USB hub found
[  214.107373][ T7165] loop5: detected capacity change from 0 to 40427
[  214.232542][ T3653] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  214.255154][ T7165] F2FS-fs (loop5): invalid crc value
[  214.348418][ T7061] XFS (loop2): Ending clean mount
[  214.362228][ T7165] F2FS-fs (loop5): Found nat_bits in checkpoint
[  214.421756][ T7061] XFS (loop2): Quotacheck needed: Please wait.
[  214.476370][    C0] net_ratelimit: 12124 callbacks suppressed
[  214.476389][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.483808][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  214.494702][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.506565][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  214.518459][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  214.530337][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  214.542363][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.554349][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  214.566954][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  214.578310][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  214.645406][ T7165] F2FS-fs (loop5): Start checkpoint disabled!
[  214.714273][ T3653] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[  214.766714][ T7061] XFS (loop2): Quotacheck: Done.
[  214.802972][ T7165] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  214.901845][ T7068] XFS (loop4): Ending clean mount
[  214.931263][ T4269] XFS (loop2): Unmounting Filesystem
[  215.021568][ T7068] XFS (loop4): Quotacheck needed: Please wait.
[  215.158469][ T4374] usb 2-1: USB disconnect, device number 11
[  215.287154][ T7183] fido_id[7183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  215.394612][ T7068] XFS (loop4): Quotacheck: Done.
[  215.454730][   T75] kworker/u4:4: attempt to access beyond end of device
[  215.454730][   T75] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  215.660318][ T4270] XFS (loop4): Unmounting Filesystem
[  216.966284][ T7193] loop5: detected capacity change from 0 to 32768
[  217.463693][ T7193] find_entry called with index >= next_index
[  217.469900][ T7193] find_entry called with index >= next_index
[  217.499468][ T7193] find_entry called with index >= next_index
[  217.527490][ T7214] netlink: 'syz.0.1018': attribute type 7 has an invalid length.
[  217.546491][ T7214] netlink: 'syz.0.1018': attribute type 5 has an invalid length.
[  217.580805][ T7214] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1018'.
[  217.843585][ T7204] loop1: detected capacity change from 0 to 40427
[  218.018442][ T7204] F2FS-fs (loop1): invalid crc value
[  218.141117][ T7204] F2FS-fs (loop1): Found nat_bits in checkpoint
[  218.295195][ T7226] loop0: detected capacity change from 0 to 4096
[  218.360221][ T7226] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  218.372964][ T7204] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  218.564308][   T26] audit: type=1800 audit(1763552986.688:45): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1016" name="bus" dev="loop1" ino=10 res=0 errno=0
[  218.584574][    C1] vkms_vblank_simulate: vblank timer overrun
[  218.639794][   T26] audit: type=1804 audit(1763552986.698:46): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1016" name="/newroot/199/file0/bus" dev="loop1" ino=10 res=1 errno=0
[  218.759489][ T4277] syz-executor: attempt to access beyond end of device
[  218.759489][ T4277] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  219.503823][    C0] net_ratelimit: 12319 callbacks suppressed
[  219.503839][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.522111][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.534539][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.537650][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  219.547295][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.558733][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  219.570769][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.582687][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  219.594662][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  219.606918][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  220.169496][ T7226] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  220.172968][ T5326] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  220.591961][ T5326] usb 2-1: Using ep0 maxpacket: 16
[  220.833076][ T5326] usb 2-1: config 0 interface 0 has no altsetting 0
[  220.857612][ T5326] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  220.913752][ T5326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.958021][ T5326] usb 2-1: config 0 descriptor??
[  221.421674][ T3653] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  221.455027][ T5326] hid (null): unknown global tag 0x37
[  221.571222][ T7288] loop2: detected capacity change from 0 to 512
[  221.601742][ T7288] EXT4-fs: Ignoring removed orlov option
[  221.752676][    T7] usb 2-1: USB disconnect, device number 12
[  221.891091][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.896860][ T7288] EXT4-fs (loop2): orphan cleanup on readonly fs
[  221.920508][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.947654][ T3653] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  221.956997][ T3653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.979784][ T7288] EXT4-fs error (device loop2): ext4_find_extent:900: inode #4: comm syz.2.1043: inode has invalid extent depth: 7
[  222.004486][ T3653] usb 1-1: config 0 descriptor??
[  222.202337][ T7288] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[  222.215561][ T7288] EXT4-fs warning (device loop2): ext4_enable_quotas:7061: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  222.312896][ T7288] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  222.312933][ T7288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  222.313932][ T7288] EXT4-fs (loop2): unmounting filesystem.
[  222.446797][ T7299] loop1: detected capacity change from 0 to 512
[  222.478064][ T7299] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  222.512122][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.531161][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.550572][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.558516][ T7299] EXT4-fs (loop1): invalid journal inode
[  222.564772][ T7299] EXT4-fs (loop1): can't get journal size
[  222.580089][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.580115][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.580134][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.651422][ T7299] EXT4-fs (loop1): 1 truncate cleaned up
[  222.667520][ T7299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  222.750686][ T3653] hid-thrustmaster 0003:044F:B65D.0015: unknown main item tag 0x0
[  222.801050][ T3653] hid-thrustmaster 0003:044F:B65D.0015: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0
[  222.886929][ T3653] hid-thrustmaster 0003:044F:B65D.0015: Wrong number of endpoints?
[  222.953708][    C0] hid-thrustmaster 0003:044F:B65D.0015: Unknown packet type 0x0, unable to proceed further with wheel init
[  223.055751][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  223.393042][ T3653] usb 1-1: USB disconnect, device number 11
[  223.403831][ T7306] fido_id[7306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  224.516908][    C0] net_ratelimit: 13176 callbacks suppressed
[  224.516925][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  224.519201][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  224.523165][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.535277][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  224.548207][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  224.559664][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  224.571913][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  224.583841][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  224.596088][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.607831][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  224.794678][ T7327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'.
[  225.042314][ T7333] loop1: detected capacity change from 0 to 2048
[  225.523982][ T7340] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.775118][ T7342] loop2: detected capacity change from 0 to 4096
[  226.249487][ T7354] loop1: detected capacity change from 0 to 512
[  226.316845][ T7354] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  226.434504][ T7354] EXT4-fs (loop1): 1 truncate cleaned up
[  226.440217][ T7354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  226.577452][ T7354] EXT4-fs (loop1): shut down requested (1)
[  226.731613][ T4277] EXT4-fs (loop1): unmounting filesystem.
[  226.804358][ T7344] loop5: detected capacity change from 0 to 32768
[  226.889635][ T7344] XFS (loop5): Invalid device [./file0], error=-15
[  226.928280][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1071'.
[  227.154722][ T7369] loop1: detected capacity change from 0 to 64
[  227.236844][ T7369] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  227.356236][ T7373] syz.5.1073 (7373) used greatest stack depth: 20744 bytes left
[  228.533466][ T7398] loop8: detected capacity change from 0 to 1
[  228.610951][ T4402] Dev loop8: unable to read RDB block 1
[  228.626005][ T4402]  loop8: unable to read partition table
[  228.660878][ T4402] loop8: partition table beyond EOD, truncated
[  228.729694][ T7398] Dev loop8: unable to read RDB block 1
[  228.749077][ T7398]  loop8: unable to read partition table
[  228.768317][ T7398] loop8: partition table beyond EOD, truncated
[  228.780527][ T7398] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  229.408889][ T7393] loop5: detected capacity change from 0 to 32768
[  229.522937][    C1] net_ratelimit: 11134 callbacks suppressed
[  229.522955][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.541173][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.553424][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.554081][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.565581][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.577577][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.589472][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.601358][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  229.613268][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  229.625249][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.832692][ T7395] loop1: detected capacity change from 0 to 32768
[  229.934036][ T7400] loop2: detected capacity change from 0 to 32768
[  230.036969][ T7402] loop4: detected capacity change from 0 to 40427
[  230.149549][ T7400] XFS (loop2): Mounting V5 Filesystem
[  230.262317][ T7402] F2FS-fs (loop4): invalid crc value
[  230.328182][ T7393] ERROR: (device loop5): dtReadFirst: stbl[0] out of bound
[  230.328182][ T7393] 
[  230.369655][ T7421] loop0: detected capacity change from 0 to 1024
[  230.385360][ T7393] ERROR: (device loop5): remounting filesystem as read-only
[  230.412945][ T7421] EXT4-fs: Ignoring removed bh option
[  230.418368][ T7421] EXT4-fs: Ignoring removed oldalloc option
[  230.446509][ T7421] EXT4-fs: Ignoring removed orlov option
[  230.466994][ T7402] F2FS-fs (loop4): Found nat_bits in checkpoint
[  230.667608][ T7402] F2FS-fs (loop4): Start checkpoint disabled!
[  230.693281][ T7421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  230.850886][ T7402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  230.934701][ T4265] EXT4-fs (loop0): unmounting filesystem.
[  231.353358][ T6277] kworker/u4:9: attempt to access beyond end of device
[  231.353358][ T6277] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  232.014246][ T7400] XFS (loop2): Ending clean mount
[  232.168485][ T4269] XFS (loop2): Unmounting Filesystem
[  232.367247][ T5326] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  232.772747][   T46] device hsr_slave_0 left promiscuous mode
[  232.811081][ T5326] usb 1-1: Using ep0 maxpacket: 32
[  232.819576][ T7456] program syz.4.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  232.857949][   T46] device hsr_slave_1 left promiscuous mode
[  232.867887][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.883086][   T22] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  232.902622][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.930809][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.946987][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.962898][ T5326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.981582][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.000965][   T46] device bridge_slave_1 left promiscuous mode
[  233.002922][ T5326] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  233.031403][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.047712][ T5326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.099073][ T5326] usb 1-1: config 0 descriptor??
[  233.131100][   T46] device bridge_slave_0 left promiscuous mode
[  233.137445][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.259017][   T22] usb 6-1: Using ep0 maxpacket: 8
[  233.277194][   T46] device veth1_macvtap left promiscuous mode
[  233.294953][   T46] device veth0_macvtap left promiscuous mode
[  233.301132][   T46] device veth1_vlan left promiscuous mode
[  233.328579][   T46] device veth0_vlan left promiscuous mode
[  233.479076][   T22] usb 6-1: unable to get BOS descriptor or descriptor too short
[  233.594971][   T22] usb 6-1: config 4 has an invalid interface number: 30 but max is 0
[  233.603237][   T22] usb 6-1: config 4 has no interface number 0
[  233.610821][ T5326] savu 0003:1E7D:2D5A.0016: unbalanced collection at end of report description
[  233.616934][   T22] usb 6-1: config 4 interface 30 has no altsetting 0
[  233.620799][ T5326] savu 0003:1E7D:2D5A.0016: parse failed
[  233.670218][ T5326] savu: probe of 0003:1E7D:2D5A.0016 failed with error -22
[  233.891801][   T22] usb 6-1: string descriptor 0 read error: -22
[  233.895951][ T5326] usb 1-1: USB disconnect, device number 12
[  233.898160][   T22] usb 6-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  233.960223][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.039259][   T22] dw2102: su3000_identify_state
[  234.047902][   T22] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  234.079978][   T22] dw2102: su3000_power_ctrl: 1, initialized 0
[  234.087106][   T22] dvb-usb: bulk message failed: -22 (2/0)
[  234.133543][   T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  234.243265][   T22] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  234.250860][   T22] usb 6-1: media controller created
[  234.271717][ T7452] dw2102: i2c rd: len=75 is too big!
[  234.271717][ T7452] 
[  234.310399][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  234.350374][   T22] dw2102: i2c transfer failed.
[  234.402491][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  234.425470][   T22] dw2102: i2c transfer failed.
[  234.430326][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  234.450167][   T22] dw2102: i2c transfer failed.
[  234.466375][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  234.472293][   T22] dw2102: i2c transfer failed.
[  234.498337][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  234.517001][   T22] dw2102: i2c transfer failed.
[  234.536573][    C1] net_ratelimit: 13422 callbacks suppressed
[  234.536590][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  234.540683][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  234.542748][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  234.554999][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.566778][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  234.578676][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.590585][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  234.602547][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.614690][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  234.627017][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  234.646145][   T22] dvb-usb: bulk message failed: -22 (6/0)
[  234.673749][   T22] dw2102: i2c transfer failed.
[  234.678656][   T22] dvb-usb: MAC address: 02:02:02:02:02:02
[  234.696442][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  234.725788][   T22] dvb-usb: bulk message failed: -22 (3/0)
[  234.731829][   T22] dw2102: command 0x0e transfer failed.
[  234.740586][   T22] dvb-usb: bulk message failed: -22 (3/0)
[  234.752962][   T22] dw2102: command 0x0e transfer failed.
[  235.100675][   T22] dvb-usb: bulk message failed: -22 (3/0)
[  235.117270][   T22] dw2102: command 0x0e transfer failed.
[  235.128898][   T22] dvb-usb: bulk message failed: -22 (3/0)
[  235.134701][   T22] dw2102: command 0x0e transfer failed.
[  235.155131][   T22] dvb-usb: bulk message failed: -22 (1/0)
[  235.160892][   T22] dw2102: command 0x51 transfer failed.
[  235.173997][   T22] dvb-usb: bulk message failed: -22 (5/0)
[  235.221329][   T22] dw2102: i2c probe for address 0x68 failed.
[  235.231444][   T22] dvb-usb: bulk message failed: -22 (5/0)
[  235.254252][   T22] dw2102: i2c probe for address 0x69 failed.
[  235.260282][   T22] dvb-usb: bulk message failed: -22 (5/0)
[  235.285548][   T22] dw2102: i2c probe for address 0x6a failed.
[  235.291588][   T22] dw2102: probing for demodulator failed. Is the external power switched on?
[  235.358031][   T22] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  235.759884][   T22] rc_core: IR keymap rc-tt-1500 not found
[  235.798887][   T22] Registered IR keymap rc-empty
[  235.829258][   T22] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  235.880782][   T22] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input16
[  235.948599][   T22] dvb-usb: schedule remote query interval to 250 msecs.
[  235.978436][   T22] dw2102: su3000_power_ctrl: 0, initialized 1
[  235.993557][   T22] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  236.137314][   T22] usb 6-1: USB disconnect, device number 3
[  236.209241][ T7498] loop4: detected capacity change from 0 to 128
[  236.280508][   T22] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  236.497457][   T46] team0 (unregistering): Port device team_slave_1 removed
[  236.542032][ T7498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  236.622340][ T7498] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.704205][ T7498] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes
[  236.791026][   T46] team0 (unregistering): Port device team_slave_0 removed
[  236.962051][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.971539][ T4270] EXT4-fs (loop4): unmounting filesystem.
[  237.230850][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.326304][ T7509] loop0: detected capacity change from 0 to 32768
[  237.741350][ T5908] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  238.057958][ T5908] usb 5-1: Using ep0 maxpacket: 16
[  238.164718][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.176051][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  238.327664][ T5908] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  238.342906][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.394142][ T5908] usb 5-1: Product: syz
[  238.398420][ T5908] usb 5-1: Manufacturer: syz
[  238.426240][ T5908] usb 5-1: SerialNumber: syz
[  238.530700][ T7517] Bluetooth: MGMT ver 1.22
[  238.941159][ T5908] usb 5-1: 0:2 : does not exist
[  239.365431][   T46] bond0 (unregistering): Released all slaves
[  239.535607][ T5908] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  239.543758][    C1] net_ratelimit: 14620 callbacks suppressed
[  239.543773][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.546884][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.550052][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.561859][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.573924][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.586300][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.597774][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.609677][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  239.621652][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  239.633532][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  239.895366][ T5908] usb 5-1: USB disconnect, device number 9
[  240.103001][ T7503] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1102'.
[  240.144575][ T7507] syzkaller1: tun_chr_ioctl cmd 1074025677
[  240.150568][ T7507] syzkaller1: linktype set to 776
[  240.275961][ T4402] udevd[4402]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.296822][ T7519] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present
[  240.326458][ T7519] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9)
[  240.870244][ T7534] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  241.198597][ T7536] loop5: detected capacity change from 0 to 4096
[  241.223530][ T7543] loop0: detected capacity change from 0 to 4096
[  241.252001][ T7536] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  241.315254][ T7547] loop2: detected capacity change from 0 to 64
[  241.514513][ T7552] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  241.612159][ T7547] syz.2.1145: attempt to access beyond end of device
[  241.612159][ T7547] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  241.638070][ T7547] Buffer I/O error on dev loop2, logical block 134217734, async page read
[  241.872037][ T7547] Trying to free block not in datazone
[  243.030109][ T7579] loop2: detected capacity change from 0 to 128
[  243.063255][ T4384] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  243.121434][ T7579] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  243.163160][ T7581] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  243.163160][ T7581] The task syz.4.1159 (7581) triggered the difference, watch for misbehavior.
[  243.381610][ T6184] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22.
[  243.437328][ T4384] usb 1-1: Using ep0 maxpacket: 8
[  243.479285][ T6184] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22.
[  243.479736][ T7565] loop1: detected capacity change from 0 to 32768
[  243.485893][ T6184] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  243.689554][ T7586] loop5: detected capacity change from 0 to 64
[  243.737578][ T4384] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  243.752955][ T4384] usb 1-1: config 0 has no interface number 0
[  243.765062][ T4384] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  243.791718][ T4384] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  243.811993][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.873839][ T4384] usb 1-1: config 0 descriptor??
[  243.933831][ T7565] XFS (loop1): Mounting V5 Filesystem
[  243.973305][ T4384] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  244.030394][   T26] audit: type=1800 audit(1763553012.148:47): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1160" name="file1" dev="loop5" ino=18 res=0 errno=0
[  244.050830][    C1] vkms_vblank_simulate: vblank timer overrun
[  244.308092][ T5326] usb 1-1: USB disconnect, device number 13
[  244.311913][   T26] audit: type=1804 audit(1763553012.428:48): pid=7599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1160" name="/newroot/86/file1/file1" dev="loop5" ino=18 res=1 errno=0
[  244.335549][    C1] vkms_vblank_simulate: vblank timer overrun
[  244.556749][    C0] net_ratelimit: 13012 callbacks suppressed
[  244.556766][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.573009][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  244.575004][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.586875][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  244.598781][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  244.610685][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  244.622627][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  244.634759][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  244.647153][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  244.658550][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  244.987993][ T7609] block nbd2: NBD_DISCONNECT
[  245.880979][ T7565] XFS (loop1): Ending clean mount
[  245.982549][ T7638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'.
[  246.008605][ T7565] XFS (loop1): Quotacheck needed: Please wait.
[  246.315107][ T7565] XFS (loop1): Quotacheck: Done.
[  246.425771][ T4277] XFS (loop1): Unmounting Filesystem
[  246.758749][ T7659] loop4: detected capacity change from 0 to 256
[  247.269185][ T7659] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d)
[  247.605984][ T7670] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1190'.
[  247.712195][ T7672] loop4: detected capacity change from 0 to 2048
[  247.773195][ T7672] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  247.929360][ T4278] Bluetooth: hci3: link tx timeout
[  247.935656][ T4278] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  247.947434][ T4278] Bluetooth: hci3: link tx timeout
[  247.952926][ T4278] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  248.033805][ T7679] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  248.364279][   T26] audit: type=1800 audit(1763553016.488:49): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1189" name="file2" dev="loop4" ino=16 res=0 errno=0
[  248.682416][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1196'.
[  248.738157][ T7694] IPVS: Error joining to the multicast group
[  249.564130][    C0] net_ratelimit: 11306 callbacks suppressed
[  249.564145][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.574658][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  249.583023][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.594329][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  249.606392][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.618315][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  249.630617][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.642132][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  249.654383][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  249.665945][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  249.970356][ T4278] Bluetooth: hci3: command 0x0406 tx timeout
[  250.221562][ T7738] loop5: detected capacity change from 0 to 256
[  250.764120][ T7754] syz.0.1212[7754] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  250.764219][ T7754] syz.0.1212[7754] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  251.072568][ T7738] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  251.388808][ T7762] loop0: detected capacity change from 0 to 1024
[  251.883502][ T7772] loop1: detected capacity change from 0 to 1024
[  252.424871][ T7772] hfsplus: xattr searching failed
[  252.435786][ T7784] hfsplus: cannot replace xattr
[  252.654883][ T7786] loop5: detected capacity change from 0 to 1024
[  252.752950][ T4384] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  252.898635][ T7789] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  253.103582][ T4384] usb 1-1: Using ep0 maxpacket: 32
[  253.227395][ T4384] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  253.255554][ T4384] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  253.277412][ T4384] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  253.295532][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  253.345174][ T4384] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  253.367239][ T4384] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  253.394214][ T4384] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  253.457612][ T4384] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  253.500149][ T4384] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  253.529718][ T4384] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.583724][ T4384] usb 1-1: config 0 descriptor??
[  253.847394][ T4384] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  254.152728][ T3653] usb 1-1: USB disconnect, device number 14
[  254.164618][ T3653] usblp0: removed
[  254.573588][    C0] net_ratelimit: 11547 callbacks suppressed
[  254.573606][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.592154][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.593716][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  254.604840][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.616349][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  254.628599][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  254.640145][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  254.652066][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:da:c9:b4:c1:a3:f0, vlan:0)
[  254.663935][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  254.675933][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  255.282297][ T5910] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  255.587620][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.594004][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.602514][ T1277] ==================================================================
[  255.610611][ T1277] BUG: KASAN: use-after-free in tty_write_room+0x31/0x80
[  255.617658][ T1277] Read of size 8 at addr ffff888057ba3018 by task aoe_tx0/1277
[  255.625223][ T1277] 
[  255.627567][ T1277] CPU: 1 PID: 1277 Comm: aoe_tx0 Not tainted syzkaller #0
[  255.634687][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.644774][ T1277] Call Trace:
[  255.648064][ T1277]  <TASK>
[  255.651004][ T1277]  dump_stack_lvl+0x168/0x22e
[  255.655703][ T1277]  ? read_lock_is_recursive+0x10/0x10
[  255.661095][ T1277]  ? show_regs_print_info+0x12/0x12
[  255.666316][ T1277]  ? load_image+0x3b0/0x3b0
[  255.670843][ T1277]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[  255.676324][ T1277]  ? __virt_addr_valid+0x188/0x540
[  255.681461][ T1277]  ? __virt_addr_valid+0x465/0x540
[  255.686593][ T1277]  ? tty_write_room+0x31/0x80
[  255.691264][ T1277]  print_report+0xa8/0x210
[  255.695669][ T1277]  kasan_report+0x10b/0x140
[  255.700162][ T1277]  ? lock_chain_count+0x20/0x20
[  255.705010][ T1277]  ? tty_write_room+0x31/0x80
[  255.709678][ T1277]  tty_write_room+0x31/0x80
[  255.714172][ T1277]  handle_tx+0x164/0x600
[  255.718434][ T1277]  dev_hard_start_xmit+0x262/0x870
[  255.723553][ T1277]  __dev_queue_xmit+0x1bf1/0x3760
[  255.728565][ T1277]  ? __dev_queue_xmit+0x26f/0x3760
[  255.733671][ T1277]  ? netdev_core_pick_tx+0x340/0x340
[  255.739027][ T1277]  ? do_raw_spin_unlock+0x11d/0x230
[  255.744214][ T1277]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  255.750182][ T1277]  ? lock_chain_count+0x20/0x20
[  255.755038][ T1277]  ? _raw_spin_lock_irq+0xab/0xe0
[  255.760138][ T1277]  ? _raw_spin_unlock_irq+0x1f/0x40
[  255.765335][ T1277]  ? lockdep_hardirqs_on+0x94/0x140
[  255.770521][ T1277]  tx+0x67/0x170
[  255.774056][ T1277]  ? aoenet_xmit+0x190/0x190
[  255.778633][ T1277]  kthread+0x1c6/0x3b0
[  255.782698][ T1277]  ? aoe_ktstart+0x130/0x130
[  255.787299][ T1277]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  255.793187][ T1277]  ? do_task_dead+0xd0/0xd0
[  255.797680][ T1277]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  255.803560][ T1277]  ? __kthread_parkme+0x162/0x1c0
[  255.808574][ T1277]  kthread+0x29d/0x330
[  255.812629][ T1277]  ? aoe_ktstart+0x130/0x130
[  255.817207][ T1277]  ? kthread_blkcg+0xd0/0xd0
[  255.821790][ T1277]  ret_from_fork+0x1f/0x30
[  255.826196][ T1277]  </TASK>
[  255.829198][ T1277] 
[  255.831506][ T1277] Allocated by task 7789:
[  255.835811][ T1277]  kasan_set_track+0x4b/0x70
[  255.840402][ T1277]  __kasan_kmalloc+0x8e/0xa0
[  255.844998][ T1277]  alloc_tty_struct+0xa6/0x740
[  255.849840][ T1277]  tty_init_dev+0x55/0x4c0
[  255.854241][ T1277]  tty_open+0x5a3/0xd00
[  255.858380][ T1277]  chrdev_open+0x597/0x670
[  255.862778][ T1277]  do_dentry_open+0x7e9/0x10d0
[  255.867525][ T1277]  path_openat+0x25c6/0x2e70
[  255.872099][ T1277]  do_filp_open+0x1c1/0x3c0
[  255.876581][ T1277]  do_sys_openat2+0x142/0x490
[  255.881240][ T1277]  __x64_sys_openat+0x135/0x160
[  255.886076][ T1277]  do_syscall_64+0x4c/0xa0
[  255.890476][ T1277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  255.896357][ T1277] 
[  255.898662][ T1277] Freed by task 3653:
[  255.902618][ T1277]  kasan_set_track+0x4b/0x70
[  255.907196][ T1277]  kasan_save_free_info+0x2d/0x50
[  255.912206][ T1277]  ____kasan_slab_free+0x126/0x1e0
[  255.917314][ T1277]  slab_free_freelist_hook+0x131/0x1a0
[  255.922755][ T1277]  __kmem_cache_free+0xb6/0x1f0
[  255.927595][ T1277]  process_one_work+0x898/0x1160
[  255.932520][ T1277]  worker_thread+0xaa2/0x1250
[  255.937181][ T1277]  kthread+0x29d/0x330
[  255.941235][ T1277]  ret_from_fork+0x1f/0x30
[  255.945665][ T1277] 
[  255.948582][ T1277] Last potentially related work creation:
[  255.954309][ T1277]  kasan_save_stack+0x3a/0x60
[  255.958970][ T1277]  __kasan_record_aux_stack+0xb2/0xc0
[  255.964359][ T1277]  insert_work+0x54/0x3c0
[  255.968680][ T1277]  __queue_work+0xba3/0xfb0
[  255.973172][ T1277]  queue_work_on+0x11d/0x1d0
[  255.977746][ T1277]  tty_release_struct+0xb4/0xd0
[  255.982581][ T1277]  tty_release+0xc72/0x1600
[  255.987074][ T1277]  __fput+0x22c/0x920
[  255.991038][ T1277]  task_work_run+0x1ca/0x250
[  255.995629][ T1277]  exit_to_user_mode_loop+0xe6/0x110
[  256.000920][ T1277]  exit_to_user_mode_prepare+0xee/0x180
[  256.006466][ T1277]  syscall_exit_to_user_mode+0x16/0x40
[  256.011918][ T1277]  do_syscall_64+0x58/0xa0
[  256.016325][ T1277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  256.022204][ T1277] 
[  256.024523][ T1277] The buggy address belongs to the object at ffff888057ba3000
[  256.024523][ T1277]  which belongs to the cache kmalloc-cg-2k of size 2048
[  256.038932][ T1277] The buggy address is located 24 bytes inside of
[  256.038932][ T1277]  2048-byte region [ffff888057ba3000, ffff888057ba3800)
[  256.052207][ T1277] 
[  256.054518][ T1277] The buggy address belongs to the physical page:
[  256.061181][ T1277] page:ffffea00015ee800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57ba0
[  256.071314][ T1277] head:ffffea00015ee800 order:3 compound_mapcount:0 compound_pincount:0
[  256.080146][ T1277] memcg:ffff888029aded81
[  256.084367][ T1277] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  256.092349][ T1277] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff88801744c140
[  256.100928][ T1277] raw: 0000000000000000 0000000000080008 00000001ffffffff ffff888029aded81
[  256.109492][ T1277] page dumped because: kasan: bad access detected
[  256.115900][ T1277] page_owner tracks the page as allocated
[  256.121600][ T1277] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4273, tgid 4273 (syz-executor), ts 56196980598, free_ts 12141500190
[  256.142949][ T1277]  post_alloc_hook+0x173/0x1a0
[  256.147710][ T1277]  get_page_from_freelist+0x1a26/0x1ac0
[  256.153242][ T1277]  __alloc_pages+0x1df/0x4e0
[  256.157818][ T1277]  alloc_slab_page+0x5d/0x160
[  256.162480][ T1277]  new_slab+0x87/0x2c0
[  256.166532][ T1277]  ___slab_alloc+0xbc6/0x1230
[  256.171192][ T1277]  __kmem_cache_alloc_node+0x1a0/0x260
[  256.176636][ T1277]  kmalloc_trace+0x26/0xe0
[  256.181041][ T1277]  ipv6_add_dev+0xf8/0x1120
[  256.185535][ T1277]  addrconf_notify+0x634/0xf40
[  256.190291][ T1277]  raw_notifier_call_chain+0xcb/0x160
[  256.195654][ T1277]  register_netdevice+0x1600/0x1aa0
[  256.200838][ T1277]  veth_newlink+0x592/0xbe0
[  256.205326][ T1277]  rtnl_newlink+0x14c4/0x1ff0
[  256.209989][ T1277]  rtnetlink_rcv_msg+0x79b/0xed0
[  256.214937][ T1277]  netlink_rcv_skb+0x1de/0x420
[  256.219687][ T1277] page last free stack trace:
[  256.224342][ T1277]  free_unref_page_prepare+0x8b4/0x9a0
[  256.229896][ T1277]  free_unref_page+0x2e/0x3f0
[  256.234736][ T1277]  free_contig_range+0x9d/0x150
[  256.239574][ T1277]  destroy_args+0x100/0xa31
[  256.244073][ T1277]  debug_vm_pgtable+0x32a/0x37e
[  256.248915][ T1277]  do_one_initcall+0x214/0x7a0
[  256.253681][ T1277]  do_initcall_level+0x137/0x1e4
[  256.258605][ T1277]  do_initcalls+0x4b/0x8a
[  256.262923][ T1277]  kernel_init_freeable+0x3fa/0x5ac
[  256.268108][ T1277]  kernel_init+0x19/0x1b0
[  256.272428][ T1277]  ret_from_fork+0x1f/0x30
[  256.276831][ T1277] 
[  256.279140][ T1277] Memory state around the buggy address:
[  256.284759][ T1277]  ffff888057ba2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  256.292808][ T1277]  ffff888057ba2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  256.300857][ T1277] >ffff888057ba3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.308910][ T1277]                             ^
[  256.313772][ T1277]  ffff888057ba3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.321909][ T1277]  ffff888057ba3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  256.330037][ T1277] ==================================================================
[  256.338128][    C1] vkms_vblank_simulate: vblank timer overrun
[  256.344159][ T1277] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  256.351362][ T1277] CPU: 1 PID: 1277 Comm: aoe_tx0 Not tainted syzkaller #0
[  256.358486][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  256.368749][ T1277] Call Trace:
[  256.372040][ T1277]  <TASK>
[  256.374984][ T1277]  dump_stack_lvl+0x168/0x22e
[  256.379685][ T1277]  ? memcpy+0x3c/0x60
[  256.383682][ T1277]  ? show_regs_print_info+0x12/0x12
[  256.388894][ T1277]  ? load_image+0x3b0/0x3b0
[  256.393407][ T1277]  panic+0x2c9/0x710
[  256.397295][ T1277]  ? bpf_jit_dump+0xd0/0xd0
[  256.401799][ T1277]  ? _raw_spin_unlock_irqrestore+0xa5/0x100
[  256.407712][ T1277]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  256.413636][ T1277]  ? _raw_spin_unlock+0x40/0x40
[  256.418477][ T1277]  check_panic_on_warn+0x80/0xa0
[  256.423403][ T1277]  ? tty_write_room+0x31/0x80
[  256.428074][ T1277]  end_report+0x66/0x110
[  256.432303][ T1277]  kasan_report+0x118/0x140
[  256.436793][ T1277]  ? lock_chain_count+0x20/0x20
[  256.441627][ T1277]  ? tty_write_room+0x31/0x80
[  256.446292][ T1277]  tty_write_room+0x31/0x80
[  256.450787][ T1277]  handle_tx+0x164/0x600
[  256.455107][ T1277]  dev_hard_start_xmit+0x262/0x870
[  256.460204][ T1277]  __dev_queue_xmit+0x1bf1/0x3760
[  256.465221][ T1277]  ? __dev_queue_xmit+0x26f/0x3760
[  256.470313][ T1277]  ? netdev_core_pick_tx+0x340/0x340
[  256.475587][ T1277]  ? do_raw_spin_unlock+0x11d/0x230
[  256.480775][ T1277]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  256.486742][ T1277]  ? lock_chain_count+0x20/0x20
[  256.491578][ T1277]  ? _raw_spin_lock_irq+0xab/0xe0
[  256.496788][ T1277]  ? _raw_spin_unlock_irq+0x1f/0x40
[  256.502001][ T1277]  ? lockdep_hardirqs_on+0x94/0x140
[  256.507429][ T1277]  tx+0x67/0x170
[  256.510974][ T1277]  ? aoenet_xmit+0x190/0x190
[  256.515553][ T1277]  kthread+0x1c6/0x3b0
[  256.519630][ T1277]  ? aoe_ktstart+0x130/0x130
[  256.524205][ T1277]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  256.530099][ T1277]  ? do_task_dead+0xd0/0xd0
[  256.534594][ T1277]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  256.540565][ T1277]  ? __kthread_parkme+0x162/0x1c0
[  256.545577][ T1277]  kthread+0x29d/0x330
[  256.549634][ T1277]  ? aoe_ktstart+0x130/0x130
[  256.554206][ T1277]  ? kthread_blkcg+0xd0/0xd0
[  256.558790][ T1277]  ret_from_fork+0x1f/0x30
[  256.563199][ T1277]  </TASK>
[  256.566477][ T1277] Kernel Offset: disabled
[  256.570794][ T1277] Rebooting in 86400 seconds..