last executing test programs:

11.020456247s ago: executing program 0 (id=727):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0)

11.019738405s ago: executing program 0 (id=729):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x30)
prlimit64(0x0, 0x1, &(0x7f0000000300)={0x7fff, 0x6}, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})

9.825447037s ago: executing program 0 (id=741):
unshare(0x22020600)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251cedd", 0xc}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

9.759792849s ago: executing program 0 (id=744):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0)

9.641877994s ago: executing program 0 (id=748):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x3e, 0x1c, 0x64, 0x0, 0xb, 0x2, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "1697e3ba0fa8a2e7"}}, 0x2a)

9.212101913s ago: executing program 0 (id=751):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800)

9.144851704s ago: executing program 32 (id=751):
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800)

3.068355521s ago: executing program 3 (id=798):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="6402a6c6a113", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0)

2.580222916s ago: executing program 3 (id=801):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
gettid()
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

1.725800382s ago: executing program 3 (id=820):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file3\x00', 0x2218448, &(0x7f0000000040)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$eJzsljurE0EUx/8zk7vJFUWwtLHwggq6d3ejIsgF01hZCD6ChWAwa4iuBpIUJiAxn8DezsKPIWjrh5Boo02stF6Zx2YnIZt3iHDPrzj578zZ2fNYzgYEQRxbfnz/O4j/HP0sADiJA+TN+i+R+nDL/1vh95svd26X3z3++DU/cPennRnHiz8/B+BzSaA9unf87gPzex98pB+A45LRZTC4Rj8Bx0OjQzA8Mvq5pRvS33Wf1aPQfdqIqlJ40vjSBNIUJ+Mb9hmqVnzM2m91ui8qURQ2tyjm1W9Y4jhK4hPj+y50tJ5VPx8cvtFFMNwz+gbySW10Saz8z+bS/MXM/B0sleTNy8CSFZGhLPGIM6cyW+UAWK0xe5vrPd6aV3ab71CGEFAi6eiGThYZWwKbzUIOpjk+yO2gqmu9UdN7IWZ259MtfU+yEvf0tfI5ndHcuLdghA5WySudT/EHhgvW/NSj5L361MgWHrY63Sv1l5VaWAtfBUHxunfV864Fh2oQaTtj/u2r+XQiPX/qN0niMAevK+1209d2dB1oOzlxmYlv2Oe4eD5dcybOLSRiL13jypeNbRMEQfxPnANTM1nN5USYrwms/7p3dxgjQRAEQRAEQRAEQRDr8S8AAP//p+Y+dA==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x40)
getdents(r0, 0xfffffffffffffffd, 0x58)

1.58153548s ago: executing program 3 (id=821):
syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090491000003e102"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80000)
close(0xffffffffffffffff)

858.670029ms ago: executing program 1 (id=828):
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x10, r0)
ptrace$setsig(0x4203, r0, 0x7a7, &(0x7f0000000140)={0x29, 0x9, 0x8})
syz_clone3(0x0, 0x0)

742.080232ms ago: executing program 1 (id=829):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x804)

741.9051ms ago: executing program 1 (id=830):
syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0xc1, [@multicast1]}, @ssrr={0x89, 0x3, 0x21}]}}, @info_request={0xf, 0x0, 0x0, 0x8, 0x5}}}}}, 0x0)

681.764502ms ago: executing program 1 (id=831):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x17f, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, r1, 0xb}}, 0x48)

681.533445ms ago: executing program 1 (id=832):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001480)='/proc/partitions\x00', 0x0, 0x0)
read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0)
read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea)

600.283865ms ago: executing program 1 (id=833):
syz_usb_connect(0x0, 0x48, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100004e4aa92082053300578e01020301090236000200000000090400f50003ed02000905030000000000000904", @ANYRES16], 0x0)

211.606498ms ago: executing program 2 (id=842):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x880)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0)

211.331047ms ago: executing program 2 (id=843):
r0 = socket$inet6(0xa, 0x805, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000002b00)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x0, 0x7, 0x20, @dev={0xfe, 0x80, '\x00', 0x11}, @loopback={0x0, 0xffff888101827518}, 0x7800, 0x20, 0x38dc5865, 0x10001}})

155.450641ms ago: executing program 2 (id=844):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000000004082, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="78297de6", 0x4}, {0x0}], 0x2)

155.308914ms ago: executing program 2 (id=845):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000444, 0x0, 0x1, 0x0, 0x0)

110.937575ms ago: executing program 3 (id=846):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}})
r0 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)

58.299672ms ago: executing program 2 (id=847):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4, 0x1c}]}, 0x20}}, 0x4000008)

58.065136ms ago: executing program 3 (id=848):
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$read(0xb, r3, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2)
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r4, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80800)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r5, 0xa0044d07, 0x0)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000)=""/255, 0xff, 0x40000003, 0x0, 0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10040)
r7 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f0000000140)=0x293c)
lsetxattr$security_capability(&(0x7f0000000280)='./cgroup/cgroup.procs\x00', &(0x7f0000000180), &(0x7f0000000040)=@v2={0x2000000, [{0x6, 0x4}, {0x4, 0x1bf}]}, 0x14, 0x1)

0s ago: executing program 2 (id=849):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:39679' (ED25519) to the list of known hosts.
syzkaller login: [   48.054540][ T5832] cgroup: Unknown subsys name 'net'
[   48.155248][ T5832] cgroup: Unknown subsys name 'cpuset'
[   48.159159][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.497709][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.328594][ T5926] chnl_net:caif_netlink_parms(): no params data found
[   56.380745][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.384540][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.386923][ T5926] bridge_slave_0: entered allmulticast mode
[   56.389661][ T5926] bridge_slave_0: entered promiscuous mode
[   56.393787][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.396164][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.398526][ T5926] bridge_slave_1: entered allmulticast mode
[   56.401194][ T5926] bridge_slave_1: entered promiscuous mode
[   56.459540][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.464830][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.482098][ T5926] team0: Port device team_slave_0 added
[   56.485978][ T5926] team0: Port device team_slave_1 added
[   56.507926][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.510232][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.519923][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.530877][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.533740][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.542057][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.567738][ T5926] hsr_slave_0: entered promiscuous mode
[   56.570155][ T5926] hsr_slave_1: entered promiscuous mode
[   56.657763][ T5926] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.663185][ T5926] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.667189][ T5926] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.671281][ T5926] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.687727][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.690140][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.692898][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.695231][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.723859][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.731746][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.735658][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.742183][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[   56.749545][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.751919][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.758171][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.760541][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.840460][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.861700][ T5926] veth0_vlan: entered promiscuous mode
[   56.867550][ T5926] veth1_vlan: entered promiscuous mode
[   56.881254][ T5926] veth0_macvtap: entered promiscuous mode
[   56.886511][ T5926] veth1_macvtap: entered promiscuous mode
[   56.895655][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.902271][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.909545][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.914850][ T5721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.918012][ T5721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.925669][ T5721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.951431][ T5926] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   59.575475][ T5721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.705640][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   59.708527][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   59.713261][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   59.716330][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   59.719340][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   59.733594][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   59.736406][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   59.760988][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   59.764804][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   59.768331][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   59.795821][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   59.798684][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   59.801228][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   59.806211][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   59.808677][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   59.952440][ T5952] chnl_net:caif_netlink_parms(): no params data found
[   59.969116][ T5955] chnl_net:caif_netlink_parms(): no params data found
[   60.047656][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.049997][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.052462][ T5952] bridge_slave_0: entered allmulticast mode
[   60.055695][ T5952] bridge_slave_0: entered promiscuous mode
[   60.073175][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.075701][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.078085][ T5952] bridge_slave_1: entered allmulticast mode
[   60.080964][ T5952] bridge_slave_1: entered promiscuous mode
[   60.126828][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.129903][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.133393][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.135835][ T5955] bridge_slave_0: entered allmulticast mode
[   60.138733][ T5955] bridge_slave_0: entered promiscuous mode
[   60.143864][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.154251][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.156495][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.158871][ T5955] bridge_slave_1: entered allmulticast mode
[   60.161551][ T5955] bridge_slave_1: entered promiscuous mode
[   60.188563][ T5959] chnl_net:caif_netlink_parms(): no params data found
[   60.209950][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.215311][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.228050][ T5952] team0: Port device team_slave_0 added
[   60.235280][ T5952] team0: Port device team_slave_1 added
[   60.260503][ T5955] team0: Port device team_slave_0 added
[   60.278302][ T5955] team0: Port device team_slave_1 added
[   60.280857][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.283392][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.291239][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.310298][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.312448][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.320486][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.324443][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.326715][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.328979][ T5959] bridge_slave_0: entered allmulticast mode
[   60.331835][ T5959] bridge_slave_0: entered promiscuous mode
[   60.336093][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.338307][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.340670][ T5959] bridge_slave_1: entered allmulticast mode
[   60.343755][ T5959] bridge_slave_1: entered promiscuous mode
[   60.365647][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.367826][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.376912][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.395994][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.398169][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.406546][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.411382][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.427879][ T5952] hsr_slave_0: entered promiscuous mode
[   60.430697][ T5952] hsr_slave_1: entered promiscuous mode
[   60.434376][ T5952] debugfs: 'hsr0' already exists in 'hsr'
[   60.436199][ T5952] Cannot create hsr debugfs directory
[   60.439054][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.484577][ T5959] team0: Port device team_slave_0 added
[   60.507000][ T5955] hsr_slave_0: entered promiscuous mode
[   60.509185][ T5955] hsr_slave_1: entered promiscuous mode
[   60.511224][ T5955] debugfs: 'hsr0' already exists in 'hsr'
[   60.513663][ T5955] Cannot create hsr debugfs directory
[   60.516291][ T5959] team0: Port device team_slave_1 added
[   60.565229][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0
[   60.567425][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.575721][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   60.590701][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1
[   60.593405][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   60.601075][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   60.614783][ T5721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.690079][ T5721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.699214][ T5959] hsr_slave_0: entered promiscuous mode
[   60.701565][ T5959] hsr_slave_1: entered promiscuous mode
[   60.704602][ T5959] debugfs: 'hsr0' already exists in 'hsr'
[   60.706399][ T5959] Cannot create hsr debugfs directory
[   60.739532][ T5721] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.830747][ T5721] bridge_slave_1: left allmulticast mode
[   60.835543][ T5721] bridge_slave_1: left promiscuous mode
[   60.838217][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.843860][ T5721] bridge_slave_0: left allmulticast mode
[   60.845834][ T5721] bridge_slave_0: left promiscuous mode
[   60.847845][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.027381][ T5721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.032104][ T5721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.036795][ T5721] bond0 (unregistering): Released all slaves
[   61.136145][ T5721] hsr_slave_0: left promiscuous mode
[   61.138264][ T5721] hsr_slave_1: left promiscuous mode
[   61.140283][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.143811][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.147271][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.149629][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.159710][ T5721] veth1_macvtap: left promiscuous mode
[   61.161829][ T5721] veth0_macvtap: left promiscuous mode
[   61.165959][ T5721] veth1_vlan: left promiscuous mode
[   61.167794][ T5721] veth0_vlan: left promiscuous mode
[   61.376523][ T5721] team0 (unregistering): Port device team_slave_1 removed
[   61.393928][ T5721] team0 (unregistering): Port device team_slave_0 removed
[   61.699969][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   61.710596][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   61.727020][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   61.731178][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   61.775274][ T5955] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   61.781422][ T5955] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   61.795286][ T5955] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   61.799687][ T5955] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   61.803107][ T5235] Bluetooth: hci1: command tx timeout
[   61.803811][ T5953] Bluetooth: hci0: command tx timeout
[   61.846301][ T5959] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   61.853714][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.856034][ T5959] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   61.862583][ T5959] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   61.874576][ T5959] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   61.883879][ T5953] Bluetooth: hci2: command tx timeout
[   61.910307][ T5952] 8021q: adding VLAN 0 to HW filter on device team0
[   61.921696][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.924117][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.938423][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.940660][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.972615][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.016176][ T5955] 8021q: adding VLAN 0 to HW filter on device team0
[   62.035692][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.037924][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.041921][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.044254][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.052381][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.081499][ T5959] 8021q: adding VLAN 0 to HW filter on device team0
[   62.089740][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.107927][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.110491][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.135124][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.137529][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.147931][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.206355][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.218014][ T5952] veth0_vlan: entered promiscuous mode
[   62.229131][ T5952] veth1_vlan: entered promiscuous mode
[   62.261826][ T5955] veth0_vlan: entered promiscuous mode
[   62.277622][ T5952] veth0_macvtap: entered promiscuous mode
[   62.280595][ T5955] veth1_vlan: entered promiscuous mode
[   62.290232][ T5952] veth1_macvtap: entered promiscuous mode
[   62.305568][ T5955] veth0_macvtap: entered promiscuous mode
[   62.310701][ T5955] veth1_macvtap: entered promiscuous mode
[   62.319569][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.328044][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.338159][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.343655][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.352098][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.355229][ T5721] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.368816][ T5721] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.371681][ T5721] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.379886][ T5721] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.383414][ T5721] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.386396][ T5721] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.406945][ T5721] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.409721][ T5721] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.449130][ T5959] veth0_vlan: entered promiscuous mode
[   62.463154][ T5959] veth1_vlan: entered promiscuous mode
[   62.474049][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.476662][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.488390][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.491223][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.510265][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.514248][ T5959] veth0_macvtap: entered promiscuous mode
[   62.516285][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.552252][ T5959] veth1_macvtap: entered promiscuous mode
[   62.556507][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.564705][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.566172][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.574344][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.580498][ T5935] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.607010][ T5935] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.610165][ T5935] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.618773][ T5935] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.681705][   T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.685195][   T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.719137][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.721719][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.543814][ T6082] netlink: 'syz.2.100': attribute type 12 has an invalid length.
[   63.596982][ T6086] loop2: detected capacity change from 0 to 256
[   63.629864][ T6086] FAT-fs (loop2): Directory bread(block 64) failed
[   63.633794][ T6086] FAT-fs (loop2): Directory bread(block 65) failed
[   63.634008][ T6088] loop1: detected capacity change from 0 to 1024
[   63.636055][ T6086] FAT-fs (loop2): Directory bread(block 66) failed
[   63.640265][ T6086] FAT-fs (loop2): Directory bread(block 67) failed
[   63.642580][ T6086] FAT-fs (loop2): Directory bread(block 68) failed
[   63.647142][ T6086] FAT-fs (loop2): Directory bread(block 69) failed
[   63.649354][ T6086] FAT-fs (loop2): Directory bread(block 70) failed
[   63.651496][ T6086] FAT-fs (loop2): Directory bread(block 71) failed
[   63.655097][ T6086] FAT-fs (loop2): Directory bread(block 72) failed
[   63.657428][ T6086] FAT-fs (loop2): Directory bread(block 73) failed
[   63.777390][ T1090] hfsplus: b-tree write err: -5, ino 4
[   63.883795][ T5953] Bluetooth: hci1: command tx timeout
[   63.962983][ T5953] Bluetooth: hci2: command tx timeout
[   63.980331][ T6114] netlink: 240 bytes leftover after parsing attributes in process `syz.1.116'.
[   64.004991][ T6118] loop0: detected capacity change from 0 to 256
[   64.015779][ T6118] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   64.052404][ T6118] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[   64.063030][ T6118] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   64.075762][ T6118] UDF-fs: Scanning with blocksize 512 failed
[   64.085844][ T6118] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   64.090159][ T6118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   64.105581][   T33] audit: type=1800 audit(1755051587.410:2): pid=6118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="file2" dev="loop0" ino=66 res=0 errno=0
[   64.161316][ T6132] openvswitch: netlink: Multiple metadata blocks provided
[   64.209880][   T33] audit: type=1800 audit(1755051587.510:3): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file1" dev="tmpfs" ino=130 res=0 errno=0
[   64.319036][ T6144] loop1: detected capacity change from 0 to 8
[   64.325097][ T6144] SQUASHFS error: lzo decompression failed, data probably corrupt
[   64.328147][ T6144] SQUASHFS error: Failed to read block 0x91: -5
[   64.334504][ T6144] SQUASHFS error: Unable to read metadata cache entry [8f]
[   64.336980][ T6144] SQUASHFS error: Unable to read inode 0x11f
[   64.501892][ T6156] capability: warning: `syz.2.134' uses 32-bit capabilities (legacy support in use)
[   64.614426][ T6157] loop0: detected capacity change from 0 to 1024
[   64.797958][ T6161] syz.1.136 uses obsolete (PF_INET,SOCK_PACKET)
[   65.186159][ T6024] kernel read not supported for file /70/environ (pid: 6024 comm: kworker/1:5)
[   65.305214][ T6191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   65.360691][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'.
[   65.963163][ T5953] Bluetooth: hci1: command tx timeout
[   66.043247][ T5953] Bluetooth: hci2: command tx timeout
[   66.083084][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.242770][   T10] usb 3-1: Using ep0 maxpacket: 32
[   66.247779][   T10] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[   66.250715][   T10] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   66.254469][   T10] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   66.258019][   T10] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   66.262222][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[   66.266850][   T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   66.269908][   T10] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   66.273200][   T10] usb 3-1: Product: syz
[   66.274721][   T10] usb 3-1: Manufacturer: syz
[   66.276358][   T10] usb 3-1: SerialNumber: syz
[   66.280563][   T10] usb 3-1: config 0 descriptor??
[   66.286506][   T10] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   66.291380][   T10] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   66.601834][ T6220] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[   66.609441][ T6024] usb 3-1: USB disconnect, device number 2
[   66.611390][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[   66.614627][ T6242] loop1: detected capacity change from 0 to 1024
[   66.620198][ T6242] =======================================================
[   66.620198][ T6242] WARNING: The mand mount option has been deprecated and
[   66.620198][ T6242]          and is ignored by this kernel. Remove the mand
[   66.620198][ T6242]          option from the mount to silence this warning.
[   66.620198][ T6242] =======================================================
[   66.634095][ T6237] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[   66.637334][ T6024] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[   66.643448][ T6242] EXT4-fs: Ignoring removed oldalloc option
[   66.645430][ T6242] EXT4-fs: Ignoring removed bh option
[   66.684406][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   66.721512][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.842332][ T6265] Illegal XDP return value 606099008 on prog  (id 15) dev N/A, expect packet loss!
[   66.854943][ T5953] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   66.857759][ T5953] Bluetooth: hci0: Injecting HCI hardware error event
[   66.860896][ T5953] Bluetooth: hci0: hardware error 0x00
[   67.271581][ T6293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.337371][ T6293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.390826][ T6293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.394357][  T792] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   67.468625][ T6293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.481021][ T6302] ip6erspan0: entered promiscuous mode
[   67.552742][  T792] usb 2-1: Using ep0 maxpacket: 8
[   67.555897][  T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.557774][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.562853][  T792] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[   67.565820][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.568439][  T792] usb 2-1: Product: syz
[   67.570886][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.586761][  T792] usb 2-1: Manufacturer: syz
[   67.588340][  T792] usb 2-1: SerialNumber: syz
[   67.591089][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.594313][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.595625][  T792] usb 2-1: config 0 descriptor??
[   67.605571][  T792] gspca_main: stk014-2.14.0 probing 05e1:0893
[   67.607903][  T792] usb 2-1: selecting invalid altsetting 1
[   67.802357][  T792] gspca_stk014: reg_r err -71
[   67.805584][  T792] stk014 2-1:0.0: probe with driver stk014 failed with error -71
[   67.809967][  T792] usb 2-1: USB disconnect, device number 2
[   68.052982][ T5235] Bluetooth: hci1: command tx timeout
[   68.123417][ T5235] Bluetooth: hci2: command tx timeout
[   68.146368][ T6328] loop2: detected capacity change from 0 to 1024
[   68.161659][ T6328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.241325][   T33] audit: type=1804 audit(1755051591.540:4): pid=6328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.211" name="/newroot/52/file0/bus" dev="loop2" ino=840 res=1 errno=0
[   68.332586][ T6330] loop2: detected capacity change from 0 to 512
[   68.338609][ T6330] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.212: casefold flag without casefold feature
[   68.343567][ T6330] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.212: couldn't read orphan inode 15 (err -117)
[   68.348171][ T6330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.375697][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.826215][ T6364] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   68.893963][  T973] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   68.923933][ T5953] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   68.939217][ T6374] ip6erspan0: entered promiscuous mode
[   68.987044][ T6377] loop0: detected capacity change from 0 to 1024
[   69.024007][ T6377] hfsplus: xattr searching failed
[   69.049725][   T64] hfsplus: b-tree write err: -5, ino 3
[   69.063836][  T973] usb 3-1: Using ep0 maxpacket: 8
[   69.069612][  T973] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[   69.072414][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.082290][  T973] usb 3-1: Product: syz
[   69.089524][  T973] usb 3-1: Manufacturer: syz
[   69.091093][  T973] usb 3-1: SerialNumber: syz
[   69.098547][  T973] usb 3-1: config 0 descriptor??
[   69.161722][ T6394] process 'syz.1.241' launched './file1' with NULL argv: empty string added
[   69.192563][ T6396] veth0_to_bond: entered allmulticast mode
[   69.197256][ T6396] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[   69.307694][  T973] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   69.362832][ T6024] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   69.503442][  T792] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   69.512817][ T6024] usb 1-1: Using ep0 maxpacket: 16
[   69.517858][ T6024] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[   69.520955][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.523838][ T6024] usb 1-1: Product: syz
[   69.525361][ T6024] usb 1-1: Manufacturer: syz
[   69.526995][ T6024] usb 1-1: SerialNumber: syz
[   69.530781][ T6024] usb 1-1: config 0 descriptor??
[   69.654624][  T792] usb 2-1: Using ep0 maxpacket: 32
[   69.659131][  T792] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[   69.661713][  T792] usb 2-1: config 0 has no interface number 0
[   69.663827][  T792] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   69.669020][  T792] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   69.671942][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.675753][  T792] usb 2-1: Product: syz
[   69.677192][  T792] usb 2-1: Manufacturer: syz
[   69.678814][  T792] usb 2-1: SerialNumber: syz
[   69.683420][  T792] usb 2-1: config 0 descriptor??
[   69.688817][  T792] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[   69.692012][  T792] em28xx 2-1:0.132: Video interface 132 found:
[   69.743427][ T6024] speedtch 1-1:0.0: speedtch_bind: wrong device class 68
[   69.745757][ T6024] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[   69.750323][ T6024] usb 1-1: USB disconnect, device number 2
[   70.091543][  T792] em28xx 2-1:0.132: chip ID is em2840
[   70.357957][  T792] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[   70.360932][  T792] em28xx 2-1:0.132: board has no eeprom
[   70.434050][  T792] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[   70.436540][  T792] em28xx 2-1:0.132: analog set to bulk mode.
[   70.438538][ T5314] em28xx 2-1:0.132: Registering V4L2 extension
[   70.445197][  T792] usb 2-1: USB disconnect, device number 3
[   70.447644][  T792] em28xx 2-1:0.132: Disconnecting em28xx
[   70.485409][ T5314] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[   70.487768][ T5314] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[   70.489960][ T5314] em28xx 2-1:0.132: No AC97 audio processor
[   70.495978][ T5314] usb 2-1: Decoder not found
[   70.497468][ T5314] em28xx 2-1:0.132: failed to create media graph
[   70.499466][ T5314] em28xx 2-1:0.132: V4L2 device video103 deregistered
[   70.506109][ T5314] em28xx 2-1:0.132: Remote control support is not available for this card.
[   70.509170][  T792] em28xx 2-1:0.132: Closing input extension
[   70.517720][  T792] em28xx 2-1:0.132: Freeing device
[   70.682763][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   70.714456][  T973] gspca_sunplus: reg_r err -71
[   70.716083][  T973] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[   70.720507][  T973] usb 3-1: USB disconnect, device number 3
[   70.833395][    T9] usb 1-1: Using ep0 maxpacket: 32
[   70.841734][    T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[   70.844658][    T9] usb 1-1: config 0 has no interface number 0
[   70.846707][    T9] usb 1-1: config 0 interface 196 has no altsetting 0
[   70.854784][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   70.857921][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.860673][    T9] usb 1-1: Product: syz
[   70.862133][    T9] usb 1-1: Manufacturer: syz
[   70.865291][    T9] usb 1-1: SerialNumber: syz
[   70.868239][    T9] usb 1-1: config 0 descriptor??
[   70.995229][ T6424] loop1: detected capacity change from 0 to 1024
[   70.998079][ T6424] EXT4-fs: Ignoring removed bh option
[   71.005602][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.007763][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.015366][ T6424] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.065286][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.084002][    T9] ipheth 1-1:0.196: Unable to find endpoints
[   71.102509][    T9] usb 1-1: USB disconnect, device number 3
[   71.432775][  T792] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   71.502777][  T973] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   71.592454][  T792] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[   71.597231][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.607689][  T792] usb 2-1: Product: syz
[   71.609295][  T792] usb 2-1: Manufacturer: syz
[   71.611110][  T792] usb 2-1: SerialNumber: syz
[   71.614968][  T792] usb 2-1: config 0 descriptor??
[   71.627857][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.630326][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.637806][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.640120][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.644037][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.646408][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.648832][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.651135][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.654846][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.657875][    T9] hid-generic 0008:0006:0000.0001: unknown main item tag 0x0
[   71.660810][  T973] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   71.664423][  T973] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   71.670225][    T9] hid-generic 0008:0006:0000.0001: hidraw0: <UNKNOWN> HID v0.0c Device [syz0] on syz1
[   71.673318][  T973] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   71.677257][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.683401][ T6441] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   71.689127][  T973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   71.761474][ T6447] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   71.766065][ T6447] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   71.768639][ T6447] gretap1: entered promiscuous mode
[   71.770453][ T6447] gretap1: entered allmulticast mode
[   71.820318][   T10] usb 2-1: USB disconnect, device number 4
[   71.830350][ T6451] input: syz1 as /devices/virtual/input/input4
[   71.868789][ T6453] warning: `syz.0.267' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   71.991066][  T792] usb 3-1: USB disconnect, device number 4
[   72.562018][ T6476] loop2: detected capacity change from 0 to 128
[   72.575354][ T6476] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.581398][ T6476] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   73.078700][ T6494] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.731104][ T5959] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   73.755677][ T6518] loop2: detected capacity change from 0 to 256
[   73.938496][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'.
[   73.968697][ T6539] loop1: detected capacity change from 0 to 64
[   74.134983][ T6546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.385623][ T5314] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   74.462406][ T6555] netlink: 'syz.1.310': attribute type 15 has an invalid length.
[   74.465667][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.310'.
[   74.562765][ T5314] usb 1-1: Using ep0 maxpacket: 16
[   74.567301][ T5314] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[   74.572268][ T5314] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   74.577972][ T5314] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   74.586544][ T5314] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[   74.589913][ T5314] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   74.595744][ T5314] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   74.598791][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   74.601563][ T5314] usb 1-1: SerialNumber: syz
[   74.609071][ T6537] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   74.826608][ T5314] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   74.831359][ T5314] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[   74.837706][ T5314] usb 1-1: USB disconnect, device number 4
[   75.525988][ T6591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   76.320403][ T6615] loop0: detected capacity change from 0 to 128
[   76.340477][ T6615] FAT-fs (loop0): bogus number of FAT structure
[   76.342491][ T6615] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   76.358986][ T6615] FAT-fs (loop0): Can't find a valid FAT filesystem
[   76.404366][ T6623] loop0: detected capacity change from 0 to 8
[   76.619723][ T6628] SQUASHFS error: Failed to read block 0x2fc: -5
[   76.621995][ T6628] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   76.624605][ T6628] SQUASHFS error: Unable to read directory block [247:26]
[   76.629519][ T6628] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   76.632175][ T6628] SQUASHFS error: Unable to read directory block [247:26]
[   76.635763][ T6628] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   76.638162][ T6628] SQUASHFS error: Unable to read directory block [247:26]
[   76.784410][ T6631] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[   76.841366][   T33] audit: type=1326 audit(1755051591.141:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[   76.855868][ T6635] loop1: detected capacity change from 0 to 512
[   76.860369][   T33] audit: type=1326 audit(1755051591.151:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[   76.874328][   T33] audit: type=1326 audit(1755051591.151:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[   76.874865][ T6635] EXT4-fs (loop1): orphan cleanup on readonly fs
[   76.881348][   T33] audit: type=1326 audit(1755051591.151:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8414f8ec23 code=0x7ffc0000
[   76.893708][ T6635] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.345: bg 0: block 248: padding at end of block bitmap is not set
[   76.896754][   T33] audit: type=1326 audit(1755051591.161:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8414f8d69f code=0x7ffc0000
[   76.899103][ T6635] Quota error (device loop1): write_blk: dquota write failed
[   76.908174][ T6635] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   76.910681][   T33] audit: type=1326 audit(1755051591.161:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8414f8ec77 code=0x7ffc0000
[   76.911194][ T6635] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.345: Failed to acquire dquot type 1
[   76.925455][ T6635] EXT4-fs (loop1): 1 truncate cleaned up
[   76.927300][   T33] audit: type=1326 audit(1755051591.161:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8414f8d550 code=0x7ffc0000
[   76.935023][   T33] audit: type=1326 audit(1755051591.161:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.1.345" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8414f8e7eb code=0x7ffc0000
[   76.935904][ T6635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.969841][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.950523][ T6651] loop1: detected capacity change from 0 to 128
[   78.269496][ T6655] loop0: detected capacity change from 0 to 1024
[   78.691318][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[   78.749858][ T6698] netlink: 'syz.1.373': attribute type 25 has an invalid length.
[   78.752416][ T6698] netlink: 'syz.1.373': attribute type 7 has an invalid length.
[   78.830237][ T6706] loop1: detected capacity change from 0 to 512
[   78.838854][ T6706] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   78.848177][ T6706] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   78.864187][ T6706] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.378: invalid indirect mapped block 4294967295 (level 0)
[   78.874747][ T6706] EXT4-fs (loop1): Remounting filesystem read-only
[   78.878254][ T6706] EXT4-fs (loop1): 1 orphan inode deleted
[   78.882448][ T6706] EXT4-fs (loop1): 1 truncate cleaned up
[   78.886265][ T6706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.913321][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.011741][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'.
[   80.111288][ T6733] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   80.344165][ T6740] Zero length message leads to an empty skb
[   80.821109][ T6750] mmap: syz.0.393 (6750) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   81.000272][  T792] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   81.072953][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.2.398'.
[   81.119159][ T6769] loop0: detected capacity change from 0 to 256
[   81.140667][ T6771] loop2: detected capacity change from 0 to 512
[   81.148414][ T6771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.259747][   T47] cfg80211: failed to load regulatory.db
[   81.273548][  T792] usb 2-1: Using ep0 maxpacket: 32
[   81.276646][  T792] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[   81.280269][  T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   81.294360][  T792] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[   81.297321][  T792] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[   81.300245][  T792] usb 2-1: Product: syz
[   81.301587][  T792] usb 2-1: Manufacturer: syz
[   81.306525][  T792] usb 2-1: SerialNumber: syz
[   81.314075][  T792] usb 2-1: config 0 descriptor??
[   81.345170][  T792] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   81.366460][ T6782] binder: 6780:6782 unknown command 0
[   81.373102][ T6782] binder: 6780:6782 ioctl c0306201 200000000c40 returned -22
[   81.436248][ T6789] loop0: detected capacity change from 0 to 512
[   81.442256][ T6789] EXT4-fs: Ignoring removed nobh option
[   81.458924][ T6789] fscrypt (loop0, inode 2): Error -61 getting encryption context
[   81.463552][ T6789] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[   81.467187][ T6789] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.406: casefold flag without casefold feature
[   81.471542][ T6789] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.406: couldn't read orphan inode 13 (err -117)
[   81.477432][ T6789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.492903][ T6789] syz_tun: entered promiscuous mode
[   81.497212][ T6789] syz_tun: left promiscuous mode
[   81.595772][ T5955] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.716486][ T6795] loop0: detected capacity change from 0 to 64
[   82.169685][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.311135][ T6806] netlink: 14 bytes leftover after parsing attributes in process `syz.2.412'.
[   82.315932][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.318250][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.321004][ T6806] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.323823][ T6806] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.363860][ T5935] usb 2-1: Failed to submit usb control message: -110
[   82.366261][ T5935] usb 2-1: unable to send the bmi data to the device: -110
[   82.368765][ T5935] usb 2-1: unable to get target info from device
[   82.370842][ T5935] usb 2-1: could not get target info (-110)
[   82.376110][ T5935] usb 2-1: could not probe fw (-110)
[   83.012737][  T973] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   83.172784][  T973] usb 1-1: Using ep0 maxpacket: 32
[   83.176453][  T973] usb 1-1: config 26 has too many interfaces: 141, using maximum allowed: 32
[   83.179795][  T973] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[   83.183272][  T973] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 141
[   83.188510][  T973] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   83.191638][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.194489][  T973] usb 1-1: Product: syz
[   83.196243][  T973] usb 1-1: Manufacturer: syz
[   83.198012][  T973] usb 1-1: SerialNumber: syz
[   83.592854][  T792] usb 2-1: USB disconnect, device number 5
[   83.619071][  T973] usb 1-1: USB disconnect, device number 5
[   83.942810][  T792] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   84.094801][  T792] usb 2-1: unable to get BOS descriptor or descriptor too short
[   84.098122][  T792] usb 2-1: not running at top speed; connect to a high speed hub
[   84.101616][  T792] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   84.104601][  T792] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   84.108892][  T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   84.114919][  T792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   84.118796][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.121834][  T792] usb 2-1: Product: syz
[   84.124573][  T792] usb 2-1: Manufacturer: syz
[   84.126615][  T792] usb 2-1: SerialNumber: syz
[   84.145289][ T6830] loop0: detected capacity change from 0 to 128
[   84.379994][ T6844] loop2: detected capacity change from 0 to 256
[   84.880875][  T792] usb 2-1: 0:2 : does not exist
[   84.888678][  T792] usb 2-1: USB disconnect, device number 6
[   84.917426][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.923340][ T6888] netlink: 'syz.1.447': attribute type 2 has an invalid length.
[   86.076417][ T6900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.450'.
[   86.085713][ T6895] netlink: 60 bytes leftover after parsing attributes in process `syz.2.450'.
[   86.164548][ T6904] loop2: detected capacity change from 0 to 1024
[   86.171382][ T6904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.393736][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   86.772747][    T9] usb 2-1: Using ep0 maxpacket: 32
[   86.790083][    T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   86.798124][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.820883][    T9] usb 2-1: config 0 descriptor??
[   87.057008][ T6917] loop0: detected capacity change from 0 to 4096
[   87.079294][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   87.085660][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   87.106414][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   87.108758][    T9] usb 2-1: media controller created
[   87.129093][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.323658][    T9] az6027: usb out operation failed. (-71)
[   87.326866][    T9] az6027: usb out operation failed. (-71)
[   87.328717][    T9] stb0899_attach: Driver disabled by Kconfig
[   87.330640][    T9] az6027: no front-end attached
[   87.330640][    T9] 
[   87.337324][    T9] az6027: usb out operation failed. (-71)
[   87.341167][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   87.346720][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   87.352576][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[   87.359859][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   87.370359][    T9] usb 2-1: USB disconnect, device number 7
[   87.421931][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   87.532609][ T6931] netlink: 'syz.2.465': attribute type 10 has an invalid length.
[   87.549620][ T6931] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.002292][ T6937] loop1: detected capacity change from 0 to 4096
[   88.328474][ T6961] netlink: 'syz.1.479': attribute type 14 has an invalid length.
[   88.356676][ T6963] loop0: detected capacity change from 0 to 1024
[   88.388877][ T6963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.458019][   T33] kauditd_printk_skb: 13 callbacks suppressed
[   88.458029][   T33] audit: type=1800 audit(1755051602.761:26): pid=6972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.480" name="file1" dev="loop0" ino=15 res=0 errno=0
[   88.525321][ T6972] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.480: Allocating blocks 497-513 which overlap fs metadata
[   88.536998][ T6977] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.480: Allocating blocks 497-513 which overlap fs metadata
[   89.102749][ T6024] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   89.252728][ T6024] usb 3-1: Using ep0 maxpacket: 16
[   89.256707][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.260505][ T6024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.264254][ T6024] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   89.267269][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.271075][ T6024] usb 3-1: config 0 descriptor??
[   89.528522][ T6991] loop1: detected capacity change from 0 to 512
[   89.531420][ T6991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   89.537980][ T6991] EXT4-fs (loop1): 1 orphan inode deleted
[   89.539989][ T6991] EXT4-fs (loop1): 1 truncate cleaned up
[   89.544284][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.560355][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.585294][ T6995] loop1: detected capacity change from 0 to 256
[   89.594974][ T6995] FAT-fs (loop1): Directory bread(block 64) failed
[   89.597252][ T6995] FAT-fs (loop1): Directory bread(block 65) failed
[   89.599376][ T6995] FAT-fs (loop1): Directory bread(block 66) failed
[   89.601469][ T6995] FAT-fs (loop1): Directory bread(block 67) failed
[   89.604060][ T6995] FAT-fs (loop1): Directory bread(block 68) failed
[   89.606205][ T6995] FAT-fs (loop1): Directory bread(block 69) failed
[   89.608358][ T6995] FAT-fs (loop1): Directory bread(block 70) failed
[   89.610481][ T6995] FAT-fs (loop1): Directory bread(block 71) failed
[   89.612776][ T6995] FAT-fs (loop1): Directory bread(block 72) failed
[   89.615057][ T6995] FAT-fs (loop1): Directory bread(block 73) failed
[   89.657001][ T6997] loop1: detected capacity change from 0 to 512
[   89.685662][ T6024] hid_parser_main: 38 callbacks suppressed
[   89.685675][ T6024] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   89.688338][ T6997] EXT4-fs (loop1): 1 orphan inode deleted
[   89.689987][ T6024] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   89.692735][ T6997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.697260][ T6024] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   89.701146][ T6024] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   89.703398][ T6997] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.704385][ T6024] appleir 0003:05AC:8241.0002: unknown main item tag 0x0
[   89.730510][ T6024] appleir 0003:05AC:8241.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[   89.739125][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.750759][   T28] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   89.755142][   T28] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u9:1: Failed to release dquot type 1
[   89.944638][    T9] usb 3-1: USB disconnect, device number 5
[   90.486472][ T7006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'.
[   90.508748][ T7008] netlink: 'syz.2.496': attribute type 7 has an invalid length.
[   90.956498][ T7018] loop1: detected capacity change from 0 to 128
[   90.959946][ T7018] FAT-fs (loop1): Directory bread(block 414) failed
[   90.962101][ T7018] FAT-fs (loop1): Directory bread(block 415) failed
[   90.964684][ T7018] FAT-fs (loop1): Directory bread(block 416) failed
[   90.966833][ T7018] FAT-fs (loop1): Directory bread(block 417) failed
[   90.969274][ T7018] FAT-fs (loop1): Directory bread(block 418) failed
[   90.971457][ T7018] FAT-fs (loop1): Directory bread(block 419) failed
[   90.975218][ T7018] FAT-fs (loop1): Directory bread(block 420) failed
[   90.977346][ T7018] FAT-fs (loop1): Directory bread(block 421) failed
[   91.302753][   T47] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[   91.353771][ T6963] EXT4-fs (loop0): pa ffff88810a4122b8: logic 32, phys. 161, len 22
[   91.357522][ T6963] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[   91.440114][ T5955] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.466486][   T47] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   91.469555][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.484498][   T47] usb 2-1: config 0 descriptor??
[   91.701566][   T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[   91.853893][ T7045] evm: overlay not supported
[   91.963741][ T7047] bridge0: entered promiscuous mode
[   91.965776][ T7047] macvlan2: entered promiscuous mode
[   92.475209][ T7055] loop0: detected capacity change from 0 to 128
[   92.520339][   T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   92.529413][   T47] asix 2-1:0.0: probe with driver asix failed with error -71
[   92.553338][   T47] usb 2-1: USB disconnect, device number 8
[   92.963728][ T6011] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.086598][ T7071] loop1: detected capacity change from 0 to 4096
[   93.097506][ T7071] ntfs3(loop1): ino=18, mi_enum_attr
[   93.099391][ T7071] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   93.135312][ T6011] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   93.138185][ T6011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.140664][ T6011] usb 1-1: Product: syz
[   93.142006][ T6011] usb 1-1: Manufacturer: syz
[   93.157574][ T6011] usb 1-1: SerialNumber: syz
[   93.167536][ T6011] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   93.188538][    T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   93.213439][ T7075] loop1: detected capacity change from 0 to 4096
[   93.216299][ T7075] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   93.223112][   T47] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   93.231463][ T7075] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   93.375694][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   93.378741][   T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[   93.382329][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   93.393625][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   93.407235][   T47] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[   93.410141][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.414043][   T47] usb 3-1: Product: syz
[   93.423180][   T47] usb 3-1: Manufacturer: syz
[   93.424674][   T47] usb 3-1: SerialNumber: syz
[   93.427524][   T47] usb 3-1: config 0 descriptor??
[   93.431259][   T47] radioshark2 3-1:0.0: Invalid radioSHARK2 device
[   93.435613][   T47] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22
[   93.628664][   T10] usb 1-1: USB disconnect, device number 6
[   93.650526][   T47] usb 3-1: USB disconnect, device number 6
[   94.210369][    T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   94.218193][    T9] ath9k_htc: Failed to initialize the device
[   94.234273][ T7079] syz.1.527 (7079): drop_caches: 2
[   94.237449][   T10] usb 1-1: ath9k_htc: USB layer deinitialized
[   94.382016][ T7095] loop2: detected capacity change from 0 to 4096
[   94.398809][ T7095] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   94.400924][ T7095] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   95.049375][ T7122] loop0: detected capacity change from 0 to 32768
[   95.098466][ T7122] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   95.098478][ T7122]   allowing incompatible features above 0.0: (unknown version)
[   95.098483][ T7122]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   95.113437][ T7122] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   95.116548][ T7122] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   95.119127][ T7122] bcachefs (loop0): dropping and reconstructing all alloc info
[   95.138419][ T7122] bcachefs (loop0): invalid bkey in btree_node btree=extents level=0: u64s 7 type extent 4099:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 7 nonce 0 csum none 0:0  compress none ptr: 0:34:0 gen 0
[   95.138450][ T7122]   checksum offset + key size > uncompressed size, deleting
[   95.152937][ T7122] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error)
[   95.152953][ T7122]   invalid variable length fields, deleting
[   95.167479][ T7122] bcachefs (loop0): accounting_read... done
[   95.226298][ T7122] bcachefs (loop0): alloc_read... done
[   95.229230][ T7122] bcachefs (loop0): snapshots_read... done
[   95.232418][ T7122] bcachefs (loop0): check_allocations...
[   95.238197][ T7122] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   95.238220][ T7122]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[   95.251576][ T7122] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   95.251585][ T7122]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[   95.264479][ T7122] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   95.264488][ T7122]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[   95.274340][ T7122] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap
[   95.274349][ T7122]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[   95.291069][ T1090] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   95.294243][ T7122]  done
[   95.304575][ T5959] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   95.306939][ T5959] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   95.309391][ T5959] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   95.312409][   T40] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   95.316406][ T7122] bcachefs (loop0): going read-write
[   95.318309][ T7122] bcachefs (loop0): insufficient writeable journal devices available: have 0, need 1
[   95.318309][ T7122] rw journal devs:
[   95.342066][ T7122] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[   95.346228][ T7122] bcachefs (loop0): done starting filesystem
[   95.623776][ T7122] syz.0.538 (7122) used greatest stack depth: 18968 bytes left
[   95.640294][ T5955] bcachefs (loop0): shutting down
[   95.644616][ T5955] bcachefs (loop0): going read-only
[   95.648591][ T5955] bcachefs (loop0): finished waiting for writes to stop
[   95.656356][ T5955] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[   95.659368][ T5955] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[   95.662508][ T5955] bcachefs (loop0): unclean shutdown complete, journal seq 10
[   95.668383][ T5955] bcachefs (loop0): done going read-only, filesystem not clean
[   95.683123][ T5955] bcachefs (loop0): shutdown complete
[   96.022747][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   96.215397][   T10] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[   96.219007][   T10] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81
[   96.222513][   T10] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64
[   96.227134][   T10] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[   96.231218][   T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   96.234272][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.541730][   T10] ath6kl: Failed to submit usb control message: -71
[   96.543939][   T10] ath6kl: unable to send the bmi data to the device: -71
[   96.546098][   T10] ath6kl: Unable to send get target info: -71
[   96.555791][   T10] ath6kl: Failed to init ath6kl core: -71
[   96.558263][   T10] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71
[   96.567426][   T10] usb 3-1: USB disconnect, device number 7
[   96.965553][ T7164] tipc: Started in network mode
[   96.967313][ T7164] tipc: Node identity fc02, cluster identity 4711
[   96.969792][ T7164] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   97.112540][ T7175] netlink: 'syz.1.554': attribute type 4 has an invalid length.
[   97.115625][ T7175] netlink: 17 bytes leftover after parsing attributes in process `syz.1.554'.
[   97.157731][ T7166] loop0: detected capacity change from 0 to 32768
[   97.164817][ T7166] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.550 (7166)
[   97.178716][ T7166] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.183069][ T7166] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   97.185812][ T7166] BTRFS info (device loop0): using free-space-tree
[   97.255250][ T7166] BTRFS info (device loop0): rebuilding free space tree
[   97.327214][   T33] audit: type=1800 audit(1755051611.631:27): pid=7166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.550" name="file1" dev="loop0" ino=260 res=0 errno=0
[   97.353393][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   97.399298][ T7204] loop1: detected capacity change from 0 to 128
[   97.406096][ T5955] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.416744][ T7204] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.437305][ T7204] ext4 filesystem being mounted at /182/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   97.536758][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[   97.537528][ T5952] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   97.540543][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[   97.540565][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.552291][   T10] usb 3-1: config 0 descriptor??
[   97.562887][   T10] smsusb:smsusb_probe: board id=8, interface number 0
[   97.571808][   T10] smsusb:smsusb_probe: Device initialized with return code -19
[   97.778567][   T10] usb 3-1: USB disconnect, device number 8
[   97.904500][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'.
[   97.908560][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'.
[   98.080974][ T7255] loop1: detected capacity change from 0 to 512
[   98.089746][ T7255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   98.104619][ T7255] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.581: invalid indirect mapped block 4294967295 (level 0)
[   98.109880][ T7255] EXT4-fs (loop1): Remounting filesystem read-only
[   98.112144][ T7255] EXT4-fs (loop1): 1 orphan inode deleted
[   98.115356][ T7255] EXT4-fs (loop1): 1 truncate cleaned up
[   98.117805][ T7255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.135227][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.348236][ T7266] loop2: detected capacity change from 0 to 8
[   98.360518][ T7266] SQUASHFS error: xz decompression failed, data probably corrupt
[   98.364131][ T7266] SQUASHFS error: Failed to read block 0x108: -5
[   98.367248][ T7266] SQUASHFS error: Unable to read metadata cache entry [106]
[   98.370132][ T7266] SQUASHFS error: Unable to read inode 0x11f
[   98.398391][ T7268] cgroup: Name too long
[   98.563374][ T7272] loop2: detected capacity change from 0 to 32768
[   98.566242][ T7272] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.588 (7272)
[   98.579990][ T7272] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.583423][ T7272] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   98.587119][ T7272] BTRFS info (device loop2): disk space caching is enabled
[   98.589657][ T7272] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   98.620624][ T7272] BTRFS info (device loop2): rebuilding free space tree
[   98.627301][ T7272] BTRFS info (device loop2): disabling free space tree
[   98.629936][ T7272] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   98.633735][ T7272] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   98.711314][ T5935] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   98.733938][ T5959] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.114267][ T7311] loop2: detected capacity change from 0 to 2048
[   99.182935][ T7307] loop0: detected capacity change from 0 to 32768
[   99.235115][ T7307] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   99.249847][ T7307] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.312962][ T6011] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   99.327214][ T7307] syz.0.597 (7307) used greatest stack depth: 18656 bytes left
[   99.357700][ T5955] ocfs2: Unmounting device (7,0) on (node local)
[   99.466150][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.468613][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.473736][ T7317] bridge0: entered allmulticast mode
[   99.693023][ T6011] usb 2-1: Using ep0 maxpacket: 16
[   99.698094][ T6011] usb 2-1: unable to get BOS descriptor or descriptor too short
[   99.702067][ T6011] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.711523][ T6011] usb 2-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   99.723729][ T6011] usb 2-1: config 1 interface 0 has no altsetting 0
[   99.728004][ T6011] usb 2-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[   99.731122][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.733907][ T6011] usb 2-1: Product: syz
[   99.735412][ T6011] usb 2-1: Manufacturer: syz
[   99.737081][ T6011] usb 2-1: SerialNumber: syz
[   99.745292][ T6011] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7
[   99.832916][ T7325] loop0: detected capacity change from 0 to 32768
[   99.866140][ T7325] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[   99.866154][ T7325]   allowing incompatible features above 0.0: (unknown version)
[   99.866158][ T7325]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   99.880117][ T7325] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   99.883580][ T7325] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   99.886763][ T7325] bcachefs (loop0): Version upgrade required:
[   99.886763][ T7325] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   99.886763][ T7325] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   99.886763][ T7325]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   99.921461][ T7325] bcachefs (loop0): accounting_read... done
[   99.924995][ T7325] bcachefs (loop0): alloc_read... done
[   99.927643][ T7325] bcachefs (loop0): done starting filesystem
[   99.945922][ T5279] bcm5974 2-1:1.0: could not read from device
[   99.948770][ T5955] bcachefs (loop0): shutting down
[   99.957386][ T6011] bcm5974 2-1:1.0: could not read from device
[   99.961725][ T5955] bcachefs (loop0): shutdown complete
[   99.968326][ T5279] bcm5974 2-1:1.0: could not read from device
[   99.974970][ T6011] input: failed to attach handler mousedev to device input7, error: -5
[   99.983924][ T5279] bcm5974 2-1:1.0: could not read from device
[   99.987123][ T6011] usb 2-1: USB disconnect, device number 9
[   99.991220][ T5279] bcm5974 2-1:1.0: could not read from device
[  100.194572][ T7328] loop2: detected capacity change from 0 to 32768
[  100.205990][ T7328] JBD2: Ignoring recovery information on journal
[  100.236255][ T7328] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  100.280329][ T5959] ocfs2: Unmounting device (7,2) on (node local)
[  101.006262][ T7344] loop0: detected capacity change from 0 to 32768
[  101.010868][ T7344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.611 (7344)
[  101.022328][ T7344] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.027189][ T7344] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  101.031482][ T7344] BTRFS info (device loop0): using free-space-tree
[  101.089938][ T5955] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.672847][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  101.752822][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  101.822812][    T9] usb 2-1: Using ep0 maxpacket: 32
[  101.826249][    T9] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  101.829065][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.832522][    T9] usb 2-1: config 0 has no interface number 0
[  101.834657][    T9] usb 2-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  101.837932][    T9] usb 2-1: config 0 interface 133 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  101.841444][    T9] usb 2-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.848967][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  101.852376][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.855096][    T9] usb 2-1: Product: syz
[  101.856542][    T9] usb 2-1: Manufacturer: syz
[  101.858115][    T9] usb 2-1: SerialNumber: syz
[  101.861350][    T9] usb 2-1: config 0 descriptor??
[  101.863631][ T7375] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  101.904326][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.908213][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.911466][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  101.916404][   T47] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  101.919572][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.923898][   T47] usb 3-1: config 0 descriptor??
[  102.077570][    T9] usb 2-1: probing VID:PID(0424:012C)   
[  102.080653][    T9] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0B
[  102.083743][    T9] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  102.086349][    T9] vub300 2-1:0.133: probe with driver vub300 failed with error -22
[  102.090216][    T9] usb 2-1: USB disconnect, device number 10
[  102.207381][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'.
[  102.343978][   T47] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[  102.358103][   T47] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  102.482733][ T6024] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.610590][ T5314] usb 3-1: USB disconnect, device number 9
[  102.635541][ T6024] usb 1-1: Using ep0 maxpacket: 16
[  102.646618][ T6024] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.650946][ T6024] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  102.664697][ T6024] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  102.668503][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.674133][ T6024] usb 1-1: Product: syz
[  102.675996][ T6024] usb 1-1: Manufacturer: syz
[  102.678027][ T6024] usb 1-1: SerialNumber: syz
[  102.682513][ T6024] usb 1-1: config 0 descriptor??
[  103.155861][ T7391] loop2: detected capacity change from 0 to 256
[  103.169239][   T33] audit: type=1800 audit(1755051617.471:28): pid=7391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.625" name="file1" dev="loop2" ino=1048675 res=0 errno=0
[  103.176280][ T7391] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  103.179218][ T7391] FAT-fs (loop2): Filesystem has been set read-only
[  103.298704][ T7402] syzkaller1: entered promiscuous mode
[  103.300593][ T7402] syzkaller1: entered allmulticast mode
[  103.462517][ T7410] macsec0: entered promiscuous mode
[  103.464824][ T7410] macsec0: entered allmulticast mode
[  103.466610][ T7410] veth1_macvtap: entered allmulticast mode
[  104.672797][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  104.834439][   T10] usb 3-1: config 0 has an invalid interface number: 194 but max is 0
[  104.837960][   T10] usb 3-1: config 0 has no interface number 0
[  104.842908][   T10] usb 3-1: New USB device found, idVendor=19d2, idProduct=5755, bcdDevice=df.b8
[  104.846795][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.850159][   T10] usb 3-1: Product: syz
[  104.851924][   T10] usb 3-1: Manufacturer: syz
[  104.854549][   T10] usb 3-1: SerialNumber: syz
[  104.858981][   T10] usb 3-1: config 0 descriptor??
[  104.863257][   T10] usb 3-1: bad CDC descriptors
[  105.071590][   T47] usb 3-1: USB disconnect, device number 10
[  105.255030][   T10] usb 1-1: USB disconnect, device number 7
[  105.801433][ T7433] netlink: 'syz.1.643': attribute type 40 has an invalid length.
[  105.805410][ T7433] netlink: 52 bytes leftover after parsing attributes in process `syz.1.643'.
[  105.835157][ T7431] loop2: detected capacity change from 0 to 32768
[  106.001801][ T7444] capability: warning: `syz.2.648' uses deprecated v2 capabilities in a way that may be insecure
[  106.008451][ T7444] program syz.2.648 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  106.281115][ T7453] loop2: detected capacity change from 0 to 1024
[  106.357967][ T7455] gretap0: entered promiscuous mode
[  106.380550][   T40] hfsplus: b-tree write err: -5, ino 4
[  106.448057][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  106.690646][ T7463] overlayfs: overlapping lowerdir path
[  106.716396][ T7463] overlayfs: missing 'lowerdir'
[  107.000541][ T7470] batadv0: entered allmulticast mode
[  107.014595][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.660'.
[  107.111381][ T7478] IPVS: Scheduler module ip_vs_ not found
[  107.318429][ T7489] netlink: 64 bytes leftover after parsing attributes in process `syz.1.667'.
[  107.393981][ T7493] vlan0: entered promiscuous mode
[  108.382820][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  108.506571][ T7534] loop0: detected capacity change from 0 to 512
[  108.509230][ T7534] EXT4-fs: Ignoring removed oldalloc option
[  108.517314][ T7534] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.688: inode #13: comm syz.0.688: iget: illegal inode #
[  108.521771][ T7534] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.688: couldn't read orphan inode 13 (err -117)
[  108.528847][ T7534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.535646][   T10] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  108.538221][   T10] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  108.541071][   T10] usb 3-1: config 220 has an invalid descriptor of length 119, skipping remainder of the config
[  108.545935][   T10] usb 3-1: config 220 has no interface number 2
[  108.548173][ T7534] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.688: resize_inode disabled but reserved GDT blocks non-zero
[  108.552543][   T10] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  108.557295][   T10] usb 3-1: config 220 interface 0 has no altsetting 0
[  108.562821][   T10] usb 3-1: config 220 interface 76 has no altsetting 0
[  108.565218][   T10] usb 3-1: config 220 interface 1 has no altsetting 0
[  108.581628][   T10] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  108.584957][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.587910][   T10] usb 3-1: Product: syz
[  108.589485][   T10] usb 3-1: Manufacturer: syz
[  108.591198][   T10] usb 3-1: SerialNumber: syz
[  108.636777][ T5955] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.803657][   T10] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  108.806537][   T10] usb 3-1: No valid video chain found.
[  108.815244][   T10] usb 3-1: selecting invalid altsetting 0
[  108.828453][   T10] usb 3-1: selecting invalid altsetting 0
[  108.830422][   T10] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  108.837660][   T10] usb 3-1: USB disconnect, device number 11
[  109.062812][   T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  109.214705][   T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.218037][   T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.222099][   T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  109.225861][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.228377][   T47] usb 1-1: SerialNumber: syz
[  109.328855][ T7544] IPVS: Error connecting to the multicast addr
[  109.355661][ T7547] netlink: 'syz.1.693': attribute type 8 has an invalid length.
[  109.491710][   T33] audit: type=1326 audit(1755051623.761:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.1.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[  109.503042][   T33] audit: type=1326 audit(1755051623.771:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.1.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[  109.510094][   T33] audit: type=1326 audit(1755051623.771:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.1.696" exe="/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[  109.521311][   T33] audit: type=1326 audit(1755051623.771:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.1.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[  109.522107][   T47] usb 1-1: 0:2 : does not exist
[  109.528321][   T33] audit: type=1326 audit(1755051623.771:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7553 comm="syz.1.696" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8414f8ebe9 code=0x7ffc0000
[  109.555519][   T47] usb 1-1: USB disconnect, device number 8
[  109.615354][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  109.797277][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  109.972889][   T10] usb 2-1: Using ep0 maxpacket: 32
[  109.977181][   T10] usb 2-1: config 0 has an invalid interface number: 96 but max is 0
[  109.980019][   T10] usb 2-1: config 0 has no interface number 0
[  109.982122][   T10] usb 2-1: config 0 interface 96 has no altsetting 0
[  109.986785][   T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  109.989992][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.992622][   T10] usb 2-1: Product: syz
[  109.994979][   T10] usb 2-1: Manufacturer: syz
[  109.996908][   T10] usb 2-1: SerialNumber: syz
[  110.002024][   T10] usb 2-1: config 0 descriptor??
[  110.007359][   T10] legousbtower 2-1:0.96: interrupt endpoints not found
[  110.202876][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  110.211347][   T47] usb 2-1: USB disconnect, device number 11
[  110.612823][ T6024] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  110.766510][ T6024] usb 1-1: unable to get BOS descriptor or descriptor too short
[  110.771010][ T6024] usb 1-1: config 3 has an invalid interface number: 8 but max is 3
[  110.776432][ T6024] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  110.781984][ T6024] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 4
[  110.792462][ T7582] netlink: 192 bytes leftover after parsing attributes in process `syz.1.709'.
[  110.796374][ T6024] usb 1-1: config 3 has no interface number 0
[  110.796399][ T6024] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9
[  110.796414][ T6024] usb 1-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024
[  110.796428][ T6024] usb 1-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  110.796443][ T6024] usb 1-1: config 3 interface 8 has no altsetting 0
[  110.799118][ T6024] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  110.820050][ T6024] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.832143][ T6024] usb 1-1: Product: syz
[  110.834727][ T6024] usb 1-1: Manufacturer: syz
[  110.836354][ T6024] usb 1-1: SerialNumber: syz
[  110.977473][ T7594] loop1: detected capacity change from 0 to 1024
[  110.998552][ T7594] hfsplus: hfsplus: Invalid key length: 29235
[  111.057577][ T6024] appledisplay 1-1:3.8: Error while getting initial brightness: -71
[  111.062143][ T6024] appledisplay 1-1:3.8: probe with driver appledisplay failed with error -71
[  111.074469][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.717'.
[  111.074598][ T6024] usb 1-1: USB disconnect, device number 9
[  111.301398][ T7600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'.
[  111.348013][ T7604] loop2: detected capacity change from 0 to 128
[  111.358802][ T7604] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  111.476332][ T7612] loop2: detected capacity change from 0 to 1024
[  111.480515][ T7612] EXT4-fs: Ignoring removed nomblk_io_submit option
[  111.499352][ T7612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.528449][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.582163][ T7619] loop0: detected capacity change from 0 to 8
[  111.652228][ T7625] loop2: detected capacity change from 0 to 2048
[  111.661582][ T7625] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh
[  111.667446][ T7625] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  111.678118][ T7625] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  111.685439][ T7625] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  111.689186][ T7625] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  111.694373][ T7625] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  111.698317][ T7625] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  111.701615][ T7625] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  111.965228][ T7632] loop2: detected capacity change from 0 to 512
[  111.970048][ T7632] EXT4-fs (loop2): Test dummy encryption mode enabled
[  111.972315][ T7632] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  111.985253][ T7632] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.731: corrupted xattr entries
[  111.995270][ T7632] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  112.000376][ T7632] EXT4-fs (loop2): 1 orphan inode deleted
[  112.008036][ T7632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.308003][ T7632] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  112.324325][   T33] audit: type=1800 audit(1755051626.631:34): pid=7632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.731" name="file2" dev="loop2" ino=15 res=0 errno=0
[  112.395014][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.468771][   T33] audit: type=1326 audit(1755051626.771:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.2.733" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a5458ebe9 code=0x0
[  112.582331][ T7647] loop2: detected capacity change from 0 to 512
[  112.585890][ T7647] EXT4-fs: inline encryption not supported
[  112.589005][ T7647] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  112.606749][ T7647] EXT4-fs (loop2): 1 truncate cleaned up
[  112.611565][ T7647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.730835][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.975977][ T7668] loop0: detected capacity change from 0 to 1024
[  113.031413][ T7673] syzkaller0: tun_chr_ioctl cmd 2147767520
[  113.034268][ T7668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  113.039219][ T7668] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.060132][ T5955] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /211/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  113.072230][ T5955] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /211/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  113.079562][ T5955] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  113.088573][ T5955] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /211/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  113.095837][ T5955] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  113.102147][ T5955] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /211/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  113.109417][ T5955] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  113.116321][ T5955] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /211/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  113.130855][ T5955] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0
[  113.137567][ T5955] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /211/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0
[  113.234398][   T47] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  113.382927][ T5314] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  113.386939][   T47] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  113.390757][   T47] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  113.395511][   T47] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  113.400058][   T47] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  113.403845][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.413099][ T7671] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  113.430656][ T5955] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  113.450928][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.514805][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.535316][ T5314] usb 3-1: config 7 descriptor has 1 excess byte, ignoring
[  113.537733][ T5314] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2
[  113.545254][ T5314] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  113.548615][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.551957][ T5314] usb 3-1: Product: syz
[  113.554126][ T5314] usb 3-1: Manufacturer: syz
[  113.556107][ T5314] usb 3-1: SerialNumber: syz
[  113.564366][ T5314] rndis_host 3-1:7.0: skipping garbage
[  113.566285][ T5314] usb 3-1: bad CDC descriptors
[  113.568829][ T5314] option 3-1:7.0: GSM modem (1-port) converter detected
[  113.587018][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.627177][   T47] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  113.636848][   T47] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input9
[  113.655235][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.706160][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  113.709572][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  113.711683][   T47] usb 2-1: USB disconnect, device number 12
[  113.711842][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  113.712348][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  113.721325][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  113.725802][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  113.768948][ T6024] usb 3-1: USB disconnect, device number 12
[  113.772128][ T6024] option 3-1:7.0: device disconnected
[  113.832371][   T12] bridge_slave_1: left allmulticast mode
[  113.836334][   T12] bridge_slave_1: left promiscuous mode
[  113.838303][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.844027][   T12] bridge_slave_0: left allmulticast mode
[  113.845892][   T12] bridge_slave_0: left promiscuous mode
[  113.847754][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.115679][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  114.119677][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  114.123661][   T12] bond0 (unregistering): Released all slaves
[  114.199976][   T12] tipc: Left network mode
[  114.228996][ T7681] chnl_net:caif_netlink_parms(): no params data found
[  114.429405][ T7704] loop2: detected capacity change from 0 to 512
[  114.470334][ T7704] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  114.475283][ T7704] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  114.486898][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.489297][ T7681] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.491771][ T7681] bridge_slave_0: entered allmulticast mode
[  114.495133][ T7704] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.757: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  114.501976][ T7704] EXT4-fs (loop2): Remounting filesystem read-only
[  114.504313][ T7681] bridge_slave_0: entered promiscuous mode
[  114.520789][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.527627][ T7681] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.530679][ T7681] bridge_slave_1: entered allmulticast mode
[  114.534211][ T7681] bridge_slave_1: entered promiscuous mode
[  114.551638][   T12] hsr_slave_0: left promiscuous mode
[  114.554067][   T12] hsr_slave_1: left promiscuous mode
[  114.556160][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.558595][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.573114][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.575576][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.585715][   T12] veth1_macvtap: left promiscuous mode
[  114.587582][   T12] veth0_macvtap: left promiscuous mode
[  114.589487][   T12] veth1_vlan: left promiscuous mode
[  114.592830][ T5992] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  114.780511][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.784707][ T5992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.788830][ T5992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  114.794408][ T5992] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  114.797951][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.811974][ T5992] usb 2-1: config 0 descriptor??
[  114.885592][   T12] team0 (unregistering): Port device team_slave_1 removed
[  114.906241][   T12] team0 (unregistering): Port device team_slave_0 removed
[  115.183660][ T7681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.195061][ T7681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.229557][ T5992] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  115.243996][ T5992] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  115.246351][ T5992] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  115.248694][ T5992] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  115.251041][ T5992] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  115.255094][ T7681] team0: Port device team_slave_0 added
[  115.258124][ T7681] team0: Port device team_slave_1 added
[  115.269946][ T5992] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  115.295221][ T5992] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  115.325684][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.329813][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.332198][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.347730][ T7681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.352179][ T7681] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.357520][ T7681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.372772][ T7681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.413334][ T7714] bridge1: entered promiscuous mode
[  115.415016][ T7714] bridge1: entered allmulticast mode
[  115.455017][ T7681] hsr_slave_0: entered promiscuous mode
[  115.457206][ T7681] hsr_slave_1: entered promiscuous mode
[  115.495330][   T47] usb 2-1: USB disconnect, device number 13
[  115.803318][ T5953] Bluetooth: hci1: command tx timeout
[  115.859685][ T7681] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  115.875378][ T7681] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  115.881874][ T7681] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  115.895838][ T7681] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  115.978353][ T7681] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.003795][ T7681] 8021q: adding VLAN 0 to HW filter on device team0
[  116.011208][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.013670][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.019940][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.022311][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.136108][ T7681] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.164808][ T7681] veth0_vlan: entered promiscuous mode
[  116.171416][ T7681] veth1_vlan: entered promiscuous mode
[  116.190520][ T7681] veth0_macvtap: entered promiscuous mode
[  116.195116][ T7681] veth1_macvtap: entered promiscuous mode
[  116.207656][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.216373][ T7681] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.228014][ T5721] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.232180][ T5721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.235456][ T5721] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.238368][ T5721] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.273321][   T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  116.289025][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.291631][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.307054][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.309657][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.423228][   T47] usb 2-1: Using ep0 maxpacket: 16
[  116.426443][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.430963][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.434523][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  116.449818][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.466774][   T47] usb 2-1: config 0 descriptor??
[  116.468348][ T7763] loop2: detected capacity change from 0 to 1024
[  116.482076][ T7763] EXT4-fs: Ignoring removed bh option
[  116.487878][ T7763] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  116.510261][ T7763] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  116.514707][ T7763] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  116.556521][ T7763] EXT4-fs (loop2): failed to open journal device unknown-block(0,5) -6
[  116.694307][ T7766] loop3: detected capacity change from 0 to 32768
[  116.706743][ T7766] (syz.3.764,7766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.716034][ T7766] (syz.3.764,7766,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.744183][ T7766] JBD2: Ignoring recovery information on journal
[  116.776674][ T7766] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  116.874538][ T7681] ocfs2: Unmounting device (7,3) on (node local)
[  117.221635][ T7792] batadv_slave_0: entered promiscuous mode
[  117.230961][ T7791] batadv_slave_0: left promiscuous mode
[  117.465534][   T47] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0005/input/input10
[  117.569740][   T47] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0
[  117.585657][   T47] usb 2-1: USB disconnect, device number 14
[  117.723299][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  117.887159][ T5953] Bluetooth: hci1: command tx timeout
[  118.008589][ T7849] loop1: detected capacity change from 0 to 2048
[  118.017048][ T7849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.553545][ T6011] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  118.592912][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  118.713001][ T6011] usb 2-1: Using ep0 maxpacket: 32
[  118.716935][ T6011] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  118.720878][ T6011] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[  118.740831][ T6011] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[  118.784268][ T6011] usb 2-1: config 0 interface 0 has no altsetting 1
[  118.790426][ T6011] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  118.793631][    T9] usb 4-1: Using ep0 maxpacket: 16
[  118.798237][ T6011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  118.804628][ T6011] usb 2-1: SerialNumber: syz
[  118.807342][    T9] usb 4-1: config 252 has an invalid interface number: 15 but max is 0
[  118.810583][    T9] usb 4-1: config 252 has no interface number 0
[  118.812593][    T9] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  118.817490][ T6011] usb 2-1: config 0 descriptor??
[  118.825671][ T6011] usb-storage 2-1:0.0: USB Mass Storage device detected
[  118.830798][    T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  118.838009][ T6011] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  118.842524][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.845864][    T9] usb 4-1: Product: syz
[  118.847278][    T9] usb 4-1: Manufacturer: syz
[  118.848829][    T9] usb 4-1: SerialNumber: syz
[  118.859511][    T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  119.036461][ T6011] usb 2-1: USB disconnect, device number 15
[  119.053125][   T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  119.058416][   T12] usb 4-1: Failed to submit usb control message: -71
[  119.058950][    T9] usb 4-1: USB disconnect, device number 2
[  119.060869][   T12] usb 4-1: unable to send the bmi data to the device: -71
[  119.066379][   T12] usb 4-1: unable to get target info from device
[  119.068583][   T12] usb 4-1: could not get target info (-71)
[  119.070577][   T12] usb 4-1: could not probe fw (-71)
[  119.205150][   T47] usb 3-1: config 0 has an invalid interface number: 228 but max is 0
[  119.207793][   T47] usb 3-1: config 0 has no interface number 0
[  119.209876][   T47] usb 3-1: config 0 interface 228 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  119.215905][   T47] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1
[  119.218813][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.221388][   T47] usb 3-1: Product: syz
[  119.223847][   T47] usb 3-1: Manufacturer: syz
[  119.225371][   T47] usb 3-1: SerialNumber: syz
[  119.228189][   T47] usb 3-1: config 0 descriptor??
[  119.233183][   T47] bfusb 3-1:0.228: probe with driver bfusb failed with error -5
[  119.436854][   T47] usb 3-1: USB disconnect, device number 13
[  119.571938][ T7873] loop1: detected capacity change from 0 to 1024
[  119.879680][ T7878] afs: Unknown parameter 'A~|vN'
[  119.962956][ T5953] Bluetooth: hci1: command tx timeout
[  120.573568][ T1150] hfsplus: b-tree write err: -5, ino 4
[  120.575378][ T7896] netlink: 112 bytes leftover after parsing attributes in process `syz.2.805'.
[  120.683663][ T7908] tipc: Can't bind to reserved service type 2
[  120.728760][ T7912] loop2: detected capacity change from 0 to 256
[  120.731503][ T7912] exfat: Deprecated parameter 'namecase'
[  120.742909][ T7912] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  120.750073][ T7912] exFAT-fs (loop2): Invalid exboot-signature(sector = 1): 0xaa000000
[  120.756650][ T7912] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1219aba6)
[  120.760003][ T7912] exFAT-fs (loop2): invalid boot region
[  120.761821][ T7912] exFAT-fs (loop2): failed to recognize exfat type
[  120.897400][ T7923] loop2: detected capacity change from 0 to 1024
[  120.899907][ T7923] EXT4-fs: inline encryption not supported
[  120.901840][ T7923] EXT4-fs: Ignoring removed i_version option
[  120.917925][ T7923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.940551][ T7923] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  120.968234][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.985416][ T7928] loop3: detected capacity change from 0 to 16
[  120.992362][ T7914] loop1: detected capacity change from 0 to 32768
[  120.996240][ T7914] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.814 (7914)
[  121.004235][ T7928] erofs (device loop3): mounted with root inode @ nid 36.
[  121.006719][ T7914] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  121.009979][ T7914] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  121.020930][ T7914] BTRFS info (device loop1): disk space caching is enabled
[  121.032782][ T7914] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  121.135615][ T7914] BTRFS info (device loop1): rebuilding free space tree
[  121.142586][ T7914] BTRFS info (device loop1): disabling free space tree
[  121.160168][ T7914] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  121.167076][ T7914] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  121.202170][ T7914] BTRFS info (device loop1): balance: start -d -m
[  121.226949][ T7914] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  121.260320][ T7914] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata
[  121.346296][ T7914] BTRFS info (device loop1): found 9 extents, stage: move data extents
[  121.375291][ T7914] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[  121.391797][ T7914] BTRFS info (device loop1): balance: ended with status: 0
[  121.422884][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  121.479883][ T7960] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  121.572947][   T24] usb 4-1: Using ep0 maxpacket: 16
[  121.584215][   T47] IPVS: starting estimator thread 0...
[  121.593661][   T24] usb 4-1: config 0 has an invalid interface number: 145 but max is 0
[  121.604069][   T24] usb 4-1: config 0 has no interface number 0
[  121.606468][ T5952] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  121.616975][   T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  121.622933][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.625496][   T24] usb 4-1: Product: syz
[  121.626945][   T24] usb 4-1: Manufacturer: syz
[  121.628534][   T24] usb 4-1: SerialNumber: syz
[  121.636701][   T24] usb 4-1: config 0 descriptor??
[  121.647178][   T24] hub 4-1:0.145: bad descriptor, ignoring hub
[  121.649528][   T24] hub 4-1:0.145: probe with driver hub failed with error -5
[  121.655798][   T24] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input11
[  121.693534][ T7961] IPVS: using max 79 ests per chain, 189600 per kthread
[  122.042903][ T5953] Bluetooth: hci1: command tx timeout
[  122.083230][   T24] usb 4-1: USB disconnect, device number 3
[  122.179811][ T7985] loop2: detected capacity change from 0 to 512
[  122.183140][ T7985] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  122.191427][ T7985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.835: bg 0: block 384: padding at end of block bitmap is not set
[  122.206289][ T7985] EXT4-fs (loop2): Remounting filesystem read-only
[  122.212797][ T7985] EXT4-fs (loop2): 1 truncate cleaned up
[  122.216288][ T7985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.234067][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.303073][   T47] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  122.332224][ T7995] netlink: 202368 bytes leftover after parsing attributes in process `syz.2.839'.
[  122.362310][ T7997] loop2: detected capacity change from 0 to 1024
[  122.376994][   T33] audit: type=1800 audit(1755051636.681:36): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.840" name="file2" dev="loop2" ino=2 res=0 errno=0
[  122.413373][   T28] hfsplus: b-tree write err: -5, ino 3
[  122.429919][ T7999] loop2: detected capacity change from 0 to 128
[  122.484034][   T47] usb 2-1: Using ep0 maxpacket: 32
[  122.487138][   T47] usb 2-1: config 0 has an invalid interface number: 255 but max is 1
[  122.489953][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.496053][   T47] usb 2-1: config 0 has no interface number 1
[  122.497987][   T47] usb 2-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  122.511392][   T47] usb 2-1: config 0 interface 0 has no altsetting 0
[  122.513974][   T47] usb 2-1: config 0 interface 255 has no altsetting 0
[  122.520284][   T47] usb 2-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57
[  122.525116][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.527784][   T47] usb 2-1: Product: syz
[  122.529136][   T47] usb 2-1: Manufacturer: syz
[  122.530614][   T47] usb 2-1: SerialNumber: syz
[  122.533871][   T47] usb 2-1: config 0 descriptor??
[  122.538804][   T47] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  122.541592][   T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  122.544639][   T47] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[  122.559188][ T8007] loop2: detected capacity change from 0 to 16
[  122.569243][ T8007] erofs (device loop2): mounted with root inode @ nid 36.
[  122.633449][ T8011] netlink: 'syz.2.847': attribute type 28 has an invalid length.
[  122.669750][ T8015] loop2: detected capacity change from 0 to 512
[  122.708009][ T8015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.712026][ T8015] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.731010][ T8015] 
[  122.731833][ T8015] ======================================================
[  122.734018][ T8015] WARNING: possible circular locking dependency detected
[  122.736227][ T8015] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  122.739309][ T8015] ------------------------------------------------------
[  122.741895][ T8015] syz.2.849/8015 is trying to acquire lock:
[  122.743814][ T8015] ffff88802aede6a8 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x72a/0xf10
[  122.746454][ T8015] 
[  122.746454][ T8015] but task is already holding lock:
[  122.748868][ T8015] ffff88802adb4d48 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x855/0x1bc0
[  122.751771][ T8015] 
[  122.751771][ T8015] which lock already depends on the new lock.
[  122.751771][ T8015] 
[  122.755274][ T8015] 
[  122.755274][ T8015] the existing dependency chain (in reverse order) is:
[  122.758192][ T8015] 
[  122.758192][ T8015] -> #5 (&ei->xattr_sem){++++}-{4:4}:
[  122.760702][ T8015]        lock_acquire+0x120/0x360
[  122.762409][ T8015]        down_read+0x46/0x2e0
[  122.764023][ T8015]        ext4_setattr+0x855/0x1bc0
[  122.765652][ T8015]        notify_change+0xb36/0xe40
[  122.767287][ T8015]        chown_common+0x40c/0x5c0
[  122.768873][ T8015]        do_fchownat+0x161/0x270
[  122.770448][ T8015]        __x64_sys_chown+0x82/0xa0
[  122.772142][ T8015]        do_syscall_64+0xfa/0x3b0
[  122.773833][ T8015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.775950][ T8015] 
[  122.775950][ T8015] -> #4 (jbd2_handle){++++}-{0:0}:
[  122.778240][ T8015]        lock_acquire+0x120/0x360
[  122.779906][ T8015]        start_this_handle+0x1fa7/0x21c0
[  122.781679][ T8015]        jbd2__journal_start+0x2c1/0x5b0
[  122.783565][ T8015]        jbd2_journal_start+0x2a/0x40
[  122.785345][ T8015]        ocfs2_start_trans+0x376/0x6d0
[  122.787190][ T8015]        ocfs2_reserve_local_alloc_bits+0xb04/0x24e0
[  122.789418][ T8015]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  122.791643][ T8015]        ocfs2_extend_dir+0x701/0x4870
[  122.793397][ T8015]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  122.795553][ T8015]        ocfs2_mknod+0x819/0x2050
[  122.797196][ T8015]        ocfs2_mkdir+0x191/0x440
[  122.798733][ T8015]        vfs_mkdir+0x306/0x510
[  122.800318][ T8015]        do_mkdirat+0x247/0x590
[  122.801965][ T8015]        __x64_sys_mkdirat+0x87/0xa0
[  122.803717][ T8015]        do_syscall_64+0xfa/0x3b0
[  122.805379][ T8015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.807409][ T8015] 
[  122.807409][ T8015] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  122.809985][ T8015]        lock_acquire+0x120/0x360
[  122.811584][ T8015]        down_read+0x46/0x2e0
[  122.813119][ T8015]        ocfs2_start_trans+0x36a/0x6d0
[  122.814890][ T8015]        ocfs2_reserve_local_alloc_bits+0xb04/0x24e0
[  122.817049][ T8015]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  122.819157][ T8015]        ocfs2_extend_dir+0x701/0x4870
[  122.820854][ T8015]        ocfs2_prepare_dir_for_insert+0x2fe8/0x5450
[  122.823017][ T8015]        ocfs2_mknod+0x819/0x2050
[  122.824605][ T8015]        ocfs2_mkdir+0x191/0x440
[  122.826200][ T8015]        vfs_mkdir+0x306/0x510
[  122.827696][ T8015]        do_mkdirat+0x247/0x590
[  122.829196][ T8015]        __x64_sys_mkdirat+0x87/0xa0
[  122.830867][ T8015]        do_syscall_64+0xfa/0x3b0
[  122.832444][ T8015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.834459][ T8015] 
[  122.834459][ T8015] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  122.836855][ T8015]        lock_acquire+0x120/0x360
[  122.838536][ T8015]        ocfs2_start_trans+0x26b/0x6d0
[  122.840251][ T8015]        ocfs2_acquire_dquot+0x455/0xb30
[  122.842010][ T8015]        dqget+0x7b1/0xf10
[  122.843407][ T8015]        dquot_get_next_dqblk+0xb2/0x150
[  122.845128][ T8015]        quota_getnextquota+0x2b9/0x4a0
[  122.846840][ T8015]        __se_sys_quotactl+0x279/0x950
[  122.848517][ T8015]        do_syscall_64+0xfa/0x3b0
[  122.850127][ T8015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.852222][ T8015] 
[  122.852222][ T8015] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  122.855088][ T8015]        lock_acquire+0x120/0x360
[  122.856675][ T8015]        down_write+0x96/0x1f0
[  122.858249][ T8015]        ocfs2_create_local_dquot+0x19d/0x1a40
[  122.860276][ T8015]        ocfs2_acquire_dquot+0x80f/0xb30
[  122.862122][ T8015]        dqget+0x7b1/0xf10
[  122.863622][ T8015]        dquot_get_next_dqblk+0xb2/0x150
[  122.865455][ T8015]        quota_getnextquota+0x2b9/0x4a0
[  122.867262][ T8015]        __se_sys_quotactl+0x279/0x950
[  122.869062][ T8015]        do_syscall_64+0xfa/0x3b0
[  122.870731][ T8015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.872839][ T8015] 
[  122.872839][ T8015] -> #0 (&dquot->dq_lock){+.+.}-{4:4}:
[  122.875324][ T8015]        validate_chain+0xb9b/0x2140
[  122.877001][ T8015]        __lock_acquire+0xab9/0xd20
[  122.878660][ T8015]        lock_acquire+0x120/0x360
[  122.880305][ T8015]        __mutex_lock+0x187/0x1360
[  122.881983][ T8015]        dqget+0x72a/0xf10
[  122.883457][ T8015]        dquot_transfer+0x4b8/0x6d0
[  122.885159][ T8015]        ext4_setattr+0x865/0x1bc0
[  122.886864][ T8015]        notify_change+0xb36/0xe40
[  122.888562][ T8015]        chown_common+0x40c/0x5c0
[  122.890228][ T8015]        do_fchownat+0x161/0x270
[  122.891885][ T8015]        __x64_sys_fchownat+0xb5/0xd0
[  122.893683][ T8015]        do_syscall_64+0xfa/0x3b0
[  122.895346][ T8015]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.897346][ T8015] 
[  122.897346][ T8015] other info that might help us debug this:
[  122.897346][ T8015] 
[  122.900456][ T8015] Chain exists of:
[  122.900456][ T8015]   &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem
[  122.900456][ T8015] 
[  122.904555][ T8015]  Possible unsafe locking scenario:
[  122.904555][ T8015] 
[  122.907079][ T8015]        CPU0                    CPU1
[  122.908833][ T8015]        ----                    ----
[  122.910554][ T8015]   rlock(&ei->xattr_sem);
[  122.912039][ T8015]                                lock(jbd2_handle);
[  122.914196][ T8015]                                lock(&ei->xattr_sem);
[  122.916368][ T8015]   lock(&dquot->dq_lock);
[  122.917863][ T8015] 
[  122.917863][ T8015]  *** DEADLOCK ***
[  122.917863][ T8015] 
[  122.920490][ T8015] 3 locks held by syz.2.849/8015:
[  122.922165][ T8015]  #0: ffff8880335c0428 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  122.925149][ T8015]  #1: ffff88802adb5060 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: chown_common+0x313/0x5c0
[  122.928481][ T8015]  #2: ffff88802adb4d48 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x855/0x1bc0
[  122.931465][ T8015] 
[  122.931465][ T8015] stack backtrace:
[  122.933321][ T8015] CPU: 0 UID: 0 PID: 8015 Comm: syz.2.849 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  122.933332][ T8015] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  122.933338][ T8015] Call Trace:
[  122.933343][ T8015]  <TASK>
[  122.933347][ T8015]  dump_stack_lvl+0x189/0x250
[  122.933358][ T8015]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.933366][ T8015]  ? __pfx__printk+0x10/0x10
[  122.933376][ T8015]  ? print_lock_name+0xde/0x100
[  122.933385][ T8015]  print_circular_bug+0x2ee/0x310
[  122.933395][ T8015]  check_noncircular+0x134/0x160
[  122.933407][ T8015]  validate_chain+0xb9b/0x2140
[  122.933416][ T8015]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  122.933424][ T8015]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  122.933431][ T8015]  ? look_up_lock_class+0x74/0x170
[  122.933441][ T8015]  ? register_lock_class+0x51/0x320
[  122.933452][ T8015]  __lock_acquire+0xab9/0xd20
[  122.933463][ T8015]  ? dqget+0x72a/0xf10
[  122.933468][ T8015]  lock_acquire+0x120/0x360
[  122.933478][ T8015]  ? dqget+0x72a/0xf10
[  122.933485][ T8015]  __mutex_lock+0x187/0x1360
[  122.933515][ T8015]  ? dqget+0x72a/0xf10
[  122.933523][ T8015]  ? __lock_acquire+0xab9/0xd20
[  122.933533][ T8015]  ? dqget+0x72a/0xf10
[  122.933539][ T8015]  ? __pfx___mutex_lock+0x10/0x10
[  122.933549][ T8015]  dqget+0x72a/0xf10
[  122.933557][ T8015]  dquot_transfer+0x4b8/0x6d0
[  122.933565][ T8015]  ? __pfx_dquot_transfer+0x10/0x10
[  122.933573][ T8015]  ? down_read+0x1ad/0x2e0
[  122.933582][ T8015]  ext4_setattr+0x865/0x1bc0
[  122.933592][ T8015]  ? __pfx_current_time+0x10/0x10
[  122.933599][ T8015]  ? apparmor_path_chown+0x238/0x2d0
[  122.933608][ T8015]  ? try_break_deleg+0x79/0x130
[  122.933616][ T8015]  ? __pfx_ext4_setattr+0x10/0x10
[  122.933626][ T8015]  notify_change+0xb36/0xe40
[  122.933635][ T8015]  chown_common+0x40c/0x5c0
[  122.933643][ T8015]  ? __pfx_chown_common+0x10/0x10
[  122.933650][ T8015]  ? mnt_get_write_access+0x223/0x2a0
[  122.933659][ T8015]  do_fchownat+0x161/0x270
[  122.933665][ T8015]  ? __pfx_do_fchownat+0x10/0x10
[  122.933671][ T8015]  ? rcu_is_watching+0x15/0xb0
[  122.933679][ T8015]  __x64_sys_fchownat+0xb5/0xd0
[  122.933686][ T8015]  do_syscall_64+0xfa/0x3b0
[  122.933694][ T8015]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.933702][ T8015]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.933709][ T8015]  ? exc_page_fault+0x9f/0xf0
[  122.933717][ T8015]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.933724][ T8015] RIP: 0033:0x7f7a5458ebe9
[  122.933732][ T8015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.933739][ T8015] RSP: 002b:00007f7a553e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[  122.933747][ T8015] RAX: ffffffffffffffda RBX: 00007f7a547b5fa0 RCX: 00007f7a5458ebe9
[  122.933753][ T8015] RDX: 000000000000ee01 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  122.933757][ T8015] RBP: 00007f7a54611e19 R08: 0000000000001000 R09: 0000000000000000
[  122.933762][ T8015] R10: 000000000000ee01 R11: 0000000000000246 R12: 0000000000000000
[  122.933766][ T8015] R13: 00007f7a547b6038 R14: 00007f7a547b5fa0 R15: 00007fff6c0d8cd8
[  122.933773][ T8015]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  123.047035][ T5992] usb 2-1: USB disconnect, device number 16
[  123.172220][ T7921] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.396548][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.435649][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.475553][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.535320][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.597121][   T12] bridge_slave_1: left allmulticast mode
[  123.599039][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.601859][   T12] bridge_slave_0: left allmulticast mode
[  123.603946][   T12] bridge_slave_0: left promiscuous mode
[  123.605873][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.725275][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.728780][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.732140][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  123.736206][   T12] bond0 (unregistering): Released all slaves
[  123.804284][   T12] IPVS: stopping master sync thread 6733 ...
[  123.931969][   T12] hsr_slave_0: left promiscuous mode
[  123.934385][   T12] hsr_slave_1: left promiscuous mode
[  123.937711][   T12] veth1_macvtap: left allmulticast mode
[  123.939657][   T12] veth1_macvtap: left promiscuous mode
[  123.941522][   T12] veth0_macvtap: left promiscuous mode
[  123.943633][   T12] veth1_vlan: left promiscuous mode
[  123.945419][   T12] veth0_vlan: left promiscuous mode
[  124.039934][   T12] team0 (unregistering): Port device team_slave_1 removed
[  124.053232][   T12] team0 (unregistering): Port device team_slave_0 removed
[  124.239026][   T12] IPVS: stop unused estimator thread 0...
[  124.288008][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.347208][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.375582][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.412247][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.462090][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.499627][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.545604][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.600119][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.656464][   T12] bridge_slave_1: left allmulticast mode
[  124.658323][   T12] bridge_slave_1: left promiscuous mode
[  124.660906][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.666613][   T12] bridge_slave_0: left allmulticast mode
[  124.668380][   T12] bridge_slave_0: left promiscuous mode
[  124.670272][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.674592][   T12] bridge_slave_1: left allmulticast mode
[  124.676462][   T12] bridge_slave_1: left promiscuous mode
[  124.678317][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.681298][   T12] bridge_slave_0: left allmulticast mode
[  124.683882][   T12] bridge_slave_0: left promiscuous mode
[  124.685725][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.767062][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.770586][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.774181][   T12] bond0 (unregistering): Released all slaves
[  124.829504][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.833075][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.836290][   T12] bond0 (unregistering): Released all slaves
[  125.129441][   T12] hsr_slave_0: left promiscuous mode
[  125.131488][   T12] hsr_slave_1: left promiscuous mode
[  125.134261][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.136704][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.139362][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.142776][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.146805][   T12] hsr_slave_0: left promiscuous mode
[  125.148844][   T12] hsr_slave_1: left promiscuous mode
[  125.150771][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.153234][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.155914][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.158229][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.164548][   T12] veth1_macvtap: left promiscuous mode
[  125.166383][   T12] veth0_macvtap: left promiscuous mode
[  125.168238][   T12] veth1_vlan: left promiscuous mode
[  125.169928][   T12] veth0_vlan: left promiscuous mode
[  125.172078][   T12] veth1_macvtap: left promiscuous mode
[  125.174064][   T12] veth0_macvtap: left promiscuous mode
[  125.176045][   T12] veth1_vlan: left promiscuous mode
[  125.177801][   T12] veth0_vlan: left promiscuous mode
[  125.287845][   T12] team0 (unregistering): Port device team_slave_1 removed
[  125.301580][   T12] team0 (unregistering): Port device team_slave_0 removed
[  125.450824][   T12] team0 (unregistering): Port device team_slave_1 removed
[  125.465366][   T12] team0 (unregistering): Port device team_slave_0 removed
[  125.538974][   T12] batadv0 (unregistering): left allmulticast mode
[  132.444614][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.447257][ T1365] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
02:20:46  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015d2 RDI=00000000000015d3 RBP=00000000000003f8 RSP=ffffc9000377ee70
R8 =ffff88801f638237 R9 =1ffff11003ec7046 R10=dffffc0000000000 R11=ffffffff854e72e0
R12=dffffc0000000000 R13=ffffffff99af1902 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e735c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f7a553e46c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000008 CR3=0000000032c08000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=65756e69746e6f63 3d73726f7272652c XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ff00000000000000 0000000000000000 XMM05=0000000000000000 00007f7a553e36e0
XMM06=00007f7a553e36e0 00007f7a553e3560 XMM07=00007f7a553e35a0 00007f7a553e3580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f7a54612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7dcf1453187b9c00 RBX=dffffc0000000000 RCX=7dcf1453187b9c00 RDX=0000000000000002
RSI=ffff888027550c00 RDI=0000000000000000 RBP=ffff888027550c00 RSP=ffffc90003fdf9b0
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88810a331978 R13=0000000000000080 R14=0000000000000001 R15=ffff88810a331990
RIP=ffffffff8aedbd3b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002371 CR3=00000000271a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000021 000000003535322e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00000000 XMM09=0000000000000021 000000003535322e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
