last executing test programs:

43.410342945s ago: executing program 2 (id=72):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @sdr={0x34424752, 0xc}}, 0x5})

43.360192221s ago: executing program 2 (id=74):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)

43.359964685s ago: executing program 2 (id=75):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000580)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='////\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97\x00\x00\x00\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

43.250306687s ago: executing program 2 (id=76):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

42.94717847s ago: executing program 2 (id=77):
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000a80)={0x10, 0xfffffffffffffffe}, 0x10)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1e1000, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180))
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

42.597220828s ago: executing program 2 (id=79):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)

42.186532919s ago: executing program 32 (id=79):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0)

22.435681162s ago: executing program 1 (id=294):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000900)=""/13, 0xd}], 0x2}}], 0x1, 0x10003, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000580)=0xd, 0x4)

22.040074922s ago: executing program 1 (id=295):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014})
epoll_pwait2(r1, &(0x7f0000000340)=[{}, {}], 0x2, 0x0, 0x0, 0x0)

21.881840922s ago: executing program 1 (id=296):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2b}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

21.513916517s ago: executing program 1 (id=297):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000001c0)={[{@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@test_dummy_encryption_v1}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0/file0\x00')

21.189874679s ago: executing program 1 (id=303):
setreuid(0x0, 0xee00)
setreuid(0x0, 0xee00)

20.828896208s ago: executing program 1 (id=307):
r0 = timerfd_create(0x0, 0x0)
poll(&(0x7f0000000200)=[{r0, 0x400}], 0x1, 0x5ac2)
timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e650d3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x1})

20.577679158s ago: executing program 33 (id=307):
r0 = timerfd_create(0x0, 0x0)
poll(&(0x7f0000000200)=[{r0, 0x400}], 0x1, 0x5ac2)
timerfd_settime(r0, 0x3, &(0x7f0000000440), 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e650d3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x1})

3.199789687s ago: executing program 3 (id=462):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)}], 0x1}}], 0x2, 0x24004c41)

3.149154518s ago: executing program 3 (id=463):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0)
io_setup(0x200, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}])

3.029872769s ago: executing program 3 (id=465):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
ftruncate(r2, 0x8979)
sendfile(r1, r2, 0x0, 0x8976)

3.029711594s ago: executing program 3 (id=466):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000001840)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000001080)={0x50, 0x0, r2, {0x7, 0x2b, 0x80, 0x44020, 0x0, 0x2a6, 0x7, 0x6284, 0x0, 0x0, 0x1, 0x7}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

2.971704329s ago: executing program 3 (id=468):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)

2.817569177s ago: executing program 3 (id=469):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_getscheduler(r0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='rcu_utilization\x00', r3}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0x1f}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010)
accept4(0xffffffffffffffff, &(0x7f0000000a00)=@l2tp={0x2, 0x0, @loopback}, &(0x7f0000000a80)=0x80, 0x80000)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
r7 = syz_usb_connect$rtl8150(0x7, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_disconnect(r7)
syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x0, 0xf, 0x3, '!H:'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000a00)=ANY=[], 0x1, 0x1506, &(0x7f0000002ac0)="$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")
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x9801, 0x0)
ioctl$EVIOCGPROP(r9, 0x40047438, &(0x7f0000000180)=""/246)

1.239290545s ago: executing program 4 (id=475):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x8000)

1.239129428s ago: executing program 4 (id=476):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000240)={r2, r3, 0x0, 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r3, 0x1, 0x0, 0x3})

1.149052662s ago: executing program 0 (id=477):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)

1.14890454s ago: executing program 4 (id=478):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="700000001000ffff25bd7000fddbdf250000", @ANYBLOB="920a050000"], 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000)

1.059530935s ago: executing program 0 (id=479):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000200)={"1b00", 0x3, 0x5, 0x2, 0x207fe, 0x0, "0400b7e7a2aac9779bf500", '\x00', "0300", "e8cc1304", ["8bbb00fda8e45cfe00000900", "ab5286400300000000008516", '\x00', "000b000000000000001000"]})

1.05937693s ago: executing program 4 (id=480):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

999.097122ms ago: executing program 0 (id=481):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00')
lseek(r0, 0x7fffffffffffffff, 0x1)
write$P9_RREADDIR(r0, &(0x7f00000000c0)={0xb, 0x29, 0x1, {0x2}}, 0xb)

998.661651ms ago: executing program 4 (id=482):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, &(0x7f0000000e40)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x3, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}], "", ['\x00', '\x00']}, 0x258)
close(r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r8, 0x58, &(0x7f0000000180)}, 0x10)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r9}, 0x18)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e000", @ANYRES16], 0xe0}, 0x1, 0x0, 0x0, 0x4002841}, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, 0x0, 0x0)
r10 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff)
ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000140)={'ni_at_a2150\x00', [0xb013, 0x5, 0x0, 0x2, 0x88d7, 0x8f, 0x100a, 0x8012, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x4, 0x5, 0x1, 0x8, 0x6, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

998.567198ms ago: executing program 0 (id=483):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x5452, &(0x7f0000000040)={0x0, 0x0})

918.211183ms ago: executing program 0 (id=484):
mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)

848.371035ms ago: executing program 0 (id=485):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800)

0s ago: executing program 4 (id=486):
socket$inet6(0xa, 0x80002, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r0, &(0x7f0000000040)='\x00\x00', 0x2, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
mkdir(&(0x7f0000000540)='./file0\x00', 0x108)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$TIOCGPGRP(r4, 0x5437, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:35437' (ED25519) to the list of known hosts.
syzkaller login: [   56.754016][ T5834] cgroup: Unknown subsys name 'net'
[   56.880106][ T5834] cgroup: Unknown subsys name 'cpuset'
[   56.887112][ T5834] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.469224][ T5834] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.969503][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.973114][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.976060][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.979265][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.982175][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.061379][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.064757][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.068258][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.071903][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.075590][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.098919][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.102744][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.106287][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.111089][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.114702][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.282463][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   63.412813][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.416213][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.419161][ T5848] bridge_slave_0: entered allmulticast mode
[   63.423691][ T5848] bridge_slave_0: entered promiscuous mode
[   63.442909][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.446926][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.450055][ T5848] bridge_slave_1: entered allmulticast mode
[   63.453938][ T5848] bridge_slave_1: entered promiscuous mode
[   63.528970][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.540403][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   63.550810][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.615112][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   63.623803][ T5848] team0: Port device team_slave_0 added
[   63.639742][ T5848] team0: Port device team_slave_1 added
[   63.738224][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.741141][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.752250][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.775103][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.779183][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.782251][ T5853] bridge_slave_0: entered allmulticast mode
[   63.786309][ T5853] bridge_slave_0: entered promiscuous mode
[   63.791094][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.794015][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.804846][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.842032][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.844914][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.848798][ T5853] bridge_slave_1: entered allmulticast mode
[   63.852681][ T5853] bridge_slave_1: entered promiscuous mode
[   63.881759][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.884654][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.888957][ T5855] bridge_slave_0: entered allmulticast mode
[   63.892968][ T5855] bridge_slave_0: entered promiscuous mode
[   63.898548][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.901687][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.904783][ T5855] bridge_slave_1: entered allmulticast mode
[   63.909058][ T5855] bridge_slave_1: entered promiscuous mode
[   63.929545][ T5848] hsr_slave_0: entered promiscuous mode
[   63.932895][ T5848] hsr_slave_1: entered promiscuous mode
[   63.965025][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.971734][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.978376][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.009548][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.033568][ T5853] team0: Port device team_slave_0 added
[   64.050082][ T5853] team0: Port device team_slave_1 added
[   64.111604][ T5855] team0: Port device team_slave_0 added
[   64.120195][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.123030][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.134103][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.140163][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.143079][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.154287][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.160624][ T5855] team0: Port device team_slave_1 added
[   64.212308][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.215255][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.226070][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.259675][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.262613][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.273805][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.317597][ T5853] hsr_slave_0: entered promiscuous mode
[   64.320989][ T5853] hsr_slave_1: entered promiscuous mode
[   64.324091][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   64.327370][ T5853] Cannot create hsr debugfs directory
[   64.375072][ T5855] hsr_slave_0: entered promiscuous mode
[   64.378085][ T5855] hsr_slave_1: entered promiscuous mode
[   64.380821][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   64.383054][ T5855] Cannot create hsr debugfs directory
[   64.484666][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.498981][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.530159][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.548113][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.666041][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.673823][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.691557][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.704590][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.771752][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.779994][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.790458][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.797391][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.804844][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.852038][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   64.862253][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.865378][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.885412][  T714] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.888615][  T714] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.943759][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.993891][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   65.017966][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.020966][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.026517][ T3610] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.029363][ T3610] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.067377][ T5851] Bluetooth: hci0: command tx timeout
[   65.082573][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.117798][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.136829][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.139759][ T3553] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.147233][ T5851] Bluetooth: hci2: command tx timeout
[   65.147246][ T5239] Bluetooth: hci1: command tx timeout
[   65.162240][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.165239][ T3553] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.184265][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.257294][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.285172][ T5848] veth0_vlan: entered promiscuous mode
[   65.303295][ T5848] veth1_vlan: entered promiscuous mode
[   65.343906][ T5853] veth0_vlan: entered promiscuous mode
[   65.360537][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.365449][ T5853] veth1_vlan: entered promiscuous mode
[   65.388180][ T5848] veth0_macvtap: entered promiscuous mode
[   65.404130][ T5848] veth1_macvtap: entered promiscuous mode
[   65.432367][ T5853] veth0_macvtap: entered promiscuous mode
[   65.445645][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.455618][ T5853] veth1_macvtap: entered promiscuous mode
[   65.468770][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.471816][ T5855] veth0_vlan: entered promiscuous mode
[   65.487736][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.495141][ T5855] veth1_vlan: entered promiscuous mode
[   65.499551][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.520650][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.526933][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.538967][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.542119][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.582067][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.599672][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.614448][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.622978][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.680823][ T5855] veth0_macvtap: entered promiscuous mode
[   65.687877][ T3610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.691086][ T3610] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.705483][ T5855] veth1_macvtap: entered promiscuous mode
[   65.733152][  T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.738060][  T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.753007][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.762205][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.772867][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.783076][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.808070][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.813714][ T5858] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.817626][ T5858] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.821080][ T5858] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.821617][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.825742][ T5858] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.862173][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.994023][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.003150][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.023491][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.041195][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.508730][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.154962][ T5239] Bluetooth: hci0: command tx timeout
[   67.226088][ T5851] Bluetooth: hci2: command tx timeout
[   67.229793][ T5239] Bluetooth: hci1: command tx timeout
[   67.362599][ T5969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   67.365229][ T5969] IPv6: NLM_F_CREATE should be set when creating new route
[   67.367868][ T5969] IPv6: NLM_F_CREATE should be set when creating new route
[   67.370401][ T5969] IPv6: NLM_F_CREATE should be set when creating new route
[   67.454654][ T5977] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.27'.
[   67.460033][ T5977] openvswitch: netlink: Message has 44053 unknown bytes.
[   67.502025][ T5981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[   67.504875][ T5981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   67.512008][ T5981] vhci_hcd vhci_hcd.0: Device attached
[   67.748591][ T5982] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[   67.756515][   T12] vhci_hcd: stop threads
[   67.759605][   T12] vhci_hcd: release socket
[   67.764161][   T12] vhci_hcd: disconnect device
[   67.766659][  T795] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[   67.773358][  T795] usb 33-1: enqueue for inactive port 0
[   67.845957][  T795] vhci_hcd: vhci_device speed not set
[   68.112559][ T5997] loop2: detected capacity change from 0 to 32768
[   68.117531][ T5997] btrfs: Deprecated parameter 'usebackuproot'
[   68.120049][ T5997] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   68.128076][ T5997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.35 (5997)
[   68.143351][ T5997] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.156464][ T5997] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   68.239530][ T5997] BTRFS info (device loop2): rebuilding free space tree
[   68.257838][ T5997] BTRFS info (device loop2): turning on async discard
[   68.260883][ T5997] BTRFS info (device loop2): enabling free space tree
[   68.264106][ T5997] BTRFS info (device loop2): force clearing of disk cache
[   68.268293][ T5997] BTRFS info (device loop2): trying to use backup root at mount time
[   68.293756][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   68.424536][ T6027] netlink: 'syz.0.40': attribute type 1 has an invalid length.
[   68.430744][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'.
[   68.625988][ T5898] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   69.066234][ T5898] usb 3-1: Using ep0 maxpacket: 8
[   69.075306][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[   69.089965][ T5898] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   69.093595][ T5898] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   69.097227][ T5898] usb 3-1: Product: syz
[   69.099045][ T5898] usb 3-1: Manufacturer: syz
[   69.100950][ T5898] usb 3-1: SerialNumber: syz
[   69.236092][ T5239] Bluetooth: hci0: command tx timeout
[   69.306349][ T5851] Bluetooth: hci2: command tx timeout
[   69.309298][ T5239] Bluetooth: hci1: command tx timeout
[   69.312231][ T5898] usb 3-1: Handspring Visor / Palm OS: port 0, is for Console use
[   69.315708][ T5898] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   69.319278][ T5898] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[   69.463457][ T6042] loop1: detected capacity change from 0 to 4096
[   69.492072][ T6042] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   69.512701][ T5898] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[   69.528639][ T5898] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[   69.548834][ T5898] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[   69.567744][ T5898] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[   69.575122][ T5898] usb 3-1: USB disconnect, device number 2
[   69.587811][ T5898] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[   69.598105][ T5898] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[   69.606863][ T5898] visor 3-1:1.0: device disconnected
[   69.634719][ T6049] Driver unsupported XDP return value 0 on prog  (id 7) dev N/A, expect packet loss!
[   69.698658][ T6053] loop0: detected capacity change from 0 to 512
[   69.703531][ T6053] EXT4-fs: Ignoring removed i_version option
[   69.708942][ T6053] EXT4-fs: inline encryption not supported
[   69.715992][ T6053] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   69.756422][ T6053] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.51: bg 0: block 131: padding at end of block bitmap is not set
[   69.763837][ T6053] EXT4-fs (loop0): Remounting filesystem read-only
[   69.767421][ T6053] EXT4-fs (loop0): 1 truncate cleaned up
[   69.771040][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.803016][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.635937][  T794] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   70.688659][ T6088] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[   70.806082][  T794] usb 1-1: Using ep0 maxpacket: 32
[   70.809669][  T794] usb 1-1: unable to get BOS descriptor or descriptor too short
[   70.825437][  T794] usb 1-1: config 9 has an invalid interface number: 55 but max is 0
[   70.830188][  T794] usb 1-1: config 9 has no interface number 0
[   70.832209][  T794] usb 1-1: config 9 interface 55 has no altsetting 0
[   70.861879][ T6098] netlink: 676 bytes leftover after parsing attributes in process `syz.2.71'.
[   70.865088][ T6098] netlink: 676 bytes leftover after parsing attributes in process `syz.2.71'.
[   70.875270][  T794] usb 1-1: New USB device found, idVendor=2fc1, idProduct=f4e0, bcdDevice=5a.b5
[   70.885513][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.895846][  T794] usb 1-1: Product: syz
[   70.897288][  T794] usb 1-1: Manufacturer: syz
[   70.898863][  T794] usb 1-1: SerialNumber: syz
[   70.998816][ T6102] loop1: detected capacity change from 0 to 4096
[   71.029986][ T6107] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.079066][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.081835][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.115486][ T6109] loop2: detected capacity change from 0 to 8192
[   71.150674][ T6109] =======================================================
[   71.150674][ T6109] WARNING: The mand mount option has been deprecated and
[   71.150674][ T6109]          and is ignored by this kernel. Remove the mand
[   71.150674][ T6109]          option from the mount to silence this warning.
[   71.150674][ T6109] =======================================================
[   71.164587][  T794] usb 1-1: USB disconnect, device number 2
[   71.306104][ T5239] Bluetooth: hci0: command tx timeout
[   71.386502][ T5851] Bluetooth: hci1: command tx timeout
[   71.386527][ T5239] Bluetooth: hci2: command tx timeout
[   71.727071][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.877925][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.974871][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.054627][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.351818][   T12] bridge_slave_1: left allmulticast mode
[   72.353721][   T12] bridge_slave_1: left promiscuous mode
[   72.361204][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.374248][   T12] bridge_slave_0: left allmulticast mode
[   72.386134][   T12] bridge_slave_0: left promiscuous mode
[   72.388841][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.576945][ T6122] loop1: detected capacity change from 0 to 2048
[   72.591900][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.595275][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.689679][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.713352][ T6127] netlink: 'syz.0.82': attribute type 10 has an invalid length.
[   72.717208][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.723197][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.940459][ T6122] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.984289][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.068669][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.072921][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.077654][   T12] bond0 (unregistering): Released all slaves
[   73.095709][ T6127] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.100799][ T6127] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   73.267408][  T795] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.426256][  T795] usb 2-1: Using ep0 maxpacket: 8
[   73.429521][  T795] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[   73.431937][  T795] usb 2-1: config 6 has no interface number 0
[   73.434555][  T795] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   73.438989][  T795] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   73.445151][  T795] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[   73.450660][   T12] hsr_slave_0: left promiscuous mode
[   73.453727][  T795] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[   73.460686][  T795] usb 2-1: Product: syz
[   73.462449][  T795] usb 2-1: Manufacturer: syz
[   73.464392][  T795] usb 2-1: SerialNumber: syz
[   73.471339][   T12] hsr_slave_1: left promiscuous mode
[   73.490707][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   73.493890][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.496128][  T795] hso 2-1:6.2: Failed to find INT IN ep
[   73.505620][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   73.524490][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.545738][   T12] veth1_macvtap: left promiscuous mode
[   73.548974][   T12] veth0_macvtap: left promiscuous mode
[   73.551403][   T12] veth1_vlan: left promiscuous mode
[   73.553642][   T12] veth0_vlan: left promiscuous mode
[   73.691093][ T6156] netlink: 'syz.0.89': attribute type 9 has an invalid length.
[   73.694542][ T6156] netlink: 'syz.0.89': attribute type 6 has an invalid length.
[   73.726493][  T795] usb 2-1: USB disconnect, device number 2
[   74.006555][   T12] team0 (unregistering): Port device team_slave_1 removed
[   74.030724][   T12] team0 (unregistering): Port device team_slave_0 removed
[   74.342576][ T6123] chnl_net:caif_netlink_parms(): no params data found
[   74.353075][ T6160] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   74.378826][ T6160] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   74.749505][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.755517][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.764660][ T6123] bridge_slave_0: entered allmulticast mode
[   74.780421][ T6123] bridge_slave_0: entered promiscuous mode
[   74.801896][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.824689][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.829131][ T5851] Bluetooth: hci1: command tx timeout
[   74.852398][ T6123] bridge_slave_1: entered allmulticast mode
[   74.921165][ T6123] bridge_slave_1: entered promiscuous mode
[   75.190049][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.202729][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.282519][ T6123] team0: Port device team_slave_0 added
[   75.295509][ T6123] team0: Port device team_slave_1 added
[   75.367217][ T6185] could not allocate digest TFM handle md5-generic
[   75.379707][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.382597][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.416897][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.424401][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.435876][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.491182][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.502119][ T6192] loop1: detected capacity change from 0 to 1024
[   75.506143][ T6192] hfsplus: Unknown parameter '0x0000000000000000'
[   75.567917][ T6123] hsr_slave_0: entered promiscuous mode
[   75.571151][ T6123] hsr_slave_1: entered promiscuous mode
[   75.574244][ T6123] debugfs: 'hsr0' already exists in 'hsr'
[   75.577736][ T6123] Cannot create hsr debugfs directory
[   76.224346][ T6205] loop0: detected capacity change from 0 to 512
[   76.228732][ T6123] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.235175][ T6123] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.251784][ T6123] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.259611][ T6123] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.291109][ T6205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.298851][ T6205] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.360893][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.390623][ T6123] 8021q: adding VLAN 0 to HW filter on device team0
[   76.427233][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.430306][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.445334][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.453981][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.456975][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.623713][ T6227] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   76.635352][ T6226] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[   76.936055][ T5851] Bluetooth: hci1: command tx timeout
[   77.067832][ T6233] loop0: detected capacity change from 0 to 128
[   77.071198][ T6233] hpfs: Unknown parameter 'o'
[   77.082330][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.188786][ T6123] veth0_vlan: entered promiscuous mode
[   77.199675][ T6123] veth1_vlan: entered promiscuous mode
[   77.226835][ T6123] veth0_macvtap: entered promiscuous mode
[   77.233492][ T6123] veth1_macvtap: entered promiscuous mode
[   77.249750][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.261819][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.275578][ T5858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.283220][ T5858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.287680][ T5858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.291630][ T5858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.351644][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.354917][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.457555][  T714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.460661][  T714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.566850][ T6250] loop0: detected capacity change from 0 to 512
[   77.596886][ T6250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.611785][ T6250] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   78.783845][ T6262] loop3: detected capacity change from 0 to 512
[   78.831657][ T6264] loop1: detected capacity change from 0 to 128
[   78.850871][ T6264] FAT-fs (loop1): Directory bread(block 162) failed
[   78.853343][ T6264] FAT-fs (loop1): Directory bread(block 163) failed
[   78.863367][ T6264] FAT-fs (loop1): Directory bread(block 164) failed
[   78.873528][ T6264] FAT-fs (loop1): Directory bread(block 165) failed
[   78.873593][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.876607][ T6264] FAT-fs (loop1): Directory bread(block 166) failed
[   78.876636][ T6264] FAT-fs (loop1): Directory bread(block 167) failed
[   78.897580][ T6264] FAT-fs (loop1): Directory bread(block 168) failed
[   78.909534][ T6264] FAT-fs (loop1): Directory bread(block 169) failed
[   78.927292][ T6264] FAT-fs (loop1): Directory bread(block 162) failed
[   78.930057][ T6264] FAT-fs (loop1): Directory bread(block 163) failed
[   78.941483][ T6264] syz.1.115: attempt to access beyond end of device
[   78.941483][ T6264] loop1: rw=3, sector=226, nr_sectors = 6 limit=128
[   78.954666][ T6264] syz.1.115: attempt to access beyond end of device
[   78.954666][ T6264] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128
[   78.986333][ T5851] Bluetooth: hci1: command tx timeout
[   79.603670][ T6302] loop1: detected capacity change from 0 to 2048
[   79.648885][ T6046]  loop1: p1 < > p4
[   79.650690][ T6046] loop1: partition table partially beyond EOD, truncated
[   79.657568][ T6046] loop1: p4 start 268435456 is beyond EOD, truncated
[   79.666650][ T6302]  loop1: p1 < > p4
[   79.668354][ T6302] loop1: partition table partially beyond EOD, truncated
[   79.673885][ T6302] loop1: p4 start 268435456 is beyond EOD, truncated
[   79.761909][ T6046] udevd[6046]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   79.800164][ T6046] udevd[6046]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   79.854492][ T6046] udevd[6046]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[   80.649456][ T6318] vlan2: entered promiscuous mode
[   80.651644][ T6318] bond0: entered promiscuous mode
[   80.653787][ T6318] bond_slave_0: entered promiscuous mode
[   80.656475][ T6318] bond_slave_1: entered promiscuous mode
[   80.659080][ T6318] batadv0: entered promiscuous mode
[   80.795087][ T6324] loop0: detected capacity change from 0 to 256
[   80.812686][ T6324] FAT-fs (loop0): Directory bread(block 64) failed
[   80.815457][ T6324] FAT-fs (loop0): Directory bread(block 65) failed
[   80.818541][ T6324] FAT-fs (loop0): Directory bread(block 66) failed
[   80.821352][ T6324] FAT-fs (loop0): Directory bread(block 67) failed
[   80.825282][ T6324] FAT-fs (loop0): Directory bread(block 68) failed
[   80.837354][ T6324] FAT-fs (loop0): Directory bread(block 69) failed
[   80.843526][ T6324] FAT-fs (loop0): Directory bread(block 70) failed
[   80.851643][ T6324] FAT-fs (loop0): Directory bread(block 71) failed
[   80.861076][ T6324] FAT-fs (loop0): Directory bread(block 72) failed
[   80.866303][ T6324] FAT-fs (loop0): Directory bread(block 73) failed
[   80.916322][ T6328] loop3: detected capacity change from 0 to 47
[   81.065959][ T5239] Bluetooth: hci1: command tx timeout
[   81.296394][ T6340] loop0: detected capacity change from 0 to 32768
[   81.300051][ T6340] xfs: Unknown parameter 'noikeep'
[   81.307749][ T1854] cfg80211: failed to load regulatory.db
[   81.336755][ T6341] loop3: detected capacity change from 0 to 32768
[   81.352004][ T6341] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.149 (6341)
[   81.401247][ T6341] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   81.416425][ T6341] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   81.551738][ T6341] BTRFS info (device loop3): enabling ssd optimizations
[   81.563875][ T6341] BTRFS info (device loop3): enabling free space tree
[   81.720921][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.153'.
[   81.964964][ T6123] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   82.052059][ T6379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.160'.
[   82.075017][ T6379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'.
[   82.346861][ T6397] loop1: detected capacity change from 0 to 4096
[   82.357183][ T6397] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   82.374841][ T6397] ntfs3(loop1): ino=1a, mi_enum_attr
[   82.378222][ T6397] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   82.436185][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   82.465705][ T6401] loop0: detected capacity change from 0 to 128
[   82.600896][ T5898] usb 4-1: unable to get BOS descriptor or descriptor too short
[   82.610929][ T5898] usb 4-1: config 6 has an invalid interface number: 76 but max is 0
[   82.614428][ T5898] usb 4-1: config 6 has no interface number 0
[   82.619252][ T5898] usb 4-1: config 6 interface 76 has no altsetting 0
[   82.629864][ T5898] usb 4-1: New USB device found, idVendor=18cd, idProduct=cafe, bcdDevice= e.6a
[   82.638886][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.642066][ T5898] usb 4-1: Product: syz
[   82.643525][ T5898] usb 4-1: Manufacturer: syz
[   82.645233][ T5898] usb 4-1: SerialNumber: syz
[   82.875458][ T6419] loop1: detected capacity change from 0 to 47
[   82.916051][ T5898] uvcvideo 4-1:6.76: probe with driver uvcvideo failed with error -22
[   82.933214][ T5898] usb 4-1: USB disconnect, device number 2
[   83.149295][ T5239] Bluetooth: hci1: command 0x0405 tx timeout
[   83.266704][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'.
[   84.843950][ T6456] veth0: entered promiscuous mode
[   84.869279][ T6456] veth0: left promiscuous mode
[   84.923448][ T6460] loop0: detected capacity change from 0 to 1024
[   85.003491][ T6465] loop3: detected capacity change from 0 to 512
[   85.031150][ T6465] EXT4-fs: old and new quota format mixing
[   85.291883][ T6473] loop1: detected capacity change from 0 to 512
[   85.301973][ T6473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   85.329665][ T6473] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   85.338220][ T6473] EXT4-fs (loop1): 1 truncate cleaned up
[   85.342274][ T6473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.352396][ T6473] netlink: 'syz.1.200': attribute type 1 has an invalid length.
[   85.379515][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.009443][ T6504] loop0: detected capacity change from 0 to 128
[   86.068106][ T6507] loop1: detected capacity change from 0 to 2048
[   86.085741][ T6507] NILFS (loop1): invalid segment: Inconsistency found
[   86.102641][ T6507] NILFS (loop1): trying rollback from an earlier position
[   86.111443][ T6507] NILFS (loop1): recovery complete
[   86.114215][ T6512] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.126947][ T6507] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[   86.133553][ T6507] Remounting filesystem read-only
[   86.221023][ T6517] vlan2: entered promiscuous mode
[   86.222703][ T6517] vlan2: entered allmulticast mode
[   86.230566][ T6517] hsr_slave_1: entered allmulticast mode
[   86.240060][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'.
[   86.284342][ T6523] loop1: detected capacity change from 0 to 136
[   86.559268][ T6543] netlink: 'syz.3.228': attribute type 29 has an invalid length.
[   87.532728][ T6563] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.537609][ T6563] Zero length message leads to an empty skb
[   87.734138][ T6569] loop3: detected capacity change from 0 to 32768
[   87.774401][ T6569] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   87.889032][ T6569] syz.3.236 (6569) used greatest stack depth: 18624 bytes left
[   87.970104][ T6123] ocfs2: Unmounting device (7,3) on (node local)
[   88.856232][ T6604] loop1: detected capacity change from 0 to 32768
[   89.352500][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'.
[   89.368350][ T6634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.254'.
[   90.198817][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'.
[   90.201735][ T6668] loop3: detected capacity change from 0 to 1024
[   90.202492][ T6669] netlink: 'syz.1.268': attribute type 21 has an invalid length.
[   90.207199][ T6668] EXT4-fs: inline encryption not supported
[   90.211466][ T6668] EXT4-fs: Ignoring removed i_version option
[   90.214653][ T6668] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   90.228333][ T6668] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.267: lblock 2 mapped to illegal pblock 2 (length 1)
[   90.257966][ T6668] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   90.261420][ T6668] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.267: lblock 0 mapped to illegal pblock 48 (length 1)
[   90.273503][ T6668] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   90.279977][ T6668] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.267: Failed to acquire dquot type 0
[   90.284840][ T6668] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   90.296874][ T6668] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.267: mark_inode_dirty error
[   90.301896][ T6668] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   90.306928][ T6668] EXT4-fs (loop3): 1 orphan inode deleted
[   90.310575][ T6668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.339931][   T26] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:0: lblock 1 mapped to illegal pblock 1 (length 1)
[   90.362139][   T26] Quota error (device loop3): remove_tree: Can't read quota data block 1
[   90.368043][   T26] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u9:0: Failed to release dquot type 0
[   90.396255][ T6123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.404432][ T6123] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0
[   90.411125][ T6123] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6305: Corrupt filesystem
[   90.415066][ T6123] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error
[   91.208532][ T6691] loop0: detected capacity change from 0 to 32768
[   91.447774][ T6712] syz_tun: entered allmulticast mode
[   91.508992][ T6716] loop1: detected capacity change from 0 to 2048
[   91.521204][ T6716] UDF-fs: warning (device loop1): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[   91.526510][ T6716] UDF-fs: error (device loop1): udf_load_logicalvol: error loading logical volume descriptor: Too many partition maps (4 > 0)
[   91.531744][ T6716] UDF-fs: Scanning with blocksize 512 failed
[   91.538066][ T6716] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   91.541244][ T6716] UDF-fs: Scanning with blocksize 1024 failed
[   91.551415][ T6716] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   91.555176][ T6716] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   91.559091][ T6716] UDF-fs: Scanning with blocksize 2048 failed
[   91.563420][ T6716] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   91.568914][ T6716] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   91.572886][ T6716] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   91.576760][ T6716] UDF-fs: Scanning with blocksize 4096 failed
[   91.579486][ T6716] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[   92.881597][ T6741] loop1: detected capacity change from 0 to 512
[   92.884964][ T6741] EXT4-fs: Ignoring removed nobh option
[   92.895378][ T6741] EXT4-fs (loop1): Test dummy encryption mode enabled
[   93.013900][ T6741] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.297: iget: bad i_size value: 38620345925642
[   93.032658][ T6741] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.297: couldn't read orphan inode 15 (err -117)
[   93.053840][ T6741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.254842][ T5855] syz_tun (unregistering): left allmulticast mode
[   93.444013][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.487809][ T6737] loop0: detected capacity change from 0 to 131072
[   93.495463][ T6737] F2FS-fs (loop0): Test dummy encryption mode enabled
[   93.519917][ T5890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.569069][ T6737] F2FS-fs (loop0): invalid crc value
[   93.629321][ T6737] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   93.636426][ T6737] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   93.687380][ T5890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.860220][ T5890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   93.925043][ T5890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.147031][ T5890] bridge_slave_1: left allmulticast mode
[   94.149215][ T5890] bridge_slave_1: left promiscuous mode
[   94.154256][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.168357][ T5890] bridge_slave_0: left allmulticast mode
[   94.173298][ T5890] bridge_slave_0: left promiscuous mode
[   94.180019][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.216048][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   94.221629][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   94.225405][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   94.230747][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   94.234396][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   94.429189][ T6769] loop0: detected capacity change from 0 to 4096
[   94.456207][ T6772] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.657260][ T6780] loop0: detected capacity change from 0 to 4096
[   94.676348][ T6780] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   94.681822][ T6783] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.702999][ T6780] NILFS (loop0): mounting fs with errors
[   94.725287][ T5890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.740328][ T5890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   94.758059][ T5890] bond0 (unregistering): Released all slaves
[   95.065669][ T6808] loop0: detected capacity change from 0 to 256
[   95.090661][ T6808] exfat: Deprecated parameter 'utf8'
[   95.100499][ T6808] exfat: Deprecated parameter 'namecase'
[   95.127766][ T6808] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   95.251372][ T5890] hsr_slave_0: left promiscuous mode
[   95.255473][ T5890] hsr_slave_1: left promiscuous mode
[   95.258759][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   95.261731][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_0
[   95.265279][ T5890] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.269551][ T5890] batman_adv: batadv0: Removing interface: batadv_slave_1
[   95.279830][ T5890] veth1_macvtap: left promiscuous mode
[   95.281819][ T5890] veth0_macvtap: left promiscuous mode
[   95.284240][ T5890] veth1_vlan: left promiscuous mode
[   95.311316][ T5890] veth0_vlan: left promiscuous mode
[   95.636416][ T6821] loop3: detected capacity change from 0 to 128
[   96.286159][ T5239] Bluetooth: hci2: command tx timeout
[   96.666072][ T5890] team0 (unregistering): Port device team_slave_1 removed
[   96.703123][ T5890] team0 (unregistering): Port device team_slave_0 removed
[   96.741136][ T6853] loop0: detected capacity change from 0 to 512
[   96.762843][ T6853] EXT4-fs error (device loop0): ext4_orphan_get:1392: comm syz.0.338: inode #13: comm syz.0.338: iget: illegal inode #
[   96.770146][ T6853] EXT4-fs (loop0): Remounting filesystem read-only
[   96.782471][ T6853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.016492][ T6766] chnl_net:caif_netlink_parms(): no params data found
[   97.089727][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.157846][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.160838][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.163816][ T6766] bridge_slave_0: entered allmulticast mode
[   97.177687][ T6766] bridge_slave_0: entered promiscuous mode
[   97.189199][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.192219][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.195263][ T6766] bridge_slave_1: entered allmulticast mode
[   97.203510][ T6766] bridge_slave_1: entered promiscuous mode
[   97.255916][   T10] usb 1-1: Using ep0 maxpacket: 8
[   97.259641][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   97.272076][   T10] usb 1-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[   97.282624][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has an invalid bInterval 171, changing to 7
[   97.289641][ T6766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   97.294135][   T10] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 9209, setting to 1024
[   97.303099][   T10] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.309999][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[   97.320826][   T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[   97.324533][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.327434][   T10] usb 1-1: Product: syz
[   97.328762][   T10] usb 1-1: Manufacturer: syz
[   97.330227][   T10] usb 1-1: SerialNumber: syz
[   97.334438][   T10] usb 1-1: config 0 descriptor??
[   97.337648][ T6766] team0: Port device team_slave_0 added
[   97.347875][ T6766] team0: Port device team_slave_1 added
[   97.354262][   T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[   97.372460][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_0
[   97.374974][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.384089][ T6766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   97.395319][ T6766] batman_adv: batadv0: Adding interface: batadv_slave_1
[   97.405094][ T6766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   97.426423][ T6766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   97.472417][ T6766] hsr_slave_0: entered promiscuous mode
[   97.475143][ T6766] hsr_slave_1: entered promiscuous mode
[   97.478258][ T6766] debugfs: 'hsr0' already exists in 'hsr'
[   97.480615][ T6766] Cannot create hsr debugfs directory
[   97.543766][   T10] snd_usb_toneport 1-1:0.0: cannot get proper max packet size
[   97.556776][   T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[   97.562091][   T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22
[   97.576921][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.619713][ T6766] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.626047][ T6766] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.631339][ T6766] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.636827][ T6766] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.660530][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.663567][ T6766] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.667155][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.669642][ T6766] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.724614][ T6766] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.738631][  T137] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.742713][  T137] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.751433][ T5912] usb 1-1: USB disconnect, device number 3
[   97.757535][   T24] usb 4-1: Using ep0 maxpacket: 32
[   97.763155][   T24] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[   97.773777][   T24] usb 4-1: config 0 has no interface number 0
[   97.780404][ T6766] 8021q: adding VLAN 0 to HW filter on device team0
[   97.790520][   T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[   97.797410][  T137] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.800590][  T137] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.805002][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.810511][   T24] usb 4-1: Product: syz
[   97.812078][  T137] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.812432][   T24] usb 4-1: Manufacturer: syz
[   97.815426][  T137] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.817409][   T24] usb 4-1: SerialNumber: syz
[   97.819436][   T24] usb 4-1: config 0 descriptor??
[   97.984979][ T6766] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.039503][   T24] radio-si470x 4-1:0.35: this is not a si470x device.
[   98.066463][   T24] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[   98.082632][   T24] usb 4-1: USB disconnect, device number 3
[   98.106812][ T6766] veth0_vlan: entered promiscuous mode
[   98.112163][ T6766] veth1_vlan: entered promiscuous mode
[   98.129318][ T6766] veth0_macvtap: entered promiscuous mode
[   98.133998][ T6766] veth1_macvtap: entered promiscuous mode
[   98.144575][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.151371][ T6766] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.158929][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.165194][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.169285][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.173038][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.211836][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.214447][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.233345][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.237474][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.297639][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.347108][ T5239] Bluetooth: hci2: command tx timeout
[   98.536464][ T5911] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   98.694074][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short
[   98.698821][ T5911] usb 5-1: not running at top speed; connect to a high speed hub
[   98.710266][ T5911] usb 5-1: config 251 has an invalid interface number: 156 but max is 0
[   98.713608][ T5911] usb 5-1: config 251 has no interface number 0
[   98.717356][ T5911] usb 5-1: config 251 interface 156 has no altsetting 0
[   98.722646][ T5911] usb 5-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice=5b.c8
[   98.727351][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.730691][ T5911] usb 5-1: Product: syz
[   98.732438][ T5911] usb 5-1: Manufacturer: syz
[   98.734406][ T5911] usb 5-1: SerialNumber: syz
[   98.980653][ T5911] usb 5-1: unknown interface protocol 0x2c, assuming v1
[   98.989832][ T5911] usb 5-1: cannot find UAC_HEADER
[   99.023839][ T5911] snd-usb-audio 5-1:251.156: probe with driver snd-usb-audio failed with error -22
[   99.032669][ T5911] usb 5-1: USB disconnect, device number 2
[   99.052218][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:251.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.373619][ T6929] tipc: Started in network mode
[   99.375768][ T6929] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   99.383837][ T6929] tipc: Enabled bearer <eth:vlan0>, priority 10
[   99.483376][   T33] audit: type=1326 audit(1759066476.015:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c838ec29 code=0x7ffc0000
[   99.498908][   T33] audit: type=1326 audit(1759066476.015:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c838ec29 code=0x7ffc0000
[   99.509893][   T33] audit: type=1326 audit(1759066476.015:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fe8c838ec29 code=0x7ffc0000
[   99.523953][   T33] audit: type=1326 audit(1759066476.015:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c838ec29 code=0x7ffc0000
[   99.542821][   T33] audit: type=1326 audit(1759066476.035:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6941 comm="syz.3.358" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8c838ec29 code=0x7ffc0000
[   99.544137][ T6945] loop3: detected capacity change from 0 to 128
[   99.561041][ T6945] vfat: Bad value for 'shortname'
[   99.585707][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'.
[   99.665610][ T6953] loop3: detected capacity change from 0 to 128
[   99.940681][ T6953] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   99.976403][   T33] audit: type=1800 audit(1759066476.505:7): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file1" dev="loop3" ino=1048631 res=0 errno=0
[  100.011017][ T1092] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  100.078300][ T6950] loop0: detected capacity change from 0 to 32768
[  100.129050][ T6950] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  100.162823][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[  100.454958][ T5239] Bluetooth: hci2: command tx timeout
[  100.501180][ T5911] tipc: Node number set to 10005162
[  100.540825][ T6965] loop4: detected capacity change from 0 to 1024
[  100.589471][ T1092] hfsplus: b-tree write err: -5, ino 4
[  101.144088][   T33] audit: type=1326 audit(1759066477.545:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.4.370" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7fc00000
[  101.179552][ T6993] loop3: detected capacity change from 0 to 256
[  101.466209][  T794] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  101.499854][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.501586][   T33] audit: type=1326 audit(1759066478.035:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.4.370" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdab658ec29 code=0x7fc00000
[  101.512085][   T33] audit: type=1326 audit(1759066478.035:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.4.370" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7fc00000
[  101.520999][   T33] audit: type=1326 audit(1759066478.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6975 comm="syz.4.370" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7fc00000
[  101.667518][  T794] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  101.670845][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.679253][  T794] usb 4-1: config 0 descriptor??
[  101.726021][   T24] usb 1-1: Using ep0 maxpacket: 8
[  101.730288][   T24] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  101.735685][   T24] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  101.740789][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.743942][   T24] usb 1-1: Product: syz
[  101.745481][   T24] usb 1-1: Manufacturer: syz
[  101.747251][   T24] usb 1-1: SerialNumber: syz
[  101.756537][   T24] usb 1-1: config 0 descriptor??
[  101.762613][   T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  101.765391][   T24] usb 1-1: setting power ON
[  101.769719][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  101.776691][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  101.785141][   T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  101.789998][   T24] usb 1-1: media controller created
[  101.804729][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  101.826559][   T24] usb 1-1: selecting invalid altsetting 6
[  101.829183][   T24] usb 1-1: digital interface selection failed (-22)
[  101.831939][   T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  101.837449][   T24] usb 1-1: setting power OFF
[  101.840677][   T24] dvb-usb: bulk message failed: -22 (2/0)
[  101.843154][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  101.846995][   T24] (NULL device *): no alternate interface
[  101.848058][ T7003] loop4: detected capacity change from 0 to 32768
[  101.862784][ T7003] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.381 (7003)
[  101.879939][ T7003] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  101.884192][ T7003] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  101.889204][  T794] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  101.893327][   T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  101.920512][ T7003] BTRFS info (device loop4): enabling ssd optimizations
[  101.923518][ T7003] BTRFS info (device loop4): enabling free space tree
[  101.957237][ T6766] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  101.990955][   T10] usb 1-1: USB disconnect, device number 4
[  102.027179][ T7021] loop4: detected capacity change from 0 to 128
[  102.090453][  T794] [drm:udl_init] *ERROR* Selecting channel failed
[  102.115257][  T794] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3
[  102.119090][  T794] [drm] Initialized udl on minor 3
[  102.124371][  T794] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  102.130348][  T794] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  102.134501][ T5912] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  102.139104][  T794] usb 4-1: USB disconnect, device number 4
[  102.142124][ T5912] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  102.326021][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  102.476625][   T24] usb 5-1: Using ep0 maxpacket: 16
[  102.480430][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  102.483479][   T24] usb 5-1: config 0 has no interface number 0
[  102.486342][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  102.495304][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  102.500529][   T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  102.504146][   T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  102.507493][ T5239] Bluetooth: hci2: command tx timeout
[  102.514238][   T24] usb 5-1: Product: syz
[  102.516372][   T24] usb 5-1: SerialNumber: syz
[  102.532445][   T24] usb 5-1: config 0 descriptor??
[  102.536946][ T7025] loop0: detected capacity change from 0 to 1024
[  102.541359][   T24] cm109 5-1:0.8: invalid payload size 0, expected 4
[  102.549966][ T7025] EXT4-fs: test_dummy_encryption requires encrypt feature
[  102.554010][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input5
[  102.685128][   T24] IPVS: starting estimator thread 0...
[  102.685777][ T7027] IPVS: nq: FWM 3 0x00000003 - no destination available
[  102.743143][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.747634][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.750812][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.754008][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.757207][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.760509][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.764005][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.768240][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.771431][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.774537][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  102.778927][   T24] usb 5-1: USB disconnect, device number 3
[  102.781451][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  102.878603][ T7039] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  102.882366][ T7030] IPVS: using max 39 ests per chain, 93600 per kthread
[  102.891719][   T24] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  102.937597][ T7042] loop0: detected capacity change from 0 to 256
[  103.525952][   T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  103.748414][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.752858][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  103.757171][   T24] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  103.760854][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.769114][   T24] usb 1-1: config 0 descriptor??
[  103.779953][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  103.784137][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  103.796627][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  103.806693][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  103.816852][   T24] usb 1-1: media controller created
[  103.822286][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  103.841805][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  103.846237][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  103.862155][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  103.890707][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  103.895470][ T7063] loop3: detected capacity change from 0 to 512
[  103.900266][ T7063] EXT4-fs: Ignoring removed mblk_io_submit option
[  103.903821][ T7063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.907684][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  103.914892][ T7063] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  103.929591][ T7063] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  103.933753][ T7063] EXT4-fs (loop3): orphan cleanup on readonly fs
[  103.938991][ T7063] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.399: Invalid block bitmap block 0 in block_group 0
[  103.948429][ T7063] EXT4-fs (loop3): Remounting filesystem read-only
[  103.951842][ T7063] EXT4-fs (loop3): 1 orphan inode deleted
[  103.957827][ T7063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  103.982418][ T6123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.992960][ T5898] usb 1-1: USB disconnect, device number 5
[  104.032690][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  104.085277][ T7069] loop3: detected capacity change from 0 to 512
[  104.092681][ T7069] EXT4-fs (loop3): Test dummy encryption mode enabled
[  104.109047][ T7069] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.401: casefold flag without casefold feature
[  104.119379][ T7069] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.401: couldn't read orphan inode 15 (err -117)
[  104.127598][ T7069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.212367][ T7072] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.227843][ T7072] ext4: Unknown parameter 'nomblk_io_subm'
[  105.404585][ T6123] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.620036][ T7104] netlink: 'syz.0.411': attribute type 10 has an invalid length.
[  105.637119][ T7104] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  105.644351][ T7104] team0: Failed to send options change via netlink (err -105)
[  105.649618][ T7104] team0: Port device dummy0 added
[  105.922214][ T7099] capability: warning: `syz.3.409' uses deprecated v2 capabilities in a way that may be insecure
[  107.205599][ T5239] Bluetooth: min 0 < 6
[  107.236355][ T7126] loop0: detected capacity change from 0 to 4096
[  107.326051][ T5912] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.799195][ T7140] loop0: detected capacity change from 0 to 1764
[  107.825136][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  107.828947][ T5912] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  107.832284][ T5912] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  107.839003][ T5912] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  107.845994][ T5912] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  107.851199][ T5912] usb 4-1: config 0 interface 0 has no altsetting 0
[  107.859931][ T5912] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  107.863524][ T5912] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  107.867212][ T5912] usb 4-1: Product: syz
[  107.868974][ T5912] usb 4-1: Manufacturer: syz
[  107.871135][ T5912] usb 4-1: SerialNumber: syz
[  107.875700][ T5912] usb 4-1: config 0 descriptor??
[  107.886177][ T5912] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  107.892041][ T5912] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  108.206092][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  108.206197][ T7124] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  108.209865][ T5898] usb 4-1: USB disconnect, device number 5
[  108.216105][ T7151] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  108.226065][ T5912] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  108.234142][ T7154] loop4: detected capacity change from 0 to 512
[  108.237919][ T5898] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  108.247325][ T7154] EXT4-fs: Ignoring removed nobh option
[  108.249702][ T7154] EXT4-fs (loop4): Test dummy encryption mode enabled
[  108.257805][ T7154] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.429: iget: bad i_size value: 38620345925642
[  108.263205][ T7154] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.429: couldn't read orphan inode 15 (err -117)
[  108.269079][ T7154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.361852][ T7154] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  108.377426][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  108.384321][ T5912] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  108.385476][ T6766] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.388765][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.399213][ T5912] usb 1-1: Product: syz
[  108.401362][ T5912] usb 1-1: Manufacturer: syz
[  108.403352][ T5912] usb 1-1: SerialNumber: syz
[  108.409291][ T5912] usb 1-1: config 0 descriptor??
[  108.421500][ T5912] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  108.425023][ T5912] dvb-usb: bulk message failed: -22 (2/0)
[  108.443650][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  108.448548][ T5912] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  108.452346][ T5912] usb 1-1: media controller created
[  108.470697][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.622180][ T5912] cxusb: set interface failed
[  108.625320][ T5912] dvb-usb: bulk message failed: -22 (1/0)
[  108.641341][ T5912] DVB: Unable to find symbol mt352_attach()
[  108.643847][ T5912] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  108.686015][ T5912] rc_core: IR keymap rc-dvico-portable not found
[  108.688729][ T5912] Registered IR keymap rc-empty
[  108.692206][ T5912] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  108.698424][ T5912] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input7
[  108.706237][ T5912] dvb-usb: schedule remote query interval to 100 msecs.
[  108.709160][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  108.715254][ T5912] usb 1-1: USB disconnect, device number 6
[  108.765670][ T5912] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  109.155685][ T7181] loop0: detected capacity change from 0 to 512
[  109.183220][ T7181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.194514][ T7181] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.225977][ T5239] Bluetooth: hci2: command tx timeout
[  109.330827][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.482966][   T33] kauditd_printk_skb: 13 callbacks suppressed
[  109.482986][   T33] audit: type=1326 audit(1759066486.015:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  109.520121][   T33] audit: type=1326 audit(1759066486.015:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  109.538280][   T33] audit: type=1326 audit(1759066486.045:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.439" exe="/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  109.564628][   T33] audit: type=1326 audit(1759066486.045:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  109.594083][ T7195] loop4: detected capacity change from 0 to 256
[  109.596521][   T33] audit: type=1326 audit(1759066486.045:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.4.439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  109.758022][ T7207] netlink: 'syz.0.444': attribute type 4 has an invalid length.
[  109.761242][ T7207] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.444'.
[  109.802186][ T7210] loop0: detected capacity change from 0 to 128
[  109.806293][ T7210] EXT4-fs (loop0): Test dummy encryption mode enabled
[  109.812893][ T7210] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  109.821374][ T7210] ext4 filesystem being mounted at /153/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  109.985597][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.193614][ T3553] Bluetooth: hci3: Frame reassembly failed (-84)
[  110.221929][ T3553] Bluetooth: hci3: Frame reassembly failed (-84)
[  110.407787][   T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  110.412357][   T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  110.416579][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  110.420316][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.434256][ T7204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  110.445296][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  110.611703][ T7238] netlink: 'syz.3.454': attribute type 1 has an invalid length.
[  110.678397][   T10] usb 5-1: USB disconnect, device number 4
[  110.725320][ T7244] loop3: detected capacity change from 0 to 4096
[  110.735104][ T7244] ntfs3(loop3): Primary boot: invalid bytes per MFT record 2 (-1).
[  110.745277][ T7244] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  110.945564][ T7251] loop3: detected capacity change from 0 to 32768
[  110.957749][ T7251] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  110.965396][ T5858] (kworker/u8:2,5858,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  110.985218][ T6123] (syz-executor,6123,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 70
[  110.989882][ T6123] (syz-executor,6123,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  110.997198][ T6123] ocfs2: Unmounting device (7,3) on (node local)
[  111.162076][ T7261] loop3: detected capacity change from 0 to 256
[  111.165970][ T7261] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  111.170521][ T7261] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  111.179554][ T7261] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  111.185000][ T7261] exFAT-fs (loop3): failed to load alloc-bitmap
[  111.188817][ T7261] exFAT-fs (loop3): failed to recognize exfat type
[  112.086093][ T5912] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  112.186144][ T5239] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  112.236721][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  112.251132][ T5912] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  112.254945][ T5912] usb 4-1: config 0 has no interface number 0
[  112.258190][ T5912] usb 4-1: config 0 interface 89 has no altsetting 0
[  112.283647][ T5912] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  112.294324][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.302630][ T5912] usb 4-1: Product: syz
[  112.305022][ T5912] usb 4-1: Manufacturer: syz
[  112.310817][ T5912] usb 4-1: SerialNumber: syz
[  112.333949][ T5912] usb 4-1: config 0 descriptor??
[  112.342886][ T5848] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.351942][ T5912] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  112.359802][ T5912] em28xx 4-1:0.89: Video interface 89 found: bulk
[  112.972154][ T7286] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  113.014491][   T33] audit: type=1326 audit(1759066489.545:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.4.474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  113.023878][   T33] audit: type=1326 audit(1759066489.545:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.4.474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  113.034381][   T33] audit: type=1326 audit(1759066489.555:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.4.474" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  113.043755][   T33] audit: type=1326 audit(1759066489.555:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7287 comm="syz.4.474" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab658ec29 code=0x7ffc0000
[  113.159513][ T7275] loop3: detected capacity change from 0 to 256
[  113.174337][ T7275] exFAT-fs (loop3): error, The cluster chain has a loop
[  113.177708][ T7275] exFAT-fs (loop3): Filesystem has been set read-only
[  113.180652][ T7275] exFAT-fs (loop3): failed to count the number of clusters in root
[  113.183980][ T7275] exFAT-fs (loop3): failed to recognize exfat type
[  113.205411][ T7296] netlink: 80 bytes leftover after parsing attributes in process `syz.4.478'.
[  113.716922][ T7312] process 'syz.4.482' launched './file0' with NULL argv: empty string added
[  114.026378][ T5912] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  114.090276][ T5912] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  114.093625][ T5912] em28xx 4-1:0.89: board has no eeprom
[  114.156114][ T5912] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  114.158936][ T5912] em28xx 4-1:0.89: analog set to bulk mode.
[  114.161992][   T24] em28xx 4-1:0.89: Registering V4L2 extension
[  114.202792][   T24] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  114.207481][   T24] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5)
[  114.212902][   T24] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5)
[  114.223101][   T24] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5)
[  114.234723][   T24] em28xx 4-1:0.89: Config register raw data: 0xfffffffb
[  114.238694][   T24] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  114.242035][   T24] em28xx 4-1:0.89: No AC97 audio processor
[  114.282416][   T24] usb 4-1: Decoder not found
[  114.287777][   T24] em28xx 4-1:0.89: failed to create media graph
[  114.292648][   T24] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  114.383156][   T24] em28xx 4-1:0.89: Registering snapshot button...
[  114.385023][ T7317] ==================================================================
[  114.387924][   T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input8
[  114.388901][ T7317] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  114.395563][ T7317] Read of size 8 at addr ffff88810aa54740 by task v4l_id/7317
[  114.398681][   T24] em28xx 4-1:0.89: Remote control support is not available for this card.
[  114.399349][ T7317] 
[  114.399358][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  114.399371][ T7317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.399377][ T7317] Call Trace:
[  114.399382][ T7317]  <TASK>
[  114.399388][ T7317]  dump_stack_lvl+0x189/0x250
[  114.399402][ T7317]  ? __virt_addr_valid+0x1c8/0x5c0
[  114.399413][ T7317]  ? rcu_is_watching+0x15/0xb0
[  114.399424][ T7317]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.399434][ T7317]  ? rcu_is_watching+0x15/0xb0
[  114.399445][ T7317]  ? lock_release+0x4b/0x3e0
[  114.399457][ T7317]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  114.399469][ T7317]  ? __virt_addr_valid+0x1c8/0x5c0
[  114.399481][ T7317]  ? __virt_addr_valid+0x4a5/0x5c0
[  114.399492][ T7317]  print_report+0xca/0x240
[  114.399505][ T7317]  ? v4l2_fh_open+0xac/0x420
[  114.399519][ T7317]  kasan_report+0x118/0x150
[  114.399532][ T7317]  ? v4l2_fh_open+0xac/0x420
[  114.399547][ T7317]  v4l2_fh_open+0xac/0x420
[  114.399558][ T7317]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  114.399573][ T7317]  em28xx_v4l2_open+0x157/0x9a0
[  114.399587][ T7317]  v4l2_open+0x1bf/0x3a0
[  114.399601][ T7317]  chrdev_open+0x4cc/0x5e0
[  114.399615][ T7317]  ? __pfx_chrdev_open+0x10/0x10
[  114.399626][ T7317]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  114.399642][ T7317]  ? __pfx_chrdev_open+0x10/0x10
[  114.399653][ T7317]  do_dentry_open+0x953/0x13f0
[  114.399669][ T7317]  vfs_open+0x3b/0x340
[  114.399682][ T7317]  ? path_openat+0x2ecd/0x3830
[  114.399691][ T7317]  path_openat+0x2ee5/0x3830
[  114.399714][ T7317]  ? __pfx_path_openat+0x10/0x10
[  114.399728][ T7317]  do_filp_open+0x1fa/0x410
[  114.399738][ T7317]  ? __lock_acquire+0xab9/0xd20
[  114.399775][ T7317]  ? __pfx_do_filp_open+0x10/0x10
[  114.399792][ T7317]  ? _raw_spin_unlock+0x28/0x50
[  114.399801][ T7317]  ? alloc_fd+0x64c/0x6c0
[  114.399815][ T7317]  do_sys_openat2+0x121/0x1c0
[  114.399830][ T7317]  ? __pfx_do_sys_openat2+0x10/0x10
[  114.399843][ T7317]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[  114.399859][ T7317]  ? rcu_is_watching+0x15/0xb0
[  114.399868][ T7317]  __x64_sys_openat+0x138/0x170
[  114.399883][ T7317]  do_syscall_64+0xfa/0xfa0
[  114.399895][ T7317]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.399905][ T7317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.399916][ T7317]  ? exc_page_fault+0xab/0x100
[  114.399928][ T7317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.399936][ T7317] RIP: 0033:0x7fdee43169a4
[  114.399946][ T7317] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  114.399955][ T7317] RSP: 002b:00007ffe1325f9b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  114.399967][ T7317] RAX: ffffffffffffffda RBX: 00007ffe1325fbc8 RCX: 00007fdee43169a4
[  114.399974][ T7317] RDX: 0000000000000000 RSI: 00007ffe1325ff1c RDI: 00000000ffffff9c
[  114.399980][ T7317] RBP: 00007ffe1325ff1c R08: 0000000000000000 R09: 0000000000000000
[  114.399988][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.399994][ T7317] R13: 00007ffe1325fbe0 R14: 000055f047114670 R15: 00007fdee4780a80
[  114.400004][ T7317]  </TASK>
[  114.400009][ T7317] 
[  114.516219][ T7317] Allocated by task 24:
[  114.517775][ T7317]  kasan_save_track+0x3e/0x80
[  114.519507][ T7317]  __kasan_kmalloc+0x93/0xb0
[  114.521240][ T7317]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  114.523225][ T7317]  em28xx_v4l2_init+0x10b/0x2e70
[  114.525068][ T7317]  em28xx_init_extension+0x120/0x1c0
[  114.527002][ T7317]  process_scheduled_works+0xae1/0x17b0
[  114.529043][ T7317]  worker_thread+0x8a0/0xda0
[  114.530769][ T7317]  kthread+0x711/0x8a0
[  114.532280][ T7317]  ret_from_fork+0x4bc/0x870
[  114.534003][ T7317]  ret_from_fork_asm+0x1a/0x30
[  114.535733][ T7317] 
[  114.536650][ T7317] Freed by task 24:
[  114.538134][ T7317]  kasan_save_track+0x3e/0x80
[  114.539899][ T7317]  __kasan_save_free_info+0x46/0x50
[  114.541826][ T7317]  __kasan_slab_free+0x5c/0x80
[  114.543590][ T7317]  kfree+0x19a/0x6d0
[  114.545056][ T7317]  em28xx_v4l2_init+0x1683/0x2e70
[  114.546971][ T7317]  em28xx_init_extension+0x120/0x1c0
[  114.548943][ T7317]  process_scheduled_works+0xae1/0x17b0
[  114.550996][ T7317]  worker_thread+0x8a0/0xda0
[  114.552623][ T7317]  kthread+0x711/0x8a0
[  114.554077][ T7317]  ret_from_fork+0x4bc/0x870
[  114.555731][ T7317]  ret_from_fork_asm+0x1a/0x30
[  114.557529][ T7317] 
[  114.558432][ T7317] The buggy address belongs to the object at ffff88810aa54000
[  114.558432][ T7317]  which belongs to the cache kmalloc-8k of size 8192
[  114.563464][ T7317] The buggy address is located 1856 bytes inside of
[  114.563464][ T7317]  freed 8192-byte region [ffff88810aa54000, ffff88810aa56000)
[  114.568512][ T7317] 
[  114.569411][ T7317] The buggy address belongs to the physical page:
[  114.571738][ T7317] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10aa50
[  114.574903][ T7317] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  114.577838][ T7317] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  114.580721][ T7317] page_type: f5(slab)
[  114.582215][ T7317] raw: 057ff00000000040 ffff88801ac42280 0000000000000000 dead000000000001
[  114.585293][ T7317] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  114.588249][ T7317] head: 057ff00000000040 ffff88801ac42280 0000000000000000 dead000000000001
[  114.591468][ T7317] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  114.595335][ T7317] head: 057ff00000000003 ffffea00042a9401 00000000ffffffff 00000000ffffffff
[  114.598501][ T7317] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  114.601671][ T7317] page dumped because: kasan: bad access detected
[  114.604017][ T7317] page_owner tracks the page as allocated
[  114.606147][ T7317] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5595, tgid 5595 (dhcpcd), ts 37605306060, free_ts 37518384598
[  114.613279][ T7317]  post_alloc_hook+0x240/0x2a0
[  114.615064][ T7317]  get_page_from_freelist+0x2365/0x2440
[  114.617111][ T7317]  __alloc_frozen_pages_noprof+0x181/0x370
[  114.619171][ T7317]  alloc_pages_mpol+0x232/0x4a0
[  114.620865][ T7317]  allocate_slab+0x96/0x3a0
[  114.622435][ T7317]  ___slab_alloc+0xe94/0x1920
[  114.624157][ T7317]  __slab_alloc+0x65/0x100
[  114.625796][ T7317]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  114.628082][ T7317]  kmalloc_reserve+0x136/0x290
[  114.629818][ T7317]  __alloc_skb+0x142/0x2d0
[  114.631406][ T7317]  netlink_dump+0x167/0xe90
[  114.633072][ T7317]  netlink_recvmsg+0x676/0xa30
[  114.634838][ T7317]  sock_recvmsg+0x22c/0x270
[  114.636488][ T7317]  ____sys_recvmsg+0x1c9/0x460
[  114.638202][ T7317]  ___sys_recvmsg+0x1b5/0x510
[  114.639842][ T7317]  __x64_sys_recvmsg+0x198/0x260
[  114.641558][ T7317] page last free pid 5699 tgid 5699 stack trace:
[  114.643781][ T7317]  __free_frozen_pages+0xbc4/0xd30
[  114.645565][ T7317]  __put_partials+0x146/0x170
[  114.647271][ T7317]  put_cpu_partial+0x1f2/0x2e0
[  114.649019][ T7317]  __slab_free+0x2b9/0x390
[  114.650613][ T7317]  qlist_free_all+0x97/0x140
[  114.652329][ T7317]  kasan_quarantine_reduce+0x148/0x160
[  114.654273][ T7317]  __kasan_slab_alloc+0x22/0x80
[  114.656071][ T7317]  __kmalloc_noprof+0x3c3/0x7f0
[  114.657852][ T7317]  tomoyo_realpath_from_path+0xe3/0x5d0
[  114.659815][ T7317]  tomoyo_path_perm+0x213/0x4b0
[  114.661552][ T7317]  security_inode_getattr+0x12f/0x330
[  114.663403][ T7317]  vfs_fstatat+0xb1/0x170
[  114.664918][ T7317]  __x64_sys_newfstatat+0x116/0x190
[  114.666788][ T7317]  do_syscall_64+0xfa/0xfa0
[  114.668436][ T7317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.670601][ T7317] 
[  114.671475][ T7317] Memory state around the buggy address:
[  114.673456][ T7317]  ffff88810aa54600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.676254][ T7317]  ffff88810aa54680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.679002][ T7317] >ffff88810aa54700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.681812][ T7317]                                            ^
[  114.683981][ T7317]  ffff88810aa54780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.686826][ T7317]  ffff88810aa54800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  114.689588][ T7317] ==================================================================
[  114.692518][    C0] vkms_vblank_simulate: vblank timer overrun
[  114.753831][   T10] usb 4-1: USB disconnect, device number 6
[  114.766366][ T7317] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  114.769224][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  114.772526][ T7317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.776155][ T7317] Call Trace:
[  114.777570][ T7317]  <TASK>
[  114.778827][ T7317]  dump_stack_lvl+0x99/0x250
[  114.781041][ T7317]  ? __asan_memcpy+0x40/0x70
[  114.782881][ T7317]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.784958][ T7317]  ? __pfx__printk+0x10/0x10
[  114.786862][ T7317]  vpanic+0x237/0x6d0
[  114.788459][ T7317]  ? __pfx_vpanic+0x10/0x10
[  114.790516][ T7317]  ? preempt_schedule+0xae/0xc0
[  114.792458][ T7317]  ? __pfx_preempt_schedule+0x10/0x10
[  114.794697][ T7317]  panic+0xb9/0xc0
[  114.796318][ T7317]  ? __pfx_panic+0x10/0x10
[  114.798244][ T7317]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  114.800767][ T7317]  ? is_module_address+0x17/0xf0
[  114.802852][ T7317]  ? v4l2_fh_open+0xac/0x420
[  114.804851][ T7317]  check_panic_on_warn+0x89/0xb0
[  114.806894][ T7317]  ? v4l2_fh_open+0xac/0x420
[  114.808821][ T7317]  end_report+0x78/0x160
[  114.810573][ T7317]  kasan_report+0x129/0x150
[  114.812533][ T7317]  ? v4l2_fh_open+0xac/0x420
[  114.814435][ T7317]  v4l2_fh_open+0xac/0x420
[  114.816311][ T7317]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  114.818881][ T7317]  em28xx_v4l2_open+0x157/0x9a0
[  114.820964][ T7317]  v4l2_open+0x1bf/0x3a0
[  114.822799][ T7317]  chrdev_open+0x4cc/0x5e0
[  114.824698][ T7317]  ? __pfx_chrdev_open+0x10/0x10
[  114.827026][ T7317]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  114.829719][ T7317]  ? __pfx_chrdev_open+0x10/0x10
[  114.831851][ T7317]  do_dentry_open+0x953/0x13f0
[  114.833920][ T7317]  vfs_open+0x3b/0x340
[  114.835676][ T7317]  ? path_openat+0x2ecd/0x3830
[  114.837693][ T7317]  path_openat+0x2ee5/0x3830
[  114.839685][ T7317]  ? __pfx_path_openat+0x10/0x10
[  114.841812][ T7317]  do_filp_open+0x1fa/0x410
[  114.843705][ T7317]  ? __lock_acquire+0xab9/0xd20
[  114.845800][ T7317]  ? __pfx_do_filp_open+0x10/0x10
[  114.847952][ T7317]  ? _raw_spin_unlock+0x28/0x50
[  114.849962][ T7317]  ? alloc_fd+0x64c/0x6c0
[  114.851805][ T7317]  do_sys_openat2+0x121/0x1c0
[  114.853707][ T7317]  ? __pfx_do_sys_openat2+0x10/0x10
[  114.855922][ T7317]  ? __pfx___rseq_handle_notify_resume+0x10/0x10
[  114.858474][ T7317]  ? rcu_is_watching+0x15/0xb0
[  114.860513][ T7317]  __x64_sys_openat+0x138/0x170
[  114.862605][ T7317]  do_syscall_64+0xfa/0xfa0
[  114.864568][ T7317]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.866805][ T7317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.869383][ T7317]  ? exc_page_fault+0xab/0x100
[  114.871441][ T7317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.873954][ T7317] RIP: 0033:0x7fdee43169a4
[  114.875880][ T7317] Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
[  114.883853][ T7317] RSP: 002b:00007ffe1325f9b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  114.887312][ T7317] RAX: ffffffffffffffda RBX: 00007ffe1325fbc8 RCX: 00007fdee43169a4
[  114.890531][ T7317] RDX: 0000000000000000 RSI: 00007ffe1325ff1c RDI: 00000000ffffff9c
[  114.893884][ T7317] RBP: 00007ffe1325ff1c R08: 0000000000000000 R09: 0000000000000000
[  114.897237][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  114.900488][ T7317] R13: 00007ffe1325fbe0 R14: 000055f047114670 R15: 00007fdee4780a80
[  114.903631][ T7317]  </TASK>
[  114.905632][ T7317] Kernel Offset: disabled
[  114.907405][ T7317] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:34:51  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003d7ef50
R8 =ffff888107968237 R9 =1ffff11020f2d046 R10=dffffc0000000000 R11=ffffffff8556d2d0
R12=dffffc0000000000 R13=ffffffff99d1990c R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556d34c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdee4698c80 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f08beb056c0 CR3=000000003b6a2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fdab6612e7b
XMM06=0000000000000000 00007fdab6612e75 XMM07=0000000000000000 00007fdab6612e89
XMM08=0000000000000000 00007fdab6612f0f XMM09=0000000000000000 00007fdab6612fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff93741c18 RBX=00000000000003fd RCX=ffffffff966a9c98 RDX=0000000000000008
RSI=00000000000003fd RDI=ffff888100030000 RBP=ffffffff936eef48 RSP=ffffc900001c7438
R8 =ffffc900001c7400 R9 =0000000000000020 R10=ffffc900001c7738 R11=ffffffff819e6dc0
R12=ffffffff936eef48 R13=ffffffff966a9c98 R14=ffff888100030bd0 R15=00000000000002a2
RIP=ffffffff819e516d RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3271aff8 CR3=00000001086ec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ff000000 0000000000000000 XMM05=3f3f3f3f3f3f3f3f 3f3f3f3f3f3f3f3f
XMM06=9999999999999999 9999999999999999 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
