last executing test programs:

2m10.963847272s ago: executing program 0 (id=1112):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00')
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x9, 0x5, 0x3)
preadv(r0, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9)

2m10.749898547s ago: executing program 0 (id=1114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x20, 0x0, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x40004)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x10)
sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x800)

2m10.525380163s ago: executing program 0 (id=1119):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRES64=r0], 0x1, 0x3a2, &(0x7f0000000340)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

2m10.249085509s ago: executing program 0 (id=1124):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

2m9.554462946s ago: executing program 0 (id=1132):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10)
close(r0)

2m8.517631622s ago: executing program 0 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

2m8.156474341s ago: executing program 32 (id=1143):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)

1m25.637286729s ago: executing program 3 (id=1541):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff0003}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x80000})
lseek(r2, 0xfffe, 0x2)

1m25.530095852s ago: executing program 3 (id=1542):
syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000000d00)='./file0\x00', 0x3, &(0x7f0000000d40)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='.\x00', 0x100, 0x52)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0)

1m25.022761584s ago: executing program 3 (id=1548):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x20, 0x15, 0x3, "ec6d7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m23.074064041s ago: executing program 3 (id=1565):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x19, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRES16, @ANYRES8=r0, @ANYRES16, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESDEC, @ANYRES32, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b54089087c846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab660ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x6, 0x56d, &(0x7f00000000c0)="$eJzs3V1v094dwPGfSzuiTOqmMSFUFTiUTSpSCU4CQRFXnnOSHkjsyHZQe4UqmqKKFCbKpLU30Bu2SduLYJd7EXtH6P8S+MsP6WMegD5SfT9VOY59fM7PbuQfp42PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOXWbLtoSdN4nSU1nFsL/Nbey2zvIyvk3oFiRL8iVvwtuZzcSFfd+OPe5uuWyMfdV7OSi4ucbP/2+u+fXJuc6O8/IuDv8t8fbGlza/v1Sq/XfXdSgVxAN68O39bQngl903IaWpnQV9VKxX6wWA9V3TR1uBxGuqXcQDuRH6h5954qVqtlpQvLfsdr1Jym7q98fL9k2xX1tNDWThD63oOnhdBdNM2m8RpJnXhzXOdx/EZ8ZiIVaael1Np6r1sedwBxpeK3VCqNq1SyS6VisVQqVh5VHz227ckjK+xD5EiNk3vT4ud0Ytdu4LgmsvwvTTHiSUeWRA38cqUmgfjSGrI908//f36gR/a7P//Ppqtmb+xtnon/mZNb6atbw/L/kFhO+GuyH9XRbZuyJdvyWlakJz3pyruziejCfDVEiydGQvHFSEucZI3K1iipSkUqYssLWZT6VHwO62KkKVpCWZZQItHJO8qVQLQ4EokvgSiZF1fuiZKiVKUqZVGipSDL4ktHPGlITZyklTVZT857WZQ1LMbdSsWhh5Hv/4S7UhpxtOR/HN8JXbmB4/vaz/8AAAAAAODSspLfvk8l3zeT13XT1PZ5hwUAAAAAAE5Q8pf/2bhIPp11UyzG/wAAAAAAXDZWco+dJSJ5uZ0urYmV3C7FLwEAAAAAALgkkr//34qLZA6U22LtTpfC+B8AAAAAgEvin7uz7w6bYzdsX7X+/4sEwZS10176k7WRzM3rbFxJ97tyuMWoPmNNZ40kRSUtJiddPWvl0kq7k2B+yYq1cXFYewE4uwF8/J4Ark3Kv+VOWufOalquZlt+l/aSr5umLrh+80lRHGd6ItJL0d/erP9dksP/l9eatnKy3usWXr7trSax7MSt7GxkEygemUdxRCzvk/kWknsuBh7xVHIjRtZv3pK19V7Xbi9dzVp2NibShYmDPX6YHtHnJ5lLa81lM97m+1vSPnNxn8XCsKPPoige88g/yd20zt35u2kxIIrSuChK+6MYfC6OH0V5XBTlY0YBAOdlbUwWsuRI3v2Bq9yh7B5f9r4hu8t3ZvdPMp/WmZ9JLqyTMwOu6Pa4K7p9zOz2vyPPQBqWY+N+/3Moq36Od/g8tN+wWbLiU3jl/cZf5frm1vb99Y2VV91X3TelUrliP7TtRyWZSg4jK8g9AIAB9j9jxxqY/0c9hefr1zh3P8xG1TuHR9VZxvvD7kcKCvJS3kpPVmUhudsg+cTBwP935Pd9DGFhzKg1n6TJ9AkvCyNGdb9J7nLot1saWfdgDOWz+FEAAHBm5sbk4dH5Px27L4wZdx/M5aNHx/l9T2sDAACnQwdfrHz0DysITPtFsVotOtGiVkFOnqnA1BpaGS/SgbvoeA2t2oEf+a7fjBeem5oOVdhpt/0gUnU/UG0/NEvJ9IEqe/R7qFuOFxk3bDe1E2rl+l7kuJGqmdBV7c5fmiZc1EGyc9jWrqkb14mM76nQ7wSuLigVar2voqlpLzJ1Ey96qh2YlhPk1HO/2WlpVdOhG5h25KcN9vsyXt0PWkmzhfM+2QAAXBCbW9uvV3q97rtTXBjYce7MDxUAAGTGZGkAAAAAAAAAAAAAAAAAAAAAAHABnMX9fyxc8oX+VNA/3k5OTi9CS877/PyUC2MvHR9O/eIE4FT9GgAA//9t+k3W")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x400, 0x0)

1m22.797760708s ago: executing program 3 (id=1566):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x7, 0x2, 0x7fff, 0xfff7, 0xffff, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040887}, 0x0)

1m22.29345995s ago: executing program 3 (id=1571):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

1m21.931729979s ago: executing program 33 (id=1571):
munmap(&(0x7f0000001000/0x2000)=nil, 0x2000)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x2004890, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}})

26.837200764s ago: executing program 4 (id=2020):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x0, 0x8, 0x2, "20fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x16, 0x3, "0a61fc"}, 0x0, 0x0, 0x0, 0x0})

25.036502619s ago: executing program 4 (id=2021):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000000)='./file0\x00')

24.261643397s ago: executing program 4 (id=2029):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001840)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
read(r0, &(0x7f00000005c0)=""/1015, 0xffb5)

24.092773191s ago: executing program 4 (id=2030):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18)

23.812863628s ago: executing program 4 (id=2032):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f00000006c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000740)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000800)={0x6}, 0x4)

23.053549847s ago: executing program 4 (id=2038):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000740)={0x20, 0x12, 0x6, "323dcaf4e7c7"}, 0x0, 0x0, 0x0, 0x0, 0x0})

22.603711288s ago: executing program 34 (id=2038):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x81, 0xac, 0xd8, 0x40, 0xdf6, 0x56, 0xd24b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7f, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x39, 0x0, 0x2, 0x7a, 0xfa, 0x71, 0x2c, [], [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x7, 0x5, 0x2}}, {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0xc, 0x9}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000009c0)={0x34, &(0x7f0000000740)={0x20, 0x12, 0x6, "323dcaf4e7c7"}, 0x0, 0x0, 0x0, 0x0, 0x0})

22.169556199s ago: executing program 2 (id=2043):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100736f636b6574000014000280080002400000000808000140000000000900020073797a3200000000140000001100010040"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
close(r0)

21.991796293s ago: executing program 2 (id=2045):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
close_range(r0, 0xffffffffffffffff, 0x2)
vmsplice(r1, 0x0, 0x0, 0x0)

21.637578832s ago: executing program 2 (id=2047):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
listen(r0, 0x200)
listen(r0, 0xfffffe01)

20.545413908s ago: executing program 2 (id=2050):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18)

20.129997008s ago: executing program 2 (id=2053):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

19.817468156s ago: executing program 2 (id=2055):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,part=0x0000000\x000000o8859-6,\x00'/49], 0x1, 0x608, &(0x7f00000011c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x440, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

19.122719513s ago: executing program 35 (id=2055):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='decompose,part=0x0000000\x000000o8859-6,\x00'/49], 0x1, 0x608, &(0x7f00000011c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x440, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

4.814698442s ago: executing program 1 (id=2091):
io_cancel(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x75, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xfd}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0)

2.915993729s ago: executing program 5 (id=2109):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000)

2.680242894s ago: executing program 7 (id=2112):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240)={[{@nodiscard}]}, 0x7, 0x504, &(0x7f0000001180)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x80)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @aes128, 0x2, '\x00', @c})

2.46882625s ago: executing program 1 (id=2114):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x3, 0x0)
remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

2.184085717s ago: executing program 5 (id=2116):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

2.085243409s ago: executing program 7 (id=2117):
syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b)

2.04950538s ago: executing program 6 (id=2118):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x165a}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0xd2, &(0x7f0000000340)=""/210, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
preadv(r0, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0)

1.922397963s ago: executing program 5 (id=2119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.885672264s ago: executing program 6 (id=2120):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x28c)

1.739252528s ago: executing program 1 (id=2121):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000080))

1.63659468s ago: executing program 5 (id=2122):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x4040)

1.538892902s ago: executing program 1 (id=2123):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

1.463593314s ago: executing program 7 (id=2124):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.358970286s ago: executing program 1 (id=2125):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8ad41, 0x54)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9)
ioctl(r0, 0x1, &(0x7f0000000240)="d2bf6860")

1.358700797s ago: executing program 5 (id=2126):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'})

1.154264531s ago: executing program 5 (id=2127):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x2603)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0x0, 0x210, 0x0, 0x0}, {0x3, 0xd611, 0x95, &(0x7f00000002c0)="75bd733862ce052511c59b49072256720abd1814738bd46962e0133f4a6aca72363e86a604ed6df1ed40d414313d2f37be59b3f7e738e2e44a42a3d18c97d4cc401929382e66d6999d7067183cad8b7e743c5481d5ed2c4c5db8605722027193048d67d33c2276af3f5d0a72f1367fba948c446ce0cb621b79349e63e6fffa95d072454f9964921c426b4e8d86655adb724a9ef784"}, {0x29d, 0x1000, 0x0, 0x0}], 0x3})

1.106856993s ago: executing program 7 (id=2128):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x109)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)

941.606217ms ago: executing program 7 (id=2129):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x8, 0x0)
ptrace$poke(0x420f, r0, 0x0, 0x40000000067af)

907.086168ms ago: executing program 6 (id=2130):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000800)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000840)={r0, r0, 0x1, 0x1, &(0x7f0000000900)="b0", 0x9, 0x74, 0x10cf, 0x8, 0x43, 0x0, 0x8, 'syz0\x00'})

630.096985ms ago: executing program 6 (id=2131):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000080))

362.107551ms ago: executing program 7 (id=2132):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202"], 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0)

221.147794ms ago: executing program 1 (id=2133):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b018c0000000000b7080000959700007b8af0ff0000002b6f841a8774c79100077249462e4926d028a400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94)

220.026314ms ago: executing program 6 (id=2134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

0s ago: executing program 6 (id=2135):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x3b7, &(0x7f0000000780)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0)

kernel console output (not intermixed with test programs):

9452] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910
[  240.172496][ T5778] syz-executor: attempt to access beyond end of device
[  240.172496][ T5778] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  240.191839][ T5778] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  240.246268][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1521'.
[  240.686752][ T9503] loop1: detected capacity change from 0 to 128
[  240.830945][   T27] IPVS: starting estimator thread 0...
[  240.887274][    T8] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  240.936983][ T9507] IPVS: using max 19 ests per chain, 45600 per kthread
[  241.070327][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  241.093825][    T8] usb 4-1: not running at top speed; connect to a high speed hub
[  241.113796][    T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30
[  241.132247][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  241.146043][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  241.166601][    T8] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  241.185015][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.205239][    T8] usb 4-1: config 0 descriptor??
[  241.576970][ T5869] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  241.670830][ T9516] loop4: detected capacity change from 0 to 40427
[  241.687988][ T9516] F2FS-fs (loop4): build fault injection attr: rate: 25, type: 0x7ffff
[  241.720398][ T9516] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7698c
[  241.744320][ T9516] F2FS-fs (loop4): invalid crc value
[  241.759016][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.787812][ T9516] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x217/0x970
[  241.798951][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.820657][ T5869] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  241.830442][ T9516] F2FS-fs (loop4): Found nat_bits in checkpoint
[  241.860514][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.874865][    T8] usb 4-1: string descriptor 0 read error: -71
[  241.886216][ T9510] loop2: detected capacity change from 0 to 32768
[  241.893443][    T8] uclogic 0003:5543:004D.0008: failed retrieving string descriptor #200: -71
[  241.922217][ T5869] usb 2-1: config 0 descriptor??
[  241.927481][    T8] uclogic 0003:5543:004D.0008: failed retrieving pen parameters: -71
[  241.927508][    T8] uclogic 0003:5543:004D.0008: failed probing pen v2 parameters: -71
[  241.927560][    T8] uclogic 0003:5543:004D.0008: failed probing parameters: -71
[  241.927838][    T8] uclogic: probe of 0003:5543:004D.0008 failed with error -71
[  242.014669][    T8] usb 4-1: USB disconnect, device number 10
[  242.047247][ T9510] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  242.062700][ T9516] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  242.208555][ T9516] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  242.220627][ T9510] XFS (loop2): Ending clean mount
[  242.361483][ T9516] F2FS-fs (loop4): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xe1/0x1d0
[  242.394587][ T5869] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  242.403608][ T5869] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  242.414574][ T5869] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  242.429780][ T5869] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  242.439888][ T9516] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910
[  242.452351][ T5869] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  242.462088][ T5777] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  242.475037][ T5869] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[  242.559349][ T8640] syz-executor: attempt to access beyond end of device
[  242.559349][ T8640] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.707222][ T8640] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  242.806365][ T5869] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 32: -71
[  242.818936][ T5869] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense firmware info: -71
[  242.837322][ T5869] playstation 0003:054C:0DF2.0009: Failed to get firmware info from DualSense
[  242.856738][ T5869] playstation 0003:054C:0DF2.0009: Failed to create dualsense.
[  242.898691][ T5869] playstation: probe of 0003:054C:0DF2.0009 failed with error -71
[  242.936453][ T5869] usb 2-1: USB disconnect, device number 10
[  243.123380][ T9536] loop2: detected capacity change from 0 to 128
[  243.127403][ T9534] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  243.517383][ T9542] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1531'.
[  243.537129][ T9542] netlink: 'syz.3.1531': attribute type 1 has an invalid length.
[  243.864441][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'.
[  243.906169][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1537'.
[  243.931652][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'.
[  243.945849][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1537'.
[  244.290279][ T9569] loop3: detected capacity change from 0 to 1024
[  244.329512][ T9569] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  244.360789][ T9569] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  244.410772][ T9569] EXT4-fs error (device loop3): ext4_get_journal_inode:5820: inode #32: comm syz.3.1542: iget: special inode unallocated
[  244.435892][ T9569] EXT4-fs (loop3): no journal found
[  244.442427][ T9569] EXT4-fs (loop3): can't get journal size
[  244.470892][ T9569] EXT4-fs (loop3): filesystem is read-only
[  244.491509][ T9569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  244.691451][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.106365][ T9594] pimreg0: tun_chr_ioctl cmd 2147767506
[  245.117116][   T27] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  245.284752][ T9596] loop4: detected capacity change from 0 to 64
[  245.327200][   T27] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  245.337064][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.345159][   T27] usb 4-1: Product: syz
[  245.366854][   T27] usb 4-1: Manufacturer: syz
[  245.371572][   T27] usb 4-1: SerialNumber: syz
[  245.390097][   T27] usb 4-1: config 0 descriptor??
[  245.402157][ T9592] loop1: detected capacity change from 0 to 32768
[  245.801895][ T9603] loop4: detected capacity change from 0 to 128
[  245.832224][   T27] usb 4-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126)
[  245.847754][ T9603] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  245.902937][ T9603] hpfs: filesystem error: improperly stopped
[  245.931490][ T9603] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  245.959113][ T9605] sctp: [Deprecated]: syz.1.1557 (pid 9605) Use of struct sctp_assoc_value in delayed_ack socket option.
[  245.959113][ T9605] Use struct sctp_sack_info instead
[  245.960325][ T9603] hpfs: You really don't want any checks? You are crazy...
[  246.000847][ T9603] hpfs: hpfs_map_sector(): read error
[  246.006414][ T9603] hpfs: code page support is disabled
[  246.036446][ T9603] hpfs: hpfs_map_4sectors(): unaligned read
[  246.044414][   T27] usb 4-1: failed to fetch extended address, random address set
[  246.067111][ T9603] hpfs: hpfs_map_4sectors(): unaligned read
[  246.073108][ T9603] hpfs: filesystem error: unable to find root dir
[  246.078275][   T27] usb 4-1: atusb_probe: initialization failed, error = -524
[  246.099358][   T27] atusb: probe of 4-1:0.0 failed with error -524
[  246.124818][   T27] usb 4-1: USB disconnect, device number 11
[  246.282272][ T9612] loop2: detected capacity change from 0 to 512
[  246.368941][ T9612] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  246.391141][ T9612] EXT4-fs (loop2): 1 truncate cleaned up
[  246.399285][ T9612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.572553][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.747252][ T9628] loop3: detected capacity change from 0 to 164
[  246.797366][ T9628] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  246.914617][ T5779] iso9660: Corrupted directory entry in block 2 of inode 1920
[  246.959993][ T5779] ISOFS: unable to read i-node block
[  246.976738][ T5779] ISOFS: unable to read i-node block
[  247.008842][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1574'.
[  247.320341][ T9626] loop2: detected capacity change from 0 to 32768
[  247.376404][ T9636] sctp: [Deprecated]: syz.4.1569 (pid 9636) Use of struct sctp_assoc_value in delayed_ack socket option.
[  247.376404][ T9636] Use struct sctp_sack_info instead
[  247.929696][ T9644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1576'.
[  247.940851][ T9644] netlink: 'syz.2.1576': attribute type 1 has an invalid length.
[  248.066931][ T9647] loop4: detected capacity change from 0 to 1024
[  248.095127][ T9647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  248.158535][ T9647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.193415][ T9647] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  248.212995][ T9647] EXT4-fs error (device loop4) in ext4_setattr:5695: error 28
[  248.259736][ T8640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.481845][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  248.494501][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  248.518624][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  248.544807][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  248.552698][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  248.565148][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  248.638201][ T9660] rxe_eth0 speed is unknown, defaulting to 1000
[  249.003663][ T9673] loop4: detected capacity change from 0 to 128
[  249.012324][ T9673] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  249.035959][ T9673] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  249.086517][ T9660] chnl_net:caif_netlink_parms(): no params data found
[  249.196154][   T59] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  249.283923][ T9660] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.291452][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.299326][ T9660] bridge_slave_0: entered allmulticast mode
[  249.307115][ T9660] bridge_slave_0: entered promiscuous mode
[  249.317893][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.325170][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.333453][ T9660] bridge_slave_1: entered allmulticast mode
[  249.341265][ T9660] bridge_slave_1: entered promiscuous mode
[  249.376901][ T9660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.392045][ T9660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.434343][ T9660] team0: Port device team_slave_0 added
[  249.444166][ T9660] team0: Port device team_slave_1 added
[  249.476453][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.483695][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.515090][ T9660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.532379][ T9660] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.541055][ T9660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.569192][ T9660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.670229][ T9660] hsr_slave_0: entered promiscuous mode
[  249.694281][ T9660] hsr_slave_1: entered promiscuous mode
[  249.701107][ T9660] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.716964][ T9660] Cannot create hsr debugfs directory
[  250.048244][ T9687] loop4: detected capacity change from 0 to 4096
[  250.138187][ T9690] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  250.300845][ T9660] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  250.330446][ T9660] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  250.394180][ T9660] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  250.440830][ T9660] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  250.651259][   T51] Bluetooth: hci0: command tx timeout
[  250.723760][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1592'.
[  250.809794][ T9660] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.856346][ T9660] 8021q: adding VLAN 0 to HW filter on device team0
[  250.888075][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.896492][ T3508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.938538][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.945836][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.265769][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'.
[  251.350816][ T5896] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  251.424146][ T9660] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.496981][   T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  251.543562][ T5896] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  251.557225][   T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  251.568264][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.576326][ T5896] usb 5-1: Product: syz
[  251.589775][ T5896] usb 5-1: Manufacturer: syz
[  251.594448][ T5896] usb 5-1: SerialNumber: syz
[  251.608403][ T5896] usb 5-1: config 0 descriptor??
[  251.690742][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.714211][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.737004][   T27] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  251.756603][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.769091][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.796892][   T23] usb 2-1: config 1 interface 0 altsetting 36 endpoint 0x5 has an invalid bInterval 128, changing to 11
[  251.809860][   T27] usb 3-1: config 0 descriptor??
[  251.837946][   T23] usb 2-1: config 1 interface 0 altsetting 36 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  251.860980][   T23] usb 2-1: config 1 interface 0 has no altsetting 0
[  251.874641][   T23] usb 2-1: New USB device found, idVendor=0499, idProduct=1020, bcdDevice= 0.40
[  251.884635][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.901532][   T23] usb 2-1: Product: syz
[  251.907649][   T23] usb 2-1: Manufacturer: syz
[  251.912352][   T23] usb 2-1: SerialNumber: syz
[  251.970290][ T9660] veth0_vlan: entered promiscuous mode
[  252.004460][ T9660] veth1_vlan: entered promiscuous mode
[  252.069602][ T9660] veth0_macvtap: entered promiscuous mode
[  252.081541][ T5896] usb 5-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126)
[  252.104812][ T9660] veth1_macvtap: entered promiscuous mode
[  252.142335][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.153531][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.163532][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.174672][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.185509][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.209305][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.221256][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.232942][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.243229][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.254124][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.272051][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.293052][   T27] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  252.302951][ T5896] usb 5-1: failed to fetch extended address, random address set
[  252.314113][ T5896] usb 5-1: atusb_probe: initialization failed, error = -524
[  252.322666][   T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  252.335130][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.345781][   T27] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  252.353807][ T5896] atusb: probe of 5-1:0.0 failed with error -524
[  252.363244][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.367346][   T27] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  252.386658][ T5896] usb 5-1: USB disconnect, device number 5
[  252.410253][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.422159][   T27] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  252.435407][   T27] playstation 0003:054C:0DF2.000A: unknown main item tag 0x0
[  252.454655][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.464318][   T27] playstation 0003:054C:0DF2.000A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0
[  252.489853][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.511697][   T23] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[  252.527267][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.557171][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.557542][   T23] usb 2-1: USB disconnect, device number 11
[  252.596971][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.621962][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  252.637823][ T9660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.637845][ T9660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.642235][ T9660] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.727241][   T51] Bluetooth: hci0: command tx timeout
[  252.729712][ T9660] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.759424][ T9660] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.771203][ T9660] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.785711][ T9660] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.796117][   T27] playstation 0003:054C:0DF2.000A: Failed to retrieve feature with reportID 32: -71
[  252.806275][   T27] playstation 0003:054C:0DF2.000A: Failed to retrieve DualSense firmware info: -71
[  252.817077][   T27] playstation 0003:054C:0DF2.000A: Failed to get firmware info from DualSense
[  252.826002][   T27] playstation 0003:054C:0DF2.000A: Failed to create dualsense.
[  252.854497][   T27] playstation: probe of 0003:054C:0DF2.000A failed with error -71
[  252.872578][   T27] usb 3-1: USB disconnect, device number 11
[  253.065138][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.094889][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.177277][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.204411][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  253.298378][ T9735] loop4: detected capacity change from 0 to 512
[  253.354351][ T9735] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1603: casefold flag without casefold feature
[  253.425779][ T9735] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1603: couldn't read orphan inode 15 (err -117)
[  253.430272][ T9741] loop5: detected capacity change from 0 to 512
[  253.478103][ T9741] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  253.499895][ T9735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.511162][ T9741] EXT4-fs (loop5): 1 truncate cleaned up
[  253.528886][ T9741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.814217][ T9660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.827063][ T5875] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  254.032488][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  254.059929][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00
[  254.084388][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.417183][   T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  254.527906][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.551863][ T5875] input input18: Device does not respond to id packet M
[  254.562691][ T9764] loop2: detected capacity change from 0 to 128
[  254.572343][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.583006][ T9764] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  254.595135][ T5875] input input18: Device does not respond to id packet P
[  254.595786][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.614900][ T9764] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  254.625177][ T5875] input input18: Device does not respond to id packet B
[  254.645682][   T23] usb 6-1: Using ep0 maxpacket: 16
[  254.656759][   T23] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.669576][   T23] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.681893][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.689067][   T23] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  254.696473][ T5875] input input18: Device does not respond to id packet N
[  254.710020][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.718197][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.724562][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.736168][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.745612][ T5875] iforce 5-1:1.0: usb_submit_urb failed: -71
[  254.756033][   T23] usb 6-1: Product: syz
[  254.763498][   T23] usb 6-1: Manufacturer: syz
[  254.770769][   T23] usb 6-1: SerialNumber: syz
[  254.800635][ T1090] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  254.810249][ T5875] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input18
[  254.823216][   T51] Bluetooth: hci0: command tx timeout
[  254.857160][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  254.887522][ T5875] usb 5-1: USB disconnect, device number 6
[  254.887792][    C1] iforce 5-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19
[  255.009450][   T23] usb 6-1: 0:2 : does not exist
[  255.032452][   T23] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  255.064156][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  255.128334][   T51] Bluetooth: hci2: Malformed LE Event: 0x0d
[  255.147729][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short
[  255.168539][   T23] usb 6-1: USB disconnect, device number 2
[  255.175578][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -71
[  255.191156][ T5897] usb 2-1: can't read configurations, error -71
[  255.262146][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.304631][ T8640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.804434][ T9784] loop5: detected capacity change from 0 to 4096
[  255.847354][ T9787] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  255.938400][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  255.944800][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.005084][ T9789] loop1: detected capacity change from 0 to 4096
[  256.067827][ T9789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.463829][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.542965][   T28] audit: type=1326 audit(1792157339.910:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.5.1628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  256.657071][   T28] audit: type=1326 audit(1792157339.910:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.5.1628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  256.777179][ T9802] binder: 9801:9802 ioctl c018620c 200000000240 returned -1
[  256.796051][   T28] audit: type=1326 audit(1792157339.950:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.5.1628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  256.888646][   T51] Bluetooth: hci0: command tx timeout
[  256.917104][   T28] audit: type=1326 audit(1792157339.950:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.5.1628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  257.009112][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  257.048503][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.053073][ T9806] ip_tables: iptables: counters copy to user failed while replacing table
[  257.079304][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  257.096581][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.117010][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  257.125833][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.143569][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  257.152610][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.170318][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  257.186111][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  257.213883][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  257.266385][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  257.627136][    T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  257.797267][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  257.806972][    T8] usb 2-1: Using ep0 maxpacket: 16
[  257.817328][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  257.833434][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  257.845085][    T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  257.854649][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.863407][    T8] usb 2-1: Product: syz
[  257.870036][    T8] usb 2-1: Manufacturer: syz
[  257.874689][    T8] usb 2-1: SerialNumber: syz
[  257.987302][ T5897] usb 3-1: Using ep0 maxpacket: 16
[  258.006180][   T51] Bluetooth: hci1: Malformed LE Event: 0x0d
[  258.028362][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short
[  258.045059][ T5897] usb 3-1: unable to read config index 0 descriptor/start: -71
[  258.052874][ T5897] usb 3-1: can't read configurations, error -71
[  258.098397][    T8] usb 2-1: 0:2 : does not exist
[  258.119350][    T8] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  258.146429][    T8] usb 2-1: USB disconnect, device number 14
[  258.185943][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  258.635726][ T9819] loop2: detected capacity change from 0 to 4096
[  258.709394][ T9824] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.286020][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  260.301559][ T9871] loop2: detected capacity change from 0 to 256
[  260.950376][ T9893] netlink: 'syz.2.1670': attribute type 8 has an invalid length.
[  260.977185][ T9893] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1670'.
[  260.999135][ T9893] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1670'.
[  261.024048][ T9897] loop1: detected capacity change from 0 to 512
[  261.066086][ T9897] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1672: casefold flag without casefold feature
[  261.118707][ T9897] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1672: couldn't read orphan inode 15 (err -117)
[  261.161591][ T9897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.434327][   T28] audit: type=1326 audit(1792157344.800:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9879 comm="syz.4.1665" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa667f9e559 code=0x7fc00000
[  261.637114][   T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  261.846905][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  261.862053][   T23] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00
[  261.884611][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.325082][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.366590][   T23] input input19: Device does not respond to id packet M
[  262.387982][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.394176][   T23] input input19: Device does not respond to id packet P
[  262.402423][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.409502][   T23] input input19: Device does not respond to id packet B
[  262.418688][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.424775][   T23] input input19: Device does not respond to id packet N
[  262.434440][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.484770][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.497281][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.517285][   T23] iforce 2-1:1.0: usb_submit_urb failed: -71
[  262.542532][   T23] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19
[  262.638717][   T23] usb 2-1: USB disconnect, device number 15
[  262.900708][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1692'.
[  262.916723][ T9944] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  262.987881][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.148017][ T9952] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1695'.
[  263.211090][   T23] IPVS: starting estimator thread 0...
[  263.279242][   T28] audit: type=1326 audit(1792157346.650:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.336967][ T9957] IPVS: using max 20 ests per chain, 48000 per kthread
[  263.345008][   T28] audit: type=1326 audit(1792157346.670:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.416862][   T28] audit: type=1326 audit(1792157346.690:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.497437][   T28] audit: type=1326 audit(1792157346.690:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.566864][   T28] audit: type=1326 audit(1792157346.690:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.593606][ T9968] loop1: detected capacity change from 0 to 512
[  263.616624][ T9968] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  263.649388][   T28] audit: type=1326 audit(1792157346.690:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe953f8d9 code=0x7ffc0000
[  263.736890][   T28] audit: type=1326 audit(1792157346.690:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.760843][    C1] vkms_vblank_simulate: vblank timer overrun
[  263.869947][   T28] audit: type=1326 audit(1792157346.690:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.894029][    C1] vkms_vblank_simulate: vblank timer overrun
[  263.913743][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  263.937799][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  263.966891][   T28] audit: type=1326 audit(1792157346.690:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  263.991328][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  264.000407][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.020856][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  264.036914][   T28] audit: type=1326 audit(1792157346.690:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9953 comm="syz.5.1697" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbfe959e559 code=0x7ffc0000
[  264.060871][    C1] vkms_vblank_simulate: vblank timer overrun
[  264.077618][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.096843][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  264.107548][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.127025][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  264.146036][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  264.165584][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  264.177135][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  264.291725][ T9959] loop2: detected capacity change from 0 to 32768
[  264.584170][ T9979] loop2: detected capacity change from 0 to 512
[  264.659420][ T9979] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.1704: casefold flag without casefold feature
[  264.727699][ T9979] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1704: couldn't read orphan inode 15 (err -117)
[  264.760167][ T9979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.127189][ T5869] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  265.308016][  T174] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  265.337826][ T5869] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  265.359168][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00
[  265.376825][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.498497][  T174] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  265.510812][  T174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.535374][  T174] usb 6-1: config 0 descriptor??
[  265.550144][  T174] cp210x 6-1:0.0: cp210x converter detected
[  265.809768][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.823841][ T5869] input input20: Device does not respond to id packet M
[  265.836176][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.853005][ T5869] input input20: Device does not respond to id packet P
[  265.878457][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.893563][ T5869] input input20: Device does not respond to id packet B
[  265.905180][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.924528][ T5869] input input20: Device does not respond to id packet N
[  265.947613][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.964425][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.981639][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  265.996581][ T5869] iforce 3-1:1.0: usb_submit_urb failed: -71
[  266.022712][ T5869] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input20
[  266.062824][T10009] loop4: detected capacity change from 0 to 256
[  266.155328][ T5869] usb 3-1: USB disconnect, device number 14
[  266.161651][    C1] iforce 3-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19
[  266.178054][  T174] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[  266.218527][  T174] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  266.245995][  T174] usb 6-1: cp210x converter now attached to ttyUSB0
[  266.310938][  T174] usb 6-1: USB disconnect, device number 3
[  266.345865][  T174] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  266.382756][  T174] cp210x 6-1:0.0: device disconnected
[  266.517978][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.817017][T10028] loop5: detected capacity change from 0 to 128
[  266.838563][T10028] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  266.905206][T10030] kAFS: bad VL server IP address
[  267.522009][T10052] netem: change failed
[  267.688019][    T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  267.880156][    T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.896971][    T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  267.905949][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  267.928637][    T8] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  267.938180][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.947359][    T8] usb 2-1: Product: syz
[  267.951587][    T8] usb 2-1: Manufacturer: syz
[  267.956239][    T8] usb 2-1: SerialNumber: syz
[  267.974147][    T8] usb 2-1: Found UVC 1.00 device syz (046d:0821)
[  267.981069][    T8] usb 2-1: No valid video chain found.
[  268.177893][ T5897] usb 2-1: USB disconnect, device number 16
[  268.301976][ T5869] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  268.509579][ T5869] usb 6-1: config 127 has an invalid interface number: 57 but max is 0
[  268.518855][ T5869] usb 6-1: config 127 has no interface number 0
[  268.525317][ T5869] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  268.547425][ T5869] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  268.565951][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.582901][ T5869] usb 6-1: Product: syz
[  268.592808][ T5869] usb 6-1: Manufacturer: syz
[  268.597727][ T5869] usb 6-1: SerialNumber: syz
[  268.616193][T10066] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  269.059488][T10066] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  269.311811][T10095] loop4: detected capacity change from 0 to 128
[  269.485051][ T5869] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  269.500725][ T5869] asix 6-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  269.513929][ T5869] asix: probe of 6-1:127.57 failed with error -71
[  269.550527][ T5869] usb 6-1: USB disconnect, device number 4
[  269.725709][T10105] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  269.858637][T10109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'.
[  270.442638][   T23] kernel write not supported for file /input/mice (pid: 23 comm: kworker/1:0)
[  270.579137][T10125] loop2: detected capacity change from 0 to 16
[  270.609663][T10125] erofs: Bad value for 'cache_strategy'
[  270.666131][T10128] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1777'.
[  270.689866][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  270.792764][T10111] loop1: detected capacity change from 0 to 32768
[  270.896402][T10111] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  271.061819][T10111] XFS (loop1): Ending clean mount
[  271.211176][ T5778] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  271.325876][T10151] loop5: detected capacity change from 0 to 1024
[  271.362013][T10151] EXT4-fs: Ignoring removed bh option
[  271.424107][T10151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.513476][T10151] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.1784: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  271.587024][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  271.682736][ T9660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.827567][ T5897] usb 3-1: Using ep0 maxpacket: 16
[  271.835166][ T5897] usb 3-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30
[  271.876984][ T5897] usb 3-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.916904][ T5897] usb 3-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68
[  271.959792][ T5897] usb 3-1: config 0 interface 0 has no altsetting 0
[  271.973771][ T5897] usb 3-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00
[  272.006979][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.029154][ T5897] usb 3-1: config 0 descriptor??
[  272.397042][   T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  272.423294][T10172] rnbd_client L203: map_device: Unknown parameter or missing value 'p'
[  272.479706][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.506979][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.513957][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.551109][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.587147][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.594513][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.607140][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.616880][   T23] usb 6-1: Using ep0 maxpacket: 8
[  272.634451][   T23] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  272.647329][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.655409][ T5897] wacom 0003:056A:0309.000B: unknown main item tag 0x0
[  272.671751][   T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  272.695166][   T23] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  272.709210][ T5897] wacom 0003:056A:0309.000B: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.2-1/input0
[  272.727303][   T23] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.745271][ T5897] usb 3-1: USB disconnect, device number 15
[  272.751520][   T23] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  272.799566][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.990512][T10177] fido_id[10177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  273.049457][   T23] usb 6-1: GET_CAPABILITIES returned 0
[  273.055043][   T23] usbtmc 6-1:16.0: can't read capabilities
[  273.138581][T10187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1795'.
[  273.184527][T10187] veth1: entered promiscuous mode
[  273.201905][T10187] veth1: left promiscuous mode
[  273.254758][    T8] usb 6-1: USB disconnect, device number 5
[  273.674406][T10207] ip6gre1: entered promiscuous mode
[  273.703592][T10207] ip6gre1: entered allmulticast mode
[  273.736297][ T1139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  273.753188][ T1139] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  273.767403][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.167324][    T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.207425][T10211] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100]
[  274.232869][T10211] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  274.273083][T10211] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  274.292225][T10211] One or more global auth toks could not properly register; rc = [-22]
[  274.318568][T10211] Error parsing options; rc = [-22]
[  274.415099][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'.
[  274.543995][   T23] kernel write not supported for file /input/event2 (pid: 23 comm: kworker/1:0)
[  274.731184][    T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  274.761275][T10244] kAFS: Invalid Command on /proc/fs/afs/cells file
[  275.206704][T10263] loop5: detected capacity change from 0 to 256
[  275.722050][T10277] loop2: detected capacity change from 0 to 256
[  275.752257][T10277] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  275.863044][T10258] loop1: detected capacity change from 0 to 32768
[  275.949317][T10285] loop5: detected capacity change from 0 to 16
[  275.959842][T10258] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  276.013466][T10285] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  276.094162][T10258] (syz.1.1823,10258,1):ocfs2_rename:1286 ERROR: status = -2
[  276.134395][T10258] (syz.1.1823,10258,1):ocfs2_rename:1692 ERROR: status = -2
[  276.376520][ T5778] ocfs2: Unmounting device (7,1) on (node local)
[  276.514467][T10296] loop1: detected capacity change from 0 to 1024
[  276.530600][T10296] EXT4-fs: Ignoring removed bh option
[  276.557069][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  276.575434][T10296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.616703][T10296] EXT4-fs error (device loop1): ext4_check_all_de:666: inode #12: block 7: comm syz.1.1839: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  276.729222][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.766927][    T8] usb 3-1: Using ep0 maxpacket: 16
[  276.779786][    T8] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  276.806546][    T8] usb 3-1: config 0 has no interface number 0
[  276.831223][    T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  276.857272][    T8] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  276.889308][    T8] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  276.903851][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.924276][    T8] usb 3-1: Product: syz
[  276.933935][    T8] usb 3-1: Manufacturer: syz
[  276.951792][    T8] usb 3-1: SerialNumber: syz
[  276.970390][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  276.988945][    T8] usb 3-1: config 0 descriptor??
[  277.007182][T10291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  277.014713][T10291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  277.037349][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  277.049462][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  277.073964][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  277.091209][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  277.110578][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  277.130452][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  277.148119][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  277.173186][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  277.193280][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  277.204851][T10309] loop5: detected capacity change from 0 to 764
[  277.211909][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  277.278709][T10291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  277.313892][T10291] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  277.927056][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  277.938662][T10324] loop4: detected capacity change from 0 to 1024
[  277.963193][T10324] EXT4-fs: Ignoring removed bh option
[  278.047258][T10324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.161274][T10324] EXT4-fs error (device loop4): ext4_check_all_de:666: inode #12: block 7: comm syz.4.1851: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  278.322685][ T8640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.671063][T10316] loop5: detected capacity change from 0 to 131072
[  278.681696][T10316] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0)
[  278.691269][T10316] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  278.700600][    T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  278.716395][T10316] F2FS-fs (loop5): invalid crc value
[  278.722991][    T8] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid PHY address: 84
[  278.753828][T10316] F2FS-fs (loop5): Found nat_bits in checkpoint
[  278.811366][T10316] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  278.818723][T10316] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  278.855111][T10316] F2FS-fs (loop5): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36
[  278.931697][    T8] usb 3-1: USB disconnect, device number 16
[  279.237717][T10348] rnbd_client L203: map_device: Unknown parameter or missing value 'p'
[  279.378862][T10350] loop4: detected capacity change from 0 to 128
[  279.422705][T10350] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  279.468362][T10350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.654894][T10356] dvmrp8: entered allmulticast mode
[  279.895469][T10358] loop2: detected capacity change from 0 to 4096
[  279.966067][T10358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.189807][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.488287][T10374] loop2: detected capacity change from 0 to 1024
[  280.505245][T10374] EXT4-fs: Ignoring removed bh option
[  280.511704][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1870'.
[  280.553335][T10374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.619461][T10374] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.1867: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  280.770162][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.022240][T10389] loop2: detected capacity change from 0 to 4096
[  281.042499][T10389] EXT4-fs: inline encryption not supported
[  281.068160][T10389] EXT4-fs: Ignoring removed orlov option
[  281.090645][T10389] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  281.122171][T10389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.211899][T10378] loop4: detected capacity change from 0 to 32768
[  281.267088][T10378] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  281.304927][T10394] loop5: detected capacity change from 0 to 4096
[  281.329390][T10394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.359430][T10389] overlayfs: missing 'workdir'
[  281.428651][T10378] XFS (loop4): Ending clean mount
[  281.479516][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.652325][ T8640] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  281.733049][ T9660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.773819][T10410] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100]
[  281.808107][T10410] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  281.856323][T10410] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  281.882726][T10410] One or more global auth toks could not properly register; rc = [-22]
[  281.906316][T10410] Error parsing options; rc = [-22]
[  282.018165][ T5875] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  282.111902][   T27] kernel write not supported for file /input/event2 (pid: 27 comm: kworker/1:1)
[  282.218406][T10417] loop5: detected capacity change from 0 to 1024
[  282.226455][T10417] EXT4-fs: Ignoring removed bh option
[  282.249235][ T5875] usb 2-1: config 127 has an invalid interface number: 57 but max is 0
[  282.267167][ T5875] usb 2-1: config 127 has no interface number 0
[  282.273541][ T5875] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  282.305702][T10417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  282.321438][ T5875] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  282.331866][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.340722][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1884'.
[  282.373682][ T5875] usb 2-1: Product: syz
[  282.394712][T10417] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.1885: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  282.415188][ T5875] usb 2-1: Manufacturer: syz
[  282.435052][ T5875] usb 2-1: SerialNumber: syz
[  282.467490][T10408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  282.525558][ T9660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.591962][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  282.591978][   T28] audit: type=1326 audit(1792157365.960:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.4.1896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa667f9e559 code=0x7ffc0000
[  282.672514][   T28] audit: type=1326 audit(1792157365.960:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.4.1896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa667f9e559 code=0x7ffc0000
[  282.721717][   T28] audit: type=1326 audit(1792157365.960:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.4.1896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa667f9e559 code=0x7ffc0000
[  282.758593][   T28] audit: type=1326 audit(1792157365.960:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10424 comm="syz.4.1896" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa667f9e559 code=0x7ffc0000
[  282.939129][T10408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  283.220953][T10441] loop4: detected capacity change from 0 to 4096
[  283.250146][T10441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.362081][ T5875] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  283.380986][ T5875] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  283.392022][ T5875] asix: probe of 2-1:127.57 failed with error -71
[  283.411374][ T5875] usb 2-1: USB disconnect, device number 17
[  283.463761][ T8640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.626216][T10449] ecryptfs_verify_version: Major version number mismatch. Expected [0]; got [100]
[  283.636361][T10449] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4]
[  283.651155][T10449] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  283.670761][T10449] One or more global auth toks could not properly register; rc = [-22]
[  283.679741][T10449] Error parsing options; rc = [-22]
[  283.935187][T10447] loop5: detected capacity change from 0 to 32768
[  283.973429][T10447] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  284.100423][T10447] XFS (loop5): Ending clean mount
[  284.163163][   T27] kernel write not supported for file /input/event2 (pid: 27 comm: kworker/1:1)
[  284.357699][ T9660] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  284.987059][ T5875] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  285.082914][T10487] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  285.177285][ T5875] usb 2-1: Using ep0 maxpacket: 16
[  285.192313][ T5875] usb 2-1: too many endpoints for config 0 interface 0 altsetting 69: 68, using maximum allowed: 30
[  285.227076][ T5875] usb 2-1: config 0 interface 0 altsetting 69 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.238585][ T5875] usb 2-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 68
[  285.258048][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0
[  285.264912][ T5875] usb 2-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00
[  285.275056][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.298301][ T5875] usb 2-1: config 0 descriptor??
[  285.337000][   T27] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  285.539655][   T27] usb 3-1: config 127 has an invalid interface number: 57 but max is 0
[  285.556988][   T27] usb 3-1: config 127 has no interface number 0
[  285.574245][   T27] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  285.641352][   T27] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  285.650759][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.662728][   T27] usb 3-1: Product: syz
[  285.677204][   T27] usb 3-1: Manufacturer: syz
[  285.682961][   T27] usb 3-1: SerialNumber: syz
[  285.705754][T10486] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  285.799777][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.822993][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.842182][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.862093][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.881889][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.896333][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.914134][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.954754][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  285.966975][ T5875] wacom 0003:056A:0309.000C: unknown main item tag 0x0
[  286.029826][ T5875] wacom 0003:056A:0309.000C: hidraw0: USB HID v0.00 Device [HID 056a:0309] on usb-dummy_hcd.1-1/input0
[  286.066093][ T5875] usb 2-1: USB disconnect, device number 18
[  286.170089][T10486] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  286.197032][   T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  286.207369][T10502] fido_id[10502]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  286.410466][   T23] usb 5-1: Using ep0 maxpacket: 8
[  286.422309][   T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  286.433985][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  286.444337][   T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.454703][   T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.469721][   T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  286.481569][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.618142][   T27] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  286.647114][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  286.655133][   T27] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  286.697172][   T27] asix: probe of 3-1:127.57 failed with error -71
[  286.712163][   T27] usb 3-1: USB disconnect, device number 17
[  286.757584][   T23] usb 5-1: GET_CAPABILITIES returned 0
[  286.763156][   T23] usbtmc 5-1:16.0: can't read capabilities
[  287.017837][   T27] kernel write not supported for file /input/event2 (pid: 27 comm: kworker/1:1)
[  287.052808][ T5875] usb 5-1: USB disconnect, device number 7
[  287.747799][T10526] loop2: detected capacity change from 0 to 256
[  287.807681][ T5787] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  288.666997][   T23] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  288.872706][   T23] usb 5-1: config 127 has an invalid interface number: 57 but max is 0
[  288.881301][   T23] usb 5-1: config 127 has no interface number 0
[  288.888172][   T23] usb 5-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  288.902625][   T23] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  288.912527][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.920848][   T23] usb 5-1: Product: syz
[  288.925147][   T23] usb 5-1: Manufacturer: syz
[  288.930150][   T23] usb 5-1: SerialNumber: syz
[  288.948577][T10549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  289.380282][T10549] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  289.800240][   T23] asix 5-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  289.817993][   T23] asix 5-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  289.830152][   T23] asix: probe of 5-1:127.57 failed with error -71
[  289.841927][   T23] usb 5-1: USB disconnect, device number 8
[  290.443728][T10558] loop1: detected capacity change from 0 to 256
[  290.473173][T10554] loop5: detected capacity change from 0 to 256
[  290.569489][ T5796] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  290.584585][T10560] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1937'.
[  290.776564][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  290.813027][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.851235][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  290.860483][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.870694][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  290.881081][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.894307][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  290.905716][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.916372][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  290.937525][ T5787] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  290.957470][ T5787] Buffer I/O error on dev loop1p4, logical block 0, async page read
[  291.313543][ T3508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  291.565607][T10580] loop1: detected capacity change from 0 to 512
[  291.616551][T10580] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1946: iget: bad i_size value: 38620345925642
[  291.651556][T10580] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1946: couldn't read orphan inode 15 (err -117)
[  291.716550][   T27] IPVS: starting estimator thread 0...
[  291.742232][T10580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.817496][T10589] IPVS: using max 18 ests per chain, 43200 per kthread
[  291.899735][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.947048][ T5875] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  292.169247][ T5875] usb 3-1: config 127 has an invalid interface number: 57 but max is 0
[  292.187008][ T5875] usb 3-1: config 127 has no interface number 0
[  292.213871][ T5875] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  292.269053][ T5875] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  292.306258][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.331708][ T5875] usb 3-1: Product: syz
[  292.335950][ T5875] usb 3-1: Manufacturer: syz
[  292.366326][ T5875] usb 3-1: SerialNumber: syz
[  292.384229][T10587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  292.821795][T10587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  293.037743][T10602] loop5: detected capacity change from 0 to 32768
[  293.088755][T10602] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  293.177966][T10602] (syz.5.1955,10602,0):ocfs2_rename:1286 ERROR: status = -2
[  293.185389][T10602] (syz.5.1955,10602,0):ocfs2_rename:1692 ERROR: status = -2
[  293.263301][ T5875] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  293.307083][ T5875] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  293.367759][ T5875] asix: probe of 3-1:127.57 failed with error -71
[  293.401112][ T5875] usb 3-1: USB disconnect, device number 18
[  293.480509][ T9660] ocfs2: Unmounting device (7,5) on (node local)
[  293.805376][T10618] loop1: detected capacity change from 0 to 128
[  293.917199][ T5869] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  294.136985][ T5869] usb 6-1: Using ep0 maxpacket: 16
[  294.137506][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  294.156171][ T5869] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  294.168609][ T5869] usb 6-1: config 1 has no interface number 0
[  294.174798][ T5869] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  294.195146][ T5869] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  294.206311][ T5869] usb 6-1: config 1 interface 105 has no altsetting 0
[  294.217012][ T5869] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  294.226320][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  294.235104][ T5869] usb 6-1: Product: syz
[  294.239911][ T5869] usb 6-1: Manufacturer: syz
[  294.244562][ T5869] usb 6-1: SerialNumber: syz
[  294.253467][T10614] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  294.277097][   T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  294.285596][T10614] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  294.368751][    T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  294.386902][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.408139][    T9] usb 5-1: config 0 descriptor??
[  294.424618][    T9] cp210x 5-1:0.0: cp210x converter detected
[  294.487329][   T23] usb 3-1: Using ep0 maxpacket: 8
[  294.497074][   T23] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  294.513756][   T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.526148][   T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.537112][   T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  294.548932][   T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  294.562654][   T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  294.574191][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.716009][T10614] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  294.723777][T10614] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  294.808207][   T23] usb 3-1: GET_CAPABILITIES returned 0
[  294.813817][   T23] usbtmc 3-1:16.0: can't read capabilities
[  295.029080][    T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  295.035102][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.047139][    T9] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  295.056028][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.065526][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.074677][    C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.087233][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.096419][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.105570][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.127575][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.136830][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.145974][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.155770][    T9] usb 5-1: cp210x converter now attached to ttyUSB0
[  295.176102][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.185271][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.196356][    T9] usb 5-1: USB disconnect, device number 9
[  295.205250][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  295.216232][ T5869] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  295.218186][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  295.237077][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.246239][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.255355][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.264456][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  295.281517][    T9] cp210x 5-1:0.0: device disconnected
[  295.308344][   T23] usb 3-1: USB disconnect, device number 19
[  295.324914][ T5869] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  295.352853][ T5869] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  295.394374][ T5869] aqc111 6-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 46:5c:ad:22:cd:3e
[  295.418370][ T5869] usb 6-1: USB disconnect, device number 6
[  295.425888][ T5869] aqc111 6-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  295.507947][ T5869] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  295.519278][ T5869] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  295.529397][ T5869] aqc111 6-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  295.929631][T10637] netlink: 774 bytes leftover after parsing attributes in process `syz.1.1968'.
[  295.967459][T10637] netlink: 'syz.1.1968': attribute type 1 has an invalid length.
[  296.081159][T10645] loop4: detected capacity change from 0 to 764
[  296.349979][   T23] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  296.433166][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  296.559320][   T23] usb 6-1: config 127 has an invalid interface number: 57 but max is 0
[  296.570477][   T23] usb 6-1: config 127 has no interface number 0
[  296.588305][   T23] usb 6-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  296.603521][   T23] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  296.613168][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.623090][   T23] usb 6-1: Product: syz
[  296.628661][   T23] usb 6-1: Manufacturer: syz
[  296.633488][   T23] usb 6-1: SerialNumber: syz
[  296.644158][T10644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  296.736977][    T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  296.922838][T10651] base or size exceeds the MTRR width
[  296.936516][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  296.947873][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.973873][    T9] usb 2-1: config 0 descriptor??
[  296.998682][    T9] cp210x 2-1:0.0: cp210x converter detected
[  297.083273][T10644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  297.496193][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1983'.
[  297.518390][   T23] asix 6-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  297.556916][   T23] asix 6-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  297.569864][   T23] asix: probe of 6-1:127.57 failed with error -71
[  297.581052][   T23] usb 6-1: USB disconnect, device number 7
[  297.622316][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  297.640458][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  297.686475][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  297.704316][    T9] usb 2-1: USB disconnect, device number 19
[  297.714327][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  297.745563][    T9] cp210x 2-1:0.0: device disconnected
[  298.150342][T10673] msr: Write to unrecognized MSR 0x0 by syz.2.1988 (pid: 10673).
[  298.165660][T10673] msr: See https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/about for details.
[  298.184230][T10675] loop5: detected capacity change from 0 to 512
[  298.213535][T10675] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1987: casefold flag without casefold feature
[  298.245543][T10675] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1987: couldn't read orphan inode 15 (err -117)
[  298.303527][T10675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.442531][T10685] loop4: detected capacity change from 0 to 512
[  298.494537][T10685] EXT4-fs error (device loop4): ext4_orphan_get:1408: inode #15: comm syz.4.1991: iget: bad i_size value: 38620345925642
[  298.508200][T10685] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1991: couldn't read orphan inode 15 (err -117)
[  298.522919][T10685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.607155][ T8640] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.767902][   T23] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  298.976154][   T23] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  298.988029][   T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00
[  298.998735][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.104121][T10683] loop2: detected capacity change from 0 to 32768
[  299.147398][T10683] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  299.160797][ T5897] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  299.243327][T10683] (syz.2.1989,10683,0):ocfs2_rename:1286 ERROR: status = -2
[  299.255268][T10683] (syz.2.1989,10683,0):ocfs2_rename:1692 ERROR: status = -2
[  299.371129][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  299.414388][ T5897] usb 2-1: config 127 has an invalid interface number: 57 but max is 0
[  299.431758][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.438459][ T5897] usb 2-1: config 127 has no interface number 0
[  299.444813][ T5897] usb 2-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  299.472331][   T23] input input27: Device does not respond to id packet M
[  299.489740][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.495846][   T23] input input27: Device does not respond to id packet P
[  299.521940][ T5897] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  299.532174][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.550634][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.560158][   T23] input input27: Device does not respond to id packet B
[  299.570834][ T5897] usb 2-1: Product: syz
[  299.575063][ T5897] usb 2-1: Manufacturer: syz
[  299.590273][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.596382][   T23] input input27: Device does not respond to id packet N
[  299.607626][ T5897] usb 2-1: SerialNumber: syz
[  299.626071][T10694] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  299.653972][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.681393][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.707949][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.737183][   T23] iforce 6-1:1.0: usb_submit_urb failed: -71
[  299.746123][   T23] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input27
[  299.845395][   T23] usb 6-1: USB disconnect, device number 8
[  299.845599][    C0] iforce 6-1:1.0: iforce_usb_irq - usb_submit_urb failed with result -19
[  300.039985][T10707] loop4: detected capacity change from 0 to 256
[  300.106722][T10707] FAT-fs (loop4): error, clusters badly computed (2 != 1)
[  300.122169][T10707] FAT-fs (loop4): Filesystem has been set read-only
[  300.161302][T10694] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  300.227587][    T9] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  300.260610][ T9660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.453460][    T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  300.476743][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.497764][    T9] usb 3-1: config 0 descriptor??
[  300.527928][    T9] cp210x 3-1:0.0: cp210x converter detected
[  300.606032][ T5897] asix 2-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  300.630029][ T5897] asix 2-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  300.650855][ T5897] asix: probe of 2-1:127.57 failed with error -71
[  300.665037][ T5897] usb 2-1: USB disconnect, device number 20
[  300.706187][T10713] loop5: detected capacity change from 0 to 512
[  300.791227][T10713] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.2003: iget: bad i_size value: 38620345925642
[  300.853426][T10713] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.2003: couldn't read orphan inode 15 (err -117)
[  300.883639][T10713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.037495][ T9660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.087261][T10709] loop4: detected capacity change from 0 to 32768
[  301.120921][T10709] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.143721][    T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  301.158678][    T9] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  301.178317][    T9] usb 3-1: cp210x converter now attached to ttyUSB0
[  301.254907][    T9] usb 3-1: USB disconnect, device number 20
[  301.313594][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  301.362064][    T9] cp210x 3-1:0.0: device disconnected
[  301.388551][T10709] XFS (loop4): Ending clean mount
[  301.624738][ T8640] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  301.861405][T10735] loop2: detected capacity change from 0 to 512
[  301.960850][T10735] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.2011: casefold flag without casefold feature
[  301.997371][T10735] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2011: couldn't read orphan inode 15 (err -117)
[  302.034105][T10735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  302.487115][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  302.510516][T10747] loop5: detected capacity change from 0 to 4096
[  302.554437][T10747] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  302.602107][T10747] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  302.617282][T10747] ntfs3: loop5: Failed to load $Extend (-22).
[  302.623539][T10747] ntfs3: loop5: Failed to initialize $Extend.
[  302.647055][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  302.662546][T10754] ip6gre2: entered promiscuous mode
[  302.683838][T10754] ip6gre2: entered allmulticast mode
[  302.692393][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  302.713124][   T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  302.725010][T10747] ntfs3: loop5: ino=0, attr_set_size
[  302.737213][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice= 1.00
[  302.746508][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.754136][   T42] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  302.755946][  T174] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  302.793140][T10747] ntfs3: loop5: ino=0, attr_set_size
[  302.811777][T10747] ntfs3: loop5: ino=0, attr_set_size
[  303.217390][  T174] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  303.227086][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.233213][    T9] input input28: Device does not respond to id packet M
[  303.250203][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.256370][    T9] input input28: Device does not respond to id packet P
[  303.263969][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.270225][    T9] input input28: Device does not respond to id packet B
[  303.282843][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.289709][    T9] input input28: Device does not respond to id packet N
[  303.298138][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.304685][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.311243][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.317999][    T9] iforce 3-1:1.0: usb_submit_urb failed: -71
[  303.325718][    T9] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input28
[  303.357029][ T5897] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  303.385608][    T9] usb 3-1: USB disconnect, device number 21
[  303.451601][  T174] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  303.471307][  T174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.489467][  T174] usb 5-1: config 0 descriptor??
[  303.499267][  T174] cp210x 5-1:0.0: cp210x converter detected
[  303.527280][ T5875] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  303.837780][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.118444][  T174] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  304.126262][  T174] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  304.145773][  T174] usb 5-1: cp210x converter now attached to ttyUSB0
[  304.166183][  T174] usb 5-1: USB disconnect, device number 10
[  304.179055][  T174] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  304.194523][  T174] cp210x 5-1:0.0: device disconnected
[  304.770213][T10768] loop2: detected capacity change from 0 to 128
[  304.793682][T10768] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  304.827314][T10768] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.075642][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  305.288784][T10767] loop4: detected capacity change from 0 to 32768
[  305.355190][T10767] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  305.402263][T10767] (syz.4.2021,10767,1):ocfs2_rename:1286 ERROR: status = -2
[  305.409994][T10767] (syz.4.2021,10767,1):ocfs2_rename:1692 ERROR: status = -2
[  305.498012][ T8640] ocfs2: Unmounting device (7,4) on (node local)
[  305.956388][T10790] loop2: detected capacity change from 0 to 512
[  306.017225][T10790] EXT4-fs (loop2): 1 truncate cleaned up
[  306.027655][T10790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.061101][T10765] loop1: detected capacity change from 0 to 40427
[  306.077696][T10790] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.2031: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  306.105007][T10765] F2FS-fs (loop1): invalid crc value
[  306.250378][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.344165][T10765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  306.820856][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  306.851496][ T3524] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.039869][ T3524] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.243084][ T3524] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.379646][ T3524] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.467141][ T5875] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  307.658398][ T5875] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  307.681607][ T5875] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  307.717336][ T5875] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  307.726422][ T5875] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  307.790595][ T5875] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  307.880748][ T5875] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  307.907682][ T5875] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  307.915775][ T5875] usb 6-1: Product: syz
[  307.949177][ T5875] usb 6-1: Manufacturer: syz
[  307.999456][ T5875] cdc_wdm 6-1:1.0: skipping garbage
[  308.014785][ T5875] cdc_wdm 6-1:1.0: skipping garbage
[  308.059121][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  308.068500][ T5875] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  308.074493][ T5875] cdc_wdm 6-1:1.0: Unknown control protocol
[  308.095891][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  308.106676][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  308.117082][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  308.124820][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  308.133613][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  308.426932][ T5869] usb 6-1: USB disconnect, device number 9
[  308.750849][T10821] rxe_eth0 speed is unknown, defaulting to 1000
[  309.812643][T10856] loop5: detected capacity change from 0 to 2048
[  309.950632][T10860] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  310.116081][T10821] chnl_net:caif_netlink_parms(): no params data found
[  310.248691][   T51] Bluetooth: hci3: command tx timeout
[  310.517194][ T5875] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  310.727295][ T5875] usb 2-1: Using ep0 maxpacket: 16
[  310.740125][ T5875] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  310.749495][ T5875] usb 2-1: config 1 has no interface number 0
[  310.756257][ T5875] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  310.767244][ T5875] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  310.779699][ T5875] usb 2-1: config 1 interface 105 has no altsetting 0
[  310.789565][ T5875] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  310.799201][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  310.807815][ T5875] usb 2-1: Product: syz
[  310.812468][ T5875] usb 2-1: Manufacturer: syz
[  310.817576][ T5875] usb 2-1: SerialNumber: syz
[  310.837402][T10821] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.850261][T10821] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.858642][T10821] bridge_slave_0: entered allmulticast mode
[  310.877169][T10865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  310.884524][T10865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  310.895354][T10821] bridge_slave_0: entered promiscuous mode
[  310.914474][T10821] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.922342][T10821] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.930264][T10821] bridge_slave_1: entered allmulticast mode
[  311.015374][T10821] bridge_slave_1: entered promiscuous mode
[  311.284427][T10821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  311.325874][T10821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  311.336918][T10865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  311.344327][T10865] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  311.417325][ T3524] hsr_slave_0: left promiscuous mode
[  311.424617][ T3524] hsr_slave_1: left promiscuous mode
[  311.438886][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  311.446518][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_0
[  311.472551][ T3524] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  311.487258][ T3524] batman_adv: batadv0: Removing interface: batadv_slave_1
[  311.512753][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  311.519556][ T3524] bridge_slave_1: left allmulticast mode
[  311.525934][ T3524] bridge_slave_1: left promiscuous mode
[  311.538586][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  311.548942][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.559375][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  311.585733][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  311.596068][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  311.603922][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  311.615989][ T3524] bridge_slave_0: left allmulticast mode
[  311.647040][ T3524] bridge_slave_0: left promiscuous mode
[  311.653099][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.718473][ T3524] veth1_macvtap: left promiscuous mode
[  311.724962][ T3524] veth0_macvtap: left promiscuous mode
[  311.733695][ T3524] veth1_vlan: left promiscuous mode
[  311.740755][ T3524] veth0_vlan: left promiscuous mode
[  311.775197][ T5875] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  311.802067][ T5875] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  311.826363][ T5875] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  312.336388][   T51] Bluetooth: hci3: command tx timeout
[  312.674884][ T3524] team0 (unregistering): Port device team_slave_1 removed
[  312.742472][ T3524] team0 (unregistering): Port device team_slave_0 removed
[  312.802715][ T3524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  312.862491][ T3524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.357077][ T3524] bond0 (unregistering): Released all slaves
[  313.471708][ T5875] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4e:74:13:4f:bf:a0
[  313.510481][ T5875] usb 2-1: USB disconnect, device number 21
[  313.518777][ T5875] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  313.562073][T10821] team0: Port device team_slave_0 added
[  313.571561][T10821] team0: Port device team_slave_1 added
[  313.588620][ T5875] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  313.627198][ T5875] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  313.648883][ T5875] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  313.689238][   T51] Bluetooth: hci1: command tx timeout
[  313.734859][T10821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.742425][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.768953][T10821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.783938][T10880] rxe_eth0 speed is unknown, defaulting to 1000
[  313.818175][T10821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  313.836885][T10821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.878009][T10821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.034880][T10821] hsr_slave_0: entered promiscuous mode
[  314.081795][T10821] hsr_slave_1: entered promiscuous mode
[  314.101837][T10821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  314.117558][T10821] Cannot create hsr debugfs directory
[  314.244857][ T3524] IPVS: stop unused estimator thread 0...
[  314.407274][   T51] Bluetooth: hci3: command tx timeout
[  314.838996][T10821] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  314.851032][T10821] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  314.875232][T10880] chnl_net:caif_netlink_parms(): no params data found
[  314.891100][T10821] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  314.943447][T10821] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  315.089390][T10880] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.096686][T10880] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.104094][T10880] bridge_slave_0: entered allmulticast mode
[  315.113001][T10880] bridge_slave_0: entered promiscuous mode
[  315.122265][T10880] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.138380][T10880] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.145693][T10880] bridge_slave_1: entered allmulticast mode
[  315.154274][T10880] bridge_slave_1: entered promiscuous mode
[  315.194898][T10880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.211274][T10880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.276006][T10880] team0: Port device team_slave_0 added
[  315.315378][T10880] team0: Port device team_slave_1 added
[  315.374282][T10880] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.382662][T10880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.412804][T10880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.441942][T10821] 8021q: adding VLAN 0 to HW filter on device bond0
[  315.455790][T10880] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.473388][T10880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.514715][T10880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.620747][T10821] 8021q: adding VLAN 0 to HW filter on device team0
[  315.674307][T10880] hsr_slave_0: entered promiscuous mode
[  315.692576][T10880] hsr_slave_1: entered promiscuous mode
[  315.705918][T10880] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  315.726470][T10880] Cannot create hsr debugfs directory
[  315.750078][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.757317][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.767671][   T51] Bluetooth: hci1: command tx timeout
[  315.862599][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.869861][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.265908][T10880] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  316.278344][T10880] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  316.328007][T10880] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  316.352339][T10880] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  316.500611][   T51] Bluetooth: hci3: command tx timeout
[  316.557641][T10821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.622092][T10880] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.693784][T10880] 8021q: adding VLAN 0 to HW filter on device team0
[  316.735682][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.742926][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.776219][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.783487][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.934739][T10880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  317.358355][T10821] veth0_vlan: entered promiscuous mode
[  317.387644][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.394024][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  317.403607][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  317.441431][T10821] veth1_vlan: entered promiscuous mode
[  317.474347][T10880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  317.553951][T10821] veth0_macvtap: entered promiscuous mode
[  317.580156][T10821] veth1_macvtap: entered promiscuous mode
[  317.639987][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.661318][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.677331][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.698142][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.720293][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.737078][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.752673][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.773990][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.786517][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  317.798422][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.811069][T10821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  317.846289][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.859704][   T51] Bluetooth: hci1: command tx timeout
[  317.865240][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.877067][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.888199][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.898908][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.909964][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.921379][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.932245][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.942956][T10821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  317.954101][T10821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  317.966189][T10821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  317.991109][T10821] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.007701][T10821] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.016478][T10821] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.029168][T10821] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.296551][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.308503][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.409397][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.430839][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.506427][T10880] veth0_vlan: entered promiscuous mode
[  318.541117][T10880] veth1_vlan: entered promiscuous mode
[  318.663278][T10880] veth0_macvtap: entered promiscuous mode
[  318.703598][T10880] veth1_macvtap: entered promiscuous mode
[  318.783300][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.815000][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.837436][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.850607][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.862119][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.873531][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.884007][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.914417][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.934939][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.954830][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.965676][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  318.977038][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  318.985560][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  318.999077][T10880] batman_adv: batadv0: Interface activated: batadv_slave_0
[  319.063417][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  319.075314][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.086471][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.106145][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.122541][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.137894][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.149279][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.159407][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.170631][ T5896] usb 7-1: Using ep0 maxpacket: 8
[  319.175846][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.186656][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.197926][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.209114][T10880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  319.219899][ T5896] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  319.229001][ T5896] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.239028][T10880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  319.252719][ T5896] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  319.264220][T10880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  319.272289][ T5896] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  319.285079][ T5896] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.304270][T10880] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.313772][ T5896] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.323560][T10880] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.333037][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.342868][T10880] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.374169][T10880] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.559857][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.571586][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.617803][ T5896] usb 7-1: GET_CAPABILITIES returned 0
[  319.623385][ T5896] usbtmc 7-1:16.0: can't read capabilities
[  319.656482][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  319.681710][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  319.897460][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.906662][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.915820][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.925655][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.934823][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.943979][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.956119][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.965302][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.974445][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  319.987141][   T51] Bluetooth: hci1: command tx timeout
[  320.003325][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.012515][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.021665][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.050250][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.059464][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.068607][    C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.158750][    C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  320.190412][ T5896] usb 7-1: USB disconnect, device number 2
[  320.620774][T10986] loop7: detected capacity change from 0 to 32768
[  320.681591][T10986] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  320.988022][T10986] XFS (loop7): Ending clean mount
[  321.138443][T11015] loop5: detected capacity change from 0 to 64
[  321.211150][T10880] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  322.097116][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  322.287091][    T9] usb 2-1: Using ep0 maxpacket: 16
[  322.310767][    T9] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  322.340473][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  322.360856][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.389819][    T9] usb 2-1: Product: syz
[  322.399944][    T9] usb 2-1: Manufacturer: syz
[  322.421440][    T9] usb 2-1: SerialNumber: syz
[  322.688554][    T9] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  322.733843][    T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  322.775373][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  322.785059][    T9] usb 2-1: media controller created
[  322.869560][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  322.948973][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  322.995559][T11036] loop5: detected capacity change from 0 to 40427
[  323.052259][T11036] F2FS-fs (loop5): invalid crc value
[  323.107703][    T9] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  323.144029][T11036] F2FS-fs (loop5): Found nat_bits in checkpoint
[  323.152585][    T9] usb 2-1: USB disconnect, device number 22
[  323.418208][T11036] F2FS-fs (loop5): Start checkpoint disabled!
[  323.498535][T11036] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  323.970141][ T1139] kworker/u4:8: attempt to access beyond end of device
[  323.970141][ T1139] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  324.033535][ T1139] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  324.050616][ T1139] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  324.184161][  T788] hid-generic 0005:10CF:0008.000D: hidraw0: BLUETOOTH HID v0.43 Device [syz0] on aa:aa:aa:aa:aa:aa
[  324.630524][T11089] loop6: detected capacity change from 0 to 512
[  324.748762][T11089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.774103][T11089] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.817365][T11097] comedi comedi4: bad chanlist[0]=0x000000d1 chan=209 range length=2
[  325.039749][T10821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.333586][T11100] loop5: detected capacity change from 0 to 32768
[  325.427525][   T23] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  325.686169][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  325.754443][   T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  325.809859][   T23] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  325.838903][T11113] loop6: detected capacity change from 0 to 8192
[  325.851738][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.897222][   T23] usb 2-1: config 0 descriptor??
[  325.907469][T11104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  326.378112][   T23] uclogic 0003:28BD:0075.000E: interface is invalid, ignoring
[  326.605761][ T5896] usb 2-1: USB disconnect, device number 23
[  326.657748][T11132] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2104'.
[  326.699721][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2105'.
[  326.845843][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  326.918235][T11141] bond0: entered promiscuous mode
[  326.923447][T11141] bond_slave_0: entered promiscuous mode
[  326.957894][T11141] bond_slave_1: entered promiscuous mode
[  326.982601][T11141] batadv0: entered promiscuous mode
[  327.006319][T11141] 8021q: adding VLAN 0 to HW filter on device hsr1
[  327.054855][T11141] bond0: left promiscuous mode
[  327.066941][T11141] bond_slave_0: left promiscuous mode
[  327.087250][T11141] bond_slave_1: left promiscuous mode
[  327.094618][T11147] loop7: detected capacity change from 0 to 512
[  327.116494][T11141] batadv0: left promiscuous mode
[  327.158443][T11147] EXT4-fs error (device loop7): ext4_validate_block_bitmap:430: comm syz.7.2112: bg 0: block 5: invalid block bitmap
[  327.281290][T11150] mmap: syz.1.2114 (11150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  327.315527][T11147] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  327.387639][T11147] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.2112: invalid indirect mapped block 3 (level 2)
[  327.428429][T11147] EXT4-fs (loop7): 1 orphan inode deleted
[  327.447447][T11147] EXT4-fs (loop7): 1 truncate cleaned up
[  327.454550][T11147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.486492][ T3508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  327.669220][T10880] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.853233][T11161] loop7: detected capacity change from 0 to 128
[  327.916078][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2119'.
[  327.945824][T11164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2119'.
[  327.975643][T11161] syz.7.2117: attempt to access beyond end of device
[  327.975643][T11161] loop7: rw=2049, sector=154, nr_sectors = 96 limit=128
[  328.014143][T11161] syz.7.2117: attempt to access beyond end of device
[  328.014143][T11161] loop7: rw=2049, sector=138, nr_sectors = 16 limit=128
[  328.928113][  T788] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  328.967893][T11179] loop1: detected capacity change from 0 to 40427
[  329.027775][T11179] F2FS-fs (loop1): invalid crc value
[  329.047819][T11179] F2FS-fs (loop1): Found nat_bits in checkpoint
[  329.127402][  T788] usb 6-1: Using ep0 maxpacket: 16
[  329.138912][  T788] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  329.164198][  T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.201602][  T788] usb 6-1: Product: syz
[  329.205862][  T788] usb 6-1: Manufacturer: syz
[  329.245947][  T788] usb 6-1: SerialNumber: syz
[  329.255003][T11179] F2FS-fs (loop1): Start checkpoint disabled!
[  329.309120][T11179] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  329.494674][  T788] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  329.540542][  T788] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  329.573452][  T788] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  329.596255][  T788] usb 6-1: media controller created
[  329.631863][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  329.717131][ T5869] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  329.740331][   T59] kworker/u4:4: attempt to access beyond end of device
[  329.740331][   T59] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  329.754901][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  329.765232][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  329.853701][T11206] loop6: detected capacity change from 0 to 512
[  329.903472][  T788] zl10353_read_register: readreg error (reg=127, ret==-110)
[  329.940480][ T5869] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  329.987292][ T5869] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  330.014309][T11206] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  330.041506][ T5869] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  330.048011][T11206] FAT-fs (loop6): Filesystem has been set read-only
[  330.087335][ T5869] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  330.127786][  T788] dvb_usb_gl861: probe of 6-1:157.0 failed with error -5
[  330.136622][ T5869] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  330.165358][  T788] usb 6-1: USB disconnect, device number 10
[  330.175359][ T5869] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  330.201225][ T5869] usb 8-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  330.246797][ T5869] usb 8-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[  330.268126][ T5869] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[  330.278016][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.286065][ T5869] usb 8-1: Product: syz
[  330.291091][ T5869] usb 8-1: Manufacturer: syz
[  330.302368][ T5869] usb 8-1: SerialNumber: syz
[  330.344250][ T5869] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected
[  330.367738][ T5869] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[  330.387736][ T5869] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[  350.193030][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  353.265117][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  357.872881][ T2947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  358.487862][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  378.827501][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  378.833951][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  378.843114][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  381.118885][ T1090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  384.190009][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  388.797699][ T3508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  389.412282][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  412.042725][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  415.114821][ T3508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  416.727085][ T5794] Bluetooth: hci0: command 0x0406 tx timeout
[  419.722535][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  420.337145][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  432.087238][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  440.254369][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.260873][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.269988][ T1293] clip:clip_start_xmit: skb_dst(skb) == NULL
[  442.967600][ T3508] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  446.039422][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  450.648427][ T1090] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  451.261821][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  457.687057][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[  473.892281][ T3524] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  476.964310][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  481.572144][   T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  482.186562][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  494.007708][   T29] INFO: task khugepaged:35 blocked for more than 143 seconds.
[  494.015335][   T29]       Tainted: G S                 syzkaller #0
[  494.032501][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  494.041578][   T29] task:khugepaged      state:D stack:28200 pid:35    ppid:2      flags:0x00004000
[  494.055271][   T29] Call Trace:
[  494.066759][   T29]  <TASK>
[  494.069844][   T29]  __schedule+0x15ae/0x4660
[  494.074776][   T29]  ? asan.module_dtor+0x20/0x20
[  494.090534][   T29]  ? mark_lock+0x94/0x320
[  494.095108][   T29]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  494.107025][   T29]  ? _raw_spin_lock_irqsave+0x100/0x100
[  494.112807][   T29]  schedule+0xbd/0x170
[  494.127115][   T29]  schedule_preempt_disabled+0x13/0x20
[  494.132848][   T29]  rwsem_down_write_slowpath+0xc3f/0x1020
[  494.146516][   T29]  ? rwsem_down_write_slowpath+0x81b/0x1020
[  494.154849][   T29]  ? rwsem_down_read_slowpath+0x880/0x880
[  494.161533][   T29]  ? mtree_destroy+0x30/0x30
[  494.166357][   T29]  ? read_lock_is_recursive+0x20/0x20
[  494.185719][   T29]  down_write+0x1b9/0x200
[  494.190377][   T29]  ? down_read_killable+0x340/0x340
[  494.195682][   T29]  ? hugepage_vma_revalidate+0x2ba/0x310
[  494.208717][   T29]  hpage_collapse_scan_pmd+0x216a/0x4050
[  494.214473][   T29]  ? hpage_collapse_scan_pmd+0x1631/0x4050
[  494.220676][   T29]  ? hpage_collapse_scan_pmd+0x16d6/0x4050
[  494.226564][   T29]  ? hpage_collapse_scan_file+0x5e40/0x5e40
[  494.233605][   T29]  ? mas_ascend+0x713/0x830
[  494.238700][   T29]  ? file_thp_enabled+0x9c/0x140
[  494.243723][   T29]  ? hugepage_vma_check+0x47d/0x560
[  494.255286][   T29]  khugepaged+0x8df/0x1520
[  494.264246][   T29]  ? start_stop_khugepaged+0x160/0x160
[  494.275360][   T29]  ? wake_bit_function+0x200/0x200
[  494.286533][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  494.296106][   T29]  ? wake_bit_function+0x200/0x200
[  494.305134][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  494.324374][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  494.329922][   T29]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  494.335901][   T29]  ? _raw_spin_unlock+0x40/0x40
[  494.341138][   T29]  ? __kthread_parkme+0x71/0x1c0
[  494.346140][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  494.351290][   T29]  kthread+0x2fa/0x390
[  494.358583][   T29]  ? start_stop_khugepaged+0x160/0x160
[  494.364130][   T29]  ? kthread_blkcg+0xd0/0xd0
[  494.369892][   T29]  ret_from_fork+0x48/0x80
[  494.375303][   T29]  ? kthread_blkcg+0xd0/0xd0
[  494.380123][   T29]  ret_from_fork_asm+0x11/0x20
[  494.385019][   T29]  </TASK>
[  494.398423][   T29] INFO: task jbd2/sda1-8:5107 blocked for more than 143 seconds.
[  494.406214][   T29]       Tainted: G S                 syzkaller #0
[  494.428035][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  494.437114][   T29] task:jbd2/sda1-8     state:D stack:26024 pid:5107  ppid:2      flags:0x00004000
[  494.446392][   T29] Call Trace:
[  494.449831][   T29]  <TASK>
[  494.452821][   T29]  __schedule+0x15ae/0x4660
[  494.459068][   T29]  ? asan.module_dtor+0x20/0x20
[  494.464004][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  494.470390][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  494.480772][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  494.486049][   T29]  schedule+0xbd/0x170
[  494.491532][   T29]  io_schedule+0x80/0xd0
[  494.495844][   T29]  bit_wait_io+0x11/0xd0
[  494.502280][   T29]  __wait_on_bit+0x9f/0x2c0
[  494.507359][   T29]  ? bit_wait+0xd0/0xd0
[  494.511590][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  494.517307][   T29]  ? bit_wait+0xd0/0xd0
[  494.521749][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  494.526530][   T29]  ? do_raw_write_lock+0x11e/0x260
[  494.532804][   T29]  ? bit_waitqueue+0x30/0x30
[  494.537715][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  494.542813][   T29]  jbd2_journal_commit_transaction+0x2e8d/0x5ad0
[  494.550612][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  494.557971][   T29]  ? lock_chain_count+0x20/0x20
[  494.564263][   T29]  ? _raw_spin_unlock+0x40/0x40
[  494.569638][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  494.575362][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  494.581382][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  494.586500][   T29]  ? timer_delete_sync+0x20/0x20
[  494.591692][   T29]  ? do_raw_read_unlock+0x80/0x80
[  494.597030][   T29]  ? prepare_to_wait+0x1aa/0x200
[  494.602030][   T29]  kjournald2+0x40f/0x810
[  494.606504][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  494.612911][   T29]  ? wake_bit_function+0x200/0x200
[  494.618836][   T29]  ? _raw_spin_unlock+0x40/0x40
[  494.623756][   T29]  ? __kthread_parkme+0x71/0x1c0
[  494.629280][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  494.634480][   T29]  kthread+0x2fa/0x390
[  494.639352][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  494.644713][   T29]  ? kthread_blkcg+0xd0/0xd0
[  494.649976][   T29]  ret_from_fork+0x48/0x80
[  494.654465][   T29]  ? kthread_blkcg+0xd0/0xd0
[  494.660143][   T29]  ret_from_fork_asm+0x11/0x20
[  494.665001][   T29]  </TASK>
[  494.670031][   T29] INFO: task syz-executor:5766 blocked for more than 144 seconds.
[  494.678444][   T29]       Tainted: G S                 syzkaller #0
[  494.685347][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  494.694835][   T29] task:syz-executor    state:D stack:21680 pid:5766  ppid:5765   flags:0x00004002
[  494.704578][   T29] Call Trace:
[  494.708307][   T29]  <TASK>
[  494.711298][   T29]  __schedule+0x15ae/0x4660
[  494.715871][   T29]  ? mark_lock+0x94/0x320
[  494.720905][   T29]  ? asan.module_dtor+0x20/0x20
[  494.725830][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  494.731430][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  494.737722][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  494.742990][   T29]  schedule+0xbd/0x170
[  494.747664][   T29]  io_schedule+0x80/0xd0
[  494.751976][   T29]  bit_wait_io+0x11/0xd0
[  494.756289][   T29]  __wait_on_bit+0x9f/0x2c0
[  494.761207][   T29]  ? bit_wait+0xd0/0xd0
[  494.765854][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  494.773218][   T29]  ? bit_wait+0xd0/0xd0
[  494.778671][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  494.784275][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  494.790042][   T29]  ? bit_waitqueue+0x30/0x30
[  494.794697][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  494.801002][   T29]  do_get_write_access+0x5c9/0xe00
[  494.806274][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  494.812941][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  494.819394][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  494.825611][   T29]  ? __might_sleep+0xe0/0xe0
[  494.830885][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  494.836985][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  494.842608][   T29]  ext4_dirty_inode+0xcb/0x110
[  494.847974][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  494.853843][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  494.859550][   T29]  file_update_time+0x187/0x1a0
[  494.864881][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  494.870557][   T29]  ? do_wp_page+0x4ce/0x34d0
[  494.875252][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  494.883957][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  494.889698][   T29]  do_page_mkwrite+0x153/0x3f0
[  494.894541][   T29]  do_wp_page+0xd4d/0x34d0
[  494.899680][   T29]  ? folio_put+0xd0/0xd0
[  494.903983][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  494.909614][   T29]  ? __rwlock_init+0x150/0x150
[  494.914463][   T29]  handle_mm_fault+0x1306/0x4a50
[  494.919944][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  494.925120][   T29]  ? numa_migrate_prep+0x350/0x350
[  494.930850][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  494.936200][   T29]  do_user_addr_fault+0x736/0x12d0
[  494.941872][   T29]  exc_page_fault+0x64/0x100
[  494.946525][   T29]  ? clear_bhb_loop+0x40/0x90
[  494.951895][   T29]  asm_exc_page_fault+0x26/0x30
[  494.956908][   T29] RIP: 0033:0x7f20e78705e3
[  494.961529][   T29] RSP: 002b:00007ffda06a1360 EFLAGS: 00010212
[  494.968577][   T29] RAX: 00007f20e45ee384 RBX: 00007ffda06a1490 RCX: 0000000000000000
[  494.978293][   T29] RDX: 00007f20e45ee380 RSI: 0000000000000008 RDI: 00007ffda06a1490
[  494.987166][   T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  494.995195][   T29] R10: 00007ffda06a1470 R11: 0000000000000000 R12: 0000000000000000
[  495.003679][   T29] R13: 0000000000011c7c R14: fffffffffffee384 R15: 0000000000000000
[  495.012466][   T29]  </TASK>
[  495.015578][   T29] INFO: task syz.5.2127:11182 blocked for more than 144 seconds.
[  495.023822][   T29]       Tainted: G S                 syzkaller #0
[  495.030688][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  495.039751][   T29] task:syz.5.2127      state:D stack:27048 pid:11182 ppid:9660   flags:0x00004006
[  495.050102][   T29] Call Trace:
[  495.053440][   T29]  <TASK>
[  495.056421][   T29]  __schedule+0x15ae/0x4660
[  495.061642][   T29]  ? mark_lock+0x94/0x320
[  495.066043][   T29]  ? asan.module_dtor+0x20/0x20
[  495.071942][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  495.077445][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  495.083419][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  495.090502][   T29]  schedule+0xbd/0x170
[  495.094657][   T29]  io_schedule+0x80/0xd0
[  495.099439][   T29]  bit_wait_io+0x11/0xd0
[  495.103751][   T29]  __wait_on_bit+0x9f/0x2c0
[  495.108917][   T29]  ? bit_wait+0xd0/0xd0
[  495.113140][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  495.119451][   T29]  ? bit_wait+0xd0/0xd0
[  495.123763][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  495.129280][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  495.134373][   T29]  ? bit_waitqueue+0x30/0x30
[  495.139635][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  495.145080][   T29]  do_get_write_access+0x5c9/0xe00
[  495.150447][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  495.156480][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  495.163262][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  495.169897][   T29]  ? __might_sleep+0xe0/0xe0
[  495.174970][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  495.182305][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  495.188239][   T29]  ext4_dirty_inode+0xcb/0x110
[  495.193478][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  495.199893][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  495.204999][   T29]  file_update_time+0x187/0x1a0
[  495.210706][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  495.215809][   T29]  ? filemap_fault+0x103c/0x1540
[  495.221281][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  495.227652][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  495.233955][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  495.239584][   T29]  ? __pte_offset_map+0x20d/0x280
[  495.244675][   T29]  do_page_mkwrite+0x153/0x3f0
[  495.250012][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  495.255003][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  495.260430][   T29]  ? numa_migrate_prep+0x350/0x350
[  495.265631][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  495.271488][   T29]  do_user_addr_fault+0x736/0x12d0
[  495.280182][   T29]  exc_page_fault+0x64/0x100
[  495.284846][   T29]  asm_exc_page_fault+0x26/0x30
[  495.291074][   T29] RIP: 0033:0x7fbfe9472ba9
[  495.296019][   T29] RSP: 002b:00007ffe3f4c9140 EFLAGS: 00010202
[  495.302721][   T29] RAX: 0000001b2f914000 RBX: ffffffff870d9da9 RCX: 0000001b2f913ff8
[  495.311260][   T29] RDX: 0000001b2f324224 RSI: 0000000000000008 RDI: 00007fbfea355720
[  495.319639][   T29] RBP: 0000000000000b4b R08: 00007fbfe9810000 R09: 00007fbfe9812000
[  495.328126][   T29] R10: 00000000870d9dad R11: 00000000000000ff R12: 00007fbfe9825f40
[  495.336153][   T29] R13: 00000000000aed72 R14: ffffffff870d9c3b R15: 00007fbfea355720
[  495.344839][   T29]  ? dvb_register_device+0x182b/0x1df0
[  495.351599][   T29]  ? dvb_register_device+0x1999/0x1df0
[  495.357711][   T29]  </TASK>
[  495.360786][   T29] INFO: task syz.7.2132:11199 blocked for more than 144 seconds.
[  495.368886][   T29]       Tainted: G S                 syzkaller #0
[  495.375348][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  495.385828][   T29] task:syz.7.2132      state:D stack:27048 pid:11199 ppid:10880  flags:0x00004004
[  495.395238][   T29] Call Trace:
[  495.399334][   T29]  <TASK>
[  495.402325][   T29]  __schedule+0x15ae/0x4660
[  495.406949][   T29]  ? mark_lock+0x94/0x320
[  495.411342][   T29]  ? asan.module_dtor+0x20/0x20
[  495.416249][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  495.421534][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  495.432401][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  495.437845][   T29]  schedule+0xbd/0x170
[  495.441989][   T29]  io_schedule+0x80/0xd0
[  495.446314][   T29]  bit_wait_io+0x11/0xd0
[  495.460477][   T29]  __wait_on_bit+0x9f/0x2c0
[  495.465063][   T29]  ? bit_wait+0xd0/0xd0
[  495.469619][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  495.475259][   T29]  ? bit_wait+0xd0/0xd0
[  495.481445][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  495.486493][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  495.491881][   T29]  ? bit_waitqueue+0x30/0x30
[  495.496625][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  495.502720][   T29]  do_get_write_access+0x5c9/0xe00
[  495.508174][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  495.514227][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  495.520790][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  495.527373][   T29]  ? __might_sleep+0xe0/0xe0
[  495.532034][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  495.538165][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  495.543709][   T29]  ext4_dirty_inode+0xcb/0x110
[  495.549815][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  495.555718][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  495.560917][   T29]  file_update_time+0x187/0x1a0
[  495.565831][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  495.571320][   T29]  ? filemap_fault+0x103c/0x1540
[  495.576333][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  495.583941][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  495.590511][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  495.595608][   T29]  ? __pte_offset_map+0x20d/0x280
[  495.601408][   T29]  do_page_mkwrite+0x153/0x3f0
[  495.606246][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  495.611672][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  495.616968][   T29]  ? numa_migrate_prep+0x350/0x350
[  495.622168][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  495.627854][   T29]  do_user_addr_fault+0x736/0x12d0
[  495.633053][   T29]  exc_page_fault+0x64/0x100
[  495.638023][   T29]  asm_exc_page_fault+0x26/0x30
[  495.642930][   T29] RIP: 0033:0x7fc408c73332
[  495.647915][   T29] RSP: 002b:00007fffe88b5910 EFLAGS: 00010202
[  495.654051][   T29] RAX: 0000000000003008 RBX: 00007fc409b55720 RCX: 0000000000000000
[  495.663426][   T29] RDX: 0000001b34d21000 RSI: 0000000000000008 RDI: 00007fc409b55720
[  495.671734][   T29] RBP: 0000000000000685 R08: 00007fc409010000 R09: 00007fc409026038
[  495.680075][   T29] R10: 0000000000000003 R11: 0000000000000002 R12: ffffffff8a7ef524
[  495.690097][   T29] R13: 00007fc409026038 R14: 00000000000000d0 R15: ffffffffffffd000
[  495.698401][   T29]  ? kset_find_obj+0x24/0x100
[  495.703587][   T29]  </TASK>
[  495.706935][   T29] INFO: task syz.1.2133:11211 blocked for more than 145 seconds.
[  495.714702][   T29]       Tainted: G S                 syzkaller #0
[  495.721525][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  495.730495][   T29] task:syz.1.2133      state:D stack:27560 pid:11211 ppid:5778   flags:0x00004004
[  495.741167][   T29] Call Trace:
[  495.744510][   T29]  <TASK>
[  495.747802][   T29]  __schedule+0x15ae/0x4660
[  495.752402][   T29]  ? mark_lock+0x94/0x320
[  495.757254][   T29]  ? asan.module_dtor+0x20/0x20
[  495.762202][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  495.767834][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  495.773800][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  495.779419][   T29]  schedule+0xbd/0x170
[  495.783561][   T29]  io_schedule+0x80/0xd0
[  495.790418][   T29]  bit_wait_io+0x11/0xd0
[  495.794738][   T29]  __wait_on_bit+0x9f/0x2c0
[  495.799880][   T29]  ? bit_wait+0xd0/0xd0
[  495.804134][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  495.810406][   T29]  ? bit_wait+0xd0/0xd0
[  495.814628][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  495.819779][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  495.824871][   T29]  ? bit_waitqueue+0x30/0x30
[  495.829936][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  495.835217][   T29]  do_get_write_access+0x5c9/0xe00
[  495.841809][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  495.851220][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  495.857698][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  495.863933][   T29]  ? __might_sleep+0xe0/0xe0
[  495.869146][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  495.874748][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  495.886557][   T29]  ext4_dirty_inode+0xcb/0x110
[  495.893092][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  495.899373][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  495.904473][   T29]  file_update_time+0x187/0x1a0
[  495.910078][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  495.915169][   T29]  ? filemap_fault+0x103c/0x1540
[  495.920603][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  495.926382][   T29]  ? pte_alloc_one+0x3b6/0x540
[  495.931695][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  495.938260][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  495.943385][   T29]  do_page_mkwrite+0x153/0x3f0
[  495.949790][   T29]  handle_mm_fault+0x1a2c/0x4a50
[  495.954798][   T29]  ? handle_mm_fault+0xe6/0x4a50
[  495.963018][   T29]  ? numa_migrate_prep+0x350/0x350
[  495.968401][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  495.973743][   T29]  do_user_addr_fault+0x736/0x12d0
[  495.979501][   T29]  exc_page_fault+0x64/0x100
[  495.984158][   T29]  ? clear_bhb_loop+0x40/0x90
[  495.989223][   T29]  asm_exc_page_fault+0x26/0x30
[  495.996595][   T29] RIP: 0033:0x7f305786bea3
[  496.001418][   T29] RSP: 002b:00007fff89991830 EFLAGS: 00010246
[  496.007777][   T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2da64000
[  496.016452][   T29] RDX: 0000001b2da24000 RSI: 0000000000600000 RDI: 00007f3057be3708
[  496.024822][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  496.033238][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  496.043792][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fff89991ac0
[  496.052752][   T29]  </TASK>
[  496.055859][   T29] 
[  496.055859][   T29] Showing all locks held in the system:
[  496.064114][   T29] 3 locks held by kworker/0:1/9:
[  496.070295][   T29] 1 lock held by khungtaskd/29:
[  496.075191][   T29]  #0: ffffffff8df320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  496.085553][   T29] 1 lock held by khugepaged/35:
[  496.095049][   T29]  #0: ffff88807e8014a0 (&mm->mmap_lock){++++}-{3:3}, at: hpage_collapse_scan_pmd+0x216a/0x4050
[  496.106073][   T29] 2 locks held by kworker/u4:14/3524:
[  496.113778][   T29]  #0: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  496.124173][   T29]  #1: ffff8880b8c28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660
[  496.133335][   T29] 2 locks held by getty/5534:
[  496.138166][   T29]  #0: ffff88814cac60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  496.148645][   T29]  #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  496.159051][   T29] 3 locks held by syz-executor/5766:
[  496.164581][   T29]  #0: ffff88807dc3baa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  496.175051][   T29]  #1: ffff88814dc54510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  496.185022][   T29]  #2: ffff88814dc58990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  496.199689][   T29] 3 locks held by syz.5.2127/11182:
[  496.204969][   T29]  #0: ffff88807e8014a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  496.216397][   T29]  #1: ffff88814dc54510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  496.226878][   T29]  #2: ffff88814dc58990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  496.236812][   T29] 3 locks held by syz.7.2132/11199:
[  496.242217][   T29]  #0: ffff88807e7ebaa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  496.252729][   T29]  #1: ffff88814dc54510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  496.263044][   T29]  #2: ffff88814dc58990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  496.273130][   T29] 3 locks held by syz.1.2133/11211:
[  496.278631][   T29]  #0: ffff888021a28b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  496.288901][   T29]  #1: ffff88814dc54510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  496.299398][   T29]  #2: ffff88814dc58990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  496.312269][   T29] 
[  496.314764][   T29] =============================================
[  496.314764][   T29] 
[  496.324669][   T29] NMI backtrace for cpu 0
[  496.329093][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  496.337837][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  496.347951][   T29] Call Trace:
[  496.351249][   T29]  <TASK>
[  496.354206][   T29]  dump_stack_lvl+0x18c/0x250
[  496.358905][   T29]  ? __wake_up_klogd+0xd9/0x100
[  496.363798][   T29]  ? show_regs_print_info+0x20/0x20
[  496.369023][   T29]  ? load_image+0x420/0x420
[  496.373561][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  496.378543][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  496.384764][   T29]  ? load_image+0x420/0x420
[  496.389350][   T29]  ? wq_watchdog_touch+0xef/0x170
[  496.394439][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  496.400600][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  496.406653][   T29]  watchdog+0xf59/0xfa0
[  496.410933][   T29]  ? watchdog+0x1e1/0xfa0
[  496.415337][   T29]  kthread+0x2fa/0x390
[  496.419468][   T29]  ? hungtask_pm_notify+0x50/0x50
[  496.424567][   T29]  ? kthread_blkcg+0xd0/0xd0
[  496.429224][   T29]  ret_from_fork+0x48/0x80
[  496.433703][   T29]  ? kthread_blkcg+0xd0/0xd0
[  496.438351][   T29]  ret_from_fork_asm+0x11/0x20
[  496.443177][   T29]  </TASK>
[  496.447660][   T29] Sending NMI from CPU 0 to CPUs 1:
[  496.453124][    C1] NMI backtrace for cpu 1
[  496.453137][    C1] CPU: 1 PID: 1139 Comm: kworker/u4:8 Tainted: G S                 syzkaller #0
[  496.453157][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  496.453157][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  496.453168][    C1] Workqueue: events_unbound cfg80211_wiphy_work
[  496.453295][    C1] RIP: 0010:__lock_acquire+0xe8d/0x7eb0
[  496.453322][    C1] Code: 83 3d a6 d7 a6 16 00 48 8b 44 24 28 75 3c 48 63 d8 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 15 ff 91 be 08 00 00 00 e8 a3 c6 77 00 <49> b8 00 00 00 00 00 fc ff df 48 0f a3 1d f1 67 96 10 48 8b 9c 24
[  496.453376][    C1] RSP: 0018:ffffc9000480f680 EFLAGS: 00000056
[  496.453391][    C1] RAX: 0000000000000001 RBX: 00000000000007db RCX: ffffffff8168acfd
[  496.453404][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff91ff15f8
[  496.453416][    C1] RBP: ffffc9000480f8c8 R08: ffffffff91ff15ff R09: 1ffffffff23fe2bf
[  496.453430][    C1] R10: dffffc0000000000 R11: fffffbfff23fe2c0 R12: 0000000000000003
[  496.453443][    C1] R13: ffff88802499bc00 R14: ffffffff9198499a R15: ffff88802499c780
[  496.453457][    C1] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  496.453472][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  496.453485][    C1] CR2: 000055e939ef5660 CR3: 000000000dd32000 CR4: 00000000003506e0
[  496.453501][    C1] Call Trace:
[  496.453508][    C1]  <TASK>
[  496.453530][    C1]  ? verify_lock_unused+0x140/0x140
[  496.453562][    C1]  ? verify_lock_unused+0x140/0x140
[  496.453588][    C1]  lock_acquire+0x19e/0x420
[  496.453609][    C1]  ? skb_dequeue+0x2d/0x160
[  496.453703][    C1]  ? __mutex_trylock_common+0x160/0x270
[  496.453724][    C1]  ? read_lock_is_recursive+0x20/0x20
[  496.453753][    C1]  _raw_spin_lock_irqsave+0xb4/0x100
[  496.453781][    C1]  ? skb_dequeue+0x2d/0x160
[  496.453809][    C1]  ? _raw_spin_lock+0x40/0x40
[  496.453835][    C1]  ? mark_lock+0x94/0x320
[  496.453860][    C1]  skb_dequeue+0x2d/0x160
[  496.453891][    C1]  ieee80211_iface_work+0x171/0xc90
[  496.453945][    C1]  cfg80211_wiphy_work+0x228/0x260
[  496.453966][    C1]  ? process_scheduled_works+0x975/0x1600
[  496.453993][    C1]  process_scheduled_works+0xa60/0x1600
[  496.454033][    C1]  ? worker_attach_to_pool+0x370/0x370
[  496.454061][    C1]  ? assign_work+0x3cc/0x5d0
[  496.454088][    C1]  worker_thread+0xa5e/0xfe0
[  496.454119][    C1]  ? _raw_spin_unlock+0x40/0x40
[  496.454144][    C1]  ? __kthread_parkme+0x71/0x1c0
[  496.454167][    C1]  kthread+0x2fa/0x390
[  496.454185][    C1]  ? pr_cont_work+0x550/0x550
[  496.454208][    C1]  ? kthread_blkcg+0xd0/0xd0
[  496.454228][    C1]  ret_from_fork+0x48/0x80
[  496.454251][    C1]  ? kthread_blkcg+0xd0/0xd0
[  496.454269][    C1]  ret_from_fork_asm+0x11/0x20
[  496.454310][    C1]  </TASK>
[  496.478283][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  496.478325][   T29] CPU: 0 PID: 29 Comm: khungtaskd Tainted: G S                 syzkaller #0
[  496.478404][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  496.478439][   T29] Call Trace:
[  496.478463][   T29]  <TASK>
[  496.478487][   T29]  dump_stack_lvl+0x18c/0x250
[  496.478579][   T29]  ? show_regs_print_info+0x20/0x20
[  496.478669][   T29]  ? load_image+0x420/0x420
[  496.478821][   T29]  panic+0x2ca/0x720
[  496.478923][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  496.479003][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  496.479109][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  496.479213][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  496.479302][   T29]  watchdog+0xf98/0xfa0
[  496.479394][   T29]  ? watchdog+0x1e1/0xfa0
[  496.479500][   T29]  kthread+0x2fa/0x390
[  496.479559][   T29]  ? hungtask_pm_notify+0x50/0x50
[  496.479650][   T29]  ? kthread_blkcg+0xd0/0xd0
[  496.479719][   T29]  ret_from_fork+0x48/0x80
[  496.479812][   T29]  ? kthread_blkcg+0xd0/0xd0
[  496.479884][   T29]  ret_from_fork_asm+0x11/0x20
[  496.480011][   T29]  </TASK>
[  496.480055][   T29] Kernel Offset: disabled
[  496.843141][   T29] Rebooting in 86400 seconds..