last executing test programs:

6m28.525404542s ago: executing program 0 (id=328):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
rt_sigprocmask(0x2, &(0x7f0000000140)={[0x1]}, &(0x7f0000000380), 0x8)

6m26.894365881s ago: executing program 0 (id=332):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x3f, 0x13, 0x200, &(0x7f00000003c0)="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"})

6m26.030297442s ago: executing program 0 (id=339):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240)='.\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\xe7\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04y\rr\xba^\x9f\xf4\xfb\xaa#\xf6lX\'\x03u\xc6XZ\x8eK*Zs\xdb\xcaV\x92\x84\xc5\x05i]\xb6N\xa9&a\xe6\xa1\xedgd\xc2\x8b1Kq\x90U\xe0\x9a\xee\xd6BdU?\r\xd2\x13}u\xf6\x9entz\vW\x04\x968\xc5v\xe0t:\xe0D\xe8\xca\xb8\xd5\xb0\x89\x90\x928\x1d\r\x8b\xf2#8\xf5rI=6\xa1L\x19>I\f\xe7\xab\x98\xd2x\x82\x820\xf6\x8b]T\xd1\xe0\xefD\xc3\x94O\xdd\\\xd6\xb5z.\xc9z>\xdab\xcdw\xbf\x91\x190we\xa5\xfc\xf9\xaf\xedA&\xd50\xa9\xf0\xbeX\xe8\xd0', 0x0)
syz_io_uring_setup(0x7b67, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0xea}, &(0x7f0000000100), 0x0, &(0x7f0000000080))
mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00')
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000), 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x400, 0x0)
lseek(0xffffffffffffffff, 0x2000, 0x0)
syz_usbip_server_init(0x5)
socket(0x8000000010, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000)
connect$inet(r0, &(0x7f0000000080)={0x2, 0xffff, @broadcast}, 0x37)
pipe(&(0x7f0000000100))
r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r2, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xbb)
close(r2)

6m24.241208684s ago: executing program 0 (id=345):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210040, &(0x7f00000004c0), 0xfc, 0x59d, &(0x7f00000022c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m23.412339557s ago: executing program 0 (id=346):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e27, 0x56c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7e}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0)

6m20.023800963s ago: executing program 0 (id=356):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000580)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@errors_continue}, {@utf8no}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@numtail}, {@fat=@sys_immutable}, {@numtail}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108)

6m18.090140225s ago: executing program 32 (id=356):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000580)={[{@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@errors_continue}, {@utf8no}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_winnt}, {@numtail}, {@fat=@sys_immutable}, {@numtail}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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")
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108)

16.428213054s ago: executing program 5 (id=1360):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r7})

15.954657989s ago: executing program 3 (id=1364):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$reject(0x13, r1, 0xffffffffffffffff, 0x5, r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, 0x0)
io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

14.474917215s ago: executing program 3 (id=1368):
r0 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020)

11.675617249s ago: executing program 3 (id=1373):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0xa2040, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x100, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
r2 = syz_open_pts(r1, 0x141601)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1000000000002185)
fcntl$setstatus(r2, 0x4, 0x102800)
close_range(r0, r1, 0x0)

11.471755249s ago: executing program 4 (id=1374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
syz_emit_ethernet(0x4e, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x14044080}, 0x0)

11.195452362s ago: executing program 3 (id=1376):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
utime(0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x8000000080, 0x3, 0xfffffffc, 0xfffffffc}, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

11.139781219s ago: executing program 4 (id=1377):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="182000", @ANYBLOB], 0x0, 0x7b2, 0x9e, &(0x7f0000000440)=""/158, 0x41100, 0x75, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x2, 0xc, 0x6}, {0x5, 0x5, 0x9, 0x9}, {0x5, 0x5, 0x1, 0x2}], 0x10, 0xe47}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r7})

9.551365588s ago: executing program 5 (id=1380):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

9.492405453s ago: executing program 1 (id=1381):
writev(0xffffffffffffffff, &(0x7f0000000640), 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800000, 0x0, 0x0, 0xfe, "0062ba7d82000000160000120000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
read(r2, &(0x7f0000000200)=""/227, 0xe3)

9.317797971s ago: executing program 5 (id=1382):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x5a000, 0x77)
getdents(r1, 0x0, 0x0)

8.015844861s ago: executing program 2 (id=1383):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x9, 0x7860, 0xfff}, 0x2a}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xbd)
syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {}, 0x2}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60122d9200083a0000000000000000000000ffffac1414aafe800000000000000000"], 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
open(0x0, 0x148640, 0x78e22799f4a46f8a)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
dup(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10)

7.791467066s ago: executing program 1 (id=1384):
syz_emit_vhci(0x0, 0x15)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
io_setup(0x3fe, &(0x7f0000000100)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)=' -', 0x3fffff}])

7.788873354s ago: executing program 5 (id=1385):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x40a81, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000001, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

7.666777756s ago: executing program 4 (id=1386):
syz_emit_ethernet(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
sendfile(r2, r1, 0x0, 0x8)

7.566185457s ago: executing program 4 (id=1387):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="66baf80cb8044fdc87efed666a0f388059e0e005000000b91e4200000fc73e0f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b936080000b846330000ba000000000f30b9210000000f01c1c4e17929d8", 0x5e}], 0x1, 0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6.20930122s ago: executing program 2 (id=1388):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f0000001b00)=[@text64={0x40, 0x0}], 0x1, 0xcb30cd4c9dd07e26, 0x0, 0x0)

6.079607294s ago: executing program 1 (id=1389):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
open(0x0, 0x8000, 0x14b)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})

5.625428s ago: executing program 3 (id=1390):
socket$inet_tcp(0x2, 0x1, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0x5, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x20000)
read$msr(r1, &(0x7f0000001740)=""/102400, 0x19000)
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@deltaction={0x24, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0)
syz_io_uring_submit(r4, r5, r6, 0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

4.395536134s ago: executing program 4 (id=1391):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@clear_cache}, {@metadata_ratio}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4.179250264s ago: executing program 2 (id=1392):
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.175875795s ago: executing program 1 (id=1393):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0xfffffefd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1f, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0x9, 0x7860, 0xfff}, 0x2a}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4084}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0xbd)
syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x8180)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x25dfdbfe, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x8000000000000001}, {}, 0x2}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60122d9200083a0000000000000000000000ffffac1414aafe800000000000000000"], 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\t\x00'/13, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x90}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
open(0x0, 0x148640, 0x78e22799f4a46f8a)
pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
dup(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[], 0x38}}, 0x10)

4.16012717s ago: executing program 5 (id=1394):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100100000040d9044aa000000000000109022d0001000080010904010002030002000921fd7f000122eb0009058103"], 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

3.387497089s ago: executing program 2 (id=1395):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl(r0, 0xfffff000, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

3.385718645s ago: executing program 3 (id=1396):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="182000", @ANYBLOB], 0x0, 0x7b2, 0x9e, &(0x7f0000000440)=""/158, 0x41100, 0x75, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x5, 0x2, 0xc, 0x6}, {0x5, 0x5, 0x9, 0x9}, {0x5, 0x5, 0x1, 0x2}], 0x10, 0xe47}, 0x94)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, <r7=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000240)={0x10, 0x1, r7})

2.436759074s ago: executing program 2 (id=1397):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)

2.434516795s ago: executing program 4 (id=1398):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4)
r1 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14)
recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0)

1.262663761s ago: executing program 1 (id=1399):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000004b00)=@vmx={0x102, 0x0, 0x2080, {0x4000, 0x80a0000, {}, 0x0, 0x5e6}, {"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", "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"}})

478.146096ms ago: executing program 5 (id=1400):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000340), 0xff, 0x25e, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59)
writev(r1, &(0x7f0000000600)=[{&(0x7f00000001c0)="92dc2287690cbd6806c6aada73015b", 0xf}], 0x1)
pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)

295.100971ms ago: executing program 2 (id=1401):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xb}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x1, 0x6, 0xfffffffc}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4800)

0s ago: executing program 1 (id=1402):
openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

v: batadv0: Interface deactivated: batadv_slave_0
[  398.109666][  T826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  398.216148][ T8441] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  398.256623][  T826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  398.256650][  T826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.298381][ T7047] usb usb42-port1: unable to enumerate USB device
[  398.412929][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.413219][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.413377][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.413582][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.413762][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.414386][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.414559][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.414722][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.497063][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.546706][  T821] hid-u2fzero 0003:20A0:4287.000C: unknown main item tag 0x0
[  398.546994][  T821] hid-u2fzero 0003:20A0:4287.000C: item fetching failed at offset 38/235
[  398.547858][  T821] hid-u2fzero 0003:20A0:4287.000C: probe with driver hid-u2fzero failed with error -22
[  398.630896][  T821] usb 3-1: USB disconnect, device number 11
[  398.893591][  T826] veth1_macvtap: left promiscuous mode
[  398.893666][  T826] veth0_macvtap: left promiscuous mode
[  398.893869][  T826] veth1_vlan: left promiscuous mode
[  398.953222][  T826] veth0_vlan: left promiscuous mode
[  401.278800][  T826] team0 (unregistering): Port device team_slave_1 removed
[  401.326443][ T5835] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  401.357121][  T826] team0 (unregistering): Port device team_slave_0 removed
[  401.411940][ T8482] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  401.466367][ T5835] usb 5-1: device descriptor read/64, error -71
[  401.726396][ T5835] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  401.856347][ T5835] usb 5-1: device descriptor read/64, error -71
[  401.977836][ T5835] usb usb5-port1: attempt power cycle
[  402.377002][ T5835] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  402.400711][ T5835] usb 5-1: device descriptor read/8, error -71
[  402.464789][ T8452] batadv0: entered promiscuous mode
[  402.490262][ T8452] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  402.576042][ T8452] batadv0: left promiscuous mode
[  402.658683][ T8486] loop2: detected capacity change from 0 to 8192
[  402.673243][ T5835] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  402.708946][ T5835] usb 5-1: device descriptor read/8, error -71
[  402.816719][ T5835] usb usb5-port1: unable to enumerate USB device
[  402.861657][ T5255] 8021q: adding VLAN 0 to HW filter on device eth5
[  402.998690][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  402.998707][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  402.998738][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  403.050693][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  403.050745][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  403.050836][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  403.175498][ T5920] Flush: task=udevd[5920] dev=loop2 state=2
[  403.251933][ T8498] loop1: detected capacity change from 0 to 256
[  403.647799][ T8252] hsr_slave_0: entered promiscuous mode
[  403.652654][ T8252] hsr_slave_1: entered promiscuous mode
[  403.700213][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  403.742709][ T5920] Teardown: task=udevd[5920] dev=loop2 state=2
[  403.826835][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  404.136378][ T7047] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  404.419156][ T7047] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  404.419189][ T7047] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.419211][ T7047] usb 4-1: Product: syz
[  404.419227][ T7047] usb 4-1: Manufacturer: syz
[  404.419242][ T7047] usb 4-1: SerialNumber: syz
[  404.508511][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'.
[  405.019295][ T8529] loop4: detected capacity change from 0 to 2048
[  405.277334][ T8529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.096749][ T8529] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  406.305427][ T8529] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28
[  406.305467][ T8529] EXT4-fs (loop4): This should not happen!! Data will be lost
[  406.305467][ T8529] 
[  406.305483][ T8529] EXT4-fs (loop4): Total free blocks count 0
[  406.305498][ T8529] EXT4-fs (loop4): Free/Dirty block details
[  406.305574][ T8529] EXT4-fs (loop4): free_blocks=2415919504
[  406.305628][ T8529] EXT4-fs (loop4): dirty_blocks=32
[  406.305642][ T8529] EXT4-fs (loop4): Block reservation details
[  406.305657][ T8529] EXT4-fs (loop4): i_reserved_data_blocks=2
[  406.410638][ T5717] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  406.773768][ T5255] 8021q: adding VLAN 0 to HW filter on device eth6
[  407.165237][ T5592] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz-executor: data will be lost
[  408.225822][ T5717] usb 4-1: Service connection timeout for: 256
[  408.225850][ T5717] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services
[  409.240387][ T5328] usb 4-1: USB disconnect, device number 7
[  409.297063][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.301367][    C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  409.745041][ T5717] ath9k_htc: Failed to initialize the device
[  409.748069][ T5328] usb 4-1: ath9k_htc: USB layer deinitialized
[  409.760632][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  409.827023][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  410.134689][ T8548] loop3: detected capacity change from 0 to 1024
[  410.565377][ T8552] sch_tbf: burst 1735 is lower than device lo mtu (65550) !
[  411.454766][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  411.575870][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  411.689410][ T8566] warning: `syz.1.764' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  412.189709][  T821] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  412.356606][  T821] usb 5-1: Using ep0 maxpacket: 8
[  412.365385][ T8581] loop2: detected capacity change from 0 to 4096
[  412.376512][  T821] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  412.376542][  T821] usb 5-1: config 0 has no interface number 0
[  412.376585][  T821] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  412.376610][  T821] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  412.376637][  T821] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  412.376663][  T821] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  412.376706][  T821] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  412.376730][  T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.486811][  T821] usb 5-1: config 0 descriptor??
[  412.524374][  T821] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  412.701614][ T8587] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7)
[  412.701688][ T8587] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  412.702273][ T8587] vhci_hcd vhci_hcd.0: Device attached
[  412.710940][ T8587] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  412.711025][ T8587] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  413.203519][  T821] usb 40-1: SetAddress Request (14) to port 0
[  413.214726][ T8591] vhci_hcd: connection closed
[  413.233492][   T43] vhci_hcd vhci_hcd.3: stop threads
[  413.233568][   T43] vhci_hcd vhci_hcd.3: release socket
[  413.343092][   T43] vhci_hcd vhci_hcd.3: disconnect device
[  413.348088][  T821] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd
[  413.385217][  T821] usb 40-1: enqueue for inactive port 0
[  413.743769][   T32] usb 5-1: USB disconnect, device number 17
[  414.005737][ T8601] loop3: detected capacity change from 0 to 128
[  414.051008][   T32] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  414.106045][  T821] usb usb40-port1: attempt power cycle
[  414.125383][ T8601] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  414.139138][ T8601] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  414.147794][ T8604] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  414.253227][ T8601] fscrypt (loop3, inode 12): Unsupported encryption flags (0x08)
[  414.459763][ T5593] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  414.669924][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  414.708069][  T821] usb usb40-port1: unable to enumerate USB device
[  414.816927][ T8598] loop1: detected capacity change from 0 to 32768
[  414.836921][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  414.875458][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  414.930044][ T8598] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  414.999046][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  415.306626][ T8598] XFS (loop1): Ending clean mount
[  416.638048][ T5591] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  416.676317][ T5717] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  416.909029][ T5717] usb 4-1: config 32 has an invalid interface number: 255 but max is 0
[  416.909058][ T5717] usb 4-1: config 32 has no interface number 0
[  416.909087][ T5717] usb 4-1: too many endpoints for config 32 interface 255 altsetting 255: 255, using maximum allowed: 30
[  416.909132][ T5717] usb 4-1: config 32 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  416.909161][ T5717] usb 4-1: config 32 interface 255 has no altsetting 0
[  416.909193][ T5717] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  416.909216][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.995459][ T5717] usb-storage 4-1:32.255: USB Mass Storage device detected
[  417.104869][ T5717] usb-storage 4-1:32.255: Quirks match for vid 057b pid 0000: 1
[  417.266856][ T5717] usb 4-1: USB disconnect, device number 8
[  417.352258][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  417.572372][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  418.088944][ T8652] loop3: detected capacity change from 0 to 1024
[  418.105226][ T8652] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  418.193803][ T8650] loop4: detected capacity change from 0 to 4096
[  418.588825][ T8660] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  418.884916][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  419.176481][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  419.316556][ T8252] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  419.407722][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.412953][ T8252] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  419.528350][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.612078][ T8252] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  419.745526][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.778650][ T8252] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  419.892864][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  420.088947][ T7047] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  420.243037][ T7047] usb 2-1: unable to get BOS descriptor or descriptor too short
[  420.259619][ T7047] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  420.299140][ T7047] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  420.299188][ T7047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.299211][ T7047] usb 2-1: Product: syz
[  420.299227][ T7047] usb 2-1: Manufacturer: syz
[  420.299243][ T7047] usb 2-1: SerialNumber: syz
[  420.559332][ T7047] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  420.739416][ T7047] usb 2-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  420.739454][ T7047] usb 2-1: found format II with max.bitrate = 4, frame size=7372
[  422.071834][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0
[  422.241022][ T7047] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[  422.452833][ T7047] usb 2-1: USB disconnect, device number 11
[  422.495995][ T8252] 8021q: adding VLAN 0 to HW filter on device team0
[  422.559547][  T826] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.561261][  T826] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.649104][ T3123] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.649213][ T3123] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.662377][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  423.135336][ T8711] capability: warning: `syz.1.793' uses 32-bit capabilities (legacy support in use)
[  423.167731][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  423.251082][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  425.156504][ T8729] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  425.592820][ T8739] loop4: detected capacity change from 0 to 4096
[  425.653595][ T8739] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  427.002717][ T8739] ntfs3(loop4): ino=19, mi_enum_attr
[  427.002770][ T8739] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  427.236436][ T8739] ntfs3(loop4): ino=1a, mi_enum_attr
[  427.236577][ T8739] ntfs3(loop4): ino=1a, mi_enum_attr
[  427.236597][ T8739] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  427.392315][ T8758] loop3: detected capacity change from 0 to 1024
[  427.422563][ T8758] EXT4-fs: Ignoring removed bh option
[  427.610669][ T8758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  427.864731][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  427.957621][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  427.977285][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  428.002587][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  428.138551][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  428.425631][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  429.131574][ T8799] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  429.531354][ T8797] loop2: detected capacity change from 0 to 512
[  429.721495][ T8797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  429.721625][ T8797] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.346126][ T8252] veth0_vlan: entered promiscuous mode
[  430.393869][ T8252] veth1_vlan: entered promiscuous mode
[  430.505219][ T8252] veth0_macvtap: entered promiscuous mode
[  430.530562][ T8252] veth1_macvtap: entered promiscuous mode
[  430.613376][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.744073][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.790922][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.821306][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.826145][   T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.844908][   T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.914648][   T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  431.022777][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  431.331821][ T8833] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  431.440731][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  432.279980][  T826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.280009][  T826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  432.538288][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  432.538311][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  433.260418][ T8849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.359'.
[  433.382061][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'.
[  433.564533][ T8842] loop3: detected capacity change from 0 to 32768
[  433.594080][ T8842] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.825 (8842)
[  433.874521][ T8842] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  433.874556][ T8842] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  434.188367][ T8842] BTRFS info (device loop3): enabling ssd optimizations
[  434.188397][ T8842] BTRFS info (device loop3): turning on async discard
[  434.188415][ T8842] BTRFS info (device loop3): enabling free space tree
[  434.898320][ T8877] loop4: detected capacity change from 0 to 32768
[  435.550606][ T8883] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  435.550717][ T8883] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  435.855221][ T8876] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  435.855473][ T8876] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  435.856071][ T8876] vhci_hcd vhci_hcd.0: Device attached
[  435.880167][ T8884] vhci_hcd: connection closed
[  435.958825][ T1247] vhci_hcd vhci_hcd.5: stop threads
[  435.958854][ T1247] vhci_hcd vhci_hcd.5: release socket
[  435.958907][ T1247] vhci_hcd vhci_hcd.5: disconnect device
[  436.264212][ T8877] JBD2: Ignoring recovery information on journal
[  436.824201][ T8877] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  438.320706][ T5592] ocfs2: Unmounting device (7,4) on (node local)
[  438.432468][ T5593] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  438.469104][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  438.531670][ T8900] loop2: detected capacity change from 0 to 32768
[  438.547840][ T8900] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.841 (8900)
[  438.634283][ T8900] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  438.634319][ T8900] BTRFS info (device loop2): using sha256 checksum algorithm
[  438.796163][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  438.996440][ T8906] vxcan0: tx address claim with different name
[  439.047082][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  439.074807][ T8900] BTRFS info (device loop2): turning off barriers
[  439.074839][ T8900] BTRFS info (device loop2): enabling free space tree
[  439.213161][ T8921] loop5: detected capacity change from 0 to 256
[  439.214354][ T8921] exfat: Deprecated parameter 'utf8'
[  439.214377][ T8921] exfat: Deprecated parameter 'utf8'
[  439.218292][ T8921] exfat: Deprecated parameter 'utf8'
[  439.376364][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  439.550096][ T5594] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  439.673561][ T8921] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  440.067187][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  440.067281][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  440.145179][ T8925] loop1: detected capacity change from 0 to 32768
[  440.428329][ T8925] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  440.600882][ T5848] Flush: task=udevd[5848] dev=loop2 state=2
[  440.753239][ T8925] XFS (loop1): Ending clean mount
[  440.922415][ T5848] Teardown: task=udevd[5848] dev=loop2 state=2
[  441.086438][ T5835] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  441.089482][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  441.278541][ T5835] usb 5-1: Using ep0 maxpacket: 8
[  441.282528][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  441.283490][ T5835] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  441.283518][ T5835] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  441.283541][ T5835] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  441.283594][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  441.286148][ T5835] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  441.349283][ T5835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.349311][ T5835] usb 5-1: Product: syz
[  441.349326][ T5835] usb 5-1: Manufacturer: syz
[  441.349340][ T5835] usb 5-1: SerialNumber: syz
[  441.417818][ T5835] usb 5-1: config 0 descriptor??
[  441.421939][ T5835] hub 5-1:0.0: bad descriptor, ignoring hub
[  441.421978][ T5835] hub 5-1:0.0: probe with driver hub failed with error -5
[  441.480987][ T8948] loop3: detected capacity change from 0 to 1024
[  441.498403][ T8948] EXT4-fs: inline encryption not supported
[  441.650225][ T8948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  441.748558][ T5591] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  441.748813][ T5835] usb 5-1: USB disconnect, device number 18
[  441.820293][ T8956] ublk_ctrl_add_dev: invalid recovery flags 10
[  442.192377][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.198880][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  442.251778][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  442.326461][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  442.385715][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  442.419636][ T8965] loop2: detected capacity change from 0 to 128
[  442.453411][ T8965] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  442.453470][ T8965] hpfs: filesystem error: improperly stopped
[  442.453486][ T8965] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  442.453501][ T8965] hpfs: You really don't want any checks? You are crazy...
[  442.454329][ T8965] hpfs: hpfs_map_sector(): read error
[  442.454351][ T8965] hpfs: code page support is disabled
[  442.454859][ T8965] hpfs: hpfs_map_4sectors(): unaligned read
[  442.454959][ T8965] hpfs: hpfs_map_4sectors(): unaligned read
[  442.454970][ T8965] hpfs: filesystem error: unable to find root dir
[  442.536363][ T8965] hpfs: hpfs_map_4sectors(): unaligned read
[  442.541626][ T8965] hpfs: hpfs_map_sector(): read error
[  442.643722][ T8968] loop3: detected capacity change from 0 to 1024
[  442.818888][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  442.870461][ T8968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  442.870557][ T8968] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  443.150157][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  443.990751][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  444.054417][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  444.477323][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  445.107537][  T198] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  445.277198][  T198] usb 5-1: Using ep0 maxpacket: 16
[  445.311651][  T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.311691][  T198] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.347018][  T198] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  445.347051][  T198] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  445.347074][  T198] usb 5-1: Manufacturer: syz
[  445.401212][  T198] usb 5-1: config 0 descriptor??
[  445.507865][ T8994] 9pnet_virtio: no channels available for device syz
[  445.863326][  T198] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.000D/input/input9
[  446.238387][  T198] creative-sb0540 0003:041E:3100.000D: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  446.289702][  T198] usb 5-1: USB disconnect, device number 19
[  446.829645][ T8995] fido_id[8995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  447.276848][ T5599] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  447.429981][ T5599] usb 6-1: unable to get BOS descriptor or descriptor too short
[  447.431600][ T5599] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.431626][ T5599] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  447.431679][ T5599] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  447.431719][ T5599] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  447.431764][ T5599] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  447.431792][ T5599] usb 6-1: config 1 interface 1 has no altsetting 0
[  447.444316][ T5599] usb 6-1: string descriptor 0 read error: -22
[  447.446158][ T5599] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  447.447399][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.246362][ T5717] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  448.312853][ T9023] loop3: detected capacity change from 0 to 164
[  448.378981][ T9023] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  448.399055][ T9023] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  448.420762][ T5717] usb 5-1: Using ep0 maxpacket: 32
[  448.434445][ T5717] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  448.434475][ T5717] usb 5-1: config 0 has no interface number 0
[  448.460513][ T5599] usb 6-1: 2:0: failed to get current value for ch 1 (-71)
[  448.476380][ T5717] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  448.476409][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.476429][ T5717] usb 5-1: Product: syz
[  448.476443][ T5717] usb 5-1: Manufacturer: syz
[  448.476457][ T5717] usb 5-1: SerialNumber: syz
[  448.560703][ T9023] syz.3.876: attempt to access beyond end of device
[  448.560703][ T9023] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  448.561048][ T9023] syz.3.876: attempt to access beyond end of device
[  448.561048][ T9023] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164
[  448.655545][ T5717] usb 5-1: config 0 descriptor??
[  448.665261][ T5717] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  448.887401][ T5920] Flush: task=udevd[5920] dev=loop3 state=2
[  448.995115][ T5920] Teardown: task=udevd[5920] dev=loop3 state=2
[  449.165741][ T9020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.181122][ T9020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.211621][ T5717] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  449.233431][ T5717] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  449.452965][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  449.454694][ T5606] usb 5-1: USB disconnect, device number 20
[  449.538682][ T9036] loop2: detected capacity change from 0 to 2048
[  449.559690][ T9036] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=4096, location=4096
[  449.559721][ T9036] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  449.559772][ T9036] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  449.559804][ T9036] UDF-fs: Scanning with blocksize 512 failed
[  449.628445][ T9036] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  449.628469][ T9036] UDF-fs: Scanning with blocksize 1024 failed
[  449.644289][ T5606] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  449.701558][ T9036] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  449.701587][ T9036] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  449.701602][ T9036] UDF-fs: Scanning with blocksize 2048 failed
[  449.726247][ T9036] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  449.736649][ T9036] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  449.736677][ T9036] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  449.736692][ T9036] UDF-fs: Scanning with blocksize 4096 failed
[  449.736703][ T9036] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  449.911049][ T6866] Flush: task=udevd[6866] dev=loop2 state=2
[  449.916150][ T5606] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  449.939837][ T9044] netlink: 56 bytes leftover after parsing attributes in process `syz.1.884'.
[  449.981754][ T5599] usb 6-1: USB disconnect, device number 2
[  450.075574][ T9037] Bluetooth: hci0: invalid len left 7, exp >= 50
[  450.130740][ T5606] quatech2 5-1:0.51: device disconnected
[  450.307049][ T6866] Teardown: task=udevd[6866] dev=loop2 state=2
[  450.868988][ T9040] input: syz1 as /devices/virtual/input/input10
[  451.306321][ T5717] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  451.460391][ T5717] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  451.460424][ T5717] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.044318][ T5717] usb 2-1: config 0 descriptor??
[  452.404412][ T5717] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  452.577628][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'.
[  452.604283][ T5717] [drm:udl_init] *ERROR* Selecting channel failed
[  453.023812][ T5717] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  453.023838][ T5717] [drm] Initialized udl on minor 2
[  453.047047][ T5717] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  453.050287][ T5717] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  453.074331][ T5328] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  453.088829][ T5328] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  453.095871][ T5717] usb 2-1: USB disconnect, device number 12
[  453.637319][ T9096] loop2: detected capacity change from 0 to 1764
[  453.672939][ T9101] input: syz1 as /devices/virtual/input/input11
[  454.572405][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  454.891198][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  455.119295][ T9132] loop3: detected capacity change from 0 to 256
[  455.143601][ T9132] vfat: Bad value for 'fmask'
[  455.145783][ T9132] Flush: task=syz.3.907[9132] dev=loop3 state=2
[  455.220886][ T9132] Teardown: task=syz.3.907[9132] dev=loop3 state=2
[  455.443966][  T198] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  455.595178][  T198] usb 3-1: unable to get BOS descriptor or descriptor too short
[  455.607095][  T198] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  455.630406][  T198] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  455.630435][  T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.630454][  T198] usb 3-1: Product: syz
[  455.630468][  T198] usb 3-1: Manufacturer: syz
[  455.630482][  T198] usb 3-1: SerialNumber: syz
[  455.931240][  T198] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  456.079082][ T5599] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  456.125294][  T198] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  456.125321][  T198] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  456.258897][ T5599] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  456.258932][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.302734][ T5599] usb 4-1: config 0 descriptor??
[  456.387617][ T5599] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  456.532568][  T198] usb 3-1: invalid uac2 rates
[  456.532846][  T198] usb 3-1: invalid uac2 rates
[  456.533501][  T198] usb 3-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  456.533527][  T198] usb 3-1: found format II with max.bitrate = 4, frame size=7372
[  456.790956][  T198] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  456.999457][ T9148] loop5: detected capacity change from 0 to 512
[  457.203658][  T198] usb 3-1: USB disconnect, device number 12
[  457.254477][ T5599] gspca_stv06xx: I2C: Read error writing address: -71
[  457.366138][ T5599] usb 4-1: USB disconnect, device number 9
[  457.664816][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  457.767087][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  457.867063][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  458.290155][ T5835] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  458.440337][ T5835] usb 6-1: Using ep0 maxpacket: 16
[  458.442830][ T5835] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.442863][ T5835] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.442887][ T5835] usb 6-1: config 0 interface 0 has no altsetting 0
[  458.442921][ T5835] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.11
[  458.442946][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.578440][ T5835] usb 6-1: config 0 descriptor??
[  459.187063][ T5835] hid_parser_main: 25 callbacks suppressed
[  459.187097][ T5835] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  459.187127][ T5835] holtek 0003:1241:5015.000E: unknown main item tag 0x0
[  459.187151][ T5835] holtek 0003:1241:5015.000E: item fetching failed at offset 2/40
[  459.188971][ T9183] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  459.188996][ T9183] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  459.189091][ T9183] vhci_hcd vhci_hcd.0: Device attached
[  459.191304][ T5835] holtek 0003:1241:5015.000E: parse failed
[  459.191378][ T5835] holtek 0003:1241:5015.000E: probe with driver holtek failed with error -22
[  459.215736][ T9183] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  459.215764][ T9183] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  459.330543][ T5835] usb 6-1: USB disconnect, device number 3
[  459.496399][ T5606] usb 40-1: SetAddress Request (18) to port 0
[  459.496485][ T5606] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd
[  459.710722][ T9185] vhci_hcd: connection reset by peer
[  459.713431][ T1061] vhci_hcd vhci_hcd.3: stop threads
[  459.713474][ T1061] vhci_hcd vhci_hcd.3: release socket
[  459.713550][ T1061] vhci_hcd vhci_hcd.3: disconnect device
[  460.108324][ T5599] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  460.271103][ T5599] usb 5-1: Using ep0 maxpacket: 16
[  460.273765][ T5599] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  460.273799][ T5599] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  460.273825][ T5599] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  460.273855][ T5599] usb 5-1: config 0 interface 0 has no altsetting 0
[  460.273891][ T5599] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  460.273918][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.377882][ T5599] usb 5-1: config 0 descriptor??
[  460.916893][ T9191] loop4: detected capacity change from 0 to 1024
[  460.922023][ T9191] hfsplus: failed to load extents file
[  460.922701][ T9191] Flush: task=syz.4.928[9191] dev=loop4 state=2
[  461.160802][ T9218] syz.1.939 (9218) used obsolete PPPIOCDETACH ioctl
[  461.271373][ T9191] Teardown: task=syz.4.928[9191] dev=loop4 state=2
[  464.274193][ T5599] hid (null): unknown global tag 0xc
[  464.274229][ T5599] hid (null): global environment stack underflow
[  464.274246][ T5599] hid (null): unknown global tag 0xd
[  464.274436][ T5599] hid (null): unknown global tag 0xd
[  464.274463][ T5599] hid (null): invalid report_size 18764
[  464.320779][ T5599] hid (null): unknown global tag 0xd
[  464.498078][ T5599] usb 5-1: USB disconnect, device number 21
[  464.516998][ T9225] loop3: detected capacity change from 0 to 512
[  464.554287][ T5606] usb 40-1: device descriptor read/8, error -110
[  464.812458][ T9225] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  464.812480][ T9225] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  464.812769][ T9225] EXT4-fs (loop3): orphan cleanup on readonly fs
[  464.813644][ T9225] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #13: comm syz.3.940: iget: bad i_size value: 12154761577498
[  464.813696][ T9225] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  464.815119][ T9225] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.940: couldn't read orphan inode 13 (err -117)
[  464.815187][ T9225] loop3: lost filesystem error report for type 5 error -117
[  464.816241][    C0] EXT4-fs (loop3): error count since last fsck: 2
[  464.816260][    C0] EXT4-fs (loop3): initial error at time 1783707934: ext4_orphan_get:1399: inode 13
[  464.816297][    C0] EXT4-fs (loop3): last error at time 1783707934: ext4_orphan_get:1404
[  464.908482][ T9225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  464.938798][ T5606] usb usb40-port1: attempt power cycle
[  465.043549][ T9225] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.940: dx entry: limit 65535 != root limit 120
[  465.043588][ T9225] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.940: Corrupt directory, running e2fsck is recommended
[  465.328089][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  465.380193][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  465.509565][ T5606] usb usb40-port1: unable to enumerate USB device
[  465.769233][ T9237] loop1: detected capacity change from 0 to 32768
[  465.780003][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  465.920899][ T9237] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  467.669903][ T9266] (syz.1.945,9266,1):ocfs2_double_lock:1195 ERROR: status = -2
[  467.669938][ T9266] (syz.1.945,9266,1):ocfs2_rename:1304 ERROR: status = -2
[  467.669961][ T9266] (syz.1.945,9266,1):ocfs2_rename:1704 ERROR: status = -2
[  467.760158][ T9232] loop5: detected capacity change from 0 to 65536
[  467.930292][ T9232] XFS (loop5): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[  468.197786][ T9232] XFS (loop5): Ending clean mount
[  468.409094][ T8252] XFS (loop5): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd
[  468.476388][ T9292] loop2: detected capacity change from 0 to 128
[  468.598972][ T9292] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  468.599095][ T9292] System zones: 1-3, 19-19, 35-36
[  468.685398][ T9292] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  468.774828][ T9292] ext4 filesystem being mounted at /215/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  468.886138][ T9292] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full
[  468.921156][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  469.009118][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  469.149202][ T5594] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  469.191249][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  469.296793][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  469.694838][ T9305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'.
[  469.766739][ T5591] ocfs2: Unmounting device (7,1) on (node local)
[  469.953641][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  470.221976][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  470.354955][ T9311] loop4: detected capacity change from 0 to 4096
[  470.425799][ T9311] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  470.990958][ T9311] ntfs3(loop4): ino=19, mi_enum_attr
[  470.991004][ T9311] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  471.022241][ T9311] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  471.394857][ T7047] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  471.538541][ T9323] ntfs3(loop4): ino=1f, mi_enum_attr
[  471.538564][ T9323] ntfs3(loop4): ino=1f, Correct links count -> 1.
[  471.568474][ T7047] usb 3-1: unable to get BOS descriptor or descriptor too short
[  471.589721][ T7047] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  471.589741][ T7047] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  471.589777][ T7047] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  471.589807][ T7047] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  471.589837][ T7047] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  471.589856][ T7047] usb 3-1: config 1 interface 1 has no altsetting 0
[  471.593033][ T7047] usb 3-1: string descriptor 0 read error: -22
[  471.593131][ T7047] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  471.593149][ T7047] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.000972][ T7047] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[  472.492150][ T7047] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  472.492185][ T7047] usb 3-1: Warning! Unlikely big volume step count (=9965), linear volume or wrong cval->res?
[  472.492205][ T7047] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/9965/1
[  472.607070][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  472.624102][ T5717] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  472.737049][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  472.788422][ T5717] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 75, changing to 10
[  472.788452][ T5717] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  472.788473][ T5717] usb 6-1: config 0 interface 0 has no altsetting 0
[  472.788497][ T5717] usb 6-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  472.788515][ T5717] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.905570][ T5717] usb 6-1: config 0 descriptor??
[  473.274511][ T9333] loop4: detected capacity change from 0 to 1024
[  473.604747][ T9333] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.621209][ T7047] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  473.643424][ T5717] gt683r_led 0003:1770:FF00.0010: item fetching failed at offset 0/38
[  473.646963][ T5717] gt683r_led 0003:1770:FF00.0010: hid parsing failed
[  473.647069][ T5717] gt683r_led 0003:1770:FF00.0010: probe with driver gt683r_led failed with error -22
[  473.809632][ T7047] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  473.881126][ T5717] usb 6-1: USB disconnect, device number 4
[  473.904440][ T7047] usb 3-1: USB disconnect, device number 13
[  474.029952][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.175712][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  474.277252][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  475.785071][ T9348] input: syz0 as /devices/virtual/input/input12
[  475.993509][ T9356] loop1: detected capacity change from 0 to 512
[  476.028937][ T9354] 9pnet_virtio: no channels available for device syz
[  476.042446][ T9356] EXT4-fs: Ignoring removed nobh option
[  476.089779][ T9356] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  476.155156][ T9356] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  476.177211][ T9356] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #13: comm syz.1.981: inode has both inline data and extents flags
[  476.177248][ T9356] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  476.183643][ T9356] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.981: couldn't read orphan inode 13 (err -117)
[  476.183681][ T9356] loop1: lost filesystem error report for type 5 error -117
[  476.238813][ T9356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.480745][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.512941][ T9360] input: syz1 as /devices/virtual/input/input13
[  476.584848][ T9363] loop5: detected capacity change from 0 to 512
[  476.608366][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  476.760608][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  478.537680][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  478.717246][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  478.766568][ T5605] Bluetooth: hci5: command 0x1003 tx timeout
[  478.766600][ T5612] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  478.949096][ T9380] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  478.949167][ T9380] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  479.002717][ T9379] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  479.002805][ T9379] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  479.004095][ T9379] vhci_hcd vhci_hcd.0: Device attached
[  479.330554][ T7047] usb 42-1: SetAddress Request (18) to port 0
[  479.330896][ T7047] usb 42-1: new SuperSpeed USB device number 18 using vhci_hcd
[  479.589096][ T9381] vhci_hcd: connection reset by peer
[  479.791867][ T1061] vhci_hcd vhci_hcd.4: stop threads
[  479.791936][ T1061] vhci_hcd vhci_hcd.4: release socket
[  479.794348][ T1061] vhci_hcd vhci_hcd.4: disconnect device
[  482.282893][ T9404] 9pnet_virtio: no channels available for device syz
[  482.967425][ T9423] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  482.967747][ T9423] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  482.968449][ T9423] vhci_hcd vhci_hcd.0: Device attached
[  484.759267][ T9423] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  484.759504][ T9423] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  484.815638][ T7047] usb 42-1: device descriptor read/8, error -110
[  484.870638][ T9424] vhci_hcd: connection closed
[  484.877204][ T2359] vhci_hcd vhci_hcd.1: stop threads
[  484.877269][ T2359] vhci_hcd vhci_hcd.1: release socket
[  484.877409][ T2359] vhci_hcd vhci_hcd.1: disconnect device
[  485.590881][ T7047] usb usb42-port1: attempt power cycle
[  486.161274][ T7047] usb usb42-port1: unable to enumerate USB device
[  486.283383][ T9445] loop5: detected capacity change from 0 to 2048
[  486.368527][ T9445] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  486.468288][ T5920] udevd[5920]: incorrect nilfs2 checksum on /dev/loop5
[  486.471595][ T9448] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  486.524049][ T5328] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  486.694910][ T5328] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  486.694934][ T5328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.941294][ T5328] usb 4-1: config 0 descriptor??
[  487.945377][ T5328] gspca_main: cpia1-2.14.0 probing 0813:0001
[  488.433095][ T5328] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  488.852117][ T9463] loop4: detected capacity change from 0 to 128
[  488.890020][ T5328] gspca_cpia1: usb_control_msg 02, error -32
[  488.890322][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  488.892199][ T5328] gspca_cpia1: usb_control_msg 02, error -32
[  488.893305][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  488.893641][ T5328] gspca_cpia1: usb_control_msg 02, error -32
[  488.893917][    C0] raw-gadget.0 gadget.3: ignoring, device is not running
[  488.894047][ T5328] gspca_cpia1: usb_control_msg 02, error -32
[  488.894061][ T5328] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  489.047776][ T9460] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  489.057100][ T5328] usb 4-1: USB disconnect, device number 10
[  489.239832][ T9463] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  489.239888][ T9463] hpfs: filesystem error: improperly stopped
[  489.239899][ T9463] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  489.239910][ T9463] hpfs: You really don't want any checks? You are crazy...
[  489.240202][ T9463] hpfs: hpfs_map_sector(): read error
[  489.240210][ T9463] hpfs: code page support is disabled
[  489.240370][ T9463] hpfs: hpfs_map_4sectors(): unaligned read
[  489.240457][ T9463] hpfs: hpfs_map_4sectors(): unaligned read
[  489.240465][ T9463] hpfs: filesystem error: unable to find root dir
[  489.278667][ T9463] hpfs: hpfs_map_4sectors(): unaligned read
[  489.278941][ T9463] hpfs: hpfs_map_sector(): read error
[  489.444293][ T9448] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  489.444322][ T9448] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  489.472672][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  489.661349][ T9466] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  489.661379][ T9466] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  489.677530][ T9467] ALSA: mixer_oss: invalid OSS volume ''
[  489.681103][ T9466] vhci_hcd vhci_hcd.0: Device attached
[  490.073335][ T5606] usb 38-1: SetAddress Request (18) to port 0
[  490.073583][ T5606] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd
[  490.335754][ T9468] vhci_hcd: connection reset by peer
[  490.353551][  T831] vhci_hcd vhci_hcd.2: stop threads
[  490.353768][  T831] vhci_hcd vhci_hcd.2: release socket
[  490.371636][  T831] vhci_hcd vhci_hcd.2: disconnect device
[  490.861849][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  490.910160][ T9448] Remounting filesystem read-only
[  490.929269][ T8252] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  491.005986][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  491.100422][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  491.221980][ T9477] loop1: detected capacity change from 0 to 512
[  491.231512][ T9477] EXT4-fs: Ignoring removed orlov option
[  491.305267][ T9477] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  491.446737][ T9477] EXT4-fs (loop1): 1 truncate cleaned up
[  492.553370][ T9477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  492.624850][ T9487] loop3: detected capacity change from 0 to 512
[  492.626011][ T9487] EXT4-fs: inline encryption not supported
[  492.655325][ T9487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  492.655348][ T9487] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  492.728757][ T9487] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  492.845578][ T9487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1023: bg 0: block 248: padding at end of block bitmap is not set
[  492.845616][ T9487] loop3: lost filesystem error report for type 5 error -117
[  492.849917][    C0] EXT4-fs (loop3): last error at time 1783707962: ext4_validate_block_bitmap:441
[  492.899186][ T9487] Quota error (device loop3): write_blk: dquota write failed
[  492.899276][ T9487] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  492.899334][ T9487] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1023: Failed to acquire dquot type 1
[  492.899357][ T9487] loop3: lost filesystem error report for type 5 error -28
[  493.123603][ T9487] EXT4-fs (loop3): 1 truncate cleaned up
[  493.152633][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.206768][ T9487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  493.244090][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  493.610740][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  494.526418][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  494.693697][ T9508] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1028'.
[  494.693724][ T9508] nbd: must specify at least one socket
[  494.771159][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  494.839187][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  494.979709][ T9514] loop1: detected capacity change from 0 to 512
[  495.043940][ T9516] loop2: detected capacity change from 0 to 256
[  495.216561][ T9523] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  495.216633][ T9523] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  495.217214][ T9523] vhci_hcd vhci_hcd.0: Device attached
[  495.267828][ T9523] ALSA: mixer_oss: invalid OSS volume ''
[  495.548455][ T5606] usb 38-1: device descriptor read/8, error -110
[  495.617029][ T5328] usb 40-1: SetAddress Request (22) to port 0
[  495.617110][ T5328] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd
[  495.905429][ T9524] vhci_hcd: connection reset by peer
[  495.974967][   T43] vhci_hcd vhci_hcd.3: stop threads
[  495.975038][   T43] vhci_hcd vhci_hcd.3: release socket
[  495.975232][   T43] vhci_hcd vhci_hcd.3: disconnect device
[  496.071705][ T9516] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d)
[  496.410533][ T5606] usb usb38-port1: attempt power cycle
[  496.590115][ T9514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.592786][ T9514] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  496.629374][ T7047] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  496.777779][ T7047] usb 6-1: Using ep0 maxpacket: 32
[  496.780525][ T7047] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  496.780552][ T7047] usb 6-1: config 0 has no interface number 0
[  496.780597][ T7047] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  496.823882][ T7047] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  496.823915][ T7047] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.823938][ T7047] usb 6-1: Product: syz
[  496.823953][ T7047] usb 6-1: Manufacturer: syz
[  496.823969][ T7047] usb 6-1: SerialNumber: syz
[  496.888531][ T7047] usb 6-1: config 0 descriptor??
[  496.910546][ T7047] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  496.910584][ T7047] em28xx 6-1:0.132: Video interface 132 found:
[  497.014596][ T5606] usb usb38-port1: unable to enumerate USB device
[  497.337127][ T7047] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  498.437155][ T9530] loop3: detected capacity change from 0 to 131072
[  498.468003][ T9530] F2FS-fs (loop3): invalid crc value
[  498.631877][ T9530] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  498.651669][ T9530] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  498.653100][ T7047] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  498.653133][ T7047] em28xx 6-1:0.132: board has no eeprom
[  498.806300][ T7047] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  498.806383][ T7047] em28xx 6-1:0.132: analog set to bulk mode.
[  498.833641][   T10] em28xx 6-1:0.132: Registering V4L2 extension
[  498.856927][ T7047] usb 6-1: USB disconnect, device number 5
[  498.874661][ T7047] em28xx 6-1:0.132: Disconnecting em28xx
[  499.163320][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  499.380113][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  499.437658][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.629563][   T10] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  499.629587][   T10] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  499.629601][   T10] em28xx 6-1:0.132: No AC97 audio processor
[  499.675155][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  500.325661][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  500.525213][   T10] usb 6-1: Decoder not found
[  500.525237][   T10] em28xx 6-1:0.132: failed to create media graph
[  500.565304][   T10] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  500.698676][ T5328] usb 40-1: device descriptor read/8, error -110
[  500.764472][   T10] em28xx 6-1:0.132: Remote control support is not available for this card.
[  500.779946][ T7047] em28xx 6-1:0.132: Closing input extension
[  501.124121][ T5328] usb usb40-port1: attempt power cycle
[  501.490842][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  501.490951][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  501.680990][ T5328] usb usb40-port1: unable to enumerate USB device
[  501.758532][ T7047] em28xx 6-1:0.132: Freeing device
[  502.082958][ T9559] loop1: detected capacity change from 0 to 64
[  502.957006][ T9566] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  503.123896][ T9550] loop2: detected capacity change from 0 to 32768
[  503.445829][ T9557] syz.5.1046 (9557) used greatest stack depth: 18512 bytes left
[  503.602593][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  503.957164][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  504.171934][ T5591] hfs: node 4:3 still has 1 user(s)!
[  504.218682][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  504.329584][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  504.498324][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1051'.
[  504.622927][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  504.717037][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  505.274408][ T9589] Flush: task=syz.4.1057[9589] dev=loop9 state=2
[  505.348668][ T5606] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  505.410101][ T9589] Teardown: task=syz.4.1057[9589] dev=loop9 state=2
[  505.527663][ T5606] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  505.528805][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.528843][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.528864][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.530155][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.530212][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.530243][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.531858][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.531896][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.531916][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.533128][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.533165][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.533186][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.534092][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.534135][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.534154][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.535137][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.535192][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.535222][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.555167][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.663439][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.663597][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.669057][ T5606] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  505.669240][ T5606] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  505.669314][ T5606] usb 2-1: config 0 interface 0 has no altsetting 0
[  505.771606][ T5606] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  505.771689][ T5606] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  505.771750][ T5606] usb 2-1: Product: syz
[  505.771792][ T5606] usb 2-1: Manufacturer: syz
[  505.771833][ T5606] usb 2-1: SerialNumber: syz
[  505.935524][ T5606] usb 2-1: config 0 descriptor??
[  506.330685][ T5606] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  506.541559][ T9600] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  506.642379][ T5606] usb 2-1: USB disconnect, device number 13
[  506.733626][ T5606] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  507.275090][ T9617] ALSA: mixer_oss: invalid OSS volume ''
[  508.135367][ T9615] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  508.135416][ T9615] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  508.135902][ T9615] vhci_hcd vhci_hcd.0: Device attached
[  508.237195][ T9619] vhci_hcd: connection closed
[  508.314868][ T1145] vhci_hcd vhci_hcd.2: stop threads
[  508.315348][ T1145] vhci_hcd vhci_hcd.2: release socket
[  508.315803][ T1145] vhci_hcd vhci_hcd.2: disconnect device
[  509.318487][ T9631] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  509.318516][ T9631] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  509.318607][ T9631] vhci_hcd vhci_hcd.0: Device attached
[  509.364662][ T9631] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  509.364691][ T9631] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  509.734224][ T9632] vhci_hcd: connection closed
[  509.735402][ T1466] vhci_hcd vhci_hcd.5: stop threads
[  509.735422][ T1466] vhci_hcd vhci_hcd.5: release socket
[  509.735506][ T1466] vhci_hcd vhci_hcd.5: disconnect device
[  509.746553][    T9] usb 44-1: enqueue for inactive port 0
[  510.248106][    T9] usb usb44-port1: attempt power cycle
[  510.314088][ T9642] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  510.559884][ T9648] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  510.652684][ T5835] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  510.653123][ T5835] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  510.653565][ T5835] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  510.667400][ T5835] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  510.667423][ T5835] rtc rtc0: __rtc_set_alarm: err=-22
[  510.879205][    T9] usb usb44-port1: unable to enumerate USB device
[  511.129323][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  511.216730][ T9661] ALSA: mixer_oss: invalid OSS volume ''
[  511.270259][ T9659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  511.270401][ T9659] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  511.271365][ T9659] vhci_hcd vhci_hcd.0: Device attached
[  511.419771][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  511.419816][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  511.523434][    T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  511.523467][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.523549][    T9] usb 2-1: Product: syz
[  511.523610][    T9] usb 2-1: Manufacturer: syz
[  511.523627][    T9] usb 2-1: SerialNumber: syz
[  511.859889][ T9660] vhci_hcd: connection closed
[  511.862441][ T1466] vhci_hcd vhci_hcd.2: stop threads
[  511.862523][ T1466] vhci_hcd vhci_hcd.2: release socket
[  511.862771][ T1466] vhci_hcd vhci_hcd.2: disconnect device
[  512.240568][    T9] usb 2-1: config 0 descriptor??
[  512.383072][ T9653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  512.383155][ T9653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  512.738751][ T9653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  512.738952][ T9653] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  513.086014][ T9675] loop3: detected capacity change from 0 to 1764
[  513.160166][    T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  513.457234][ T9681] loop2: detected capacity change from 0 to 32768
[  513.502033][ T9681] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1083 (9681)
[  513.526290][ T9681] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  513.526400][ T9681] BTRFS info (device loop2): using sha256 checksum algorithm
[  513.580969][ T9682] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  513.772426][    T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  513.842308][ T9681] BTRFS info (device loop2): rebuilding free space tree
[  513.865937][    T9] usb 2-1: USB disconnect, device number 14
[  513.872933][ T9675] iso9660: Corrupted directory entry in block 2 of inode 1920
[  514.232853][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  514.239317][ T9681] BTRFS info (device loop2): setting nodatasum
[  514.239432][ T9681] BTRFS info (device loop2): setting nodatacow
[  514.239482][ T9681] BTRFS info (device loop2): turning off barriers
[  514.239548][ T9681] BTRFS info (device loop2): turning on sync discard
[  514.239573][ T9681] BTRFS info (device loop2): enabling free space tree
[  514.239591][ T9681] BTRFS info (device loop2): force clearing of disk cache
[  514.339967][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  514.405307][ T9681] BTRFS info (device loop2): scrub: started on devid 1
[  514.418369][ T9681] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0
[  515.539171][ T9711] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  515.539531][ T9711] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  515.677167][ T9710] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  515.677471][ T9710] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  515.678259][ T9710] vhci_hcd vhci_hcd.0: Device attached
[  516.152673][ T9712] vhci_hcd: connection closed
[  516.181418][ T1145] vhci_hcd vhci_hcd.4: stop threads
[  516.181482][ T1145] vhci_hcd vhci_hcd.4: release socket
[  516.181702][ T1145] vhci_hcd vhci_hcd.4: disconnect device
[  516.327586][ T5835] usb 42-1: enqueue for inactive port 0
[  516.959458][ T5835] usb usb42-port1: attempt power cycle
[  516.973321][ T5594] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  517.544036][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  517.592342][ T5835] usb usb42-port1: unable to enumerate USB device
[  517.650004][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  517.815758][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  518.028890][    T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  518.028918][    T9] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  518.028937][    T9] usb 2-1: config 0 has no interface number 0
[  518.031923][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  518.031951][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.031972][    T9] usb 2-1: Product: syz
[  518.031987][    T9] usb 2-1: Manufacturer: syz
[  518.032002][    T9] usb 2-1: SerialNumber: syz
[  518.157965][    T9] usb 2-1: config 0 descriptor??
[  518.739305][    T9] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  518.739384][    T9] uvcvideo 2-1:0.64: No valid video chain found.
[  519.504392][ T5605] Bluetooth: hci4: command 0x0406 tx timeout
[  519.655106][    T9] usb 2-1: USB disconnect, device number 15
[  520.434858][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  520.618163][ T5717] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  520.636295][    T9] usb 5-1: Using ep0 maxpacket: 16
[  520.638869][    T9] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  520.640187][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.641105][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.642206][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.643131][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.644206][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.645140][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.646073][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.649752][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  520.650714][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  520.650733][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  520.650748][    T9] usb 5-1: SerialNumber: syz
[  520.658398][    T9] usb 5-1: config 0 descriptor??
[  520.778093][ T5717] usb 4-1: Using ep0 maxpacket: 32
[  520.780149][ T5717] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  520.780167][ T5717] usb 4-1: config 0 has no interface number 0
[  520.780199][ T5717] usb 4-1: config 0 interface 184 has no altsetting 0
[  520.782357][ T5717] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  520.782377][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.782392][ T5717] usb 4-1: Product: syz
[  520.782403][ T5717] usb 4-1: Manufacturer: syz
[  520.782413][ T5717] usb 4-1: SerialNumber: syz
[  520.827486][ T5717] usb 4-1: config 0 descriptor??
[  520.921470][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input14
[  521.609381][ T4945] bcm5974 5-1:0.0: could not read from device
[  521.641317][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  521.641339][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  521.761537][ T4945] bcm5974 5-1:0.0: could not read from device
[  521.792046][    T9] usb 5-1: USB disconnect, device number 22
[  521.875143][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  521.875167][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  521.875182][ T5717] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  521.875391][ T5717] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  522.131048][ T5717] usb 4-1: USB disconnect, device number 11
[  522.243221][ T4945] bcm5974 5-1:0.0: could not read from device
[  522.566358][ T9753] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7)
[  522.566667][ T9753] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  522.567265][ T9753] vhci_hcd vhci_hcd.0: Device attached
[  522.649972][ T9753] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  522.650151][ T9753] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  523.259186][ T9754] vhci_hcd: connection closed
[  523.339745][   T43] vhci_hcd vhci_hcd.5: stop threads
[  523.339858][   T43] vhci_hcd vhci_hcd.5: release socket
[  523.340079][   T43] vhci_hcd vhci_hcd.5: disconnect device
[  523.543725][ T5717] usb 44-1: enqueue for inactive port 0
[  524.013313][ T9766] loop5: detected capacity change from 0 to 1024
[  524.045211][ T5717] usb usb44-port1: attempt power cycle
[  524.312169][ T9775] loop4: detected capacity change from 0 to 256
[  524.528942][ T5848] Flush: task=udevd[5848] dev=loop5 state=2
[  524.627921][ T5717] usb usb44-port1: unable to enumerate USB device
[  524.636583][ T5848] Teardown: task=udevd[5848] dev=loop5 state=2
[  524.834735][ T9781] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  525.074149][ T5920] Flush: task=udevd[5920] dev=loop4 state=2
[  525.074454][ T9793] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  525.074593][ T9793] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  525.356647][ T5920] Teardown: task=udevd[5920] dev=loop4 state=2
[  526.306756][ T9791] vhci_hcd vhci_hcd.0: failed to lookup sock
[  526.683681][ T9792] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  526.683709][ T9792] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  526.683811][ T9792] vhci_hcd vhci_hcd.0: Device attached
[  526.685880][ T9792] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  526.685898][ T9792] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  526.701801][ T9798] vhci_hcd: connection closed
[  526.739567][ T2359] vhci_hcd vhci_hcd.1: stop threads
[  526.739633][ T2359] vhci_hcd vhci_hcd.1: release socket
[  526.739764][ T2359] vhci_hcd vhci_hcd.1: disconnect device
[  528.046422][ T5599] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  528.157890][ T9801] loop2: detected capacity change from 0 to 32768
[  528.427264][   T37] audit: type=1800 audit(1783707998.506:13): pid=9801 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.2.1117" name="file1" dev="loop2" ino=4 res=0 errno=0
[  528.550910][ T9801] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  528.550910][ T9801] 
[  528.575925][ T9801] ERROR: (device loop2): remounting filesystem as read-only
[  528.575943][ T9801] xtLookup: xtSearch returned -5
[  528.597987][ T9801] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  528.597987][ T9801] 
[  528.598028][ T9801] xtLookup: xtSearch returned -5
[  528.600573][ T9801] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  528.600573][ T9801] 
[  528.600703][ T9801] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[  528.600703][ T9801] 
[  528.600723][ T9801] xtLookup: xtSearch returned -5
[  528.600802][ T9801] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt
[  528.600802][ T9801] 
[  528.846368][ T5599] usb 6-1: Using ep0 maxpacket: 16
[  528.852147][ T5599] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  528.852178][ T5599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.852200][ T5599] usb 6-1: Product: syz
[  528.852216][ T5599] usb 6-1: Manufacturer: syz
[  528.852232][ T5599] usb 6-1: SerialNumber: syz
[  529.193675][ T5599] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  529.295808][ T9812] loop1: detected capacity change from 0 to 131072
[  529.318321][ T9812] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  529.318348][ T9812] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  529.359331][ T9812] F2FS-fs (loop1): invalid crc value
[  529.709464][ T5599] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  529.710061][ T5599] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  529.710116][ T5599] usb 6-1: media controller created
[  529.714534][ T9808] loop5: detected capacity change from 0 to 32768
[  529.724554][ T9812] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  529.742355][ T9808] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1120 (9808)
[  529.803405][ T9808] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  529.803450][ T9808] BTRFS info (device loop5): using blake2b checksum algorithm
[  529.824860][ T9812] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  529.824890][ T9812] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  529.857759][ T5599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  530.087093][ T5599] zl10353_read_register: readreg error (reg=127, ret==-110)
[  530.144247][ T9808] BTRFS info (device loop5): enabling ssd optimizations
[  530.144272][ T9808] BTRFS info (device loop5): turning on async discard
[  530.144289][ T9808] BTRFS info (device loop5): enabling free space tree
[  530.317604][ T9836] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  530.453486][ T5599] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  530.588925][ T5599] usb 6-1: USB disconnect, device number 6
[  530.724457][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  531.119467][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  532.150263][ T9846] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  532.150293][ T9846] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  532.150402][ T9846] vhci_hcd vhci_hcd.0: Device attached
[  532.151833][ T9846] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  532.151871][ T9846] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  532.181270][ T9848] vhci_hcd: connection closed
[  532.200860][ T1488] vhci_hcd vhci_hcd.3: stop threads
[  532.200889][ T1488] vhci_hcd vhci_hcd.3: release socket
[  532.200940][ T1488] vhci_hcd vhci_hcd.3: disconnect device
[  532.513282][ T8252] do_umount: task=syz-executor[8252] propagate_mount_busy()!=0
[  532.524288][ T8252] do_umount: task=syz-executor[8252] propagate_mount_busy()!=0
[  533.342405][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  533.466094][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  534.042832][ T8252] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  534.149603][ T5599] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  534.459966][ T5599] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  534.460000][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.460024][ T5599] usb 5-1: Product: syz
[  534.460040][ T5599] usb 5-1: Manufacturer: syz
[  534.460056][ T5599] usb 5-1: SerialNumber: syz
[  534.465654][ T5599] usb 5-1: config 0 descriptor??
[  534.541306][ T9876] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  534.729840][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  534.938200][ T5599] usb 5-1: Firmware: major: 141, minor: 82, hardware type: UNKNOWN (66)
[  534.968714][   T10] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  534.995927][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  535.134594][ T5599] usb 5-1: no permanent extended address found, random address set
[  535.134631][ T5599] usb 5-1: atusb_probe: initialization failed, error = -524
[  535.135399][ T5599] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  535.218609][   T10] usb 2-1: config 150 has an invalid interface number: 204 but max is 2
[  535.218657][   T10] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  535.218680][   T10] usb 2-1: config 150 has no interface number 0
[  535.218727][   T10] usb 2-1: config 150 interface 204 has no altsetting 0
[  535.222609][   T10] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  535.222641][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.222662][   T10] usb 2-1: Product: syz
[  535.222678][   T10] usb 2-1: Manufacturer: syz
[  535.222693][   T10] usb 2-1: SerialNumber: syz
[  535.396024][    T9] usb 5-1: USB disconnect, device number 23
[  536.582471][   T10] xr_serial 2-1:150.204: skipping garbage
[  536.582556][   T10] xr_serial 2-1:150.204: xr_serial converter detected
[  537.076359][ T5717] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  537.341146][ T5717] usb 3-1: Using ep0 maxpacket: 16
[  537.396767][ T5717] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  537.396868][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.396893][ T5717] usb 3-1: Product: syz
[  537.396909][ T5717] usb 3-1: Manufacturer: syz
[  537.396924][ T5717] usb 3-1: SerialNumber: syz
[  538.782185][   T10] usb 2-1: xr_serial converter now attached to ttyUSB0
[  539.202737][ T9904] 9pnet_virtio: no channels available for device syz
[  540.690185][ T5717] usb 3-1: can't set config #157, error -71
[  540.790808][   T10] usb 2-1: USB disconnect, device number 16
[  540.992533][ T5717] usb 3-1: USB disconnect, device number 14
[  540.998709][   T10] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  541.078652][   T10] xr_serial 2-1:150.204: device disconnected
[  541.156315][ T5606] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  541.314559][ T5606] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  541.314594][ T5606] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  541.314639][ T5606] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  541.314666][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.622223][ T5606] usb 5-1: usb_control_msg returned -32
[  541.622273][ T5606] usbtmc 5-1:16.0: can't read capabilities
[  543.494795][ T9925] loop2: detected capacity change from 0 to 32768
[  543.632848][ T9944] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  543.844157][ T9925] JBD2: Ignoring recovery information on journal
[  543.983538][ T5606] usb 5-1: USB disconnect, device number 24
[  546.490576][ T9947] 9pnet_virtio: no channels available for device syz
[  548.358314][ T9958] loop4: detected capacity change from 0 to 1024
[  548.444815][ T9958] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  548.444933][ T9958] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  548.658728][ T9958] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1163: lblock 0 mapped to illegal pblock 0 (length 1)
[  548.693030][ T9963] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  548.733943][ T9925] JBD2: journal reset failed
[  548.734037][ T9925] (syz.2.1151,9925,1):ocfs2_journal_load:1163 ERROR: Failed to load journal!
[  548.734094][ T9925] (syz.2.1151,9925,1):ocfs2_check_volume:2372 ERROR: ocfs2 journal load failed! -4
[  549.190447][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  549.228674][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  549.288539][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  549.448707][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  549.466366][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  550.811703][ T9992] loop3: detected capacity change from 0 to 128
[  550.814254][ T9992] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  550.850395][ T9992] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  550.856134][ T9987] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  551.205512][ T9998] loop5: detected capacity change from 0 to 256
[  551.214438][ T9998] exfat: Deprecated parameter 'namecase'
[  551.239205][   T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  551.268500][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  551.288657][ T9998] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  551.348740][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  551.403245][ T5737] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  551.512224][   T37] audit: type=1326 audit(1783708021.586:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10002 comm="syz.2.1176" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9dd72dde59 code=0x0
[  551.596300][ T5737] usb 5-1: Using ep0 maxpacket: 16
[  551.603709][ T5737] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  551.603741][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.603763][ T5737] usb 5-1: Product: syz
[  551.603779][ T5737] usb 5-1: Manufacturer: syz
[  551.603795][ T5737] usb 5-1: SerialNumber: syz
[  551.647103][ T5737] usb 5-1: config 0 descriptor??
[  551.652238][ T5737] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  552.547749][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  552.681679][ T5737] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  552.957201][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  553.343582][T10028] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  554.512411][    T9] usb 5-1: USB disconnect, device number 25
[  554.849582][T10039] loop8: detected capacity change from 0 to 8
[  554.890538][T10039]  loop8: [CUMANA/ADFS] p1 [ADFS] p1
[  554.890572][T10039] loop8: partition table partially beyond EOD, truncated
[  554.891366][T10039] loop8: p1 size 2645487272 extends beyond EOD, truncated
[  554.981657][ T5920] Flush: task=udevd[5920] dev=loop8 state=2
[  555.319843][ T5920] Teardown: task=udevd[5920] dev=loop8 state=2
[  555.451557][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  557.039713][T10063] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  557.860479][T10082] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1201'.
[  558.382801][T10094] loop5: detected capacity change from 0 to 512
[  558.442752][T10094] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  558.616303][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  558.621755][T10094] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  558.768201][T10105] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  558.768231][T10105] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  558.768331][T10105] vhci_hcd vhci_hcd.0: Device attached
[  558.779124][T10105] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  558.779151][T10105] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  559.592713][T10107] vhci_hcd: connection closed
[  559.796298][  T831] vhci_hcd vhci_hcd.2: stop threads
[  559.796326][  T831] vhci_hcd vhci_hcd.2: release socket
[  559.796420][  T831] vhci_hcd vhci_hcd.2: disconnect device
[  559.962970][   T10] usb 4-1: Using ep0 maxpacket: 32
[  560.081654][   T10] usb 4-1: config 2 has an invalid interface number: 88 but max is 0
[  560.081685][   T10] usb 4-1: config 2 has no interface number 0
[  560.081732][   T10] usb 4-1: config 2 interface 88 altsetting 25 bulk endpoint 0x6 has invalid maxpacket 256
[  560.081759][   T10] usb 4-1: config 2 interface 88 has no altsetting 0
[  560.257343][   T10] usb 4-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  560.257376][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  560.257398][   T10] usb 4-1: Product: syz
[  560.257412][   T10] usb 4-1: Manufacturer: syz
[  560.257427][   T10] usb 4-1: SerialNumber: syz
[  560.391467][T10095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  560.530889][ T8252] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  560.635919][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  560.661215][T10095] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  560.728290][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  561.061647][T10127] loop5: detected capacity change from 0 to 128
[  561.105292][T10127] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  561.129171][T10127] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  561.194689][T10131] loop1: detected capacity change from 0 to 1024
[  561.630139][T10131] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  561.630487][T10131] hfsplus: failed to load root directory
[  561.688617][   T10] asix 4-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  561.688902][   T10] asix 4-1:2.88: probe with driver asix failed with error -71
[  561.726409][   T10] usb 4-1: USB disconnect, device number 12
[  561.755608][T10131] Flush: task=syz.1.1217[10131] dev=loop1 state=2
[  561.859411][T10131] Teardown: task=syz.1.1217[10131] dev=loop1 state=2
[  562.027122][ T8252] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  562.119078][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  562.206372][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  562.216330][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  562.366967][   T10] usb 3-1: Using ep0 maxpacket: 16
[  562.377517][   T10] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  562.377550][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.377573][   T10] usb 3-1: Product: syz
[  562.377588][   T10] usb 3-1: Manufacturer: syz
[  562.377619][   T10] usb 3-1: SerialNumber: syz
[  563.127102][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  563.127204][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  563.150788][   T10] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  563.188343][   T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  563.188745][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  563.188796][   T10] usb 3-1: media controller created
[  563.239554][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  563.465730][T10136] loop2: detected capacity change from 0 to 32768
[  563.485979][T10136] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1220 (10136)
[  564.242743][T10136] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  564.242782][T10136] BTRFS info (device loop2): using blake2b checksum algorithm
[  564.600505][T10136] BTRFS info (device loop2): enabling ssd optimizations
[  564.600536][T10136] BTRFS info (device loop2): turning on async discard
[  564.600557][T10136] BTRFS info (device loop2): enabling free space tree
[  564.686291][ T5599] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  564.860503][ T5599] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  564.860538][ T5599] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  564.860560][ T5599] usb 4-1: Product: syz
[  564.903088][ T5599] usb 4-1: config 0 descriptor??
[  564.935757][ T5599] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  564.955718][ T5599] usb 4-1: Detected FT232H
[  565.006547][   T10] zl10353_read_register: readreg error (reg=127, ret==-110)
[  565.155561][ T5599] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  565.217829][   T10] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  565.263035][   T10] usb 3-1: USB disconnect, device number 15
[  565.666867][T10157] loop3: detected capacity change from 0 to 2048
[  565.823428][ T5594] do_umount: task=syz-executor[5594] propagate_mount_busy()!=0
[  565.849870][T10157] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.886896][ T5594] do_umount: task=syz-executor[5594] propagate_mount_busy()!=0
[  565.977588][ T5599] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  566.003747][ T5599] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  566.022371][ T5599] usb 4-1: USB disconnect, device number 13
[  566.095388][ T5599] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  566.108798][ T5599] ftdi_sio 4-1:0.0: device disconnected
[  568.091142][T10179] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  568.694127][T10191] loop1: detected capacity change from 0 to 256
[  568.781140][ T5593] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  568.906632][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  569.107591][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  569.678103][ T5594] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  570.123003][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  570.169109][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  570.217093][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  570.277807][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  570.795371][T10211] loop1: detected capacity change from 0 to 32768
[  570.805002][T10211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1239 (10211)
[  570.852343][T10211] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  570.852381][T10211] BTRFS info (device loop1): using sha256 checksum algorithm
[  570.852439][T10211] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  571.270015][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  571.574602][T10230] loop2: detected capacity change from 0 to 32768
[  571.667730][   T10] usb 4-1: Using ep0 maxpacket: 16
[  571.675002][   T10] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  571.675086][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.675146][   T10] usb 4-1: Product: syz
[  571.675179][   T10] usb 4-1: Manufacturer: syz
[  571.675221][   T10] usb 4-1: SerialNumber: syz
[  571.793902][T10211] BTRFS info (device loop1): rebuilding free space tree
[  571.823421][T10230] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  572.047827][   T10] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  572.257929][   T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  572.258276][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  572.259929][   T10] usb 4-1: media controller created
[  572.261313][T10211] BTRFS info (device loop1): disabling free space tree
[  572.261881][T10211] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  572.261913][T10211] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  572.339402][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  572.477208][T10211] BTRFS info (device loop1): enabling ssd optimizations
[  572.477240][T10211] BTRFS info (device loop1): turning on async discard
[  572.477259][T10211] BTRFS info (device loop1): enabling disk space caching
[  572.477277][T10211] BTRFS info (device loop1): force clearing of disk cache
[  572.651935][T10224] loop3: detected capacity change from 0 to 32768
[  572.653932][T10224] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1240 (10224)
[  572.699893][T10224] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  572.699924][T10224] BTRFS info (device loop3): using blake2b checksum algorithm
[  573.026643][   T10] zl10353_read_register: readreg error (reg=127, ret==-110)
[  573.370509][ T5591] do_umount: task=syz-executor[5591] propagate_mount_busy()!=0
[  573.370842][ T5591] do_umount: task=syz-executor[5591] propagate_mount_busy()!=0
[  573.444987][T10224] BTRFS info (device loop3): enabling ssd optimizations
[  573.445034][T10224] BTRFS info (device loop3): turning on async discard
[  573.445053][T10224] BTRFS info (device loop3): enabling free space tree
[  573.459741][   T10] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  573.862539][   T32] usb 4-1: USB disconnect, device number 14
[  574.102811][T10259] loop4: detected capacity change from 0 to 256
[  574.118651][ T5594] ocfs2: Unmounting device (7,2) on (node local)
[  574.219983][T10259] syz.4.1247: attempt to access beyond end of device
[  574.219983][T10259] loop4: rw=524288, sector=1768, nr_sectors = 4 limit=256
[  574.220382][T10259] syz.4.1247: attempt to access beyond end of device
[  574.220382][T10259] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256
[  574.231135][   T37] audit: type=1800 audit(1783708044.296:15): pid=10259 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.1247" name="file1" dev="loop4" ino=1048645 res=0 errno=0
[  574.291070][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  574.384588][T10261] syz.4.1247: attempt to access beyond end of device
[  574.384588][T10261] loop4: rw=0, sector=1768, nr_sectors = 4 limit=256
[  574.397463][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  574.489237][   T37] audit: type=1800 audit(1783708044.456:16): pid=10261 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.1247" name="file1" dev="loop4" ino=1048645 res=0 errno=0
[  575.031095][ T5593] do_umount: task=syz-executor[5593] propagate_mount_busy()!=0
[  575.031358][ T5593] do_umount: task=syz-executor[5593] propagate_mount_busy()!=0
[  575.122164][ T3123] kworker/u8:16: attempt to access beyond end of device
[  575.122164][ T3123] loop4: rw=1, sector=1768, nr_sectors = 32 limit=256
[  575.122458][ T3123] kworker/u8:16: attempt to access beyond end of device
[  575.122458][ T3123] loop4: rw=1, sector=1832, nr_sectors = 8 limit=256
[  575.167798][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  575.476760][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  575.596913][T10268] binder: 10267:10268 ioctl c0306201 0 returned -14
[  575.935892][T10273] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  577.014974][ T5591] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  577.201847][T10286] loop5: detected capacity change from 0 to 256
[  577.432296][T10286] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  577.626220][T10286] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff)
[  577.659739][ T5593] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  577.667371][   T32] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  577.730736][T10286] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  577.852724][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  577.852761][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  577.852785][   T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  577.852831][   T32] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  577.852856][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.930626][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  577.969594][   T32] usb 3-1: config 0 descriptor??
[  578.059578][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  578.357800][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  578.598021][   T32] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd
[  578.647138][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  578.701278][   T32] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  579.290708][ T8252] Flush: task=syz-executor[8252] dev=loop5 state=2
[  579.367276][ T5610] usb 3-1: USB disconnect, device number 16
[  579.678691][ T8252] Teardown: task=syz-executor[8252] dev=loop5 state=2
[  580.209768][   T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  580.414845][   T10] usb 4-1: config 0 has no interfaces?
[  580.414876][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  580.414897][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.455941][   T10] usb 4-1: config 0 descriptor??
[  580.959057][T10308] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in;
[  580.959057][T10308]    program syz.3.1258 not setting count and/or reply_len properly
[  581.648072][T10326] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  581.648203][T10326] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  581.697931][T10324] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  581.874385][T10325] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  581.874408][T10325] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  581.874524][T10325] vhci_hcd vhci_hcd.0: Device attached
[  581.874977][T10327] vhci_hcd: connection closed
[  581.919348][ T6616] vhci_hcd vhci_hcd.4: stop threads
[  581.919374][ T6616] vhci_hcd vhci_hcd.4: release socket
[  581.919413][ T6616] vhci_hcd vhci_hcd.4: disconnect device
[  581.923055][   T32] usb 4-1: USB disconnect, device number 15
[  583.350723][T10349] binder: 10348:10349 ioctl 81f8943c 0 returned -22
[  584.840799][T10362] syz.5.1274 uses obsolete (PF_INET,SOCK_PACKET)
[  585.117635][T10338] loop3: detected capacity change from 0 to 32768
[  585.402788][T10338] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  585.491471][T10338] XFS (loop3): Ending clean mount
[  585.736504][ T5717] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  585.951312][ T5717] usb 5-1: Using ep0 maxpacket: 32
[  585.970802][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short
[  585.994780][ T5717] usb 5-1: config 0 has an invalid interface number: 151 but max is 0
[  585.994819][ T5717] usb 5-1: config 0 has no interface number 0
[  585.994921][ T5717] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  585.994951][ T5717] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  585.995017][ T5717] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x6 has an invalid bInterval 239, changing to 7
[  586.182922][ T5717] usb 5-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=59.f2
[  586.183001][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.183066][ T5717] usb 5-1: Product: syz
[  586.183083][ T5717] usb 5-1: Manufacturer: syz
[  586.183146][ T5717] usb 5-1: SerialNumber: syz
[  586.529876][ T5717] usb 5-1: config 0 descriptor??
[  586.900689][T10386] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  586.900873][T10386] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  587.862099][ T5717] usb 5-1: USB disconnect, device number 26
[  588.061108][T10390] loop1: detected capacity change from 0 to 512
[  588.062285][T10390] EXT4-fs: Ignoring removed i_version option
[  588.062308][T10390] EXT4-fs: Ignoring removed bh option
[  588.289637][ T5593] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  588.312817][T10390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  588.313611][T10390] ext4 filesystem being mounted at /263/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  588.511107][T10399] evm: overlay not supported
[  589.282635][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  589.329335][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  589.757828][T10409] loop4: detected capacity change from 0 to 1024
[  589.811895][T10409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  589.812023][T10409] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  589.994342][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  590.773514][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  590.874773][T10395] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  591.111204][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  591.250942][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  591.331103][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  592.531532][T10417] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  592.707743][ T5717] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  592.749649][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  592.851107][T10432] loop2: detected capacity change from 0 to 7
[  592.880779][ T5717] usb 6-1: too many configurations: 13, using maximum allowed: 8
[  592.883625][T10432] Dev loop2: unable to read RDB block 7
[  592.884561][T10432]  loop2: unable to read partition table
[  592.885724][T10432] loop2: partition table beyond EOD, truncated
[  592.885749][T10432] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  592.921297][ T5717] usb 6-1: config 0 has no interfaces?
[  592.983276][ T9911] Flush: task=udevd[9911] dev=loop2 state=2
[  593.091852][ T5717] usb 6-1: config 0 has no interfaces?
[  593.131221][ T5717] usb 6-1: config 0 has no interfaces?
[  593.132674][ T5717] usb 6-1: config 0 has no interfaces?
[  593.144161][ T5717] usb 6-1: config 0 has no interfaces?
[  593.162431][ T5717] usb 6-1: config 0 has no interfaces?
[  593.172296][ T5717] usb 6-1: config 0 has no interfaces?
[  593.187655][ T5717] usb 6-1: config 0 has no interfaces?
[  593.195919][ T5717] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  593.195949][ T5717] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.195971][ T5717] usb 6-1: Product: syz
[  593.195987][ T5717] usb 6-1: Manufacturer: syz
[  593.196002][ T5717] usb 6-1: SerialNumber: syz
[  593.242716][ T5717] usb 6-1: config 0 descriptor??
[  593.449920][ T9911] Teardown: task=udevd[9911] dev=loop2 state=2
[  593.497315][ T5717] usb 6-1: USB disconnect, device number 7
[  594.787367][ T5737] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  594.962257][ T5737] usb 6-1: Using ep0 maxpacket: 32
[  594.970541][ T5737] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  594.989970][ T5737] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  594.990002][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  594.990025][ T5737] usb 6-1: Product: syz
[  594.990041][ T5737] usb 6-1: Manufacturer: syz
[  594.990057][ T5737] usb 6-1: SerialNumber: syz
[  595.051640][ T5737] usb 6-1: config 0 descriptor??
[  595.062604][T10423] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  596.217048][ T5737] usb 6-1: USB disconnect, device number 8
[  596.415048][T10479] loop4: detected capacity change from 0 to 1024
[  596.416660][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  596.579152][   T10] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  596.579183][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  596.579205][   T10] usb 3-1: config 0 has no interface number 0
[  596.625347][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  596.625378][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.625398][   T10] usb 3-1: Product: syz
[  596.625412][   T10] usb 3-1: Manufacturer: syz
[  596.625425][   T10] usb 3-1: SerialNumber: syz
[  596.670508][   T10] usb 3-1: config 0 descriptor??
[  596.703070][   T10] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22
[  596.735081][T10479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.770768][ T5606] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  596.865346][ T5592] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  596.945354][ T5592] Flush: task=syz-executor[5592] dev=loop4 state=2
[  596.961844][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.961878][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.961903][ T5606] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  596.961946][ T5606] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  596.961971][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.035265][ T5606] usb 2-1: config 0 descriptor??
[  597.038769][ T5592] Teardown: task=syz-executor[5592] dev=loop4 state=2
[  598.460690][T10494] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  598.582985][ T5606] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  600.647711][ T5606] usb 3-1: USB disconnect, device number 17
[  602.133795][T10519] syzkaller1: entered promiscuous mode
[  602.133823][T10519] syzkaller1: entered allmulticast mode
[  604.943878][ T5737] usb 2-1: USB disconnect, device number 17
[  605.253627][T10546] loop2: detected capacity change from 0 to 1024
[  605.260814][T10546] EXT4-fs: Ignoring removed orlov option
[  605.301390][T10548] loop1: detected capacity change from 0 to 128
[  605.345216][T10546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  605.468042][T10550] loop3: detected capacity change from 0 to 4096
[  605.805455][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  605.866039][ T5594] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  605.876274][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  606.132935][T10562] input: syz1 as /devices/virtual/input/input16
[  606.135529][ T5594] Flush: task=syz-executor[5594] dev=loop2 state=2
[  606.154909][T10563] loop1: detected capacity change from 0 to 256
[  606.346302][ T5594] Teardown: task=syz-executor[5594] dev=loop2 state=2
[  606.486352][T10563] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d)
[  606.726418][ T5591] Flush: task=syz-executor[5591] dev=loop1 state=2
[  607.505566][ T5593] Flush: task=syz-executor[5593] dev=loop3 state=2
[  607.719066][ T5591] Teardown: task=syz-executor[5591] dev=loop1 state=2
[  607.746583][ T5593] Teardown: task=syz-executor[5593] dev=loop3 state=2
[  608.824760][T10586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  608.824791][T10586] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  608.824894][T10586] vhci_hcd vhci_hcd.0: Device attached
[  608.852214][T10586] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  608.852239][T10586] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  608.974109][T10590] vhci_hcd: connection closed
[  608.974726][ T1466] vhci_hcd vhci_hcd.4: stop threads
[  608.974767][ T1466] vhci_hcd vhci_hcd.4: release socket
[  608.974808][ T1466] vhci_hcd vhci_hcd.4: disconnect device
[  609.598766][T10597] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  610.426273][ T5717] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  610.607006][ T5717] usb 4-1: Using ep0 maxpacket: 32
[  610.609753][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.609775][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.609805][ T5717] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  610.609822][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.634627][ T5717] usb 4-1: config 0 descriptor??
[  610.685677][ T5717] hub 4-1:0.0: USB hub found
[  610.716273][ T5599] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  610.869691][ T5599] usb 5-1: too many configurations: 25, using maximum allowed: 8
[  610.900993][ T5717] hub 4-1:0.0: 1 port detected
[  610.903964][ T5599] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  610.903995][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=2
[  610.904018][ T5599] usb 5-1: SerialNumber: syz
[  610.948386][ T5599] usb 5-1: config 0 descriptor??
[  610.970040][ T5599] pwc: Creative Labs Webcam Pro Ex detected.
[  611.329104][ T5599] pwc: Warning: more than 1 configuration available.
[  611.329790][ T5599] pwc: Failed to set LED on/off time (-71)
[  611.331672][ T5599] pwc: send_video_command error -71
[  611.331683][ T5599] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  611.331817][ T5599] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  611.351302][ T5599] usb 5-1: USB disconnect, device number 27
[  612.622934][T10618] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  612.622989][T10618] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  612.798038][T10615] vhci_hcd vhci_hcd.0: failed to lookup sock
[  613.256943][ T5717] hub 4-1:0.0: activate --> -90
[  613.469915][ T5737] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  615.296419][ T5737] usb 4-1: USB disconnect, device number 16
[  615.296931][   T13] usb 4-1: Failed to suspend device, error -71
[  616.481419][T10642] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  616.517861][T10643] ALSA: mixer_oss: invalid OSS volume '.‹R¯HÖe'ì»Ë /Ïâµüë1ýC¸ 
£~—'
[  616.517922][T10643] ALSA: mixer_oss: invalid OSS volume 'Ÿ('
[  616.863412][T10641] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  616.863441][T10641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  616.863525][T10641] vhci_hcd vhci_hcd.0: Device attached
[  616.953280][T10644] vhci_hcd: connection closed
[  616.960183][  T831] vhci_hcd vhci_hcd.4: stop threads
[  616.960211][  T831] vhci_hcd vhci_hcd.4: release socket
[  616.960250][  T831] vhci_hcd vhci_hcd.4: disconnect device
[  619.433074][T10673] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.531081][ T5606] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  620.586263][   T32] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  620.702030][ T5606] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  620.702061][ T5606] usb 2-1: config 0 has no interface number 0
[  620.702107][ T5606] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  620.702137][ T5606] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  620.702166][ T5606] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  620.702194][ T5606] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  620.702223][ T5606] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  620.702252][ T5606] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  620.702298][ T5606] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  620.702324][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.804632][   T32] usb 5-1: Using ep0 maxpacket: 16
[  620.825969][   T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.826000][   T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  620.855547][   T32] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  620.855584][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.855606][   T32] usb 5-1: Product: syz
[  620.855622][   T32] usb 5-1: Manufacturer: syz
[  620.855639][   T32] usb 5-1: SerialNumber: syz
[  620.914864][ T5606] usb 2-1: config 0 descriptor??
[  620.927825][T10680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  620.927952][T10680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  621.056135][T10686] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20005
[  621.732630][ T5606] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  621.792216][   T32] usb 5-1: 0:2 : does not exist
[  621.810296][   T32] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  621.858515][ T5606] usb 2-1: USB disconnect, device number 19
[  621.956831][ T5606] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  622.097291][   T32] usb 5-1: USB disconnect, device number 28
[  623.753638][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  624.371955][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  624.372057][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  625.941901][T10724] Bluetooth: hci0: invalid len left 7, exp >= 50
[  629.686670][T10760] loop1: detected capacity change from 0 to 32768
[  629.687991][T10760] btrfs: Deprecated parameter 'usebackuproot'
[  629.688026][T10760] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  629.688924][T10760] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1389 (10760)
[  629.750224][T10760] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  629.750257][T10760] BTRFS info (device loop1): using crc32c checksum algorithm
[  629.900503][ T1247] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  629.901499][T10760] BTRFS error (device loop1): failed to load root extent
[  629.901541][T10760] BTRFS warning (device loop1): try to load backup roots slot 1
[  629.907011][   T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  629.907378][T10760] BTRFS warning (device loop1): couldn't read tree root
[  629.907471][T10760] BTRFS warning (device loop1): try to load backup roots slot 2
[  629.957540][   T43] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  629.957955][T10760] BTRFS warning (device loop1): couldn't read tree root
[  629.958017][T10760] BTRFS warning (device loop1): try to load backup roots slot 3
[  630.020357][T10760] BTRFS info (device loop1): rebuilding free space tree
[  630.961624][T10760] BTRFS info (device loop1): checking UUID tree
[  630.989861][T10760] BTRFS info (device loop1): enabling ssd optimizations
[  630.989892][T10760] BTRFS info (device loop1): turning on async discard
[  630.989911][T10760] BTRFS info (device loop1): enabling free space tree
[  630.989929][T10760] BTRFS info (device loop1): force clearing of disk cache
[  630.989948][T10760] BTRFS info (device loop1): enabling auto defrag
[  630.989966][T10760] BTRFS info (device loop1): trying to use backup root at mount time
[  630.990058][T10760] BTRFS info (device loop1): use zstd compression, level 3
[  631.458132][T10782] loop4: detected capacity change from 0 to 32768
[  631.463620][T10782] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1391 (10782)
[  631.512421][ T5591] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  631.542439][T10782] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  631.542473][T10782] BTRFS info (device loop4): using sha256 checksum algorithm
[  631.542530][T10782] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  631.756286][ T5606] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  631.851677][T10782] BTRFS info (device loop4): rebuilding free space tree
[  632.064022][ T5606] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  632.064054][ T5606] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  632.064075][ T5606] usb 6-1: config 0 has no interface number 0
[  632.064123][ T5606] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  632.064152][ T5606] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  632.064176][ T5606] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  632.064222][ T5606] usb 6-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  632.064247][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.184780][ T5606] usb 6-1: config 0 descriptor??
[  632.340957][T10782] BTRFS info (device loop4): disabling free space tree
[  632.341042][T10782] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  632.341069][T10782] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  632.366891][T10782] BTRFS info (device loop4): enabling ssd optimizations
[  632.366919][T10782] BTRFS info (device loop4): turning on async discard
[  632.366938][T10782] BTRFS info (device loop4): enabling disk space caching
[  632.366955][T10782] BTRFS info (device loop4): force clearing of disk cache
[  632.827459][ T5592] do_umount: task=syz-executor[5592] propagate_mount_busy()!=0
[  632.827739][ T5592] do_umount: task=syz-executor[5592] propagate_mount_busy()!=0
[  632.838275][ T5920] Flush: task=udevd[5920] dev=loop1 state=2
[  634.123221][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123264][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123292][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123320][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123347][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123375][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123401][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123427][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123453][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.123480][ T5606] holtek_mouse 0003:04D9:A04A.0013: unknown main item tag 0x0
[  634.248684][ T5920] Teardown: task=udevd[5920] dev=loop1 state=2
[  634.615238][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  634.773425][ T5606] holtek_mouse 0003:04D9:A04A.0013: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.5-1/input1
[  634.797657][ T5606] usb 6-1: USB disconnect, device number 9
[  635.137405][T10822] loop5: detected capacity change from 0 to 128
[  635.153330][T10820] fido_id[10820]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  635.454616][T10822] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  635.459382][T10822] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  636.509962][T10835] 
[  636.509975][T10835] ======================================================
[  636.509985][T10835] WARNING: possible circular locking dependency detected
[  636.510004][T10835] syzkaller #0 Tainted: G             L     
[  636.510018][T10835] ------------------------------------------------------
[  636.510026][T10835] syz.5.1400/10835 is trying to acquire lock:
[  636.510051][T10835] ffff888035ea0800 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0
[  636.510128][T10835] 
[  636.510128][T10835] but task is already holding lock:
[  636.510137][T10835] ffff88805fa24cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0
[  636.510190][T10835] 
[  636.510190][T10835] which lock already depends on the new lock.
[  636.510190][T10835] 
[  636.510198][T10835] 
[  636.510198][T10835] the existing dependency chain (in reverse order) is:
[  636.510207][T10835] 
[  636.510207][T10835] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  636.510238][T10835]        percpu_down_read_internal+0x48/0x1d0
[  636.510263][T10835]        ext4_writepages+0x205/0x3b0
[  636.510288][T10835]        do_writepages+0x338/0x560
[  636.510315][T10835]        __writeback_single_inode+0x12e/0xf90
[  636.510341][T10835]        writeback_single_inode+0x4dd/0xe10
[  636.510362][T10835]        write_inode_now+0x1c2/0x290
[  636.510382][T10835]        iput+0x98b/0xf00
[  636.510414][T10835]        ext4_xattr_block_set+0x1b0c/0x2a80
[  636.510439][T10835]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  636.510464][T10835]        __ext4_expand_extra_isize+0x30d/0x400
[  636.510487][T10835]        __ext4_mark_inode_dirty+0x455/0x700
[  636.510519][T10835]        ext4_evict_inode+0x976/0x10c0
[  636.510547][T10835]        evict+0x624/0xb50
[  636.510564][T10835]        ext4_orphan_cleanup+0xc7a/0x14c0
[  636.510594][T10835]        ext4_fill_super+0x5cc5/0x65d0
[  636.510621][T10835]        get_tree_bdev_flags+0x430/0x4f0
[  636.510652][T10835]        vfs_get_tree+0x92/0x2a0
[  636.510689][T10835]        do_new_mount+0x319/0xdc0
[  636.510718][T10835]        __se_sys_mount+0x31d/0x420
[  636.510743][T10835]        do_syscall_64+0x174/0x580
[  636.510768][T10835]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.510790][T10835] 
[  636.510790][T10835] -> #0 (sb_internal){.+.+}-{0:0}:
[  636.510820][T10835]        __lock_acquire+0x15ff/0x2e40
[  636.510845][T10835]        lock_acquire+0x115/0x350
[  636.510868][T10835]        percpu_down_read_internal+0x48/0x1d0
[  636.510891][T10835]        ext4_evict_inode+0x426/0x10c0
[  636.510920][T10835]        evict+0x624/0xb50
[  636.510936][T10835]        ext4_ext_migrate+0xddf/0x10e0
[  636.510959][T10835]        ext4_ioctl+0x234f/0x4b80
[  636.510985][T10835]        __se_sys_ioctl+0xff/0x170
[  636.511016][T10835]        do_syscall_64+0x174/0x580
[  636.511042][T10835]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.511063][T10835] 
[  636.511063][T10835] other info that might help us debug this:
[  636.511063][T10835] 
[  636.511070][T10835]  Possible unsafe locking scenario:
[  636.511070][T10835] 
[  636.511077][T10835]        CPU0                    CPU1
[  636.511083][T10835]        ----                    ----
[  636.511090][T10835]   lock(&sbi->s_writepages_rwsem);
[  636.511107][T10835]                                lock(sb_internal);
[  636.511123][T10835]                                lock(&sbi->s_writepages_rwsem);
[  636.511141][T10835]   rlock(sb_internal);
[  636.511154][T10835] 
[  636.511154][T10835]  *** DEADLOCK ***
[  636.511154][T10835] 
[  636.511160][T10835] locks held by syz.5.1400/10835: 3, last CPU#1:
[  636.511176][T10835]  #0: ffff888035ea0510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210
[  636.511246][T10835]  #1: ffff88804c264b38 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: ext4_ioctl+0x2347/0x4b80
[  636.511310][T10835]  #2: ffff88805fa24cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0
[  636.511366][T10835] 
[  636.511366][T10835] stack backtrace:
[  636.511396][T10835] CPU: 1 UID: 0 PID: 10835 Comm: syz.5.1400 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  636.511427][T10835] Tainted: [L]=SOFTLOCKUP
[  636.511434][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.511452][T10835] Call Trace:
[  636.511460][T10835]  <TASK>
[  636.511470][T10835]  dump_stack_lvl+0xe8/0x150
[  636.511502][T10835]  print_circular_bug+0x2e2/0x300
[  636.511535][T10835]  check_noncircular+0x12f/0x150
[  636.511569][T10835]  __lock_acquire+0x15ff/0x2e40
[  636.511599][T10835]  ? __lock_acquire+0x6df/0x2e40
[  636.511626][T10835]  ? __asan_memset+0x22/0x50
[  636.511664][T10835]  lock_acquire+0x115/0x350
[  636.511688][T10835]  ? ext4_evict_inode+0x426/0x10c0
[  636.511726][T10835]  percpu_down_read_internal+0x48/0x1d0
[  636.511750][T10835]  ? ext4_evict_inode+0x426/0x10c0
[  636.511780][T10835]  ext4_evict_inode+0x426/0x10c0
[  636.511810][T10835]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  636.511834][T10835]  ? __pfx_ext4_evict_inode+0x10/0x10
[  636.511861][T10835]  ? rt_spin_unlock+0x157/0x200
[  636.511882][T10835]  ? rt_spin_unlock+0x163/0x200
[  636.511901][T10835]  ? __pfx_ext4_evict_inode+0x10/0x10
[  636.511930][T10835]  evict+0x624/0xb50
[  636.511952][T10835]  ? __pfx_evict+0x10/0x10
[  636.511972][T10835]  ? rt_spin_unlock+0x163/0x200
[  636.511992][T10835]  ? iput+0xb84/0xf00
[  636.512021][T10835]  ext4_ext_migrate+0xddf/0x10e0
[  636.512052][T10835]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  636.512079][T10835]  ? rwbase_write_lock+0x550/0x720
[  636.512112][T10835]  ext4_ioctl+0x234f/0x4b80
[  636.512143][T10835]  ? __pfx_ext4_ioctl+0x10/0x10
[  636.512171][T10835]  ? is_bpf_text_address+0x292/0x2b0
[  636.512200][T10835]  ? is_bpf_text_address+0x26/0x2b0
[  636.512230][T10835]  ? kernel_text_address+0xa5/0xe0
[  636.512253][T10835]  ? __kernel_text_address+0xd/0x30
[  636.512275][T10835]  ? unwind_get_return_address+0x4d/0x90
[  636.512300][T10835]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  636.512324][T10835]  ? arch_stack_walk+0xfb/0x150
[  636.512354][T10835]  ? stack_trace_save+0xa9/0x100
[  636.512376][T10835]  ? __pfx_stack_trace_save+0x10/0x10
[  636.512405][T10835]  ? kasan_save_track+0x4f/0x80
[  636.512428][T10835]  ? stack_depot_save_flags+0x33/0x800
[  636.512456][T10835]  ? __lock_acquire+0x6df/0x2e40
[  636.512487][T10835]  ? kasan_save_track+0x4f/0x80
[  636.512515][T10835]  ? kasan_save_track+0x3e/0x80
[  636.512539][T10832] ------------[ cut here ]------------
[  636.512534][T10835]  ? kasan_save_free_info+0x40/0x50
[  636.512550][T10832] mas->ld_seq != lock_sequence(map)
[  636.512564][T10835]  ? __kasan_slab_free+0x5c/0x80
[  636.512564][T10832] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#0: syz.1.1402/10832
[  636.512588][T10835]  ? kfree+0x1c5/0x6c0
[  636.512608][T10832] Modules linked in:
[  636.512621][T10835]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  636.512639][T10832] CPU: 0 UID: 0 PID: 10832 Comm: syz.1.1402 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  636.512651][T10835]  ? security_file_ioctl+0xb9/0x260
[  636.512670][T10832] Tainted: [L]=SOFTLOCKUP
[  636.512678][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.512679][T10835]  ? __se_sys_ioctl+0x47/0x170
[  636.512695][T10832] RIP: 0010:mas_find+0xa02/0xca0
[  636.512710][T10835]  ? do_syscall_64+0x174/0x580
[  636.512726][T10832] Code: 74 08 4c 89 f7 e8 9e 34 f4 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 8b e8 87 f6 31 c0 e9 0a fd ff ff e8 7f e8 87 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 71 e8 87 f6 31 c0 e9 f0 fc ff ff e8 65
[  636.512736][T10835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.512747][T10832] RSP: 0018:ffffc9001d987658 EFLAGS: 00010293
[  636.512767][T10832] RAX: ffffffff8b3dc241 RBX: 1ffff92003b30f2d RCX: ffff888029943e80
[  636.512769][T10835]  ? file_ioctl+0x259/0x7e0
[  636.512785][T10832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  636.512798][T10832] RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
[  636.512812][T10832] R10: dffffc0000000000 R11: ffffed1007f4fc55 R12: 00000000ffffffff
[  636.512805][T10835]  ? __pfx_file_ioctl+0x10/0x10
[  636.512828][T10832] R13: ffffc9001d987974 R14: ffffc9001d987920 R15: ffffc9001d987968
[  636.512844][T10832] FS:  0000000000000000(0000) GS:ffff888125c43000(0000) knlGS:0000000000000000
[  636.512845][T10835]  ? kasan_quarantine_put+0xbb/0x1f0
[  636.512862][T10832] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  636.512871][T10835]  ? tomoyo_path_number_perm+0x219/0x5f0
[  636.512878][T10832] CR2: 000055557f417b08 CR3: 0000000064cf6000 CR4: 00000000003526f0
[  636.512904][T10832] Call Trace:
[  636.512913][T10832]  <TASK>
[  636.512903][T10835]  ? tomoyo_path_number_perm+0x219/0x5f0
[  636.512924][T10832]  unmap_vmas+0x43e/0x550
[  636.512936][T10835]  ? do_vfs_ioctl+0x1184/0x1550
[  636.512957][T10832]  ? __pfx_unmap_vmas+0x10/0x10
[  636.512972][T10835]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  636.512999][T10832]  exit_mmap+0x293/0x9f0
[  636.513012][T10835]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  636.513021][T10832]  ? __pfx_exit_mmap+0x10/0x10
[  636.513039][T10835]  ? lockdep_hardirqs_on+0x7a/0x110
[  636.513042][T10832]  ? do_raw_spin_lock+0x12b/0x2f0
[  636.513069][T10832]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  636.513075][T10835]  ? __fget_files+0x2a/0x420
[  636.513102][T10832]  ? __pfx_exit_aio+0x10/0x10
[  636.513104][T10835]  ? __fget_files+0x2a/0x420
[  636.513132][T10835]  ? __fget_files+0x3a8/0x420
[  636.513147][T10832]  ? uprobe_clear_state+0x2a7/0x3e0
[  636.513164][T10835]  ? __fget_files+0x2a/0x420
[  636.513175][T10832]  __mmput+0xcb/0x3e0
[  636.513193][T10835]  ? bpf_lsm_file_ioctl+0x9/0x20
[  636.513202][T10832]  exit_mm+0x186/0x240
[  636.513230][T10832]  do_exit+0x6cd/0x2360
[  636.513227][T10835]  ? __pfx_ext4_ioctl+0x10/0x10
[  636.513249][T10832]  ? lockdep_hardirqs_on+0x7a/0x110
[  636.513265][T10835]  __se_sys_ioctl+0xff/0x170
[  636.513282][T10832]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  636.513299][T10835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.513314][T10832]  ? __pfx_do_exit+0x10/0x10
[  636.513322][T10835]  do_syscall_64+0x174/0x580
[  636.513334][T10832]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  636.513349][T10835]  ? trace_irq_disable+0x3b/0x140
[  636.513360][T10832]  ? rt_spin_unlock+0x157/0x200
[  636.513382][T10832]  do_group_exit+0x22d/0x2f0
[  636.513375][T10835]  ? clear_bhb_loop+0x40/0x90
[  636.513403][T10832]  ? rt_spin_unlock+0x163/0x200
[  636.513409][T10835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.513425][T10832]  get_signal+0x121b/0x12c0
[  636.513432][T10835] RIP: 0033:0x7ff0527ede59
[  636.513454][T10835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.513464][T10832]  arch_do_signal_or_restart+0xbb/0x860
[  636.513473][T10835] RSP: 002b:00007ff050a04028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  636.513499][T10835] RAX: ffffffffffffffda RBX: 00007ff052a76180 RCX: 00007ff0527ede59
[  636.513499][T10832]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  636.513517][T10835] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000005
[  636.513532][T10835] RBP: 00007ff052883e6f R08: 0000000000000000 R09: 0000000000000000
[  636.513546][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  636.513543][T10832]  exit_to_user_mode_loop+0x104/0x730
[  636.513560][T10835] R13: 00007ff052a76218 R14: 00007ff052a76180 R15: 00007ffe61828008
[  636.513569][T10832]  ? rcu_is_watching+0x15/0xb0
[  636.513585][T10835]  </TASK>
[  636.513600][T10832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.513622][T10832]  do_syscall_64+0x353/0x580
[  636.513647][T10832]  ? trace_irq_disable+0x3b/0x140
[  636.513673][T10832]  ? clear_bhb_loop+0x40/0x90
[  636.513699][T10832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.513727][T10832] RIP: 0033:0x7f522caede59
[  636.513745][T10832] Code: Unable to access opcode bytes at 0x7f522caede2f.
[  636.513757][T10832] RSP: 002b:00007f522ad46028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  636.513786][T10832] RAX: 0000000000000003 RBX: 00007f522cd75fa0 RCX: 00007f522caede59
[  636.513801][T10832] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  636.513816][T10832] RBP: 00007f522cb83e6f R08: 0000000000000000 R09: 0000000000000000
[  636.513830][T10832] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  636.513844][T10832] R13: 00007f522cd76038 R14: 00007f522cd75fa0 R15: 00007ffd805db6f8
[  636.513870][T10832]  </TASK>
[  636.513882][T10832] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  636.513907][T10832] CPU: 0 UID: 0 PID: 10832 Comm: syz.1.1402 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  636.513938][T10832] Tainted: [L]=SOFTLOCKUP
[  636.513946][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.513959][T10832] Call Trace:
[  636.513968][T10832]  <TASK>
[  636.513976][T10832]  vpanic+0x5d9/0xad0
[  636.513998][T10832]  ? lock_release+0x4b/0x3c0
[  636.514024][T10832]  ? __pfx_vpanic+0x10/0x10
[  636.514051][T10832]  ? __pfx__printk+0x10/0x10
[  636.514082][T10832]  ? is_bpf_text_address+0x292/0x2b0
[  636.514111][T10832]  ? is_bpf_text_address+0x26/0x2b0
[  636.514146][T10832]  panic+0xc5/0xd0
[  636.514165][T10832]  ? __pfx_panic+0x10/0x10
[  636.514195][T10832]  __warn+0x315/0x4c0
[  636.514214][T10832]  ? mas_find+0xa02/0xca0
[  636.514241][T10832]  ? mas_find+0xa02/0xca0
[  636.514267][T10832]  __report_bug+0x276/0x570
[  636.514296][T10832]  ? mas_find+0xa02/0xca0
[  636.514324][T10832]  ? __pfx___report_bug+0x10/0x10
[  636.514359][T10832]  ? mas_find+0xa02/0xca0
[  636.514384][T10832]  report_bug+0x16a/0x220
[  636.514410][T10832]  ? mas_find+0xa02/0xca0
[  636.514436][T10832]  ? mas_find+0xa04/0xca0
[  636.514461][T10832]  handle_bug+0x9c/0x200
[  636.514492][T10832]  exc_invalid_op+0x1a/0x50
[  636.514531][T10832]  asm_exc_invalid_op+0x1a/0x20
[  636.514560][T10832] RIP: 0010:mas_find+0xa02/0xca0
[  636.514587][T10832] Code: 74 08 4c 89 f7 e8 9e 34 f4 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 8b e8 87 f6 31 c0 e9 0a fd ff ff e8 7f e8 87 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 71 e8 87 f6 31 c0 e9 f0 fc ff ff e8 65
[  636.514607][T10832] RSP: 0018:ffffc9001d987658 EFLAGS: 00010293
[  636.514625][T10832] RAX: ffffffff8b3dc241 RBX: 1ffff92003b30f2d RCX: ffff888029943e80
[  636.514642][T10832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  636.514655][T10832] RBP: 0000000000000058 R08: 0000000000000000 R09: 0000000000000000
[  636.514668][T10832] R10: dffffc0000000000 R11: ffffed1007f4fc55 R12: 00000000ffffffff
[  636.514684][T10832] R13: ffffc9001d987974 R14: ffffc9001d987920 R15: ffffc9001d987968
[  636.514703][T10832]  ? mas_find+0xa01/0xca0
[  636.514733][T10832]  ? mas_find+0xa01/0xca0
[  636.514760][T10832]  unmap_vmas+0x43e/0x550
[  636.514790][T10832]  ? __pfx_unmap_vmas+0x10/0x10
[  636.514830][T10832]  exit_mmap+0x293/0x9f0
[  636.514853][T10832]  ? __pfx_exit_mmap+0x10/0x10
[  636.514874][T10832]  ? do_raw_spin_lock+0x12b/0x2f0
[  636.514909][T10832]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  636.514942][T10832]  ? __pfx_exit_aio+0x10/0x10
[  636.514976][T10832]  ? uprobe_clear_state+0x2a7/0x3e0
[  636.515007][T10832]  __mmput+0xcb/0x3e0
[  636.515040][T10832]  exit_mm+0x186/0x240
[  636.515062][T10832]  do_exit+0x6cd/0x2360
[  636.515081][T10832]  ? lockdep_hardirqs_on+0x7a/0x110
[  636.515108][T10832]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  636.515138][T10832]  ? __pfx_do_exit+0x10/0x10
[  636.515158][T10832]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  636.515183][T10832]  ? rt_spin_unlock+0x157/0x200
[  636.515205][T10832]  do_group_exit+0x22d/0x2f0
[  636.515226][T10832]  ? rt_spin_unlock+0x163/0x200
[  636.515246][T10832]  get_signal+0x121b/0x12c0
[  636.515284][T10832]  arch_do_signal_or_restart+0xbb/0x860
[  636.515327][T10832]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  636.515370][T10832]  exit_to_user_mode_loop+0x104/0x730
[  636.515395][T10832]  ? rcu_is_watching+0x15/0xb0
[  636.515424][T10832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.515446][T10832]  do_syscall_64+0x353/0x580
[  636.515472][T10832]  ? trace_irq_disable+0x3b/0x140
[  636.515498][T10832]  ? clear_bhb_loop+0x40/0x90
[  636.515522][T10832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.515545][T10832] RIP: 0033:0x7f522caede59
[  636.515562][T10832] Code: Unable to access opcode bytes at 0x7f522caede2f.
[  636.515574][T10832] RSP: 002b:00007f522ad46028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  636.515597][T10832] RAX: 0000000000000003 RBX: 00007f522cd75fa0 RCX: 00007f522caede59
[  636.515613][T10832] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  636.515628][T10832] RBP: 00007f522cb83e6f R08: 0000000000000000 R09: 0000000000000000
[  636.515642][T10832] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000
[  636.515655][T10832] R13: 00007f522cd76038 R14: 00007f522cd75fa0 R15: 00007ffd805db6f8
[  636.515681][T10832]  </TASK>
[  636.516308][T10832] Kernel Offset: disabled