last executing test programs:

4m25.109923019s ago: executing program 1 (id=236):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xffffe000)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

4m24.947857913s ago: executing program 1 (id=237):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x1000000, 0x3900, 0xfffffffe, 0x1e5}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x34, 0x0, 0x805, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0x5, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x2090}, 0x0)

4m24.771131207s ago: executing program 1 (id=241):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4)
recvmmsg(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)

4m24.557572742s ago: executing program 1 (id=243):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0xa4842, 0x178)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)

4m24.182065721s ago: executing program 1 (id=247):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1000000000000073, 0x0, [{0x48c, 0x0, 0xffffffffffff22f1}]})

4m23.75923965s ago: executing program 1 (id=254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd29, 0x65dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000080)

4m23.429472768s ago: executing program 32 (id=254):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd29, 0x65dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000080)

3m38.779945547s ago: executing program 4 (id=620):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = syz_io_uring_setup(0x408c, &(0x7f0000000040)={0x0, 0xf84, 0x10081, 0x1, 0x2e1}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000140)=[r2, r0], 0x2)
read$FUSE(r2, &(0x7f00000022c0)={0x2020}, 0x2020)

3m38.668099339s ago: executing program 4 (id=622):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xfb, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8})
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000140)={"2f3bdd31926d2edeb24895f4d673a30b0f3f4999e4a893fbe6104857c960", 0x5, 0x1, 0x0, 0x2f, 0x0, 0xb, 0x6, 0x1, [0x8, 0x4, 0xb, 0x6800000, 0x5, 0x7fffffff, 0x4, 0x1000, 0x1, 0x9, 0x9, 0x8, 0x0, 0x7a, 0x80, 0xb31b00, 0x2, 0x5, 0x1]})

3m38.525920092s ago: executing program 4 (id=625):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x208000})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMETA(r0, 0x4b52, 0x0)

3m38.395908245s ago: executing program 4 (id=626):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0)

3m38.358571786s ago: executing program 4 (id=628):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd32, 0x25dfdbfd, {0x2, 0x1, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

3m37.967958405s ago: executing program 4 (id=632):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r2, 0x0)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0)

3m37.515013825s ago: executing program 33 (id=632):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x32)
setresuid(0x0, r2, 0x0)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0)

3m11.389646016s ago: executing program 5 (id=773):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x20, 0x7fff0000}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m11.107567562s ago: executing program 5 (id=775):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
removexattr(0x0, 0x0)

3m10.056873656s ago: executing program 5 (id=784):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5)
pipe2$9p(&(0x7f00000005c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
mount$bpf(0x0, 0x0, 0x0, 0x834, &(0x7f0000000240)=ANY=[@ANYBLOB=',', @ANYRESHEX, @ANYRESOCT])
mount$9p_fd(0x0, &(0x7f0000002500)='./file7\x00', &(0x7f0000002540), 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c616e616d653d62c58c09d6cb19a2712c76657273696f6e3d3970323030302c63616368653d"])

3m9.854433571s ago: executing program 5 (id=787):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
r0 = inotify_init1(0x80000)
inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa)
syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

3m9.251410364s ago: executing program 5 (id=788):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000083292473111200000000001800000000000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)

3m8.643868258s ago: executing program 5 (id=792):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m8.170036818s ago: executing program 34 (id=792):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0x80000000, 0xf, 0x8, 0x80, 0x2, 0x318, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0xbc5b, 0x80000001, 0x25, 0x11, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x2, 0x8, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x7fffffff, 0x6, 0x6, 0x2, 0x9, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x9, 0x5, 0xfffffff7, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0xfffff001, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x4, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x5, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0xf94, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x3, 0x5, 0x1, 0x486, 0x3, 0x303c, 0x3e7, 0x4, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d04, 0x6, 0x38, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x9, 0x5, 0x1c, 0x120000, 0x3, 0x7f, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x69d9, 0xb, 0x5, 0x4, 0x6, 0x0, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb74, 0x101, 0x10000, 0x4, 0x7fff, 0x14000, 0x7f, 0x2, 0x5, 0x7, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x7fffffff, 0x1, 0x98, 0xa1f, 0xf40, 0x2, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7]}, 0x45c)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000002c0)=0x1)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m57.618243183s ago: executing program 6 (id=1240):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000400000071107f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x7, 0x8, 0x0, 'queue1\x00', 0x5})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9})

1m57.463414756s ago: executing program 6 (id=1241):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/318, @ANYBLOB="333897eed20fa3ed4aeec7250ca96cc91c994168d8cc46ec7ecb7702e0cb8fa84713895176cad97c9084e4b29dabaf26d5dc045d3b8640412a94f4693924d5ab9efe399d53ab90cc11e64bf21903b1f2f026a366bdce4e2b7fa402ae702ed7a780a3403b6e2cb76e2af94c191eb5f81f56157a4a12a6e2b5322a4467d89a"], 0x1, 0x26e, &(0x7f0000001300)="$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")
r0 = fanotify_init(0xf00, 0x181000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97)
fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0xc0000, 0x0, 0xbe, 0x0, &(0x7f00000007c0))

1m57.369859619s ago: executing program 6 (id=1242):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfb, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f, 0xfff, 0x2, 0x1e, 0x12, 0x1e, 0x3}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

1m57.247925791s ago: executing program 6 (id=1243):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000440)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@data_err_ignore}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x578, &(0x7f0000000500)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
fallocate(r0, 0x20, 0x12a, 0x3000001)

1m56.86371664s ago: executing program 6 (id=1247):
r0 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000800)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r1, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0)

1m56.41195031s ago: executing program 6 (id=1253):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x3}, 0x3, 0x4, 0x0, 0x0, 0xff76, 0x7fffffff, 0x7, 0x5, 0x2, 0x0})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800})

1m56.054948419s ago: executing program 35 (id=1253):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x3}, 0x3, 0x4, 0x0, 0x0, 0xff76, 0x7fffffff, 0x7, 0x5, 0x2, 0x0})
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800})

1m41.975907986s ago: executing program 0 (id=1324):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x84, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @loopback, [], [], 'veth1\x00', 'wlan1\x00', {}, {0x1fe}}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4199fc6505f93cb13d0617f57700e5dba5afc775234fe52cca718b1ef125"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570)

1m40.663378836s ago: executing program 0 (id=1333):
timer_create(0x1, 0x0, &(0x7f0000000000))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
timer_delete(0x0)

1m39.487842003s ago: executing program 0 (id=1334):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000240)={0x77359400}, 0x10)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1m38.097637484s ago: executing program 0 (id=1341):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0xa4842, 0x178)
syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)

1m37.86716379s ago: executing program 0 (id=1342):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x7d, 0x1507, &(0x7f0000001800)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklqUiSJCT3hCRJkiRxyC0JScj1JLmH3NNJx/1+yT3p5JUkSUhIsr5xpOHf+77/v9733/vp+878jbHHWfPsPdee68yxn2fvZ4zzfNt5SNUG1arUZWb4d+jfBvjrjyQASACA/gCQAwACACibs2zO9P1ZNCb9WycR/yH1pl3pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ox8V8uWcTf5/P//cep/kyzv/xkC/nc7pP//v9H/0tHS/4xN+p+xSf8zNul/RhZc6QLEFSbXf8Ym/RciQ/vTP1Ned+ZKf6Yt27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/xec8ZcYAPhtfKXrEkIIIYQQQgghxJ/Hv3+lKxBCCCGEEEIIIcR/HoICDQYCyASZIQGyQCJcBVkhG2SHHBCDqyEnXAO54FrIDXkgL+SD/FAACkIIBBYYIigEhSEO10ERuB6KQjEoDiXAQUkoBTdAabgRysBNUBZuhnJwC5SHChfOme52qAwKqsCdcBfcDVWhGtwD1eFeqAH3QU24H2rBA1AbHoQ68BDUhXpQHx6GBvAINIRG0BiaQFNoBs0vk5+c45/lvwjd4CXoDj0gCXpCL3gZekMf6Av9oD+8AgPgVRgIr8EgGAxD4HUYCm/AMHgThsMIGAlvwSgYDWNgLIyD8ZAMb8MEeAcmwruPZIPJMAWmwjSYDjPgPZgJs2A2vA9zYC7Mg+QsC2AhLIIPYDF8CCnwESyBjyEVlsIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAU+ga2wDbbDDtgJu2A3fAp74DPYC59DGn7xL+af/n0+dEFAQIUKDRrMhJkwARMwERMxK2bF7JgdYxjDnJgTc2EuzI25MS/mxSTMjwWxIBISMjIWwkIYxzgWwSJYFIticSyODh2WwlJYGm/EMlgGy2JZLIflsDxWwAp4K96KlbASVsbKWAWr4F14F1bFqngP3oP3Yg2sgTWxJtbCWlgba2MdrIN1sS7Wx/rYABtgQ2yIjbExNsWm2BybYwtsgS2xJbbG1tgG22BbbIvtsB22x/bYATtgR+yInbATdsbO2AVfwBfwRXwRX8KXsAfepXpiL+yFvbE39sV+2A9fwQH4Kr6Kr+EgHIxD8HV8Hd/AYXgKh+MIHIkjsZIajWNwLLIaj8mYjJlhAk7EiTgJJ+NknIrTcDrOwBk4E2fhLHwf5+BcnIvzcT4uxEW4CBfjh5iCKbgET2MqLsVluBxX4EpcgatxDa7Gdbge1+FG3IibcTN+gp/gNtyGO3AH7sJd+Cl+ip/hZzgI0zAN9+E+3I/78QAewIN4EA/hITyMh/EIHsGjeBSP4XE8gcfxJJ7EU3gazwDAWTyL5/Acnsfz6Re/SmeUUZlUJpWgElSiSlRZVVaVXWVXMRVTOVVOlUvlUrlVbpVX5VX5VX5VUBVUpEixilQhVUjFVVwVUUVUUVVUFVfFlVNOlVKlVGlVWpVRZVRZdbMqp25R5VUF1crdqm5VlVRrV1ndoaqoKpkAQFVV1VQ1VV1VVzVUDVVT1VS1VC1VWz2o6qie2BfrqfTONFCDsaEago1VE9VUNVNv4KOqhRqGLVUr1Vo9rkbgcGyrWrh26inVXo3BDuoZNRafVZ3UeOysnldd1Auqq3pRdVMtXXfVQ03CnqqXmoq9VR/VV/VTM/Fuld6xquo19WLmwWqIel0txDfUMPWmGq5GqJHqLTVKjVZj1Fg1To1XyeptNUG9oyaqd9UkNVlNUVPVNDVdzVDvqZlqlpqt3ldz1Fw1T81XC9RCtUh9oBarD1WK+kgtUR+rVLVULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Rb1idqqtqntaofaqXap3epTtUd9pvaqz1Wa+kLtU39T+9WX6oD6Sh1UX6tD6ht1WH2rjqjv1FH1vTqmjqsT6gd1Uv2oTqnT6oz6SZ1VP6tz6hd1XnkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vK+g5dRd+p79J366q6mr5HV9f36hr6Pl1T369r6Qd0bf2grqMf0nV1PV1fP6wb6Ed0Q91IN9ZNdFPdTDfXj+oW+jHdUrfSrfXjuo1+QrfVT+p2+indXj+tO+hndEf9rO6kn9Od9fO6i35Bd9W/6PPa6+66h07SPXUv/bLurfvovrqf7q9f0QP0q3qgfk0P0oP1EP26Hqrf0MP0m3q4HqFH6rf0KD1aj9Fj9Tg9Xifrt/UE/Y6eqN/Vk/RkPUVP1dP0dN334kyz/0D+O/8kf+CFs2/WW/QneqveprfrHXqn3qV36916j96j9+q9Ok2n6X16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+rj+Sf+gT+of9Sl9Wp/WP+mz+qw+d/FvAAaNMtoYE5hMJrNJMFlMornKZDXZTHaTw8TM1SanucbkMtea3CaPyWvymfymgCloQkPGGjaRKWQKm7i5zhQx15uippgpbkoYZ0qaUuaG/3X+5eprbpqbFqaFaWlamtamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6Wa6me6mu0kySaaXedn0Nn1MX9PP9DevmAFmgBloBppBZpAZYoaYoWaoGWaGmeFmuBlpRppRZpQZY8aYcWacSfY5zAQzwUw0E80kM8lM6Z/DTDPTzAwzw8w0M81sM9vMMXPMPDPPLDALzCKzyCw2i02KSTFLzBKTapaapWa5WW5WmpVmtVlt1pq1Zr1ZbzaajSbVbDFbzFaz1Ww3281Os9PsNrvNHrPH7DV7TZpJM/vMPrPf7DcHzAFz0Bw0h8whc9gcNkfMEXPUHDXHzDFzwpwwJ81Jc8qcMmfMGXPWnDXnzDlz3pxPv+0LVKACE5ggU5ApSAgSgsQgMcgaZA2yB9mDWBALcgY5g1zBtUHuIE+QN8gX5A8KBAWDMKDABhxEQaGgcBAPrguKBNcHRYNiQfGgROCCkkGp4IagdHBjUCa4KSgb3ByUC24JygcVgorBrcFtQaXg9qBycEdQJbgzuCu4O6gaVAvuCaoH9wY1gvuCmsH9Qa3ggaB28GBQJ3goqBvUC+oHDwcNgkeChkGjoHHQJGgaNAua/6nze38qz2Oue9gjTAp7hr3Cl8PeYZ+wb9gv7B++Eg4IXw0Hhq+Fg8LB4ZDw9XBo+EY4LHwzHB6OCEeGb4WjwtHhmHBsOC4cHyaHb4cTwnfCieG74aRwcjglmBpOC6eHM8L3wpnhrHB2+H44J5wbzgvnhwvChSH+eksMKeFH4ZLw4zA1XBouC5eHK8KV4apwdbgmXBuuC9eHG8KNZQf8emi4NdwWbg93hDvDXeHu8NNwT/hZuDf8PEwLvwj3hX8L94dfhgfCr8KD4dfhofCb8HD4bXgk/C48Gn4fHguPhyfCH8KT4Y/hqfB0eCb8KTwb/hyeC38Jz4c+/eY+/e2dDBnKRJkogRIokRIpK2Wl7JSdYhSjnJSTclEuyk25KS/lpfyUnwpSQUrHxFSIClGc4lSEilBRKkrFqTg5clSKSlFpKk1lqAyVpbJUjspReSpPFaki3Ua30e10O91Bd9CddCfdTXdTNapG1ak61aAaVJNqUi2qRbWpNtWhOlSX6lJ9qk8NqAE1pIbUmBpTU2pKzak5taAW1JJaUmtqTW2oDbWlttSO2lF7ak8dqAN1pI7UiTpRZ+pMXagLdaWu1I26UXfqTkmURL2oF/Wm3tSX+lJ/6k8DaAANpIE0iAbREBpCQ2koDaNhNJxG0Eh6i0bRaBpDY2kcjadkSqYJNIEm0kSaRJNoCk2haTSNZtAMmkkzaTbNpjk0h+bRPFpAC2gRLaLFtJhSKIWW0BJKpVRaRstoBa2gVbSK1tAaWkfraANtoE20ibbQFtpKW2k7baedtJN2027aQ3toL+2lNEqjfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIxO0Ak6SSfpFJ2iM3SGztLPdI5+ofPkKcFmsYn2KpvVZrPZbQ7793Fem8/mtwVsQRva3DbP72Ky1ha1xWxxW8I6W9KWsjf8Q1zeVrAV7a32NlvJ3m4r2/I2C/zXuLq919aw99ma9n5bzd7zu7iWfcDWto/YOraRrWub2Pq2mW1gH7ENbSPb2DaxTW0z28Y+YdvaJ207+5Rtb5/+h3ix/dCusWvtOrve7rGf2TP2J3vYfmvP2p9td9vD9rev2AH2VTvQvmYH2cG/jwHsSPuWHWVH2zF2rB1nx/9DPMVOtdPsdDvDvmdn2ln/EC+yH9g5NsXOs/PtArvwQpxeU4r9yC6xH9tUu9Qus8vtiouvC3Cx1uV2o91kN9vd9lO71W6z2+0Ou9PuuhCnr2Ov/dym2S/sIfuN3W+/tAfsEXvQfn0hTl/fEfudPWq/t8fscXvC/mBP2h/tKXv6wvrT1/6D/cWet94CIyvWbDjgTJyZEzgLJ/JVnJWzcXbOwTG+mnPyNZyLr+XcnIfzcj7OzwW4IIdMbJk54kJcmON8HRfh67koF+PiXIIdl+RSfAOX5hu5DN/EZflmLse3cHmuwBX5Vr6NK/HtXJnv4Cp8J9/Fd3NVrsb3cHW+l2vwfVyT7+da/ADX5ge5Dj/Edbke1+eHuQE/wg25ETfmJtyUm3FzfpRb8GPckltxa36c2/AT3Jaf5Hb8FLfnp7kDP8Md+VnuxM9xZ36eu/AL3JVf5G78EnfnHpzEPbkXv8y9uQ/35X7cn1/hAfwqD+TXeBAP5iH8Og/lN3gYv8nDeQSP5Ld4FI/mMTyWx/F4Tua3eQK/wxP5XZ7Ek3kKT+VpPJ1n8Hs8k2fxbH6f5/BcnsfzeQEv5EX8AS/mDzmFP+Il/DGn8lJexst5Ba/kVbya1/BaXsfreQNv5E28mbfwJ7yVt/F23sE7eRfv5k95D3/Ge/lzTuMveB//jffzl3yAv+KD/DUf4m/4MH/LR/g7Psrf8zE+zif4Bz7JP/IpPs1n+Cc+yz/zOf6Fz7NniDBSkY5MFESZosxRQpQlSoyuirJG2aLsUY4oFl0d5YyuiXJF10a5ozxR3ihflD8qEBWMwogiG3EURYWiwlE8ui4qEl2fDaJiUfGoROSiklGp6IaodHRjVCa6KSob3RyVi26JykcVoorRrdFtUaXo9qhydEdUJbozuiu6O6oaVYvuiapH90Y1ovuimtH9UZnogah29GBUJ3ooqhvVi+pHD0cNokeihlGjqHHUJGoaNYuaR49GLaLHopZRq6h19HjUJnoiahs9GbWLnoraR09f2l8s+PX6+rv9SVHPSF+89O7TC+IL44viH8QXxz+Mp8Q/ii+JfxxPjS+NL4svj6+Ir4yviq+Or4mvja+Lr49viG+Mb4pvjntfLTM4TH8QBuMCl8lldgkui0t0V7msLpvL7nK4mLva5XTXuFzuWpfb5XF5XT6X3xVwBV3oyFnHLnKFXGEXd9e5Iu56V9QVc8VdCedcSVfKNXPNXXPXwj3mWrpWrrV73D3unnBPuCcTLhbuOrhnXEf3rOvknnPPueddF/eC6+pedN3cS6676+GSXJLr5Xq53q636+v6uv6uvxvgBriBbqAb5Aa5IW6IG+qGumFumBvuhruRbqQb5Ua5MW6MG+fGuWSX7Ca4CW6im+gmuUluipviprlpboab4Wa6mW62m+3muDlunpvnFrgFbpFb5Ba7xS7FpbglbolLdalumVvmVrgVbpVb5da4NW6dW+c2uA1uk9vktrgtbqvb6ra77W6n2+l2u91uj9vj9rq9Ls2luX1un9vv9rsD7it30H3tDrlv3GH3rTvivnNH3ffumDvuTjivT7of3Sl32p1xP7mz7md3zv3izjvvkmNvxybE3olNjL0bmxSbHJsSmxqbFpsemxF7LzYzNis2O/Z+bE5sbmxebH5sQWxhbFHsg9ji2IexlNhHsSWxj2OpsaWxZbHlsRWxlTHvC2yNfCFf2Mf9db6Iv94X9cV8cV/CO1/Sl/I3+NL+Rl/G3+TL+pt9OX+LL+8r+Iq+kW/sm/imvplv7h/1LfxjvqVv5Vv7x30b/4Rv65/07fxTvr1/2nfwz/iO/lnfyT/nO/vn517ssu/mX/LdfQ+f5Hv6Xv5l39v38X19P9/fv+IH+Ff9QP+aH+QH+yH+dT/Uv+GH+Tf9cD/Cj/Rv+VF+tB/jx/pxfrxP9m/7Cf4dP9G/6yf5yX6Kn+qn+el+hn/Pz/Sz/Gz/vp/j5/p5fr5f4Bf6Rf4Dv9h/6FP8R36J/9in+qV+mV/uV/iVfpVf7df4tX6dX+83+I1+k9/st/hP/Fa/zW/3O/xOv8vv9p/6Pf4zv9d/7tP8F36f/5vf77/0B/xX/qD/2h/y3/jD/lt/xH/nj/rv/TF/3J/wP/iT/kd/yp/2Z/xP/qz/2Z/zv/jz8j9rQgghhBB/iL7M/p7/5Hfq4pauFwBk25bv4N/PuSH3r+M+ak/7GAA81aNzvd+2evWSkpIuHpuqISg8HwBil/IvfP/AxXgptIYnoB20gtL/tL4+quKF+77/af74zQCJAFl+y0l/PEqEv5//xkuL+938jT7gy80/H6Bo4Us56Sf6Lb40f5n/pv5dbS4zf5YvkwFa/pecrHApvjR/KXgMnoZ2vztSCCGEEEIIIYT4VR91tsvlnm/Tn8/zm0s5meFSfLnn88uo/GesQQghhBBCCCGEEP+zZ1/o+uSj7dq16niZAfyBY/6yg8x/jTL+AgMEgL9AGTL46w+u9CuTEEIIIYQQ4s926ab/SlcihBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEJkXP/+N4SpP3zwlV6jEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIcaX9nwAAAP//6kRQ4A==")
truncate(&(0x7f0000000080)='./file2\x00', 0x6000)
chdir(&(0x7f0000000180)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

1m37.42552856s ago: executing program 0 (id=1343):
socket$kcm(0x1e, 0x4, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
close(0x4)

1m36.877804342s ago: executing program 36 (id=1343):
socket$kcm(0x1e, 0x4, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x1, 0x0, 0xd66, 0xf5ffffff}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
close(0x4)

1m12.555463991s ago: executing program 8 (id=1508):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffff5, 0x4, {0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffffd, 0xa26, 0xfffffffe, {0x0, 0x2, 0x80000001, 0x2, 0xb, 0x2, 0x1, 0xffffffff, 0x4, 0x2000, 0xffffffff, 0x0, 0x0, 0x8001, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f240)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}})

1m12.18679414s ago: executing program 8 (id=1510):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x18000, &(0x7f0000005180), 0x81, 0x50d4, &(0x7f00000051c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x402, 0x158, 0x0, r0}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0x3de, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000480))
dup(0xffffffffffffffff)

1m10.474784669s ago: executing program 8 (id=1520):
r0 = socket$pppoe(0x18, 0x1, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000000c0)={0x18, 0x0, {0x1, @broadcast, 'sit0\x00'}})

1m10.007947419s ago: executing program 8 (id=1523):
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$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")
inotify_add_watch(0xffffffffffffffff, 0x0, 0xc0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)='./file0\x00')

1m9.036606181s ago: executing program 8 (id=1527):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xd21}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x8, 0x101002)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48e1, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}})

1m8.444990255s ago: executing program 8 (id=1532):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x7fd, @mcast2, 0x3}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)

1m7.842627218s ago: executing program 37 (id=1532):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x7fd, @mcast2, 0x3}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0)
select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)

4.141018085s ago: executing program 3 (id=1970):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000bc0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
mkdirat(0xffffffffffffffff, 0x0, 0xe5)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
lchown(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0)

3.982280019s ago: executing program 3 (id=1972):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000040)={'vlan1\x00', @ifru_settings={0x1d, 0x4, @cisco=0x0}}})

3.770893124s ago: executing program 3 (id=1974):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000030000000e8900000010"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000d000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3.580437688s ago: executing program 3 (id=1977):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30)
pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0)
truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc)

3.330003904s ago: executing program 3 (id=1979):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x20000000)

3.183904408s ago: executing program 3 (id=1980):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
read(r0, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000100), 0x2)

1.451337757s ago: executing program 2 (id=1995):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000180)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@gid}, {@gid}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000001140)=""/4116, 0x1014)

1.29051326s ago: executing program 2 (id=1996):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x80, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

1.183802593s ago: executing program 2 (id=1997):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000300)={{@local, 0x2}, 0xfffffffffffffffe, 0x9, 0xffffffff, 0x43})

1.117414204s ago: executing program 2 (id=1999):
unshare(0x6040600)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)
pipe(&(0x7f0000002bc0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="10"], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10)

1.076103555s ago: executing program 7 (id=2000):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}], 0x2, 0x4000000)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xfffffffd, r2}, 0x10)

1.004823697s ago: executing program 2 (id=2001):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x29, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002bc0)=@vmx={0x103, 0x0, 0x2080, {0x10000, 0xd000, {}, 0x1, 0x20000009a1}, {"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", "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"}})

966.938978ms ago: executing program 7 (id=2002):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x4000000, 0x0, 'id0\x00', 'timer1\x00'})

885.20093ms ago: executing program 7 (id=2003):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, <r2=>r0, 0x2})
r3 = mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r2, 0x0)
syz_io_uring_complete(r3, 0x0)

836.989511ms ago: executing program 9 (id=2004):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000002c0), 0x27, 0x10, 0x0)

749.767083ms ago: executing program 2 (id=2005):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})

733.344333ms ago: executing program 7 (id=2006):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x4}}}]}, 0x3c}}, 0x4000810)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

696.304674ms ago: executing program 9 (id=2007):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
ftruncate(r0, 0xc17a)
recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2100, 0x0)
lseek(r0, 0x2000, 0x4)

585.909447ms ago: executing program 7 (id=2008):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
write$yama_ptrace_scope(r0, &(0x7f0000000480)='2\x00', 0x2)

573.034537ms ago: executing program 9 (id=2009):
timerfd_create(0x9, 0x80000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20)

488.621499ms ago: executing program 9 (id=2010):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
close_range(r0, r1, 0x0)

264.961604ms ago: executing program 9 (id=2011):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file5\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x81, 0x2b1, &(0x7f0000000280)="$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")
mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0x42, 0x81)
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x1)

15.595709ms ago: executing program 7 (id=2012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc)

0s ago: executing program 9 (id=2013):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x80000001, 0x0, 0x2, 0x867, 0x10001, 0x8, 0x9}]})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0xc0010140}]})

kernel console output (not intermixed with test programs):

 hci2: Opcode 0x0c1a failed: -4
[  243.902585][ T9809] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  243.912819][ T9809] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  243.919733][   T34] usb 3-1: config 0 descriptor??
[  243.933120][   T27] audit: type=1326 audit(1783509360.349:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9788 comm="syz.3.1151" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403c79de59 code=0x7fc00000
[  243.935158][   T34] gspca_main: sunplus-2.14.0 probing 055f:c630
[  243.978923][ T9809] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  245.083799][   T34] usb 3-1: USB disconnect, device number 16
[  245.874923][ T5779] Bluetooth: hci0: command 0x0c1a tx timeout
[  245.954965][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout
[  245.954978][ T5085] Bluetooth: hci1: command 0x0c1a tx timeout
[  245.967047][ T5779] Bluetooth: hci3: command 0x0405 tx timeout
[  246.025160][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805db6f800: rx timeout, send abort
[  246.033884][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db6f800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  246.071730][ T9868] loop2: detected capacity change from 0 to 512
[  246.110412][ T9868] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  246.148521][ T9868] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  246.167243][ T9868] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  246.185318][ T9871] netlink: 'syz.3.1185': attribute type 4 has an invalid length.
[  246.201989][ T9868] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  246.254398][ T9868] System zones: 0-2, 18-18, 34-35
[  246.300554][ T9868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.624461][  T172] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  246.746597][ T5841] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  246.814190][  T172] usb 4-1: Using ep0 maxpacket: 8
[  246.820917][  T172] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  246.831523][  T172] usb 4-1: config 0 has no interface number 0
[  246.837698][  T172] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  246.849421][  T172] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  246.858561][  T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.869867][  T172] usb 4-1: config 0 descriptor??
[  246.881671][  T172] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  246.946536][ T5841] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.957158][ T5841] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  246.967366][ T5841] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  246.977031][ T5841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  246.985303][ T5841] usb 7-1: SerialNumber: syz
[  247.101033][   T34] usb 4-1: USB disconnect, device number 25
[  247.154604][ T9875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set
[  247.235979][ T5841] usb 7-1: 0:2 : does not exist
[  247.235981][ T9886] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  247.288739][ T5841] usb 7-1: USB disconnect, device number 9
[  247.323191][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1192'.
[  247.361528][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.518564][ T9892] bridge1: entered allmulticast mode
[  247.535576][ T9892] team0: Port device bridge1 added
[  247.568875][ T9892] bridge0: port 3(team0) entered blocking state
[  247.575484][ T9892] bridge0: port 3(team0) entered disabled state
[  247.582007][ T9892] team0: entered allmulticast mode
[  247.589722][ T9892] team_slave_0: entered allmulticast mode
[  247.595706][ T9892] team_slave_1: entered allmulticast mode
[  247.603735][ T9892] team0: entered promiscuous mode
[  247.608974][ T9892] team_slave_0: entered promiscuous mode
[  247.614839][ T9892] team_slave_1: entered promiscuous mode
[  247.620650][ T9892] bridge1: entered promiscuous mode
[  247.628407][ T9892] bridge0: port 3(team0) entered blocking state
[  247.634821][ T9892] bridge0: port 3(team0) entered forwarding state
[  248.034444][ T5781] Bluetooth: hci3: command 0x0405 tx timeout
[  248.219921][ T9915] loop0: detected capacity change from 0 to 128
[  248.245914][ T9915] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  248.297687][ T9915] ext4 filesystem being mounted at /291/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.414233][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  248.535546][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  248.627089][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.647462][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.670022][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  248.702626][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  248.724273][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.739125][   T10] usb 4-1: config 0 descriptor??
[  249.167993][   T10] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  249.189027][   T10] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  249.380345][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1219'.
[  249.489990][ T5841] usb 4-1: USB disconnect, device number 26
[  249.974345][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  250.114689][ T5781] Bluetooth: hci3: command 0x0405 tx timeout
[  250.186556][   T10] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  250.201575][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.225021][   T10] usb 1-1: config 0 descriptor??
[  250.258159][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  250.306319][ T9960] block nbd2: NBD_DISCONNECT
[  250.684918][   T10] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  250.715291][ T1215] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  250.896593][  T172] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  250.922420][ T1215] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  250.930617][ T1215] usb 4-1: config 0 has no interface number 0
[  250.941450][ T1215] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  250.953099][ T1215] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  250.966821][ T1215] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  250.976684][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.988478][ T1215] usb 4-1: config 0 descriptor??
[  251.003222][ T9970] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  251.021855][ T1215] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  251.090717][   T10] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  251.101572][  T172] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  251.124194][  T172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.144024][  T172] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.154620][  T172] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  251.170979][  T172] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  251.183287][  T172] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  251.191925][  T172] usb 3-1: Manufacturer: syz
[  251.199742][  T172] usb 3-1: config 0 descriptor??
[  251.232125][ T1215] usb 4-1: USB disconnect, device number 27
[  251.324776][   T10] usb 1-1: USB disconnect, device number 21
[  251.449785][ T9993] loop6: detected capacity change from 0 to 512
[  251.625504][  T172] appleir 0003:05AC:8243.0017: unknown main item tag 0x0
[  251.633078][  T172] appleir 0003:05AC:8243.0017: No inputs registered, leaving
[  251.659633][  T172] appleir 0003:05AC:8243.0017: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  251.681706][ T9997] loop6: detected capacity change from 0 to 1024
[  251.689625][ T9997] EXT4-fs: Ignoring removed bh option
[  251.700528][ T9997] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  251.779128][ T9997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.853257][ T9997] EXT4-fs error (device loop6): ext4_find_dest_de:2115: inode #12: block 7: comm syz.6.1243: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  251.901084][  T172] usb 3-1: USB disconnect, device number 17
[  251.903864][ T9997] EXT4-fs (loop6): Remounting filesystem read-only
[  251.914429][ T9997] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only
[  251.928434][ T9997] overlayfs: failed to get uuid (/bus, err=-5); falling back to uuid=null.
[  252.350942][T10013] netem: change failed
[  252.371815][ T8419] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.571292][ T2975] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.796505][ T2975] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.949810][ T2975] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.110844][ T2975] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.396046][T10037] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1260'.
[  253.575487][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  253.595664][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  253.604841][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  253.621718][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  253.622590][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  253.622971][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  254.203992][T10030] loop0: detected capacity change from 0 to 40427
[  254.261433][T10030] F2FS-fs (loop0): invalid crc value
[  254.291609][T10030] F2FS-fs (loop0): Found nat_bits in checkpoint
[  254.510049][T10030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  254.643171][T10030] syz.0.1259: attempt to access beyond end of device
[  254.643171][T10030] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  254.748104][T10030] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  255.146259][T10041] chnl_net:caif_netlink_parms(): no params data found
[  255.653786][T10041] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.671647][T10041] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.679696][T10041] bridge_slave_0: entered allmulticast mode
[  255.698547][T10041] bridge_slave_0: entered promiscuous mode
[  255.714639][ T5781] Bluetooth: hci3: command tx timeout
[  255.727830][T10041] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.785522][T10041] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.792834][T10041] bridge_slave_1: entered allmulticast mode
[  255.801617][T10041] bridge_slave_1: entered promiscuous mode
[  255.817154][ T2975] hsr_slave_0: left promiscuous mode
[  255.836270][ T2975] hsr_slave_1: left promiscuous mode
[  255.842585][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.850310][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.859978][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.871723][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.879920][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  255.887304][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  255.895520][ T2975] bridge_slave_1: left allmulticast mode
[  255.902396][ T2975] bridge_slave_1: left promiscuous mode
[  255.909171][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.921220][ T2975] bridge_slave_0: left allmulticast mode
[  255.927782][ T2975] bridge_slave_0: left promiscuous mode
[  255.943533][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.000017][ T2975] veth1_macvtap: left promiscuous mode
[  256.005838][ T2975] veth0_macvtap: left promiscuous mode
[  256.011630][ T2975] veth1_vlan: left promiscuous mode
[  256.017667][ T2975] veth0_vlan: left promiscuous mode
[  256.377662][T10115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  257.036809][ T2975] team0 (unregistering): Port device team_slave_1 removed
[  257.113432][ T2975] team0 (unregistering): Port device team_slave_0 removed
[  257.230703][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.330120][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.795742][ T5781] Bluetooth: hci3: command tx timeout
[  257.946210][ T2975] bond0 (unregistering): Released all slaves
[  258.128693][T10104] bridge1: entered allmulticast mode
[  258.151120][T10104] team0: Port device bridge1 added
[  258.159258][T10109] bridge0: port 3(team0) entered blocking state
[  258.165847][T10109] bridge0: port 3(team0) entered disabled state
[  258.172248][T10109] team0: entered allmulticast mode
[  258.178617][T10109] team_slave_0: entered allmulticast mode
[  258.184800][T10109] team_slave_1: entered allmulticast mode
[  258.191748][T10109] team0: entered promiscuous mode
[  258.200160][T10109] team_slave_0: entered promiscuous mode
[  258.206240][T10109] team_slave_1: entered promiscuous mode
[  258.212074][T10109] bridge1: entered promiscuous mode
[  258.220665][T10109] bridge0: port 3(team0) entered blocking state
[  258.227018][T10109] bridge0: port 3(team0) entered forwarding state
[  258.253553][T10117] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  258.333636][T10117] team0: Device dummy0 failed to register rx_handler
[  258.367757][T10118] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  258.420477][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.547691][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.646186][T10041] team0: Port device team_slave_0 added
[  258.674734][T10041] team0: Port device team_slave_1 added
[  258.835183][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0
[  258.861499][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  258.927822][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.049758][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.061451][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.089009][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.289135][T10041] hsr_slave_0: entered promiscuous mode
[  259.334600][T10041] hsr_slave_1: entered promiscuous mode
[  259.877092][ T5781] Bluetooth: hci3: command tx timeout
[  260.121329][T10041] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  260.147952][T10161] loop0: detected capacity change from 0 to 40427
[  260.173446][T10041] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  260.199935][T10161] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  260.238141][T10161] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  260.247092][T10041] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  260.275691][T10161] F2FS-fs (loop0): Image doesn't support compression
[  260.282990][T10161] F2FS-fs (loop0): Image doesn't support compression
[  260.294870][T10041] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  260.323649][T10161] F2FS-fs (loop0): invalid crc value
[  260.642578][T10041] 8021q: adding VLAN 0 to HW filter on device bond0
[  260.686322][T10161] F2FS-fs (loop0): Start checkpoint disabled!
[  260.746385][T10041] 8021q: adding VLAN 0 to HW filter on device team0
[  260.792750][  T992] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.800009][  T992] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.828461][T10161] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  260.847859][T10161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  260.928552][   T27] audit: type=1800 audit(1783509377.339:45): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1286" name="file1" dev="loop0" ino=10 res=0 errno=0
[  260.937172][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.956218][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.084271][T10041] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  261.106279][ T4567] kworker/u4:10: attempt to access beyond end of device
[  261.106279][ T4567] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  261.124151][T10041] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  261.182152][ T4567] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  261.192388][ T4567] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  261.683108][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.954701][ T5781] Bluetooth: hci3: command tx timeout
[  262.300010][T10227] loop0: detected capacity change from 0 to 2048
[  262.358571][T10227]  loop0: p1 p3 p4
[  262.358571][T10227]  p1: <solaris: [s0] p5 >
[  262.391865][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'.
[  262.402320][T10227] loop0: p4 size 589824 extends beyond EOD, truncated
[  262.947150][T10041] veth0_vlan: entered promiscuous mode
[  262.949824][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  262.983343][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  262.987422][ T6456] udevd[6456]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  263.005914][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  263.083338][T10041] veth1_vlan: entered promiscuous mode
[  263.211721][T10041] veth0_macvtap: entered promiscuous mode
[  263.260857][T10041] veth1_macvtap: entered promiscuous mode
[  263.470569][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.470913][T10260] loop0: detected capacity change from 0 to 512
[  263.490621][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.520955][T10260] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #11: comm syz.0.1308: unexpected EA_INODE flag
[  263.534329][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.549021][T10260] EXT4-fs (loop0): Remounting filesystem read-only
[  263.557912][T10260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.580610][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.606115][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.619765][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.625852][T10263] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  263.631657][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.661100][T10041] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.694646][T10263] CPU: 0 PID: 10263 Comm: syz.2.1307 Not tainted syzkaller #0
[  263.702367][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  263.712499][T10263] Call Trace:
[  263.715810][T10263]  <TASK>
[  263.718765][T10263]  dump_stack_lvl+0x18c/0x250
[  263.723487][T10263]  ? show_regs_print_info+0x20/0x20
[  263.728759][T10263]  ? load_image+0x420/0x420
[  263.733310][T10263]  sysfs_create_dir_ns+0x26e/0x2a0
[  263.738444][T10263]  ? __lock_acquire+0x7d80/0x7d80
[  263.743480][T10263]  ? sysfs_warn_dup+0xa0/0xa0
[  263.748158][T10263]  ? rcu_is_watching+0x15/0xb0
[  263.752927][T10263]  ? do_raw_spin_unlock+0x121/0x230
[  263.758135][T10263]  kobject_add_internal+0x617/0xc90
[  263.763342][T10263]  kobject_add+0x164/0x240
[  263.767772][T10263]  ? kobject_init+0x1d0/0x1d0
[  263.772454][T10263]  ? get_device_parent+0x366/0x390
[  263.777565][T10263]  device_add+0x3fa/0xc40
[  263.781893][T10263]  tty_register_device_attr+0x425/0x950
[  263.787444][T10263]  ? tty_register_device+0x30/0x30
[  263.792558][T10263]  ? tty_port_init+0x132/0x1a0
[  263.797325][T10263]  ? gsm_dlci_alloc+0x32a/0x630
[  263.802174][T10263]  ? __might_fault+0xaa/0x120
[  263.806851][T10263]  gsm_activate_mux+0x110/0x2a0
[  263.811705][T10263]  gsmld_ioctl+0x12ca/0x1900
[  263.816302][T10263]  ? gsmld_write+0x120/0x120
[  263.820903][T10263]  ? __init_ldsem+0x150/0x150
[  263.825585][T10263]  ? __fget_files+0x28/0x460
[  263.830273][T10263]  ? gsmld_write+0x120/0x120
[  263.834866][T10263]  tty_ioctl+0x9b5/0xdc0
[  263.839107][T10263]  ? tty_get_icount+0xb0/0xb0
[  263.843782][T10263]  __se_sys_ioctl+0xfd/0x170
[  263.848374][T10263]  do_syscall_64+0x55/0xb0
[  263.852800][T10263]  ? clear_bhb_loop+0x40/0x90
[  263.857473][T10263]  ? clear_bhb_loop+0x40/0x90
[  263.862162][T10263]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  263.868060][T10263] RIP: 0033:0x7f0d7e99de59
[  263.872480][T10263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.892095][T10263] RSP: 002b:00007f0d7f877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  263.900517][T10263] RAX: ffffffffffffffda RBX: 00007f0d7ec26090 RCX: 00007f0d7e99de59
[  263.908485][T10263] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003
[  263.916461][T10263] RBP: 00007f0d7ea33e6f R08: 0000000000000000 R09: 0000000000000000
[  263.924520][T10263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.932502][T10263] R13: 00007f0d7ec26128 R14: 00007f0d7ec26090 R15: 00007fffa2cbed58
[  263.940492][T10263]  </TASK>
[  263.974560][T10263] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  264.022261][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.056982][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.082411][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.131581][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.154284][T10041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  264.211594][T10041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  264.236990][T10041] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.305064][T10041] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.329820][T10041] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.339836][T10041] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.351818][T10041] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.533135][ T2921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.582015][ T2921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.698678][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.730584][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.008654][T10268] loop0: detected capacity change from 0 to 32768
[  265.047390][T10268] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1310 (10268)
[  265.123824][T10268] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  265.163091][T10268] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  265.205455][T10268] BTRFS info (device loop0): setting nodatacow, compression disabled
[  265.213610][T10268] BTRFS info (device loop0): force clearing of disk cache
[  265.287168][T10268] BTRFS info (device loop0): turning off barriers
[  265.293658][T10268] BTRFS info (device loop0): use no compression
[  265.347742][T10268] BTRFS info (device loop0): disabling free space tree
[  265.383072][T10287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1312'.
[  265.395596][T10268] BTRFS info (device loop0): enabling ssd optimizations
[  265.418759][T10268] BTRFS info (device loop0): using spread ssd allocation scheme
[  265.438910][T10287] bond0: ARP target 0.0.0.2 is already present
[  265.453214][T10287] bond0: option arp_ip_target: invalid value (33554432)
[  265.463348][T10268] BTRFS info (device loop0): not using ssd optimizations
[  265.510568][T10268] BTRFS info (device loop0): not using spread ssd allocation scheme
[  265.689549][T10268] BTRFS info (device loop0): rebuilding free space tree
[  265.705044][T10268] BTRFS info (device loop0): disabling free space tree
[  265.713426][T10268] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  265.724193][T10268] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  265.745477][T10268] BTRFS info (device loop0): checking UUID tree
[  265.993493][ T5774] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.539167][ T1215] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  266.745867][ T1215] usb 3-1: config index 0 descriptor too short (expected 45, got 36)
[  266.758983][ T1215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.782096][ T1215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.834182][ T1215] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  266.878335][ T1215] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  266.907957][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.951511][ T1215] usb 3-1: config 0 descriptor??
[  266.964248][   T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  267.166496][   T34] usb 8-1: Using ep0 maxpacket: 32
[  267.178690][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.214624][   T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9022, setting to 1024
[  267.245510][   T34] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=11.40
[  267.266666][   T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.295487][   T34] usb 8-1: config 0 descriptor??
[  267.309747][   T34] hub 8-1:0.0: USB hub found
[  267.418787][ T1215] plantronics 0003:047F:FFFF.0018: unknown main item tag 0xd
[  267.447137][ T1215] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving
[  267.497518][ T1215] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  267.527325][   T34] hub 8-1:0.0: 1 port detected
[  267.758576][ T1215] usb 3-1: USB disconnect, device number 18
[  268.372050][ T1215] hub 8-1:0.0: hub_ext_port_status failed (err = -71)
[  268.394817][ T5841] usb 8-1: USB disconnect, device number 2
[  269.643442][T10394] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®
[  270.134197][    T8] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  270.338412][    T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  270.349393][    T8] usb 3-1: config 0 has no interface number 0
[  270.363629][    T8] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  270.376268][    T8] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.390040][    T8] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  270.403544][    T8] usb 3-1: config 0 interface 1 has no altsetting 0
[  270.415193][    T8] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  270.429611][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.453696][    T8] usb 3-1: config 0 descriptor??
[  270.831260][T10415] loop0: detected capacity change from 0 to 64
[  271.029292][ T5774] BFS-fs: bfs_iget(): Bad inode number loop0:0000fe02
[  271.037209][ T5774] BFS-fs: bfs_iget(): Bad inode number loop0:0000fe02
[  271.090196][    T8] input: HID 145f:0212 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0019/input/input21
[  271.144414][   T23] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  271.201379][    T8] input: HID 145f:0212 Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0019/input/input22
[  271.288710][    T8] uclogic 0003:145F:0212.0019: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.2-1/input1
[  271.340653][    T8] usb 3-1: USB disconnect, device number 19
[  271.351381][   T23] usb 4-1: Using ep0 maxpacket: 32
[  271.380547][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.412067][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9022, setting to 1024
[  271.458220][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice=11.40
[  271.490493][T10422] fido_id[10422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  271.504207][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.565830][   T23] usb 4-1: config 0 descriptor??
[  271.596681][   T23] hub 4-1:0.0: USB hub found
[  271.649704][T10419] loop7: detected capacity change from 0 to 32768
[  271.671159][ T2975] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  271.773382][   T27] audit: type=1800 audit(1783509388.199:46): pid=10419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1348" name="file1" dev="loop7" ino=4 res=0 errno=0
[  271.865889][   T23] hub 4-1:0.0: 1 port detected
[  271.972020][ T2975] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.151672][ T2975] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.314314][ T2975] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode
[  272.337137][ T2975] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.752965][    T8] usb 4-1: USB disconnect, device number 28
[  272.761394][   T23] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  272.821152][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  272.838029][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  272.848249][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  272.902486][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  272.937935][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  272.947533][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  273.292667][T10446] input: syz1 as /devices/virtual/input/input23
[  274.036506][T10474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1355'.
[  274.153807][T10429] chnl_net:caif_netlink_parms(): no params data found
[  274.504980][T10429] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.512130][T10429] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.527033][T10429] bridge_slave_0: entered allmulticast mode
[  274.538951][T10429] bridge_slave_0: entered promiscuous mode
[  274.573252][T10429] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.583251][T10429] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.596445][T10429] bridge_slave_1: entered allmulticast mode
[  274.603918][T10429] bridge_slave_1: entered promiscuous mode
[  274.749648][T10429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.795492][T10429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.858931][ T2975] dummy0: left promiscuous mode
[  274.886821][ T2975] hsr_slave_0: left promiscuous mode
[  274.893058][ T2975] hsr_slave_1: left promiscuous mode
[  274.928512][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  274.945291][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0
[  274.965000][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  274.972476][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1
[  275.000852][ T5781] Bluetooth: hci2: command tx timeout
[  275.015205][ T2975] team0: left allmulticast mode
[  275.020292][ T2975] team_slave_0: left allmulticast mode
[  275.038082][ T2975] team_slave_1: left allmulticast mode
[  275.043727][ T2975] team0: left promiscuous mode
[  275.048622][ T2975] team_slave_0: left promiscuous mode
[  275.054651][ T2975] team_slave_1: left promiscuous mode
[  275.060212][ T2975] bridge1: left promiscuous mode
[  275.065666][ T2975] bridge0: port 3(team0) entered disabled state
[  275.076446][ T2975] bridge_slave_1: left allmulticast mode
[  275.082125][ T2975] bridge_slave_1: left promiscuous mode
[  275.087947][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.097467][ T2975] bridge_slave_0: left allmulticast mode
[  275.103160][ T2975] bridge_slave_0: left promiscuous mode
[  275.111458][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.247468][ T2975] veth1_macvtap: left promiscuous mode
[  275.253073][ T2975] veth0_macvtap: left promiscuous mode
[  275.260657][T10498] netlink: 'syz.3.1365': attribute type 29 has an invalid length.
[  275.273105][ T2975] veth1_vlan: left promiscuous mode
[  275.294471][ T2975] veth0_vlan: left promiscuous mode
[  275.509529][ T2975] team0 (unregistering): Port device bridge1 removed
[  276.211896][ T2975] team0 (unregistering): Port device team_slave_1 removed
[  276.381727][ T2975] team0 (unregistering): Port device team_slave_0 removed
[  276.464844][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.635423][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.085124][ T5781] Bluetooth: hci2: command tx timeout
[  277.266210][T10529] loop7: detected capacity change from 0 to 4096
[  277.293659][T10529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.314598][T10529] EXT4-fs (loop7): shut down requested (1)
[  277.353035][T10041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.579563][ T2975] bond0 (unregistering): Released all slaves
[  277.732246][T10429] team0: Port device team_slave_0 added
[  277.752830][T10498] netlink: 'syz.3.1365': attribute type 29 has an invalid length.
[  277.824018][T10429] team0: Port device team_slave_1 added
[  278.003125][T10429] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.031397][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.058950][ T5814] kernel write not supported for file /vcs (pid: 5814 comm: kworker/1:3)
[  278.145843][T10429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.191196][T10429] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.209746][T10429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.224961][T10535] loop7: detected capacity change from 0 to 32768
[  278.277811][T10429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.340329][T10535] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  278.509947][T10429] hsr_slave_0: entered promiscuous mode
[  278.523445][T10429] hsr_slave_1: entered promiscuous mode
[  278.539498][T10429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  278.547029][T10535] XFS (loop7): Ending clean mount
[  278.573308][T10429] Cannot create hsr debugfs directory
[  278.793509][T10041] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  279.165978][ T5781] Bluetooth: hci2: command tx timeout
[  279.310881][T10429] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  279.349633][T10429] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  279.380603][T10429] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  279.395717][T10429] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  279.593764][T10429] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.638785][T10429] 8021q: adding VLAN 0 to HW filter on device team0
[  279.669450][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.676663][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.718654][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.725870][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.126744][T10429] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.447284][T10429] veth0_vlan: entered promiscuous mode
[  280.465214][T10429] veth1_vlan: entered promiscuous mode
[  280.495508][T10429] veth0_macvtap: entered promiscuous mode
[  280.515609][T10429] veth1_macvtap: entered promiscuous mode
[  280.552908][T10429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.568845][T10429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.579185][T10429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.590893][T10429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.602338][T10429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.613246][T10429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.626169][T10429] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.648938][T10429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.674893][T10429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.685220][T10429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.700135][T10429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.713185][T10429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  280.724151][T10429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.742945][T10429] batman_adv: batadv0: Interface activated: batadv_slave_1
[  280.772721][T10429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  280.781871][T10429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  280.791746][T10429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  280.801377][T10429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.945554][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  280.953490][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  280.997151][   T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.005703][   T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.172252][T10618] loop8: detected capacity change from 0 to 7
[  281.195541][T10618] Dev loop8: unable to read RDB block 7
[  281.203954][T10618]  loop8: unable to read partition table
[  281.211545][T10618] loop8: partition table beyond EOD, truncated
[  281.231174][T10618] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  281.244815][ T5781] Bluetooth: hci2: command tx timeout
[  281.638922][T10631] netlink: 'syz.7.1379': attribute type 12 has an invalid length.
[  281.661392][T10631] netlink: 'syz.7.1379': attribute type 29 has an invalid length.
[  281.681675][T10631] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1379'.
[  281.714483][T10631] netlink: 'syz.7.1379': attribute type 1 has an invalid length.
[  281.734411][T10631] netlink: 'syz.7.1379': attribute type 1 has an invalid length.
[  282.204242][T10436] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  282.424262][T10436] usb 8-1: Using ep0 maxpacket: 16
[  282.432525][T10436] usb 8-1: config 0 has no interfaces?
[  282.441560][T10436] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  282.470049][T10436] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.510979][T10436] usb 8-1: config 0 descriptor??
[  282.773755][T10436] usb 8-1: USB disconnect, device number 3
[  283.550019][T10436] Process accounting resumed
[  283.793600][T10698] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1401'.
[  283.880843][T10706] loop8: detected capacity change from 0 to 256
[  283.917237][T10436] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  283.940858][T10706] exfat: Deprecated parameter 'namecase'
[  283.984823][T10436] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  284.052074][T10706] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  284.303458][T10712] fido_id[10712]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  284.374180][ T1215] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  284.580730][ T1215] usb 8-1: config index 0 descriptor too short (expected 65183, got 72)
[  284.604379][ T1215] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  284.620854][ T1215] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.632565][ T1215] usb 8-1: Product: syz
[  284.638340][ T1215] usb 8-1: Manufacturer: syz
[  284.643205][ T1215] usb 8-1: SerialNumber: syz
[  284.670307][ T1215] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  284.695644][ T5814] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  285.075605][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.099997][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.150151][ T5777] usb 8-1: USB disconnect, device number 4
[  285.342126][T10745] syzkaller1: entered promiscuous mode
[  285.364567][T10745] syzkaller1: entered allmulticast mode
[  285.529702][T10754] loop7: detected capacity change from 0 to 16384
[  285.804213][ T5814] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[  285.827842][ T5814] ath9k_htc: Failed to initialize the device
[  285.855930][ T5777] usb 8-1: ath9k_htc: USB layer deinitialized
[  286.261281][ T5777] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  286.494252][ T5777] usb 8-1: Using ep0 maxpacket: 32
[  286.526306][ T5777] usb 8-1: config index 0 descriptor too short (expected 65183, got 72)
[  286.559197][ T5777] usb 8-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice= 1.08
[  286.584169][ T5777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.604209][ T5777] usb 8-1: Product: syz
[  286.624215][ T5777] usb 8-1: Manufacturer: syz
[  286.634411][ T5777] usb 8-1: SerialNumber: syz
[  286.706244][ T5777] mos7840 8-1:1.0: missing endpoints
[  287.000215][ T5777] usb 8-1: USB disconnect, device number 5
[  288.132393][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1432'.
[  289.545993][T10854] loop7: detected capacity change from 0 to 256
[  289.561548][T10854] exfat: Deprecated parameter 'utf8'
[  289.569540][T10854] exfat: Deprecated parameter 'utf8'
[  289.823063][T10840] loop8: detected capacity change from 0 to 32768
[  289.900390][T10840] JBD2: Ignoring recovery information on journal
[  289.989058][T10840] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  290.537024][T10429] ocfs2: Unmounting device (7,8) on (node local)
[  290.734573][T10436] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  290.914871][T10886] loop8: detected capacity change from 0 to 512
[  290.928992][T10886] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  290.947255][T10436] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  290.949580][T10886] EXT4-fs (loop8): 1 truncate cleaned up
[  290.974295][T10436] usb 3-1: config 0 has no interface number 0
[  290.981050][T10436] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  290.992550][T10886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  291.048499][T10436] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  291.146692][T10436] usb 3-1: config 0 interface 255 has no altsetting 0
[  291.153579][T10436] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  291.192641][T10436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.212806][T10436] usb 3-1: config 0 descriptor??
[  291.243846][T10436] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  291.258467][T10429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.451454][T10436] usb 3-1: USB disconnect, device number 20
[  291.697997][T10906] loop7: detected capacity change from 0 to 8192
[  291.739355][T10906] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  291.809278][T10906] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  291.871481][T10906] REISERFS (device loop7): using ordered data mode
[  291.926652][T10906] reiserfs: using flush barriers
[  291.948527][T10906] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  291.989014][T10906] REISERFS (device loop7): checking transaction log (loop7)
[  292.264643][T10906] REISERFS (device loop7): Using tea hash to sort names
[  292.320692][T10906] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  292.927698][T10952] binder: 10951:10952 ioctl c0306201 0 returned -14
[  292.992693][T10952] binder: 10951:10952 ioctl 8901 0 returned -22
[  293.543623][T10975] loop5: detected capacity change from 0 to 127
[  293.557594][T10975]  loop5: unable to read partition table
[  293.563704][T10975] loop_reread_partitions: partition scan of loop5 (þ被x) failed (rc=-5)
[  294.122139][T10993] loop7: detected capacity change from 0 to 4096
[  294.235446][T10993] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  294.329981][T11001] loop8: detected capacity change from 0 to 4096
[  294.343896][T11001] EXT4-fs: Ignoring removed orlov option
[  294.363723][T11001] EXT4-fs (loop8): Test dummy encryption mode enabled
[  294.511861][T11001] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.743509][T10429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.965961][T11024] loop8: detected capacity change from 0 to 64
[  295.213557][T11031] netlink: 'syz.8.1493': attribute type 3 has an invalid length.
[  295.883141][T11053] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1501'.
[  296.095953][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'.
[  296.184751][ T1215] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  296.389943][ T1215] usb 3-1: Using ep0 maxpacket: 32
[  296.399823][ T1215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.436571][ T1215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.456520][T11078] loop5: detected capacity change from 0 to 7
[  296.465564][ T1215] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  296.479364][T11078] Dev loop5: unable to read RDB block 7
[  296.484540][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.504310][T11078]  loop5: unable to read partition table
[  296.510428][ T1215] usb 3-1: config 0 descriptor??
[  296.531696][T11078] loop5: partition table beyond EOD, truncated
[  296.564315][T11078] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  296.981747][ T1215] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[  297.330885][ T8578] usb 3-1: USB disconnect, device number 21
[  297.743884][T11087] loop8: detected capacity change from 0 to 32768
[  297.773139][T11087] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.1510 (11087)
[  297.806459][T11087] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  297.832164][T11087] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  297.865310][T11087] BTRFS info (device loop8): using free space tree
[  298.102072][T11087] BTRFS info (device loop8): enabling ssd optimizations
[  298.124236][T11087] BTRFS info (device loop8): auto enabling async discard
[  298.464774][T10429] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  298.857995][T11152] loop7: detected capacity change from 0 to 256
[  299.061040][T11155] loop8: detected capacity change from 0 to 512
[  299.105718][T11155] EXT4-fs: Ignoring removed mblk_io_submit option
[  299.167784][T11155] EXT4-fs (loop8): orphan cleanup on readonly fs
[  299.203333][T11155] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  299.338497][T11155] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.1523: attempt to clear invalid blocks 2 len 1
[  299.406268][T11155] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  299.480109][T11155] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1523: invalid indirect mapped block 1819239214 (level 0)
[  299.527709][T11155] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.1523: invalid indirect mapped block 1819239214 (level 1)
[  299.649114][T11155] EXT4-fs (loop8): 1 truncate cleaned up
[  299.672136][T11155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  299.756483][T11166] syzkaller1: entered promiscuous mode
[  299.778811][T11166] syzkaller1: entered allmulticast mode
[  299.847509][T10429] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  299.891665][T10429] EXT4-fs error (device loop8): ext4_iget_extra_inode:4739: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  299.942026][T10429] EXT4-fs error (device loop8): ext4_iget_extra_inode:4739: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  300.314302][ T8578] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  300.361652][T10429] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.507391][T11176] loop7: detected capacity change from 0 to 256
[  300.508086][ T2921] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.524588][ T8578] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  300.524617][ T8578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.553457][ T8578] usb 4-1: config 0 descriptor??
[  300.562873][ T8578] cp210x 4-1:0.0: cp210x converter detected
[  300.588644][T11176] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  300.861415][ T2921] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.982290][ T8578] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  301.028619][ T8578] usb 4-1: cp210x converter now attached to ttyUSB0
[  301.138734][ T2921] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.249136][ T8578] usb 4-1: USB disconnect, device number 29
[  301.260064][ T8578] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  301.291967][ T8578] cp210x 4-1:0.0: device disconnected
[  301.359568][ T2921] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.715088][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.726354][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.737044][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.748266][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.756309][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  301.782814][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  302.523268][T11189] loop7: detected capacity change from 0 to 32768
[  302.589689][T11189] JBD2: Ignoring recovery information on journal
[  302.697500][T11189] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  303.153197][T10041] ocfs2: Unmounting device (7,7) on (node local)
[  303.192166][T11186] chnl_net:caif_netlink_parms(): no params data found
[  303.704545][ T5815] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  303.811361][T11186] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.819459][T11186] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.827473][T11186] bridge_slave_0: entered allmulticast mode
[  303.835087][T11186] bridge_slave_0: entered promiscuous mode
[  303.847322][T11186] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.855845][T11186] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.863190][T11186] bridge_slave_1: entered allmulticast mode
[  303.874965][ T5085] Bluetooth: hci2: command tx timeout
[  303.883852][T11186] bridge_slave_1: entered promiscuous mode
[  303.904528][ T5815] usb 4-1: Using ep0 maxpacket: 32
[  303.921681][ T5815] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  303.943525][ T5815] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  303.992728][ T5815] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  304.004255][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  304.026901][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  304.057403][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  304.096392][T11186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  304.101547][ T5815] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  304.140692][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.161849][ T5815] usb 4-1: config 0 descriptor??
[  304.387814][T11186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  304.457027][ T5815] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  304.473357][T11246] loop7: detected capacity change from 0 to 1024
[  304.482099][ T2921] hsr_slave_0: left promiscuous mode
[  304.551757][ T2921] hsr_slave_1: left promiscuous mode
[  304.558433][   T11] hfsplus: b-tree write err: -5, ino 25
[  304.577163][   T11] hfsplus: b-tree write err: -5, ino 4
[  304.577249][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.592960][   T11] hfsplus: b-tree write err: -5, ino 2
[  304.613366][   T11] hfsplus: b-tree write err: -5, ino 26
[  304.614187][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.703314][ T2921] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.742870][ T2921] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.771454][ T2921] bridge_slave_1: left allmulticast mode
[  304.789454][ T5815] usb 4-1: USB disconnect, device number 30
[  304.793737][ T2921] bridge_slave_1: left promiscuous mode
[  304.805937][ T5815] usblp0: removed
[  304.818546][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.877385][ T2921] bridge_slave_0: left allmulticast mode
[  304.892431][ T2921] bridge_slave_0: left promiscuous mode
[  304.908711][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.074428][ T2921] veth1_macvtap: left promiscuous mode
[  305.080034][ T2921] veth0_macvtap: left promiscuous mode
[  305.120758][ T2921] veth1_vlan: left promiscuous mode
[  305.142067][ T2921] veth0_vlan: left promiscuous mode
[  305.954365][ T5085] Bluetooth: hci2: command tx timeout
[  306.197719][T11273] loop7: detected capacity change from 0 to 40427
[  306.216892][T11273] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  306.238123][T11273] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  306.252554][T11273] F2FS-fs (loop7): Image doesn't support compression
[  306.269477][T11273] F2FS-fs (loop7): Image doesn't support compression
[  306.305230][T11273] F2FS-fs (loop7): invalid crc value
[  306.475672][T11273] F2FS-fs (loop7): Start checkpoint disabled!
[  306.595566][T11273] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  306.611154][T11273] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  306.750478][T11273] syz.7.1552: attempt to access beyond end of device
[  306.750478][T11273] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  306.958909][ T4567] kworker/u4:10: attempt to access beyond end of device
[  306.958909][ T4567] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  306.973692][ T4567] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  307.093286][ T2921] team0 (unregistering): Port device team_slave_1 removed
[  307.191264][ T2921] team0 (unregistering): Port device team_slave_0 removed
[  307.288598][ T2921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.376183][ T2921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.940913][ T2921] bond0 (unregistering): Released all slaves
[  308.036118][ T5085] Bluetooth: hci2: command tx timeout
[  308.302371][T11186] team0: Port device team_slave_0 added
[  308.390586][T11186] team0: Port device team_slave_1 added
[  308.542050][T11186] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.559459][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.684511][T11186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.739871][T11186] batman_adv: batadv0: Adding interface: batadv_slave_1
[  308.747251][T11186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.773948][T11186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  308.817611][T11317] loop7: detected capacity change from 0 to 512
[  308.978370][T11317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.019323][T11186] hsr_slave_0: entered promiscuous mode
[  309.028821][T11186] hsr_slave_1: entered promiscuous mode
[  309.059477][T11186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.067651][T11186] Cannot create hsr debugfs directory
[  309.290107][T10041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.671278][T11186] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  309.717028][T11186] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  309.751078][T11186] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  309.780267][T11186] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  310.105602][T11186] 8021q: adding VLAN 0 to HW filter on device bond0
[  310.115234][ T5085] Bluetooth: hci2: command tx timeout
[  310.158628][T11186] 8021q: adding VLAN 0 to HW filter on device team0
[  310.329476][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state
[  310.336719][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state
[  310.388439][ T2921] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.395730][ T2921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  310.620369][T11344] loop7: detected capacity change from 0 to 32768
[  310.681718][T11344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1569 (11344)
[  310.732679][T11344] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  310.785168][T11344] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  310.817394][T11344] BTRFS info (device loop7): setting nodatasum
[  310.823628][T11344] BTRFS info (device loop7): force zlib compression, level 3
[  310.887124][T11344] BTRFS info (device loop7): turning on flush-on-commit
[  310.916386][T11344] BTRFS info (device loop7): max_inline at 4096
[  310.922703][T11344] BTRFS info (device loop7): using free space tree
[  311.147188][T11344] BTRFS info (device loop7): enabling ssd optimizations
[  311.186094][T11186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  311.518805][T10041] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.724532][ T5765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop7 scanned by udevd (5765)
[  312.164466][ T5841] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  312.196824][ T5085] Bluetooth: hci2: command tx timeout
[  312.364730][ T5841] usb 8-1: Using ep0 maxpacket: 32
[  312.396851][ T5841] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  312.428365][ T5841] usb 8-1: config 0 has no interface number 0
[  312.433094][T11186] veth0_vlan: entered promiscuous mode
[  312.464481][ T5841] usb 8-1: config 0 interface 184 has no altsetting 0
[  312.511338][T11186] veth1_vlan: entered promiscuous mode
[  312.518057][ T5841] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  312.545595][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.594238][ T5841] usb 8-1: Product: syz
[  312.598468][ T5841] usb 8-1: Manufacturer: syz
[  312.603088][ T5841] usb 8-1: SerialNumber: syz
[  312.672822][T11186] veth0_macvtap: entered promiscuous mode
[  312.691448][ T5841] usb 8-1: config 0 descriptor??
[  312.726388][ T5841] smsc75xx v1.0.0
[  312.731800][T11186] veth1_macvtap: entered promiscuous mode
[  312.777769][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.791725][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.850632][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.861717][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.872141][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.883109][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.897545][T11186] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.930939][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.950134][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.972337][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.994739][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.024151][T11186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  313.048397][T11186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  313.075711][T11186] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.103647][T11186] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.131922][T11186] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.174141][T11186] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.203562][T11186] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.441182][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.498380][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.625334][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.654003][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.806196][ T5841] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  313.836671][ T5841] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  313.870385][ T5841] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  313.912085][ T5841] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  313.933130][ T5841] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  313.995943][ T5841] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  314.084925][ T5841] smsc75xx: probe of 8-1:0.184 failed with error -71
[  314.141713][ T5841] usb 8-1: USB disconnect, device number 6
[  314.267188][T11456] loop9: detected capacity change from 0 to 256
[  314.278164][T11456] exfat: Deprecated parameter 'utf8'
[  314.283553][T11456] exfat: Deprecated parameter 'namecase'
[  314.331226][T11462] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1589'.
[  314.342302][T11456] exfat: Deprecated parameter 'namecase'
[  314.357985][T11456] exfat: Deprecated parameter 'utf8'
[  314.433104][T11456] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  314.932454][T11476] loop9: detected capacity change from 0 to 4096
[  314.974433][   T23] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  314.993844][T11476] ntfs3: loop9: ino=3, ntfs_set_state failed, -22.
[  315.007882][T11476] ntfs3: loop9: Failed to initialize $Extend/$ObjId.
[  315.165249][ T2975] ntfs3: loop9: ino=3, ntfs3_write_inode failed, -22.
[  315.172404][T11186] ntfs3: loop9: ino=3, ntfs_set_state failed, -22.
[  315.197731][T11186] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  315.202034][   T23] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  315.225628][T11186] ntfs3: loop9: ino=3, ntfs_set_state failed, -22.
[  315.230046][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.243678][ T2921] ntfs3: loop9: ino=3, ntfs3_write_inode failed, -22.
[  315.272119][   T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.302552][   T23] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  315.338166][   T23] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  315.353292][   T23] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  315.378964][   T23] usb 8-1: Manufacturer: syz
[  315.407701][   T23] usb 8-1: config 0 descriptor??
[  315.880802][   T23] appleir 0003:05AC:8243.001C: unknown main item tag 0x0
[  315.901145][   T23] appleir 0003:05AC:8243.001C: No inputs registered, leaving
[  315.942826][   T23] appleir 0003:05AC:8243.001C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  316.303605][ T5814] usb 8-1: USB disconnect, device number 7
[  316.875294][T11523] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  316.916589][T11523] CIFS mount error: No usable UNC path provided in device string!
[  316.916589][T11523] 
[  316.942322][T11523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  317.321988][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  317.435331][T11549] netlink: 'syz.7.1612': attribute type 12 has an invalid length.
[  317.464881][T11549] netlink: 'syz.7.1612': attribute type 29 has an invalid length.
[  317.481731][T11549] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1612'.
[  317.492782][T11549] netlink: 'syz.7.1612': attribute type 1 has an invalid length.
[  317.500995][T11549] netlink: 'syz.7.1612': attribute type 2 has an invalid length.
[  317.945584][T11570] Invalid argument reading file caps for ./file0
[  318.529320][T11591] loop7: detected capacity change from 0 to 128
[  318.635911][T11596] loop9: detected capacity change from 0 to 512
[  318.681970][T11596] EXT4-fs (loop9): Test dummy encryption mode enabled
[  318.727568][T11596] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  318.793648][T11596] EXT4-fs error (device loop9): ext4_orphan_get:1430: comm syz.9.1626: bad orphan inode 131083
[  318.845653][T11596] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.982914][T11186] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.854425][ T5814] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  319.857685][T11604] loop7: detected capacity change from 0 to 32768
[  319.947359][T11604] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  319.978039][T11604] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm
[  320.004264][T11604] BTRFS info (device loop7): setting nodatacow, compression disabled
[  320.032053][T11604] BTRFS info (device loop7): turning on flush-on-commit
[  320.061682][T11604] BTRFS info (device loop7): trying to use backup root at mount time
[  320.064249][ T5814] usb 4-1: Using ep0 maxpacket: 8
[  320.091905][T11604] BTRFS info (device loop7): max_inline at 0
[  320.110739][T11604] BTRFS info (device loop7): using free space tree
[  320.115211][ T5814] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  320.154297][ T5814] usb 4-1: config 179 has no interface number 0
[  320.160642][ T5814] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  320.194764][ T5814] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  320.217902][ T5814] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  320.273210][ T5814] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  320.298097][ T2975] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  320.304968][ T5814] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  320.325394][ T5814] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  320.335469][ T5814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.356060][T11622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  320.397403][T11604] BTRFS error (device loop7): failed to load root extent
[  320.417894][T11604] BTRFS warning (device loop7): try to load backup roots slot 1
[  320.467352][ T2975] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  320.525371][T11604] BTRFS warning (device loop7): couldn't read tree root
[  320.539173][T11604] BTRFS warning (device loop7): try to load backup roots slot 2
[  320.562402][ T2975] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  320.582890][T11604] BTRFS warning (device loop7): couldn't read tree root
[  320.594379][T11604] BTRFS warning (device loop7): try to load backup roots slot 3
[  320.677008][T11604] BTRFS info (device loop7): enabling ssd optimizations
[  320.711466][T11604] BTRFS info (device loop7): auto enabling async discard
[  320.772580][T11604] BTRFS info (device loop7): rebuilding free space tree
[  320.806821][T11604] BTRFS info (device loop7): checking UUID tree
[  320.880646][ T5814] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input24
[  321.467916][T11422] usb 4-1: USB disconnect, device number 31
[  321.467962][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  321.482482][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  321.525811][T11422] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  321.831284][T11680] sctp: [Deprecated]: syz.9.1640 (pid 11680) Use of struct sctp_assoc_value in delayed_ack socket option.
[  321.831284][T11680] Use struct sctp_sack_info instead
[  321.926123][T10041] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  322.085290][    T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  322.316871][    T8] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  322.336788][    T8] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  322.369439][    T8] usb 3-1: Product: syz
[  322.385050][    T8] usb 3-1: config 0 descriptor??
[  322.398858][    T8] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  322.421916][    T8] usb 3-1: Detected FT232H
[  322.549029][T11700] loop7: detected capacity change from 0 to 256
[  322.629711][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  322.651338][T11700] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  322.857229][T11707] exFAT-fs (loop7): error, tried to truncate zeroed cluster.
[  322.889823][T11707] exFAT-fs (loop7): Filesystem has been set read-only
[  322.919588][T11707] exFAT-fs (loop7): error, tried to truncate zeroed cluster.
[  323.129602][    T8] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  323.200446][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1647'.
[  323.230701][T11712] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1647'.
[  323.290495][T11712] geneve2: entered promiscuous mode
[  323.306969][T11712] geneve2: entered allmulticast mode
[  323.385734][ T1215] usb 3-1: USB disconnect, device number 22
[  323.435805][ T1215] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  323.476722][ T1215] ftdi_sio 3-1:0.0: device disconnected
[  323.688591][T11704] loop9: detected capacity change from 0 to 32768
[  323.751457][T11704] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  323.901154][T11704] XFS (loop9): Ending clean mount
[  324.126367][T11186] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  324.594602][ T1215] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  324.786242][ T1215] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  324.805402][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.826940][ T1215] usb 3-1: config 0 descriptor??
[  324.835382][ T1215] cp210x 3-1:0.0: cp210x converter detected
[  325.088486][T11766] loop7: detected capacity change from 0 to 128
[  325.237867][ T5085] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  325.248052][ T5085] Bluetooth: hci2: Injecting HCI hardware error event
[  325.258639][ T5781] Bluetooth: hci2: hardware error 0x00
[  325.266078][ T1215] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  325.495352][ T1215] usb 3-1: cp210x converter now attached to ttyUSB0
[  325.728097][ T5814] usb 3-1: USB disconnect, device number 23
[  325.750966][ T5814] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  325.782207][ T5814] cp210x 3-1:0.0: device disconnected
[  325.814285][T10436] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  326.041904][T10436] usb 8-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99
[  326.069434][T10436] usb 8-1: config 0 interface 0 has no altsetting 0
[  326.090173][T10436] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  326.111757][T10436] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  326.135172][T10436] usb 8-1: Product: syz
[  326.139399][T10436] usb 8-1: Manufacturer: syz
[  326.158385][T10436] usb 8-1: SerialNumber: syz
[  326.169830][T10436] usb 8-1: config 0 descriptor??
[  326.189103][T11772] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  326.208331][T10436] usb 8-1: selecting invalid altsetting 0
[  326.466013][T11772] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled
[  326.498665][T10436] usb 8-1: USB disconnect, device number 8
[  327.399493][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  327.794261][ T5814] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  327.984216][ T5814] usb 8-1: Using ep0 maxpacket: 8
[  327.991329][ T5814] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  328.032078][ T5814] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  328.070927][ T5814] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  328.124229][ T5814] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  328.183654][ T5814] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  328.227178][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.522822][ T5814] usb 8-1: GET_CAPABILITIES returned 0
[  328.567935][ T5814] usbtmc 8-1:16.0: can't read capabilities
[  328.749489][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.759173][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.796414][    C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.807007][    C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.816266][    C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.825385][    C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.834514][    C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.883838][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.893004][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.902133][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.911254][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  328.993214][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  329.002384][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  329.011512][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  329.064383][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  329.073578][    C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  329.108507][ T5813] usb 8-1: USB disconnect, device number 9
[  329.784510][T10769] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  329.933880][T11881] syzkaller1: entered promiscuous mode
[  329.940557][T11881] syzkaller1: entered allmulticast mode
[  329.964635][T10769] usb 3-1: Using ep0 maxpacket: 32
[  329.974997][T10769] usb 3-1: config 0 has no interfaces?
[  329.993793][T10769] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  330.004346][T10769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.012386][T10769] usb 3-1: Product: syz
[  330.016893][T10769] usb 3-1: Manufacturer: syz
[  330.021666][T10769] usb 3-1: SerialNumber: syz
[  330.035460][T10769] usb 3-1: config 0 descriptor??
[  330.336434][ T5838] usb 3-1: USB disconnect, device number 24
[  330.578930][T11902] IPv6: A: Disabled Multicast RS
[  331.436351][T11933] loop7: detected capacity change from 0 to 8192
[  331.486988][T11933]  loop7: AHDI p3 p4
[  331.494640][T11933] loop7: p3 start 525312 is beyond EOD, truncated
[  331.580031][ T5139]  loop7: AHDI p3 p4
[  331.585278][ T5139] loop7: p3 start 525312 is beyond EOD, truncated
[  331.804535][T11935] loop9: detected capacity change from 0 to 32768
[  331.832704][T11935] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  331.933555][T11935] XFS (loop9): Ending clean mount
[  331.953070][T11935] XFS (loop9): Quotacheck needed: Please wait.
[  332.087301][T11935] XFS (loop9): Quotacheck: Done.
[  332.194348][   T27] audit: type=1800 audit(1783509448.599:47): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1705" name="file0" dev="loop9" ino=9284 res=0 errno=0
[  332.412288][T11186] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  333.003279][T11973] loop9: detected capacity change from 0 to 1024
[  333.027921][T11973] EXT4-fs: inline encryption not supported
[  333.126560][T11973] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.403389][T11186] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.845852][ T5838] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  334.044922][ T5838] usb 10-1: Using ep0 maxpacket: 8
[  334.077926][ T5838] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  334.095232][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.105332][ T5838] usb 10-1: Product: syz
[  334.109618][ T5838] usb 10-1: Manufacturer: syz
[  334.116049][ T5838] usb 10-1: SerialNumber: syz
[  334.137149][ T5838] usb 10-1: config 0 descriptor??
[  334.152795][ T5838] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  334.636023][T10436] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  334.824249][T10436] usb 4-1: Using ep0 maxpacket: 8
[  334.832224][T10436] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  334.842559][T10436] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  334.860000][T10436] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  334.870151][T10436] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.888081][T10436] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  334.898802][T10436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.142251][T10436] usb 4-1: GET_CAPABILITIES returned 0
[  335.163257][T10436] usbtmc 4-1:16.0: can't read capabilities
[  335.199130][ T5838] gspca_sonixj: reg_w1 err -71
[  335.346277][ T5838] sonixj: probe of 10-1:0.0 failed with error -71
[  335.385555][ T5838] usb 10-1: USB disconnect, device number 2
[  335.406570][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.415733][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.424850][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.433964][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.449697][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.458881][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.468043][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.477253][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.490051][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.499188][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.508262][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.517326][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.527608][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.536733][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.545839][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.554950][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  335.583864][T10436] usb 4-1: USB disconnect, device number 32
[  335.737673][T12035] loop7: detected capacity change from 0 to 128
[  335.849227][ T5781] Bluetooth: hci1: unexpected event for opcode 0x041c
[  336.642350][T12044] loop7: detected capacity change from 0 to 32768
[  336.695524][T12044] JBD2: Ignoring recovery information on journal
[  336.790760][T12044] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  337.083619][T10041] ocfs2: Unmounting device (7,7) on (node local)
[  338.070297][T12095] loop5: detected capacity change from 0 to 7
[  338.093272][T12095] Dev loop5: unable to read RDB block 7
[  338.100214][T12095]  loop5: AHDI p1 p2
[  338.104963][T12095] loop5: partition table partially beyond EOD, truncated
[  338.112981][T12095] loop5: p1 start 1668641394 is beyond EOD, truncated
[  338.323248][T12074] loop9: detected capacity change from 0 to 32768
[  338.361468][T12074] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  338.496167][T12074] XFS (loop9): Ending clean mount
[  338.739983][T11186] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  339.564528][T10769] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  339.588588][T12135] syz.7.1776: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz7,mems_allowed=0-1
[  339.604305][T12135] CPU: 1 PID: 12135 Comm: syz.7.1776 Not tainted syzkaller #0
[  339.611793][T12135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  339.621862][T12135] Call Trace:
[  339.625164][T12135]  <TASK>
[  339.628112][T12135]  dump_stack_lvl+0x18c/0x250
[  339.632836][T12135]  ? show_regs_print_info+0x20/0x20
[  339.638077][T12135]  ? load_image+0x420/0x420
[  339.642610][T12135]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  339.649038][T12135]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  339.655542][T12135]  warn_alloc+0x246/0x340
[  339.659882][T12135]  ? zone_watermark_ok_safe+0x230/0x230
[  339.665450][T12135]  ? __mutex_trylock_common+0x160/0x270
[  339.671010][T12135]  __vmalloc_node_range+0x129/0x1320
[  339.676307][T12135]  ? tomoyo_path_number_perm+0x217/0x5e0
[  339.681944][T12135]  ? rcu_is_watching+0x15/0xb0
[  339.686711][T12135]  ? trace_contention_end+0x39/0xe0
[  339.691904][T12135]  ? __mutex_lock+0x30d/0xc80
[  339.696581][T12135]  ? tomoyo_path_number_perm+0x56b/0x5e0
[  339.702221][T12135]  ? tomoyo_path_number_perm+0x217/0x5e0
[  339.707867][T12135]  ? free_vm_area+0x50/0x50
[  339.712378][T12135]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  339.717408][T12135]  vmalloc+0x79/0x90
[  339.721323][T12135]  ? dvb_dvr_do_ioctl+0x12e/0x220
[  339.726350][T12135]  dvb_dvr_do_ioctl+0x12e/0x220
[  339.731209][T12135]  dvb_usercopy+0x195/0x2b0
[  339.735717][T12135]  ? dvb_dvr_release+0x3e0/0x3e0
[  339.740656][T12135]  ? dvb_generic_ioctl+0xb0/0xb0
[  339.745613][T12135]  ? dvb_dvr_poll+0x230/0x230
[  339.750288][T12135]  dvb_dvr_ioctl+0x29/0x30
[  339.754711][T12135]  __se_sys_ioctl+0xfd/0x170
[  339.759307][T12135]  do_syscall_64+0x55/0xb0
[  339.763734][T12135]  ? clear_bhb_loop+0x40/0x90
[  339.768412][T12135]  ? clear_bhb_loop+0x40/0x90
[  339.773083][T12135]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.778980][T12135] RIP: 0033:0x7f0e8559de59
[  339.783395][T12135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  339.803006][T12135] RSP: 002b:00007f0e864bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  339.811430][T12135] RAX: ffffffffffffffda RBX: 00007f0e85825fa0 RCX: 00007f0e8559de59
[  339.819402][T12135] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003
[  339.827469][T12135] RBP: 00007f0e85633e6f R08: 0000000000000000 R09: 0000000000000000
[  339.835446][T12135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.843414][T12135] R13: 00007f0e85826038 R14: 00007f0e85825fa0 R15: 00007ffc35ff1fe8
[  339.851403][T12135]  </TASK>
[  339.854517][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.862461][T12135] Mem-Info:
[  339.865693][T12135] active_anon:10104 inactive_anon:0 isolated_anon:0
[  339.865693][T12135]  active_file:11464 inactive_file:40244 isolated_file:0
[  339.865693][T12135]  unevictable:0 dirty:331 writeback:0
[  339.865693][T12135]  slab_reclaimable:11421 slab_unreclaimable:97151
[  339.865693][T12135]  mapped:25206 shmem:1588 pagetables:1065
[  339.865693][T12135]  sec_pagetables:0 bounce:0
[  339.865693][T12135]  kernel_misc_reclaimable:0
[  339.865693][T12135]  free:1335629 free_pcp:12766 free_cma:0
[  339.911008][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.917820][T12135] Node 0 active_anon:38880kB inactive_anon:0kB active_file:45856kB inactive_file:160776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100824kB dirty:1324kB writeback:0kB shmem:4816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12316kB pagetables:4260kB sec_pagetables:0kB all_unreclaimable? no
[  339.949930][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.956300][T12135] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  339.977991][ T5781] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  339.986499][    C1] vkms_vblank_simulate: vblank timer overrun
[  339.986591][T12135] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  339.986710][T12135] lowmem_reserve[]: 0 2521 2522 2522 2522
[  339.986757][T12135] Node 0 DMA32 free:1433588kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:38844kB inactive_anon:0kB active_file:45856kB inactive_file:159940kB unevictable:0kB writepending:1324kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:27776kB local_pcp:20524kB free_cma:0kB
[  339.986820][T12135] lowmem_reserve[]: 0 0 0 0 0
[  339.986861][T12135] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  339.986919][T12135] lowmem_reserve[]: 0 0 0 0 0
[  339.986961][T12135] Node 1 
[  340.004213][ T5781] Bluetooth: hci1: Injecting HCI hardware error event
[  340.032401][T12135] Normal free:3893568kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22848kB local_pcp:12416kB free_cma:0kB
[  340.049807][ T5781] Bluetooth: hci1: hardware error 0x00
[  340.065636][    C1] vkms_vblank_simulate: vblank timer overrun
[  340.066677][T12135] lowmem_reserve[]:
[  340.141402][    C1] vkms_vblank_simulate: vblank timer overrun
[  340.163337][T12135]  0 0 0 0 0
[  340.166704][T12135] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  340.179590][T12135] Node 0 DMA32: 1621*4kB (ME) 370*8kB (UME) 109*16kB (UME) 291*32kB (ME) 190*64kB (ME) 41*128kB (ME) 31*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 3*2048kB (M) 335*4096kB (M) = 1433364kB
[  340.198181][T12135] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  340.209822][T12135] Node 1 Normal: 282*4kB (UME) 53*8kB (UME) 57*16kB (UME) 61*32kB (UME) 16*64kB (UME) 8*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893568kB
[  340.227790][T12135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  340.237827][T12135] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  340.247765][T12135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  340.257660][T12135] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  340.267116][T12135] 53163 total pagecache pages
[  340.271852][T12135] 0 pages in swap cache
[  340.276260][T12135] Free swap  = 124712kB
[  340.280436][T12135] Total swap = 124996kB
[  340.285064][T12135] 2097051 pages RAM
[  340.289288][T12135] 0 pages HighMem/MovableOnly
[  340.293979][T12135] 416953 pages reserved
[  340.298256][T12135] 0 pages cma reserved
[  340.442857][T10769] usb 4-1: Using ep0 maxpacket: 8
[  340.466629][T10769] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  340.486858][T10769] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  340.528587][T10769] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  340.577854][T10769] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  340.604568][T10769] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  340.635197][T10769] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  340.655574][T10769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.914642][T10769] usb 4-1: usb_control_msg returned -32
[  340.920382][T10769] usbtmc 4-1:16.0: can't read capabilities
[  341.293998][T12153] loop9: detected capacity change from 0 to 32768
[  341.368152][T12175] usbtmc 4-1:16.0: usb_control_msg returned -32
[  341.392452][T12153] read_mapping_page failed!
[  341.416802][ T5813] usb 4-1: USB disconnect, device number 33
[  341.426299][T12153] ERROR: (device loop9): txCommit: 
[  341.426299][T12153] 
[  341.507546][T10769] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  341.524313][    T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  341.558208][T12153] ERROR: (device loop9): diAllocBit: iag inconsistent
[  341.558208][T12153] 
[  341.590529][T12153] ialloc: diAlloc returned -5!
[  341.694439][T10769] usb 8-1: Using ep0 maxpacket: 8
[  341.713911][T10769] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  341.737562][T10769] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.748582][    T8] usb 3-1: unable to get BOS descriptor or descriptor too short
[  341.764184][T10769] usb 8-1: Product: syz
[  341.764686][    T8] usb 3-1: unable to read config index 0 descriptor/start: -71
[  341.768574][T10769] usb 8-1: Manufacturer: syz
[  341.793005][    T8] usb 3-1: can't read configurations, error -71
[  341.800532][T10769] usb 8-1: SerialNumber: syz
[  341.821136][T10769] usb 8-1: config 0 descriptor??
[  342.062210][T10769] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  342.114418][ T5781] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  342.407145][T12207] loop9: detected capacity change from 0 to 512
[  342.492823][T10769] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -32
[  342.536453][T10769] usb 8-1: USB disconnect, device number 10
[  342.546979][T12207] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  342.564429][T12207] FAT-fs (loop9): Filesystem has been set read-only
[  342.639575][T12207] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  343.488555][T12238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1800'.
[  344.590459][T12286] loop7: detected capacity change from 0 to 2048
[  344.695753][T12286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.827803][T10041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.955952][    T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  345.074368][T10769] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  345.158446][    T8] usb 10-1: Using ep0 maxpacket: 8
[  345.169839][    T8] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  345.208500][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  345.238956][    T8] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  345.269539][    T8] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  345.297814][T10769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.309090][    T8] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  345.309123][    T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.384864][T10769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.414145][T10769] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.434193][T10769] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.443282][T10769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.472173][T10769] usb 4-1: config 0 descriptor??
[  345.523910][    T8] usb 10-1: GET_CAPABILITIES returned 0
[  345.544580][    T8] usbtmc 10-1:16.0: can't read capabilities
[  345.756611][T12304] loop7: detected capacity change from 0 to 32768
[  345.769440][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.778722][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.787940][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.797149][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.854444][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.863686][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.872896][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.882108][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.904841][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.914097][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.923323][    C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  345.940495][T10769] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  345.952824][T10769] plantronics 0003:047F:FFFF.001D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  346.004460][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.013715][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.022928][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.032137][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.046845][    C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  346.073583][T12304] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  346.076339][T10436] usb 10-1: USB disconnect, device number 3
[  346.174189][    T8] usb 4-1: USB disconnect, device number 34
[  346.226270][T12304] XFS (loop7): Ending clean mount
[  346.300551][T12322] fido_id[12322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  346.756777][T10769] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  346.972599][T10769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.005004][T10769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.034159][T10769] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  347.058042][T10769] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  347.074406][ T5838] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  347.082190][T10769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.101758][T10769] usb 3-1: config 0 descriptor??
[  347.264210][ T5838] usb 10-1: Using ep0 maxpacket: 32
[  347.272013][ T5838] usb 10-1: config 0 has an invalid interface number: 51 but max is 0
[  347.284134][ T5838] usb 10-1: config 0 has no interface number 0
[  347.293993][ T5838] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  347.307954][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.334019][ T5838] usb 10-1: Product: syz
[  347.339241][ T5838] usb 10-1: Manufacturer: syz
[  347.351459][ T5838] usb 10-1: SerialNumber: syz
[  347.367624][ T5838] usb 10-1: config 0 descriptor??
[  347.377571][ T5838] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  347.490638][T12304] XFS (loop7): User initiated shutdown received.
[  347.497399][T12304] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  347.525141][T12304] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  347.554458][T10769] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd
[  347.569230][T10769] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving
[  347.595530][ T5838] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  347.605985][T10041] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  347.612337][T10769] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  347.660053][ T5838] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  347.950397][T12344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.977851][T12344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  348.030614][ T5838] usb 3-1: USB disconnect, device number 27
[  348.282702][    C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71
[  348.283766][    T8] usb 10-1: USB disconnect, device number 4
[  348.329289][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  348.376541][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  348.421574][    T8] quatech2 10-1:0.51: device disconnected
[  348.981035][T12394] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1827'.
[  349.269230][T12406] input: syz1 as /devices/virtual/input/input26
[  349.475122][T10436] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  349.674166][T10436] usb 10-1: Using ep0 maxpacket: 32
[  349.686481][T10436] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.714265][T10436] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.737423][T10436] usb 10-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37
[  349.749711][T10436] usb 10-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0
[  349.760568][T10436] usb 10-1: Product: syz
[  349.769335][T10436] usb 10-1: Manufacturer: syz
[  349.776723][T10436] usb 10-1: config 0 descriptor??
[  350.207763][   T27] audit: type=1326 audit(1783509466.629:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12428 comm="syz.7.1843" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e8559de59 code=0x0
[  350.238946][T10436] hid-generic 0003:25DD:F3D2.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.9-1/input0
[  350.394192][T10769] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  350.546867][    T8] usb 10-1: USB disconnect, device number 5
[  350.589336][T10769] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  350.600642][T10769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.609076][T10769] usb 4-1: Product: syz
[  350.613522][T10769] usb 4-1: Manufacturer: syz
[  350.618567][T10769] usb 4-1: SerialNumber: syz
[  350.625612][T10769] usb 4-1: config 0 descriptor??
[  350.635308][T10769] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  350.744204][T10436] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  350.927733][T10436] usb 3-1: Using ep0 maxpacket: 8
[  350.934866][T10436] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  350.946942][T10436] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  350.957411][T10436] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  350.967586][T10436] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  350.981915][T10436] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  350.991319][T10436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.230747][T10436] usb 3-1: GET_CAPABILITIES returned 0
[  351.247573][T10436] usbtmc 3-1:16.0: can't read capabilities
[  351.471404][T12435] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -71
[  351.496088][T10436] usb 3-1: USB disconnect, device number 28
[  351.649459][T10769] gspca_stk1135: reg_w 0x7 err -71
[  351.665638][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.679878][T10769] gspca_stk1135: Sensor write failed
[  351.689887][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.704361][T10769] gspca_stk1135: Sensor write failed
[  351.709687][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.718587][T10769] gspca_stk1135: Sensor read failed
[  351.723837][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.730578][T10769] gspca_stk1135: Sensor read failed
[  351.736214][T10769] gspca_stk1135: Detected sensor type unknown (0x0)
[  351.742916][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.749392][T10769] gspca_stk1135: Sensor read failed
[  351.754830][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.764139][T10769] gspca_stk1135: Sensor read failed
[  351.769460][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.784165][T10769] gspca_stk1135: Sensor write failed
[  351.789508][T10769] gspca_stk1135: serial bus timeout: status=0x00
[  351.804988][T10769] gspca_stk1135: Sensor write failed
[  351.810491][T10769] stk1135: probe of 4-1:0.0 failed with error -71
[  351.835261][T10769] usb 4-1: USB disconnect, device number 35
[  352.234490][ T5838] usb 8-1: new low-speed USB device number 11 using dummy_hcd
[  352.437081][ T5838] usb 8-1: too many endpoints for config 0 interface 0 altsetting 12: 137, using maximum allowed: 30
[  352.458590][ T5838] usb 8-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  352.494164][ T5838] usb 8-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 137
[  352.513749][T12468] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.540553][ T5838] usb 8-1: config 0 interface 0 has no altsetting 0
[  352.549777][T12468] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.561192][ T5838] usb 8-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  352.580297][ T5838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.607501][ T5838] usb 8-1: config 0 descriptor??
[  352.614187][T12451] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  352.704975][T12469] netlink: 'syz.9.1860': attribute type 16 has an invalid length.
[  352.712854][T12469] netlink: 'syz.9.1860': attribute type 17 has an invalid length.
[  352.838819][T12469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.070086][ T5838] uclogic 0003:28BD:0042.0020: interface is invalid, ignoring
[  353.104589][T12472] netlink: 'syz.3.1861': attribute type 21 has an invalid length.
[  353.120937][T12472] netlink: 'syz.3.1861': attribute type 7 has an invalid length.
[  353.330396][ T5838] usb 8-1: USB disconnect, device number 11
[  353.797293][ T1215] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  353.964207][ T8578] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  354.015986][ T1215] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  354.044396][ T1215] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.101890][ T1215] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  354.131118][ T1215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.166666][ T8578] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.181512][ T8578] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xC2, skipping
[  354.220011][ T8578] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  354.230971][ T8578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.240669][ T8578] usb 4-1: Product: syz
[  354.245211][ T8578] usb 4-1: Manufacturer: syz
[  354.249917][ T8578] usb 4-1: SerialNumber: syz
[  354.280331][ T8578] cdc_mbim 4-1:1.0: skipping garbage
[  354.366262][ T1215] usb 10-1: usb_control_msg returned -32
[  354.372051][ T1215] usbtmc 10-1:16.0: can't read capabilities
[  354.502773][T12486] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  354.640490][    T8] usb 10-1: USB disconnect, device number 6
[  354.739603][T12500] loop7: detected capacity change from 0 to 32768
[  354.931761][ T8578] cdc_mbim 4-1:1.0: failed GET_NTB_PARAMETERS
[  354.943004][T12507] MetaData crosses page boundary!!
[  354.946958][T12500] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  354.946958][T12500] 
[  354.965413][ T8578] cdc_mbim 4-1:1.0: bind() failure
[  354.989170][T12507] lblock = 6161616161, size  = 370544640
[  354.989860][ T8578] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  355.000865][T12507] CPU: 0 PID: 12507 Comm: syz.7.1872 Not tainted syzkaller #0
[  355.009244][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  355.010497][ T8578] cdc_ncm 4-1:1.1: bind() failure
[  355.019308][T12507] Call Trace:
[  355.019405][T12507]  <TASK>
[  355.030693][T12507]  dump_stack_lvl+0x18c/0x250
[  355.035590][T12507]  ? show_regs_print_info+0x20/0x20
[  355.040897][T12507]  ? load_image+0x420/0x420
[  355.042652][ T8578] usb 4-1: USB disconnect, device number 36
[  355.045473][T12507]  ? folio_unlock+0x118/0x2f0
[  355.045540][T12507]  __get_metapage+0xaac/0xfa0
[  355.060890][T12507]  dtSearch+0x58d/0x21a0
[  355.065155][T12507]  ? folio_contains+0x1b1/0x550
[  355.067721][T12500] ERROR: (device loop7): remounting filesystem as read-only
[  355.070046][T12507]  jfs_symlink+0x85d/0xfb0
[  355.077538][T12500] xtLookup: xtSearch returned -5
[  355.081708][T12507]  ? jfs_unlink+0xa10/0xa10
[  355.087794][T12500] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  355.087794][T12500] 
[  355.091135][T12507]  ? from_kgid+0x153/0x6a0
[  355.102116][T12500] ERROR: (device loop7): xtTruncate: XT_GETPAGE: xtree page corrupt
[  355.102116][T12500] 
[  355.105988][T12507]  ? make_kgid+0x650/0x650
[  355.106013][T12507]  ? make_vfsuid+0x67/0xb0
[  355.106061][T12507]  ? generic_permission+0x1ed/0x590
[  355.106099][T12507]  ? inode_permission+0xf3/0x480
[  355.106121][T12507]  ? bpf_lsm_inode_symlink+0x9/0x10
[  355.106144][T12507]  ? security_inode_symlink+0xb6/0x100
[  355.106183][T12507]  vfs_symlink+0x138/0x2b0
[  355.106207][T12507]  do_symlinkat+0x1ba/0x400
[  355.106233][T12507]  ? vfs_symlink+0x2b0/0x2b0
[  355.106269][T12507]  __x64_sys_symlinkat+0x99/0xb0
[  355.106293][T12507]  do_syscall_64+0x55/0xb0
[  355.106320][T12507]  ? clear_bhb_loop+0x40/0x90
[  355.173705][T12507]  ? clear_bhb_loop+0x40/0x90
[  355.173738][T12507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  355.184322][T12507] RIP: 0033:0x7f0e8559de59
[  355.188789][T12507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  355.208434][T12507] RSP: 002b:00007f0e8649b028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  355.216853][T12507] RAX: ffffffffffffffda RBX: 00007f0e85826090 RCX: 00007f0e8559de59
[  355.224838][T12507] RDX: 0000200000000640 RSI: ffffffffffffff9c RDI: 0000200000001040
[  355.232819][T12507] RBP: 00007f0e85633e6f R08: 0000000000000000 R09: 0000000000000000
[  355.240802][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.248777][T12507] R13: 00007f0e85826128 R14: 00007f0e85826090 R15: 00007ffc35ff1fe8
[  355.256760][T12507]  </TASK>
[  355.286644][T12507] bread failed!
[  355.424207][ T1215] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  355.616969][ T1215] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  355.671981][ T1215] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  355.729807][ T1215] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  355.768418][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  355.803718][ T1215] usb 3-1: SerialNumber: syz
[  356.067505][ T1215] usb 3-1: 0:2 : does not exist
[  356.116580][ T1215] usb 3-1: USB disconnect, device number 29
[  356.183832][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.916583][T12544] netlink: 'syz.9.1892': attribute type 11 has an invalid length.
[  356.936599][T12544] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1892'.
[  357.970026][T12571] loop9: detected capacity change from 0 to 2048
[  358.076660][T12571]  loop9: p3 < > p4 < >
[  358.080910][T12571] loop9: partition table partially beyond EOD, truncated
[  358.104590][T12571] loop9: p3 start 4284289 is beyond EOD, truncated
[  358.999707][T12584] netlink: 'syz.7.1910': attribute type 21 has an invalid length.
[  359.024337][T12584] netlink: 'syz.7.1910': attribute type 7 has an invalid length.
[  359.934935][ T5838] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  360.168000][ T5838] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[  360.192749][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  360.219335][ T5838] usb 3-1: Product: syz
[  360.239987][ T5838] usb 3-1: config 0 descriptor??
[  360.257874][ T5838] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  360.271605][ T5838] usb 3-1: Detected FT232H
[  360.321957][T12633] loop9: detected capacity change from 0 to 8192
[  360.333384][T12633] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  360.424727][ T8578] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  360.480063][ T5838] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  360.633961][ T8578] usb 4-1: Using ep0 maxpacket: 16
[  360.650361][ T8578] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.675962][ T8578] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.693707][ T8578] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.712493][ T8578] usb 4-1: Product: syz
[  360.717811][ T8578] usb 4-1: Manufacturer: syz
[  360.728192][ T8578] usb 4-1: SerialNumber: syz
[  360.904632][ T5838] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  361.142128][T12637] netlink: 'syz.9.1929': attribute type 21 has an invalid length.
[  361.145996][ T5775] usb 3-1: USB disconnect, device number 30
[  361.150705][T12637] netlink: 'syz.9.1929': attribute type 7 has an invalid length.
[  361.186301][ T5775] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  361.213649][ T5775] ftdi_sio 3-1:0.0: device disconnected
[  361.713687][    T8] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  361.729437][    T8] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  361.777419][ T8578] cdc_ncm 4-1:1.0: bind() failure
[  361.830330][ T8578] cdc_ncm: probe of 4-1:1.1 failed with error -71
[  361.864234][ T8578] cdc_mbim: probe of 4-1:1.1 failed with error -71
[  361.881589][ T8578] usbtest: probe of 4-1:1.1 failed with error -71
[  361.916144][ T8578] usb 4-1: USB disconnect, device number 37
[  362.437976][T12680] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1944'.
[  362.630090][T12686] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  362.714159][ T8578] Process accounting resumed
[  362.832482][T12677] Process accounting resumed
[  363.260541][T12702] loop9: detected capacity change from 0 to 1024
[  363.315651][T12702] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.405589][   T27] audit: type=1800 audit(1783509482.828:49): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1954" name="file1" dev="loop9" ino=15 res=0 errno=0
[  363.580945][T11186] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.164778][T10436] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  364.364136][T10436] usb 10-1: Using ep0 maxpacket: 32
[  364.399339][T10436] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.431357][T10436] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.449904][T10436] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  364.491373][T10436] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.530995][T10436] usb 10-1: config 0 descriptor??
[  364.971462][T10436] ft260 0003:0403:6030.0022: unknown main item tag 0x0
[  365.004188][T10436] ft260 0003:0403:6030.0022: unknown main item tag 0x0
[  365.151035][T10436] ft260 0003:0403:6030.0022: chip code: 0000 0000
[  365.584340][    T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  365.643997][T10436] usb 10-1: USB disconnect, device number 7
[  365.739514][T12763] openvswitch: netlink: Missing valid actions attribute.
[  365.750320][T12763] openvswitch: netlink: Actions may not be safe on all matching packets
[  365.804206][    T8] usb 8-1: Using ep0 maxpacket: 8
[  365.817132][    T8] usb 8-1: config 0 has no interfaces?
[  365.822667][    T8] usb 8-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  365.841646][    T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.860443][    T8] usb 8-1: config 0 descriptor??
[  365.964430][ T8578] psmouse serio2: Failed to reset mouse on : -5
[  366.105876][ T1215] usb 8-1: USB disconnect, device number 12
[  366.514236][ T1215] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  366.724246][ T1215] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.735614][ T1215] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  366.746738][ T1215] usb 10-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  366.756682][ T1215] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.774823][ T1215] usb 10-1: config 0 descriptor??
[  367.032614][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'.
[  367.218534][ T1215] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0
[  367.230393][ T1215] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0
[  367.248637][ T1215] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0D8C:0022.0023/input/input28
[  367.295933][ T1215] cm6533_jd 0003:0D8C:0022.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.9-1/input0
[  367.460438][ T1215] usb 10-1: USB disconnect, device number 8
[  368.382896][T12831] loop7: detected capacity change from 0 to 4096
[  368.460908][T12836] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  368.476192][T10769] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  368.495841][   T27] audit: type=1800 audit(1783509487.928:50): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2008" name="file1" dev="loop7" ino=15 res=0 errno=0
[  368.498020][T12831] NILFS error (device loop7): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1
[  368.553242][T12831] Remounting filesystem read-only
[  368.577745][   T11] NILFS (loop7): discard dirty page: offset=0, ino=6
[  368.585000][   T11] NILFS (loop7): discard dirty block: blocknr=23, size=4096
[  368.592405][   T11] NILFS (loop7): discard dirty page: offset=4096, ino=6
[  368.611536][   T11] NILFS (loop7): discard dirty block: blocknr=24, size=4096
[  368.634145][   T11] NILFS (loop7): discard dirty page: offset=8192, ino=6
[  368.649904][   T11] NILFS (loop7): discard dirty block: blocknr=25, size=4096
[  368.667896][T12831] NILFS (loop7): discard dirty page: offset=0, ino=15
[  368.679788][   T11] NILFS (loop7): discard dirty page: offset=0, ino=2
[  368.687831][T12831] NILFS (loop7): discard dirty block: blocknr=18, size=4096
[  368.695591][   T11] NILFS (loop7): discard dirty block: blocknr=14, size=4096
[  368.709121][T12837] NILFS (loop7): mounting fs with errors
[  368.717219][T12839] loop9: detected capacity change from 0 to 256
[  368.720356][T10769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.754573][T10769] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.784995][T10769] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  368.816393][T10769] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  368.842776][T10769] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.856229][T10769] usb 3-1: config 0 descriptor??
[  368.886006][T12836] ------------[ cut here ]------------
[  368.892075][T12836] WARNING: CPU: 0 PID: 12836 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4d0
[  368.901220][T12836] Modules linked in:
[  368.905244][T12836] CPU: 0 PID: 12836 Comm: segctord Not tainted syzkaller #0
[  368.912558][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  368.922779][T12836] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0
[  368.929203][T12836] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 ff 97 fc ff e8 da 6e 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 6a 10 e8 ff e8 c5 6e 88 ff <0f> 0b e9 84 fd ff ff e8 b9 6e 88 ff 0f 0b e9 b0 fd ff ff e8 ad 6e
[  368.949240][T12836] RSP: 0018:ffffc9000c097730 EFLAGS: 00010293
[  368.955374][T12836] RAX: ffffffff81fe76ab RBX: ffff8880783a83a0 RCX: ffff88801f2e9e00
[  368.963366][T12836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  368.971476][T12836] RBP: ffffc9000c097c01 R08: ffff8880783a83a7 R09: 1ffff1100f075074
[  368.979628][T12836] R10: dffffc0000000000 R11: ffffed100f075075 R12: 1ffff1100b81acf7
[  368.987737][T12836] R13: ffff88805c0d67c8 R14: ffff88805c0d6020 R15: 1ffff1100b81acf9
[  368.995862][T12836] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  369.004861][T12836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  369.011476][T12836] CR2: 0000001b2fb19ff8 CR3: 00000000619c8000 CR4: 00000000003506f0
[  369.019532][T12836] Call Trace:
[  369.022821][T12836]  <TASK>
[  369.025849][T12836]  nilfs_segctor_do_construct+0x315/0x69e0
[  369.032004][T12836]  ? lockdep_lock+0x230/0x230
[  369.036870][T12836]  ? __lock_acquire+0x357f/0x7d80
[  369.041956][T12836]  ? verify_lock_unused+0x140/0x140
[  369.047268][T12836]  ? nilfs_transaction_unlock+0x210/0x210
[  369.053029][T12836]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  369.059266][T12836]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  369.064784][T12836]  ? __lock_acquire+0x7d80/0x7d80
[  369.069840][T12836]  ? __rwlock_init+0x150/0x150
[  369.074870][T12836]  ? do_raw_spin_unlock+0x121/0x230
[  369.080107][T12836]  ? _raw_spin_unlock+0x28/0x40
[  369.085130][T12836]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  369.090641][T12836]  nilfs_segctor_construct+0x170/0x690
[  369.096222][T12836]  nilfs_segctor_thread+0x52b/0x1050
[  369.101556][T12836]  ? nilfs_iput_work_func+0x70/0x70
[  369.106837][T12836]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  369.112764][T12836]  ? _raw_spin_unlock+0x40/0x40
[  369.117742][T12836]  ? wake_bit_function+0x200/0x200
[  369.122923][T12836]  ? _raw_spin_unlock+0x40/0x40
[  369.127840][T12836]  ? __kthread_parkme+0x71/0x1c0
[  369.133219][T12836]  ? __kthread_parkme+0x15b/0x1c0
[  369.138440][T12836]  kthread+0x2fa/0x390
[  369.142528][T12836]  ? nilfs_iput_work_func+0x70/0x70
[  369.147781][T12836]  ? kthread_blkcg+0xd0/0xd0
[  369.152408][T12836]  ret_from_fork+0x48/0x80
[  369.158009][T12836]  ? kthread_blkcg+0xd0/0xd0
[  369.162641][T12836]  ret_from_fork_asm+0x11/0x20
[  369.167791][T12836]  </TASK>
[  369.170835][T12836] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  369.178122][T12836] CPU: 0 PID: 12836 Comm: segctord Not tainted syzkaller #0
[  369.185405][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  369.195475][T12836] Call Trace:
[  369.198767][T12836]  <TASK>
[  369.201691][T12836]  dump_stack_lvl+0x18c/0x250
[  369.206385][T12836]  ? show_regs_print_info+0x20/0x20
[  369.211588][T12836]  ? load_image+0x420/0x420
[  369.216101][T12836]  panic+0x2ca/0x720
[  369.220007][T12836]  ? bpf_jit_dump+0xd0/0xd0
[  369.224518][T12836]  ? ret_from_fork_asm+0x11/0x20
[  369.229567][T12836]  __warn+0x2e0/0x470
[  369.233543][T12836]  ? mark_buffer_dirty+0x2bb/0x4d0
[  369.238658][T12836]  ? mark_buffer_dirty+0x2bb/0x4d0
[  369.243773][T12836]  report_bug+0x2be/0x4f0
[  369.248133][T12836]  ? mark_buffer_dirty+0x2bb/0x4d0
[  369.253244][T12836]  ? mark_buffer_dirty+0x2bb/0x4d0
[  369.258350][T12836]  ? mark_buffer_dirty+0x2bd/0x4d0
[  369.263472][T12836]  handle_bug+0xcf/0x120
[  369.267709][T12836]  exc_invalid_op+0x1a/0x50
[  369.272204][T12836]  asm_exc_invalid_op+0x1a/0x20
[  369.277061][T12836] RIP: 0010:mark_buffer_dirty+0x2bb/0x4d0
[  369.282781][T12836] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 ff 97 fc ff e8 da 6e 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 6a 10 e8 ff e8 c5 6e 88 ff <0f> 0b e9 84 fd ff ff e8 b9 6e 88 ff 0f 0b e9 b0 fd ff ff e8 ad 6e
[  369.302386][T12836] RSP: 0018:ffffc9000c097730 EFLAGS: 00010293
[  369.308464][T12836] RAX: ffffffff81fe76ab RBX: ffff8880783a83a0 RCX: ffff88801f2e9e00
[  369.316464][T12836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  369.324443][T12836] RBP: ffffc9000c097c01 R08: ffff8880783a83a7 R09: 1ffff1100f075074
[  369.332424][T12836] R10: dffffc0000000000 R11: ffffed100f075075 R12: 1ffff1100b81acf7
[  369.340395][T12836] R13: ffff88805c0d67c8 R14: ffff88805c0d6020 R15: 1ffff1100b81acf9
[  369.348373][T12836]  ? mark_buffer_dirty+0x2bb/0x4d0
[  369.353499][T12836]  nilfs_segctor_do_construct+0x315/0x69e0
[  369.359314][T12836]  ? lockdep_lock+0x230/0x230
[  369.363991][T12836]  ? __lock_acquire+0x357f/0x7d80
[  369.369031][T12836]  ? verify_lock_unused+0x140/0x140
[  369.374246][T12836]  ? nilfs_transaction_unlock+0x210/0x210
[  369.379973][T12836]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  369.386221][T12836]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  369.391684][T12836]  ? __lock_acquire+0x7d80/0x7d80
[  369.396707][T12836]  ? __rwlock_init+0x150/0x150
[  369.401478][T12836]  ? do_raw_spin_unlock+0x121/0x230
[  369.406677][T12836]  ? _raw_spin_unlock+0x28/0x40
[  369.411563][T12836]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  369.417025][T12836]  nilfs_segctor_construct+0x170/0x690
[  369.422490][T12836]  nilfs_segctor_thread+0x52b/0x1050
[  369.427796][T12836]  ? nilfs_iput_work_func+0x70/0x70
[  369.432995][T12836]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  369.438901][T12836]  ? _raw_spin_unlock+0x40/0x40
[  369.443759][T12836]  ? wake_bit_function+0x200/0x200
[  369.448867][T12836]  ? _raw_spin_unlock+0x40/0x40
[  369.453718][T12836]  ? __kthread_parkme+0x71/0x1c0
[  369.458916][T12836]  ? __kthread_parkme+0x15b/0x1c0
[  369.463938][T12836]  kthread+0x2fa/0x390
[  369.468013][T12836]  ? nilfs_iput_work_func+0x70/0x70
[  369.473213][T12836]  ? kthread_blkcg+0xd0/0xd0
[  369.477797][T12836]  ret_from_fork+0x48/0x80
[  369.482210][T12836]  ? kthread_blkcg+0xd0/0xd0
[  369.486792][T12836]  ret_from_fork_asm+0x11/0x20
[  369.491566][T12836]  </TASK>
[  369.494880][T12836] Kernel Offset: disabled
[  369.499292][T12836] Rebooting in 86400 seconds..