last executing test programs:

2m51.003582219s ago: executing program 2 (id=169):
r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000240)={0x0, 0x0})

2m50.954590502s ago: executing program 2 (id=170):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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")
umount2(0x0, 0xb)
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa56, &(0x7f0000001c80)="$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")
r0 = syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, 0xfffffffffffffffe, 0x29)

2m50.83861706s ago: executing program 2 (id=172):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x78, "82145ad6ed62a404754a97c76d76d8f10cc6997c9a9eebf18a3cde41f56a4c4d"})

2m50.724093187s ago: executing program 2 (id=174):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
listen(0xffffffffffffffff, 0xa)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0)

2m49.842985497s ago: executing program 2 (id=188):
r0 = syz_open_dev$media(&(0x7f0000000b40), 0x2e18, 0x100)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0})

2m49.59380011s ago: executing program 2 (id=189):
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000140)='tracefs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)

2m49.526683302s ago: executing program 32 (id=189):
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000140)='tracefs\x00', 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x400008a, 0x0)
socket$key(0xf, 0x3, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e)

2m35.453152576s ago: executing program 0 (id=354):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000062c0)=[{&(0x7f0000000380)="49b7cba24ba2055bae4743deebb0ea0a6d2668ad6d90fa19a62e0bd96d0a0d78a646a899e244850b93eedf84b5d8d3429d3f0d216b151da999f4899cfafb7cb54d757a09ff8e28dba8e74f0d14ce5b0774387b988f1d7fdfb8b16d575ee56294fa8bac6436857072915a921d1989a6c913dc38c9a668ffcd91f3f5fa2764b210d94959c8a18cd8eddad2d8e34dc609f891ac7fc1de00ac97429a3a1f3d9a7a4ba71b577875111f9d844e86e81f0a5fa321020b9a8d5c38146a985c68cb3de57a3e8dfee01ac9473ddb6998c1d38f04831b6c1d421523ba1061abb6805514f5d254021924ba9e7c0762e17b4809b5ab048fd4763fa00085d8bb20064bb8985a4b7a734233e0495459044583fefb27e8d5b3fd4ac7b51424cf8307bc199c7fab3e8a7eee9071efb3765d46421b225bf727219f8b3cd8bf8db1128096082c40db87a03d5be4bdbdae43be1bca306369021c27b81ad0f5ea15bcca5326f7f42d8faa8c14f7de0bd3c374da09f3e384ff30e94444b0fbd79396c910559bde230ede3e1e2d9668925ab42af9297a771394676f71335febc1997db7dd65e097a9cc5a72d912d894cd625b73b904bfea3bee02790efe5410d4634e2d0146dd708f9685d010e4e6078575b23e962579b6c3b7a4afc7ca15e6c3d637ce4ffba6b6d283d4685e002c26a2f0cda33858af1ee1a5f31c8aee058b051fcf74de9d4d434275f291ea5850dca37f51e33f2e23f7596c2e437c26bf1919a6ac90db80d2707964334847248a5ef338e4a2871f53f16638117eeff7310a0b17da76a9145b641ecd0c38c0febe6a5ff14fccc7262a2a4a98671576457272c8577826d9a0e134d309c34bd3f25b6573fb46c4030e3111a8de38fdd0f4c2656e05ed69a3e5e260ee9277d62feddd92405d9f29b8f0d950b6f6517b7e2b4e017db0034e1f83c67572904ab5e5ec3d5e79e975269e2d72f46504d3ceaa54ab68b14d411325275c1dd09d83fc05ba638b9544d5e0889364f7f9355f99ad48ad8d70844343318c20a01a75c87ef82193b7739bc312a127dff47cdb7c6615ddc10a264e870f3d7377ecb85cf09b37e1677a9c24bd53c365856d4ea1191393f6f2de39db94bb7c9b96ee343ee66cd07b07d9e260e388f97341a5007de84eb565669f81ae48454e3ea0a8055c0b6681091ceca9871f3d57255c641ac9d29b0d373d5e6ae5ca0beccd71e2c3a5e4e289b97852bb1cb07d6b5c9fdd5cbcde77491eba107a97cbc9cbc027ce90531cc27cbf843355217c4bb0e60005bce5ba9976bb2ab552cd0eb1a94ff80691917ef1b9da100cbf2bf3c169e9b329df75ac726dffbc32498fa54079c4256722f5ae5fe3a232b63c75c11b1d190ae1", 0x3cc}, {&(0x7f00000041c0)="1269da71", 0x4}], 0x2}}], 0x1, 0x1)

2m35.283165145s ago: executing program 0 (id=356):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a98000000060a010400000000000000000a0000010900010073797a3100000000600004805c0001800c0001007061796c6f6164004c00028008000440000000ad08000240000000020800034000000086080001400000001508000440000000ef08000840000000000800084000000001080001400000001708000840000000000900020073797a3200000000090007"], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

2m35.222364242s ago: executing program 0 (id=358):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000040)=ANY=[], 0x1, 0x1c1, &(0x7f00000004c0)="$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")
truncate(&(0x7f0000000180)='./file1\x00', 0xc1a)

2m35.083677899s ago: executing program 0 (id=359):
syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x99)

2m35.013293884s ago: executing program 0 (id=360):
socket$inet6(0xa, 0x2, 0x0)
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

2m34.819628744s ago: executing program 0 (id=361):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

2m34.765958146s ago: executing program 33 (id=361):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0)

2m1.549756652s ago: executing program 3 (id=688):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
readahead(r0, 0x3, 0xffffffffffffffff)

2m1.549159692s ago: executing program 3 (id=690):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x4c}}, 0x4004020)

2m1.490751878s ago: executing program 3 (id=691):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m1.415139287s ago: executing program 3 (id=697):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000b80)={[{@uni_xlateno}, {@shortname_winnt}, {@rodir}, {@fat=@gid}, {@fat=@nfs_nostale_ro}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@fat=@sys_immutable}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x274, &(0x7f0000000780)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

2m1.300101141s ago: executing program 3 (id=699):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002f000000180001801400020073797a5f74756e"], 0x2c}}, 0x0)

2m1.160610871s ago: executing program 3 (id=702):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)

2m1.05841922s ago: executing program 34 (id=702):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)

1.412574611s ago: executing program 1 (id=2045):
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
brk(0x55555ede5ffe)

1.411158773s ago: executing program 1 (id=2046):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
sendmsg$kcm(r0, &(0x7f0000001a80)={&(0x7f0000001d00)=@caif=@rfm={0x25, 0x2, "f4913611a9d5196d33771f0188d12a77"}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="80000000000000000100000024"], 0x1467}, 0x801)

1.349947314s ago: executing program 1 (id=2050):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000500850000001b000000b7000000000000009500c40000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50)

1.300659756s ago: executing program 1 (id=2052):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

1.300287555s ago: executing program 5 (id=2053):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4)

1.220821399s ago: executing program 1 (id=2054):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.220452109s ago: executing program 5 (id=2055):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x2)

851.132143ms ago: executing program 5 (id=2056):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x1, @rand_addr=0x64010101}, 0x10)
listen(r0, 0x8)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_vhci(0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
ioprio_set$pid(0x2, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r5, r5, 0x0, 0x40008)
accept4(r0, 0x0, 0x0, 0x0)

364.302152ms ago: executing program 4 (id=2060):
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000240)=0x19)

359.795289ms ago: executing program 1 (id=2061):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x20, 0x0, 0xf7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="20240f"], 0x0, 0x0, 0x0, 0x0}, 0x0)

280.670552ms ago: executing program 4 (id=2062):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, &(0x7f0000000540))

232.346584ms ago: executing program 4 (id=2063):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000000)={0x5, "34772efada889415e7246b90381b47c96d618dda0c297327e8aa832a16796564", 0x1, 0x1})

227.562856ms ago: executing program 5 (id=2064):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)

171.987241ms ago: executing program 4 (id=2065):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0x1, 0x4a1, &(0x7f00000007c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t")
quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

171.624481ms ago: executing program 5 (id=2066):
syz_emit_ethernet(0x42, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end]}}, @parameter_prob={0xc, 0x0, 0x0, 0x7, 0x7, 0x0, {0x5, 0x4, 0x1, 0x8, 0x1, 0x68, 0x4, 0xe, 0x32, 0xff4a, @local, @private=0xa010102}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}}}}}}, 0x0)

164.224634ms ago: executing program 5 (id=2067):
socket$inet6(0xa, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x3e8, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc})
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00')
preadv(r2, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0)

86.236992ms ago: executing program 4 (id=2068):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x4c000000)

0s ago: executing program 4 (id=2069):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000480)=<r1=>0x0)
io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x14, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3f}])

kernel console output (not intermixed with test programs):

9] usb 5-1: USB disconnect, device number 23
[  162.352203][    T9] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device
[  162.933885][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'.
[  163.107289][ T8988] syzkaller0: entered promiscuous mode
[  163.112893][ T8988] syzkaller0: entered allmulticast mode
[  163.124668][ T8988] tipc: Started in network mode
[  163.130611][ T8988] tipc: Node identity cebaa48b0b2b, cluster identity 4711
[  163.133803][ T8988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.135869][ T8990] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1204'.
[  163.164394][ T8992] loop4: detected capacity change from 0 to 1024
[  163.499519][ T5312] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  163.659648][ T5312] usb 5-1: Using ep0 maxpacket: 32
[  163.663544][ T5312] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  163.666024][ T5312] usb 5-1: config 0 has no interface number 0
[  163.667999][ T5312] usb 5-1: config 0 interface 184 has no altsetting 0
[  163.672913][ T5312] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  163.675942][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.678270][ T5312] usb 5-1: Product: syz
[  163.680157][ T5312] usb 5-1: Manufacturer: syz
[  163.681690][ T5312] usb 5-1: SerialNumber: syz
[  163.683953][ T5312] usb 5-1: config 0 descriptor??
[  163.687993][ T5312] smsc75xx v1.0.0
[  163.689139][ T5312] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  163.692863][ T5312] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  163.894187][ T5312] usb 5-1: USB disconnect, device number 24
[  163.923680][   T33] audit: type=1400 audit(1756206654.576:42): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=9006 comm="syz.5.1212"
[  163.989865][    T9] tipc: Resetting bearer <eth:syzkaller0>
[  163.993578][    T9] tipc: Disabling bearer <eth:syzkaller0>
[  164.979762][ T2212] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  165.002449][ T9035] loop5: detected capacity change from 0 to 16
[  165.006175][ T9035] erofs (device loop5): mounted with root inode @ nid 36.
[  165.139547][ T2212] usb 2-1: Using ep0 maxpacket: 8
[  165.142940][ T2212] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  165.145863][ T2212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.149288][ T2212] usb 2-1: config 0 descriptor??
[  165.259565][  T974] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  165.411762][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.416422][  T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.421656][  T974] usb 6-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  165.425262][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.429959][  T974] usb 6-1: config 0 descriptor??
[  165.843842][  T974] hid (null): report_id 393985501 is invalid
[  165.848385][  T974] macally 0003:060B:0001.000B: report_id 393985501 is invalid
[  165.851262][  T974] macally 0003:060B:0001.000B: item 0 4 1 8 parsing failed
[  165.853616][  T974] macally 0003:060B:0001.000B: probe with driver macally failed with error -22
[  166.050751][  T974] usb 6-1: USB disconnect, device number 11
[  166.359372][ T2212] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  166.363254][ T2212] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  166.366715][ T2212] asix 2-1:0.0: probe with driver asix failed with error -71
[  166.370874][ T2212] usb 2-1: USB disconnect, device number 22
[  166.588818][ T9041] tipc: Started in network mode
[  166.590523][ T9041] tipc: Node identity c27c536fd36e, cluster identity 4711
[  166.592800][ T9041] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.595347][ T9041] syzkaller0: entered promiscuous mode
[  166.597060][ T9041] syzkaller0: entered allmulticast mode
[  166.604140][ T9041] tipc: Resetting bearer <eth:syzkaller0>
[  166.607514][ T9040] tipc: Resetting bearer <eth:syzkaller0>
[  166.611594][ T9040] tipc: Disabling bearer <eth:syzkaller0>
[  166.670977][ T9039] loop5: detected capacity change from 0 to 32768
[  166.717755][ T9039] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  166.717769][ T9039]   allowing incompatible features above 0.0: (unknown version)
[  166.717774][ T9039]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  166.730176][ T9039] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  166.732644][ T9039] bcachefs (loop5): initializing new filesystem
[  166.742579][ T9039] bcachefs (loop5): going read-write
[  166.745210][ T9039] bcachefs (loop5): marking superblocks
[  166.750748][ T9039] bcachefs (loop5): initializing freespace
[  166.754210][ T9039] bcachefs (loop5): done initializing freespace
[  166.757689][ T9039] bcachefs (loop5): reading snapshots table
[  166.760918][ T9039] bcachefs (loop5): reading snapshots done
[  166.766809][ T9039] bcachefs (loop5):  loop5: Superblock write was silently dropped! (seq 0 expected 42)
[  166.769999][ T9039] bcachefs (loop5): done starting filesystem
[  166.953885][   T33] audit: type=1800 audit(1756206657.596:43): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1226" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  167.015281][   T33] audit: type=1800 audit(1756206657.666:44): pid=9039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1226" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  167.046903][ T7667] bcachefs (loop5): shutting down
[  167.051163][ T7667] bcachefs (loop5): going read-only
[  167.054728][ T7667] bcachefs (loop5): finished waiting for writes to stop
[  167.067797][ T7667] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  167.080042][ T7667] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  167.083426][ T7667] bcachefs (loop5): clean shutdown complete, journal seq 4
[  167.087628][ T7667] bcachefs (loop5): marking filesystem clean
[  167.101665][ T7667] bcachefs (loop5): shutdown complete
[  167.809664][    T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  168.002976][    T9] usb 5-1: Using ep0 maxpacket: 16
[  168.014634][    T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  168.017114][    T9] usb 5-1: config 0 has no interface number 0
[  168.018991][    T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  168.031393][    T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  168.034138][    T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  168.036656][    T9] usb 5-1: Product: syz
[  168.037915][    T9] usb 5-1: SerialNumber: syz
[  168.048148][    T9] usb 5-1: config 0 descriptor??
[  168.053493][    T9] cm109 5-1:0.8: invalid payload size 123, expected 4
[  168.056723][    T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input18
[  168.105533][ T9082] could not allocate digest TFM handle cryptd(blake2b-160)
[  168.163375][ T9096] loop5: detected capacity change from 0 to 16
[  168.166384][ T9096] erofs (device loop5): mounted with root inode @ nid 36.
[  168.170135][ T9096] erofs (device loop5): read error -22 @ 43 of nid 36
[  168.495021][    C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[  168.495431][ T2212] usb 5-1: USB disconnect, device number 25
[  168.497409][    C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  168.503725][ T2212] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  169.085460][   T33] audit: type=1326 audit(1756206659.736:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9108 comm="syz.4.1245" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x0
[  169.875396][ T9134] comedi comedi0: 8255: I/O port conflict (0xffffffff80008000,4)
[  169.877778][ T9134] comedi comedi0: 8255: I/O port conflict (0x2,4)
[  169.880098][ T9134] comedi comedi0: 8255: I/O port conflict (0x6,4)
[  170.259632][  T974] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  170.409715][  T974] usb 2-1: Using ep0 maxpacket: 16
[  170.413766][  T974] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  170.416929][  T974] usb 2-1: config 0 has no interface number 0
[  170.421475][  T974] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  170.424928][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.427950][  T974] usb 2-1: Product: syz
[  170.429684][  T974] usb 2-1: Manufacturer: syz
[  170.431654][  T974] usb 2-1: SerialNumber: syz
[  170.439211][  T974] usb 2-1: config 0 descriptor??
[  170.649917][  T974] usb 2-1: USB disconnect, device number 23
[  170.662304][ T9147] loop5: detected capacity change from 0 to 32768
[  170.664707][ T9147] XFS: ikeep mount option is deprecated.
[  170.712486][ T9147] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  170.737649][ T9147] XFS (loop5): Ending clean mount
[  170.740906][ T9147] XFS (loop5): Quotacheck needed: Please wait.
[  170.749942][   T27] XFS (loop5): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  170.754149][   T27] XFS (loop5): Unmount and run xfs_repair
[  170.756322][   T27] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  170.759142][   T27] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  170.766667][   T27] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  170.770982][   T27] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  170.774431][   T27] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  170.777712][   T27] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  170.781912][   T27] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  170.785241][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  170.788528][   T27] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  170.797830][   T27] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[  170.803495][   T27] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  170.809601][   T27] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  170.818439][ T9147] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  170.821182][ T9147] XFS (loop5): Error -5 reserving per-AG metadata reserve pool.
[  170.895169][ T9166] syz_tun: entered allmulticast mode
[  171.227725][ T9176] netlink: 'syz.1.1271': attribute type 12 has an invalid length.
[  171.230333][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  171.243445][ T5935] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  171.246535][ T9176] netlink: 'syz.1.1271': attribute type 12 has an invalid length.
[  171.249980][ T5935] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  171.253574][ T5935] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  171.256332][ T9176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1271'.
[  171.259114][ T5935] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  171.294517][ T9181] 9p: Unknown uid 00000000004294967295
[  171.311796][ T9180] uprobe: syz.5.1273:9180 failed to unregister, leaking uprobe
[  171.633407][ T9188] program syz.5.1275 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.637509][   T52] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  171.809954][ T1058] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0
[  171.814653][ T1058] ata1.00: irq_stat 0x40000001
[  171.816267][ T1058] ata1.00: failed command: ZAC MANAGEMENT OUT
[  171.818275][ T1058] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 7
[  171.818275][ T1058]          res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error)
[  171.823399][ T1058] ata1.00: status: { DRDY ERR }
[  171.825100][ T1058] ata1.00: error: { ABRT }
[  171.826616][ T1058] ata1.00: device reported invalid CHS sector 0
[  172.169492][   T52] usb 2-1: Using ep0 maxpacket: 8
[  172.172550][   T52] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  172.175209][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.179215][   T52] usb 2-1: config 0 descriptor??
[  172.401431][   T52] usb 2-1: USB disconnect, device number 24
[  172.503836][ T9196] sch_fq: defrate 4294967295 ignored.
[  172.731043][ T9210] loop5: detected capacity change from 0 to 256
[  172.774720][ T5921] Bluetooth: hci0: unexpected event for opcode 0x202f
[  172.800055][ T5962] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  172.970160][ T5962] usb 5-1: unable to get BOS descriptor or descriptor too short
[  172.975554][ T5962] usb 5-1: config 1 interface 1 has no altsetting 0
[  172.981954][ T5962] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.986456][ T5962] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.988999][ T5962] usb 5-1: Product: syz
[  172.990962][ T5962] usb 5-1: Manufacturer: syz
[  172.992661][ T5962] usb 5-1: SerialNumber: syz
[  173.119510][   T52] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  173.208635][ T5962] usb 5-1: found format II with max.bitrate = 2418, frame size=7
[  173.211406][ T5962] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  173.226170][ T5962] usb 5-1: USB disconnect, device number 26
[  173.299535][   T52] usb 6-1: Using ep0 maxpacket: 16
[  173.306356][   T52] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  173.310141][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.313280][   T52] usb 6-1: Product: syz
[  173.314900][   T52] usb 6-1: Manufacturer: syz
[  173.316704][   T52] usb 6-1: SerialNumber: syz
[  173.325322][   T52] usb 6-1: config 0 descriptor??
[  173.329042][   T52] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  173.534677][   T52] usb 6-1: clie_3_5_startup: get config number failed: -71
[  173.537703][   T52] visor 6-1:0.0: probe with driver visor failed with error -71
[  173.542248][   T52] usb 6-1: USB disconnect, device number 12
[  173.744124][ T9231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  173.746786][ T9231] IPv6: NLM_F_CREATE should be set when creating new route
[  173.749649][ T9231] IPv6: NLM_F_CREATE should be set when creating new route
[  173.752309][ T9231] IPv6: NLM_F_CREATE should be set when creating new route
[  173.816009][ T9235] loop4: detected capacity change from 0 to 4096
[  173.820372][ T9235] ntfs3(loop4): ino=3, Correct links count -> 2.
[  174.556661][    C1] ata1: illegal qc_active transition (00000000->00000200)
[  174.904980][ T1058] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  174.908349][ T1058] ata1.00: configured for UDMA/100
[  175.195262][ T5706] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  175.257385][ T9274] loop4: detected capacity change from 0 to 32768
[  175.260500][ T9274] (syz.4.1312,9274,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  175.264809][ T9274] (syz.4.1312,9274,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  175.272595][ T9274] JBD2: Ignoring recovery information on journal
[  175.287437][ T9274] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  175.320751][ T6706] ocfs2: Unmounting device (7,4) on (node local)
[  175.459842][ T5962] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  175.619521][ T5962] usb 6-1: Using ep0 maxpacket: 16
[  175.625117][ T5962] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  175.628631][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.631844][ T5962] usb 6-1: Product: syz
[  175.633705][ T5962] usb 6-1: Manufacturer: syz
[  175.635568][ T5962] usb 6-1: SerialNumber: syz
[  175.638840][ T5962] usb 6-1: config 0 descriptor??
[  175.719640][   T52] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  175.845716][ T5962] usb 6-1: ignoring: not an USB2CAN converter
[  175.879597][   T52] usb 5-1: Using ep0 maxpacket: 32
[  175.883265][   T52] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  175.886212][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.890459][   T52] usb 5-1: config 0 descriptor??
[  176.009471][ T2212] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  176.051958][  T974] usb 6-1: USB disconnect, device number 13
[  176.095935][   T52] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  176.100361][   T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  176.105035][   T52] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  176.107675][   T52] usb 5-1: media controller created
[  176.115163][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.191143][ T2212] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  176.193934][ T2212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.197477][ T2212] usb 2-1: config 0 descriptor??
[  176.201645][ T2212] gspca_main: spca508-2.14.0 probing 8086:0110
[  176.296761][   T52] az6027: usb out operation failed. (-71)
[  176.301156][   T52] az6027: usb out operation failed. (-71)
[  176.303152][   T52] stb0899_attach: Driver disabled by Kconfig
[  176.305127][   T52] az6027: no front-end attached
[  176.305127][   T52] 
[  176.308182][   T52] az6027: usb out operation failed. (-71)
[  176.310415][   T52] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  176.314698][   T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19
[  176.320094][   T52] dvb-usb: schedule remote query interval to 400 msecs.
[  176.322629][   T52] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  176.328229][   T52] usb 5-1: USB disconnect, device number 27
[  176.345098][   T52] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  176.403568][ T2212] gspca_spca508: reg_read err -32
[  176.405664][ T2212] gspca_spca508: reg_read err -32
[  176.407725][ T2212] gspca_spca508: reg_read err -32
[  176.410091][ T2212] gspca_spca508: reg_read err -32
[  176.412110][ T2212] gspca_spca508: reg_read err -32
[  176.584174][ T9296] loop5: detected capacity change from 0 to 2048
[  176.591131][ T9296] UDF-fs: error (device loop5): udf_read_inode: (ino 1312) failed !bh
[  176.594681][ T9296] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  176.598597][ T9296] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  176.602778][ T9296] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  176.606852][ T9296] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  176.612519][ T9296] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  176.616101][ T9296] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  176.616630][ T2212] gspca_spca508: reg write: error -71
[  176.621675][ T2212] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  176.622362][ T9296] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  176.625295][ T2212] usb 2-1: USB disconnect, device number 25
[  176.910409][ T9316] input: syz0 as /devices/virtual/input/input20
[  176.916641][ T9310] "syz.4.1329" (9310) uses obsolete ecb(arc4) skcipher
[  177.008812][ T9327] loop5: detected capacity change from 0 to 164
[  177.045310][ T9327] rock: directory entry would overflow storage
[  177.048045][ T9327] rock: sig=0x4543, size=28, remaining=18
[  177.226065][ T9337] binder: 9336:9337 ioctl c0306201 2000000003c0 returned -14
[  177.329885][  T974] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  177.482360][  T974] usb 6-1: Using ep0 maxpacket: 8
[  177.489774][  T974] usb 6-1: config 0 has an invalid interface number: 143 but max is 0
[  177.493062][  T974] usb 6-1: config 0 has no interface number 0
[  177.496221][  T974] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  177.500163][  T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.510169][  T974] usb 6-1: config 0 descriptor??
[  177.549607][ T2212] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  177.620600][  T974] viperboard 6-1:0.143: version 0.00 found at bus 006 address 014
[  177.645278][  T974] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  177.649897][  T974] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  177.705312][ T2212] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  177.708989][ T2212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.712269][ T2212] usb 2-1: Product: syz
[  177.713746][ T2212] usb 2-1: Manufacturer: syz
[  177.716418][ T2212] usb 2-1: SerialNumber: syz
[  177.720981][ T2212] usb 2-1: config 0 descriptor??
[  177.752451][   T52] usb 6-1: USB disconnect, device number 14
[  177.934301][ T2212] hso 2-1:0.0: Failed to find BULK IN ep
[  178.144619][  T974] usb 2-1: USB disconnect, device number 26
[  178.438485][ T9370] loop5: detected capacity change from 0 to 2048
[  178.471696][ T9370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.485929][ T7667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.848871][ T9400] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1369'.
[  178.990448][ T9416] netlink: 'syz.5.1377': attribute type 4 has an invalid length.
[  178.993148][ T9416] netlink: 'syz.5.1377': attribute type 1 has an invalid length.
[  178.995605][ T9416] netlink: 3577 bytes leftover after parsing attributes in process `syz.5.1377'.
[  179.065768][ T9410] loop1: detected capacity change from 0 to 32768
[  179.112082][ T9423] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1378'.
[  179.120005][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'.
[  179.123315][ T9420] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1378'.
[  179.226181][ T9412] loop4: detected capacity change from 0 to 65536
[  179.281127][ T9412] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  179.327816][ T9412] XFS (loop4): Ending clean mount
[  179.335558][   T33] audit: type=1800 audit(1756206669.986:46): pid=9412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1375" name="file2" dev="loop4" ino=42 res=0 errno=0
[  179.337093][ T9441] netlink: 'syz.5.1384': attribute type 3 has an invalid length.
[  179.352105][ T9441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1384'.
[  179.441438][ T9427] loop1: detected capacity change from 0 to 32768
[  179.475866][ T9427] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.490406][ T9451] bfs: Unknown parameter 'ip6_vti0'
[  179.494380][ T9453] loop5: detected capacity change from 0 to 64
[  179.515465][ T9453] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  179.519271][ T9427] XFS (loop1): Ending clean mount
[  179.523517][ T9427] XFS (loop1): Quotacheck needed: Please wait.
[  179.547340][ T9427] XFS (loop1): Quotacheck: Done.
[  179.602193][ T5929] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.720385][ T9460] bridge1: the hash_elasticity option has been deprecated and is always 16
[  179.837405][ T6706] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  180.048706][ T9473] loop4: detected capacity change from 0 to 32768
[  180.051564][ T9473] (syz.4.1394,9473,0):ocfs2_verify_volume:2312 ERROR: bad cluster size bit found: 8
[  180.054520][ T9473] (syz.4.1394,9473,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  180.057008][ T9473] (syz.4.1394,9473,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  180.059702][ T9473] (syz.4.1394,9473,0):ocfs2_fill_super:1177 ERROR: status = -22
[  180.099573][ T2212] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  180.121027][ T9477] loop4: detected capacity change from 0 to 128
[  180.123841][ T9477] FAT-fs (loop4): bogus sectors per cluster 0
[  180.126100][ T9477] FAT-fs (loop4): Can't find a valid FAT filesystem
[  180.230566][  T974] IPVS: starting estimator thread 0...
[  180.252366][ T2212] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  180.255708][ T2212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.261445][ T2212] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  180.274346][ T2212] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  180.277488][ T2212] usb 2-1: Manufacturer: syz
[  180.289235][ T2212] usb 2-1: config 0 descriptor??
[  180.319889][ T9481] IPVS: using max 92 ests per chain, 220800 per kthread
[  180.325233][ T9488] loop4: detected capacity change from 0 to 512
[  180.327758][ T9488] EXT4-fs: Ignoring removed nomblk_io_submit option
[  180.332477][ T9488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  180.338700][ T9488] EXT4-fs (loop4): 1 truncate cleaned up
[  180.341907][ T9488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.349583][ T2212] rc_core: IR keymap rc-hauppauge not found
[  180.357123][ T2212] Registered IR keymap rc-empty
[  180.362346][ T2212] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  180.375963][ T2212] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input21
[  180.385471][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.870122][ T9491] rc rc0: two consecutive events of type space
[  180.905702][ T9500] loop5: detected capacity change from 0 to 32768
[  180.909221][ T9500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1404 (9500)
[  180.915505][ T9500] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.919063][ T9500] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  180.941912][ T9500] BTRFS info (device loop5): enabling ssd optimizations
[  180.944423][ T9500] BTRFS info (device loop5): enabling free space tree
[  180.973348][ T7667] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.071469][   T52] usb 2-1: USB disconnect, device number 27
[  181.423182][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1412'.
[  181.426512][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1412'.
[  181.577343][ T9536] loop4: detected capacity change from 0 to 32768
[  181.597921][ T9536] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  181.607933][ T9536] XFS (loop4): Ending clean mount
[  181.616047][   T33] audit: type=1800 audit(1756206672.266:47): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1413" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  181.632690][ T6706] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  181.754819][ T9554] loop4: detected capacity change from 0 to 2048
[  181.762260][ T9554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.787686][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.814381][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'.
[  181.862444][ T9561] netlink: 'syz.4.1421': attribute type 1 has an invalid length.
[  181.865038][ T9561] netlink: 'syz.4.1421': attribute type 1 has an invalid length.
[  182.558348][ T9573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  182.560868][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  182.567708][ T9573] vhci_hcd vhci_hcd.0: Device attached
[  182.589701][ T9573] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10)
[  182.592357][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.606491][ T9573] vhci_hcd vhci_hcd.0: Device attached
[  182.614693][ T9579] loop1: detected capacity change from 0 to 1024
[  182.618251][ T9573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.644646][ T9573] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15)
[  182.647275][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  182.652804][ T9579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.661010][ T9573] vhci_hcd vhci_hcd.0: Device attached
[  182.663638][ T9579] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.668997][ T9573] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17)
[  182.671627][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  182.675377][   T33] audit: type=1800 audit(1756206673.326:48): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1427" name="file1" dev="loop1" ino=15 res=0 errno=0
[  182.675385][ T9573] vhci_hcd vhci_hcd.0: Device attached
[  182.686154][ T9579] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  182.692914][ T9579] EXT4-fs (loop1): Remounting filesystem read-only
[  182.696104][ T9573] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(19)
[  182.698724][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  182.709732][ T9573] vhci_hcd vhci_hcd.0: Device attached
[  182.713039][ T9573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.716848][ T9573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.721297][ T9573] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  182.731878][ T5929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.739247][ T9580] vhci_hcd: connection closed
[  182.740001][    T9] vhci_hcd: vhci_device speed not set
[  182.741519][ T5706] vhci_hcd: stop threads
[  182.743671][ T9574] vhci_hcd: connection closed
[  182.744242][ T9576] vhci_hcd: connection closed
[  182.746067][ T9584] vhci_hcd: connection closed
[  182.749571][ T5706] vhci_hcd: release socket
[  182.757967][ T9586] vhci_hcd: connection closed
[  182.758725][ T5706] vhci_hcd: disconnect device
[  182.763208][ T5706] vhci_hcd: stop threads
[  182.765131][ T5706] vhci_hcd: release socket
[  182.767043][ T5706] vhci_hcd: disconnect device
[  182.769053][ T5706] vhci_hcd: stop threads
[  182.772335][ T5706] vhci_hcd: release socket
[  182.774215][ T5706] vhci_hcd: disconnect device
[  182.781619][ T5706] vhci_hcd: stop threads
[  182.783360][ T5706] vhci_hcd: release socket
[  182.788105][ T5706] vhci_hcd: disconnect device
[  182.795675][ T5706] vhci_hcd: stop threads
[  182.800192][    T9] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  182.801267][ T5706] vhci_hcd: release socket
[  182.803126][    T9] usb 41-1: enqueue for inactive port 0
[  182.811737][ T5706] vhci_hcd: disconnect device
[  182.879577][    T9] vhci_hcd: vhci_device speed not set
[  183.091303][ T5982] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  183.241311][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  183.245806][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  183.251073][ T5982] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  183.259519][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.264223][ T5982] usb 2-1: config 0 descriptor??
[  183.267358][ T9593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  183.687872][ T5982] hid (null): report_id 57294 is invalid
[  183.692067][ T5982] asus 0003:0B05:18C6.000C: collection stack underflow
[  183.694865][ T5982] asus 0003:0B05:18C6.000C: item 0 1 0 12 parsing failed
[  183.697575][ T5982] asus 0003:0B05:18C6.000C: Asus hid parse failed: -22
[  183.699879][ T5982] asus 0003:0B05:18C6.000C: probe with driver asus failed with error -22
[  183.893964][ T2212] usb 2-1: USB disconnect, device number 28
[  185.233639][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1445'.
[  185.238919][ T9627] vlan2: entered allmulticast mode
[  185.242040][ T9627] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  185.273873][ T9630] loop4: detected capacity change from 0 to 1024
[  185.343581][ T9633] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  185.355070][   T33] audit: type=1800 audit(1756206676.006:49): pid=9633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1447" name="file1" dev="loop4" ino=20 res=0 errno=0
[  185.809819][ T5921] Bluetooth: hci2: command 0x0406 tx timeout
[  185.883104][ T9644] loop1: detected capacity change from 0 to 512
[  185.942636][ T9644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.952673][ T9644] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.111203][ T5929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.262254][ T9655] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20000
[  186.437634][ T9672] loop4: detected capacity change from 0 to 64
[  186.457751][ T9672] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  186.566833][ T9664] loop1: detected capacity change from 0 to 32768
[  186.575029][ T9670] loop5: detected capacity change from 0 to 32768
[  186.591865][ T9670] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1462 (9670)
[  186.599643][ T9664] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 86f41c35-9b09-46cc-9962-ca94fdce76f0
[  186.604267][ T9664] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1458 (9664)
[  186.614195][ T9664] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.618423][ T9664] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  186.629925][ T9670] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.638210][ T9670] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  186.670937][ T9695] loop4: detected capacity change from 0 to 1024
[  186.718560][ T9664] BTRFS info (device loop1): rebuilding free space tree
[  186.724542][ T9664] BTRFS info (device loop1): enabling ssd optimizations
[  186.727135][ T9664] BTRFS info (device loop1): using spread ssd allocation scheme
[  186.731304][ T9664] BTRFS info (device loop1): enabling free space tree
[  186.733580][ T9664] BTRFS info (device loop1): force clearing of disk cache
[  186.768330][ T5706] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  186.781999][ T9670] BTRFS info (device loop5): enabling ssd optimizations
[  186.790611][ T9670] BTRFS info (device loop5): enabling free space tree
[  186.827037][ T5929] BTRFS info (device loop1): last unmount of filesystem 86f41c35-9b09-46cc-9962-ca94fdce76f0
[  186.839387][ T7667] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.913536][ T9719] netlink: 'syz.1.1469': attribute type 8 has an invalid length.
[  187.139727][ T2212] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  187.265660][ T9725] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1472'.
[  187.320482][ T2212] usb 5-1: Using ep0 maxpacket: 8
[  187.336824][ T2212] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  187.347356][ T2212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.357858][ T2212] usb 5-1: Product: syz
[  187.364586][ T2212] usb 5-1: Manufacturer: syz
[  187.366554][ T2212] usb 5-1: SerialNumber: syz
[  187.374376][ T2212] usb 5-1: config 0 descriptor??
[  187.387858][ T2212] option 5-1:0.0: GSM modem (1-port) converter detected
[  187.547008][ T9729] loop1: detected capacity change from 0 to 2048
[  187.569402][ T9729] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  187.585177][ T9729] UDF-fs: Scanning with blocksize 512 failed
[  187.594655][ T5982] usb 5-1: USB disconnect, device number 28
[  187.595594][ T9729] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.604321][ T5982] option 5-1:0.0: device disconnected
[  187.642452][   T33] audit: type=1800 audit(1756206678.296:50): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1474" name="file2" dev="loop1" ino=819 res=0 errno=0
[  187.973568][ T9733] loop1: detected capacity change from 0 to 4096
[  188.002273][ T9734] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.118397][ T1088] hfsplus: b-tree write err: -5, ino 4
[  188.319520][ T5982] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  188.389672][  T974] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  188.471670][ T5982] usb 6-1: config index 0 descriptor too short (expected 1307, got 27)
[  188.475457][ T5982] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  188.478874][ T5982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  188.483402][ T5982] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  188.488506][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  188.493205][ T5982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8
[  188.497622][ T5982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  188.506516][ T5982] usb 6-1: string descriptor 0 read error: -22
[  188.509213][ T5982] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  188.509539][ T2212] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  188.513209][ T5982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.521693][ T5982] usb 6-1: config 0 descriptor??
[  188.524295][ T9738] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  188.528088][ T5982] hub 6-1:0.0: bad descriptor, ignoring hub
[  188.530604][ T5982] hub 6-1:0.0: probe with driver hub failed with error -5
[  188.535144][ T5982] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23
[  188.542540][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.547424][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.553063][  T974] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  188.556764][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.562481][  T974] usb 5-1: config 0 descriptor??
[  188.661475][ T2212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.666526][ T2212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.671044][ T2212] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  188.674241][ T2212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.678103][ T2212] usb 2-1: config 0 descriptor??
[  188.735361][   T52] usb 6-1: USB disconnect, device number 15
[  188.982300][  T974] sony 0003:054C:0268.000D: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0
[  188.987231][  T974] sony 0003:054C:0268.000D: failed to claim input
[  189.091506][ T2212] cm6533_jd 0003:0D8C:0022.000E: invalid report_size -101239751
[  189.096452][ T2212] cm6533_jd 0003:0D8C:0022.000E: item 0 4 1 7 parsing failed
[  189.099860][ T2212] cm6533_jd 0003:0D8C:0022.000E: parse failed
[  189.102257][ T2212] cm6533_jd 0003:0D8C:0022.000E: probe with driver cm6533_jd failed with error -22
[  189.183608][ T2212] usb 5-1: USB disconnect, device number 29
[  189.303930][  T974] usb 2-1: USB disconnect, device number 29
[  189.844952][ T9762] loop4: detected capacity change from 0 to 512
[  189.855158][ T9762] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  189.867916][ T9762] EXT4-fs (loop4): mount failed
[  189.952262][ T9768] loop1: detected capacity change from 0 to 512
[  189.966180][ T9768] EXT4-fs: Ignoring removed nobh option
[  189.982099][ T9768] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1490: corrupted inode contents
[  189.986017][ T9768] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.1490: mark_inode_dirty error
[  189.991205][ T9768] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.1490: corrupted inode contents
[  189.996701][ T9768] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.1490: mark_inode_dirty error
[  190.002142][ T9768] Quota error (device loop1): write_blk: dquota write failed
[  190.005285][ T9768] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  190.009300][ T9768] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.1490: Failed to acquire dquot type 0
[  190.016017][ T9768] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1490: corrupted inode contents
[  190.022370][ T9768] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.1490: mark_inode_dirty error
[  190.027302][ T9768] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1490: corrupted inode contents
[  190.034034][ T9768] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.1490: mark_inode_dirty error
[  190.038655][ T9768] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1490: corrupted inode contents
[  190.044555][ T9768] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  190.048339][ T9768] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1490: corrupted inode contents
[  190.053965][ T9768] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.1490: mark_inode_dirty error
[  190.058465][ T9768] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  190.062953][ T9768] EXT4-fs (loop1): 1 truncate cleaned up
[  190.066011][ T9768] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.071351][ T9768] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.086405][ T9768] Quota error (device loop1): do_check_range: Getting block 18 out of range 0-5
[  190.122189][ T5929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.186416][ T9779] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  190.759494][ T2212] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  190.808889][ T9794] loop5: detected capacity change from 0 to 32768
[  190.827515][ T9794] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  190.855837][ T7667] ocfs2: Unmounting device (7,5) on (node local)
[  190.913750][ T2212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.917156][ T2212] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  190.922517][ T2212] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  190.926337][ T2212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.930385][ T2212] usb 2-1: config 0 descriptor??
[  190.941068][ T2212] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  190.943224][ T2212] dvb-usb: bulk message failed: -22 (3/0)
[  190.945958][ T2212] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  190.949041][ T2212] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  190.954053][ T2212] usb 2-1: media controller created
[  190.958722][ T2212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  190.962887][ T2212] dvb-usb: bulk message failed: -22 (6/0)
[  190.964776][ T2212] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  190.970871][ T2212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24
[  190.979183][ T2212] dvb-usb: schedule remote query interval to 150 msecs.
[  190.983237][ T2212] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  191.056507][ T9804] loop4: detected capacity change from 0 to 32768
[  191.075712][ T9804] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.095221][ T9804] XFS (loop4): Ending clean mount
[  191.121425][ T6706] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.139671][ T2212] dvb-usb: bulk message failed: -22 (1/0)
[  191.148112][ T2212] dvb-usb: error while querying for an remote control event.
[  191.154998][ T2212] usb 2-1: USB disconnect, device number 30
[  191.166255][ T2212] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  191.690439][ T9828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  191.755017][ T9834] netlink: 'syz.4.1514': attribute type 6 has an invalid length.
[  191.857737][ T9843] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.867654][ T9843] syzkaller0: entered promiscuous mode
[  191.867674][ T9843] syzkaller0: entered allmulticast mode
[  191.880234][ T9843] tipc: Resetting bearer <eth:syzkaller0>
[  191.883923][ T9842] tipc: Resetting bearer <eth:syzkaller0>
[  191.885617][ T9842] tipc: Disabling bearer <eth:syzkaller0>
[  191.891936][ T9846] loop5: detected capacity change from 0 to 128
[  191.894664][ T9846] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  191.908820][ T9846] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.928715][ T7667] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.232315][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1529'.
[  193.247067][ T9888] loop5: detected capacity change from 0 to 32768
[  193.250697][ T9888] XFS: noikeep mount option is deprecated.
[  193.328502][ T9900] loop4: detected capacity change from 0 to 1024
[  193.337929][ T9888] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.356133][ T9888] XFS (loop5): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  193.361155][ T9888] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  193.368488][ T9888] XFS (loop5): Starting recovery (logdev: internal)
[  193.378408][ T9888] XFS (loop5): Ending recovery (logdev: internal)
[  193.439168][ T9909] lo speed is unknown, defaulting to 1000
[  193.441800][ T9909] lo speed is unknown, defaulting to 1000
[  193.444835][ T9909] lo speed is unknown, defaulting to 1000
[  193.452306][ T9909] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  193.466356][ T9909] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  193.512348][ T9909] lo speed is unknown, defaulting to 1000
[  193.516130][ T9909] lo speed is unknown, defaulting to 1000
[  193.520307][ T9909] lo speed is unknown, defaulting to 1000
[  193.668651][ T7667] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  193.789176][ T9915] loop5: detected capacity change from 0 to 128
[  193.804874][ T9915] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  193.809402][ T9915] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  193.861569][ T7667] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  193.972018][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.974249][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.113637][ T9919] loop5: detected capacity change from 0 to 32768
[  194.117970][ T9919] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1547 (9919)
[  194.125200][ T9919] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  194.129122][ T9919] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  194.164147][   T33] audit: type=1326 audit(1756206684.816:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.183062][   T33] audit: type=1326 audit(1756206684.816:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.196225][   T33] audit: type=1326 audit(1756206684.826:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.215360][   T33] audit: type=1326 audit(1756206684.826:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.234611][   T33] audit: type=1326 audit(1756206684.826:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.248419][   T33] audit: type=1326 audit(1756206684.826:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.255858][   T33] audit: type=1326 audit(1756206684.826:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.271880][   T33] audit: type=1326 audit(1756206684.826:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9920 comm="syz.1.1548" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  194.285541][ T9919] BTRFS info (device loop5): enabling ssd optimizations
[  194.288255][ T9919] BTRFS info (device loop5): enabling free space tree
[  194.354815][ T7667] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  194.358747][ T9944] block device autoloading is deprecated and will be removed.
[  194.420613][ T9946] kAFS: No cell specified
[  194.440501][ T9948] loop1: detected capacity change from 0 to 64
[  194.471823][ T9948] syz.1.1554: attempt to access beyond end of device
[  194.471823][ T9948] loop1: rw=0, sector=3072, nr_sectors = 2 limit=64
[  194.733762][ T9960] loop4: detected capacity change from 0 to 32768
[  194.737248][ T9960] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1560 (9960)
[  194.744352][ T9960] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  194.796826][ T9960] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  195.085406][ T9960] BTRFS info (device loop4): rebuilding free space tree
[  195.092938][ T9960] BTRFS info (device loop4): enabling ssd optimizations
[  195.095731][ T9960] BTRFS info (device loop4): turning on sync discard
[  195.098415][ T9960] BTRFS info (device loop4): enabling free space tree
[  195.102301][ T9960] BTRFS info (device loop4): force clearing of disk cache
[  195.105089][ T9960] BTRFS info (device loop4): enabling auto defrag
[  195.110380][ T9960] BTRFS info (device loop4): doing ref verification
[  195.112915][ T9960] BTRFS info (device loop4): max_inline set to 0
[  195.174823][ T6706] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.810518][T10012] loop5: detected capacity change from 0 to 512
[  195.816038][T10012] EXT4-fs: test_dummy_encryption requires encrypt feature
[  195.986104][T10014] loop5: detected capacity change from 0 to 256
[  195.990744][T10014] minix: Unknown parameter 'xNa'
[  196.571001][ T5982] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  196.683072][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'.
[  196.686779][T10024] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  196.735567][ T5982] usb 5-1: unable to get BOS descriptor or descriptor too short
[  196.746533][ T5982] usb 5-1: not running at top speed; connect to a high speed hub
[  196.751791][ T5982] usb 5-1: config 2 has an invalid interface number: 226 but max is 1
[  196.754397][ T5982] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  196.758018][ T5982] usb 5-1: config 2 has 1 interface, different from the descriptor's value: 2
[  196.763657][ T5982] usb 5-1: config 2 has no interface number 0
[  196.766450][ T5982] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  196.770405][ T5982] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  196.774159][ T5982] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  196.784189][ T5982] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  196.787404][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.790311][ T5982] usb 5-1: Product: syz
[  196.791730][ T5982] usb 5-1: Manufacturer: syz
[  196.793268][ T5982] usb 5-1: SerialNumber: syz
[  197.012561][ T5982] usb 5-1: USB disconnect, device number 30
[  197.173810][T10035] loop1: detected capacity change from 0 to 40427
[  197.181123][T10035] F2FS-fs (loop1): invalid crc value
[  197.208324][T10035] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  197.212020][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  197.215984][T10035] F2FS-fs (loop1): Start checkpoint disabled!
[  197.221556][T10035] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  197.240964][T10035] syz.1.1584: attempt to access beyond end of device
[  197.240964][T10035] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  197.259962][ T1090] kworker/u9:6: attempt to access beyond end of device
[  197.259962][ T1090] loop1: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  197.266133][ T1090] kworker/u9:6: attempt to access beyond end of device
[  197.266133][ T1090] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  197.272200][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  197.272218][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  197.272228][ T1090] Workqueue: writeback wb_workfn (flush-7:1)
[  197.272283][ T1090] Call Trace:
[  197.272289][ T1090]  <TASK>
[  197.272295][ T1090]  dump_stack_lvl+0x189/0x250
[  197.272315][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  197.272331][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  197.272345][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  197.272364][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  197.272385][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  197.272408][ T1090]  f2fs_write_end_io+0x886/0xb60
[  197.272428][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  197.272449][ T1090]  __submit_merged_write_cond+0x255/0x530
[  197.272470][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  197.272502][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.272531][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  197.272559][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  197.272582][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  197.272602][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  197.272621][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  197.272641][ T1090]  ? f2fs_update_inode+0x13d9/0x2620
[  197.272662][ T1090]  ? rcu_qs+0xc4/0x170
[  197.272676][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  197.272695][ T1090]  do_writepages+0x32e/0x550
[  197.272718][ T1090]  __writeback_single_inode+0x145/0xff0
[  197.272735][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  197.272752][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  197.272776][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  197.272805][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.272820][ T1090]  wb_writeback+0x43b/0xaf0
[  197.272839][ T1090]  ? queue_io+0x341/0x590
[  197.272854][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  197.272873][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.272886][ T1090]  wb_workfn+0x409/0xef0
[  197.272906][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  197.272918][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.272931][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.272946][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  197.272959][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.272971][ T1090]  ? lock_acquire+0x5f/0x360
[  197.272992][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.273004][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  197.273016][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  197.273029][ T1090]  process_scheduled_works+0xae1/0x17b0
[  197.273053][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  197.273073][ T1090]  worker_thread+0x8a0/0xda0
[  197.273096][ T1090]  kthread+0x711/0x8a0
[  197.273113][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  197.273125][ T1090]  ? __pfx_kthread+0x10/0x10
[  197.273142][ T1090]  ? rcu_is_watching+0x15/0xb0
[  197.273154][ T1090]  ? __pfx_kthread+0x10/0x10
[  197.273170][ T1090]  ret_from_fork+0x3fc/0x770
[  197.273193][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  197.273209][ T1090]  ? __switch_to_asm+0x39/0x70
[  197.273225][ T1090]  ? __switch_to_asm+0x33/0x70
[  197.273268][ T1090]  ? __pfx_kthread+0x10/0x10
[  197.273286][ T1090]  ret_from_fork_asm+0x1a/0x30
[  197.273309][ T1090]  </TASK>
[  197.273315][ T1090] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  197.470987][    T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  197.474245][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.477303][    T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  197.480090][    T9] usb 6-1: config 1 has no interface number 1
[  197.482218][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  197.486164][    T9] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.494572][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  197.497785][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.500484][    T9] usb 6-1: Product: syz
[  197.502259][    T9] usb 6-1: Manufacturer: syz
[  197.503719][    T9] usb 6-1: SerialNumber: syz
[  197.618176][T10045] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1585'.
[  197.637745][   T33] audit: type=1326 audit(1756206688.286:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.4.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  197.653624][   T33] audit: type=1326 audit(1756206688.286:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10046 comm="syz.4.1589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  197.717792][    T9] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  197.720318][    T9] usb 6-1: MIDIStreaming interface descriptor not found
[  197.737690][    T9] usb 6-1: USB disconnect, device number 16
[  197.749155][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.785256][T10059] loop4: detected capacity change from 0 to 4096
[  198.319387][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1596'.
[  198.554029][T10074] vivid-000: disconnect
[  198.556118][T10073] vivid-000: reconnect
[  198.619756][ T2212] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  198.789945][ T2212] usb 6-1: Using ep0 maxpacket: 8
[  198.795273][ T2212] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e
[  198.798942][ T2212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.803628][ T2212] usb 6-1: Product: syz
[  198.805320][ T2212] usb 6-1: Manufacturer: syz
[  198.807206][ T2212] usb 6-1: SerialNumber: syz
[  198.811800][ T2212] usb 6-1: config 0 descriptor??
[  198.840940][T10079] loop1: detected capacity change from 0 to 32768
[  198.848481][T10079] (syz.1.1602,10079,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  198.852076][T10079] (syz.1.1602,10079,0):ocfs2_read_locked_inode:597 ERROR: status = -12
[  198.854815][T10079] (syz.1.1602,10079,0):_ocfs2_get_system_file_inode:144 ERROR: status = -12
[  198.857827][T10079] (syz.1.1602,10079,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=8, slot=0
[  198.861749][T10079] (syz.1.1602,10079,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  198.865545][T10079] (syz.1.1602,10079,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  198.869049][T10079] (syz.1.1602,10079,0):ocfs2_fill_super:1177 ERROR: status = -22
[  199.024057][ T5982] usb 6-1: USB disconnect, device number 17
[  199.586392][T10090] netlink: 'syz.5.1606': attribute type 10 has an invalid length.
[  199.591780][T10090] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  199.663564][T10090] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode
[  199.874882][T10103] loop4: detected capacity change from 0 to 256
[  199.875454][T10101] _Z`Ԁ@: entered promiscuous mode
[  199.891562][T10103] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  199.896055][T10103] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  199.918771][T10103] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  199.940763][   T33] kauditd_printk_skb: 14 callbacks suppressed
[  199.940778][   T33] audit: type=1800 audit(1756206690.586:75): pid=10103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1611" name="file1" dev="loop4" ino=1048640 res=0 errno=0
[  199.956238][T10103] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  199.958933][T10103] exFAT-fs (loop4): Filesystem has been set read-only
[  200.093657][T10110] loop1: detected capacity change from 0 to 32768
[  200.137837][T10110] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  200.148782][   T33] audit: type=1800 audit(1756206690.796:76): pid=10110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1616" name="file1" dev="loop1" ino=9553 res=0 errno=0
[  200.193695][ T5929] ocfs2: Unmounting device (7,1) on (node local)
[  200.279473][ T5963] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  200.441236][ T5963] usb 6-1: config 0 has an invalid interface number: 161 but max is 0
[  200.444118][ T5963] usb 6-1: config 0 has no interface number 0
[  200.446193][ T5963] usb 6-1: config 0 interface 161 altsetting 8 has an endpoint descriptor with address 0xA1, changing to 0x81
[  200.462147][ T5963] usb 6-1: config 0 interface 161 has no altsetting 0
[  200.466712][ T5963] usb 6-1: New USB device found, idVendor=0572, idProduct=cb07, bcdDevice=33.62
[  200.474059][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.485008][ T5963] usb 6-1: config 0 descriptor??
[  200.493339][ T5963] cxacru 6-1:0.161: cxacru_bind: interface has incorrect endpoints
[  200.496259][ T5963] cxacru 6-1:0.161: usbatm_usb_probe: bind failed: -19!
[  200.691535][ T5963] usb 6-1: USB disconnect, device number 18
[  200.808731][T10123] loop1: detected capacity change from 0 to 32768
[  200.827136][T10123] (syz.1.1620,10123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.843656][T10123] (syz.1.1620,10123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.868463][T10123] JBD2: Ignoring recovery information on journal
[  200.895753][T10123] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  200.906755][T10123] (syz.1.1620,10123,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  201.192574][ T5929] ocfs2: Unmounting device (7,1) on (node local)
[  201.247700][T10134] loop5: detected capacity change from 0 to 2048
[  201.261988][T10134] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.382148][T10138] loop1: detected capacity change from 0 to 2048
[  201.437423][T10145] loop1: detected capacity change from 0 to 1024
[  201.496411][   T53] hfsplus: b-tree write err: -5, ino 4
[  201.504369][T10152] loop4: detected capacity change from 0 to 256
[  201.507437][T10152] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  201.806030][T10162] loop1: detected capacity change from 0 to 40427
[  201.843543][T10162] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  201.847898][T10162] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  201.886790][ T5929] syz-executor: attempt to access beyond end of device
[  201.886790][ T5929] loop1: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[  201.892826][ T5929] F2FS-fs (loop1): Issue discard(9728, 9728, 1) failed, ret: -5
[  202.440972][T10170] loop1: detected capacity change from 0 to 32768
[  202.443936][T10170] XFS: noikeep mount option is deprecated.
[  202.447232][T10177] loop4: detected capacity change from 0 to 2048
[  202.474044][T10170] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  202.513770][T10186] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.517224][   T33] audit: type=1800 audit(1756206693.166:77): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1641" name="file1" dev="loop4" ino=15 res=0 errno=0
[  202.531983][T10170] XFS (loop1): Torn write (CRC failure) detected at log block 0x10. Truncating head block from 0x51.
[  202.548669][T10170] XFS (loop1): Corruption warning: Metadata has LSN (1:48) ahead of current LSN (1:16). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  202.553364][T10170] XFS (loop1): log mount/recovery failed: error -22
[  202.556015][T10170] XFS (loop1): log mount failed
[  202.885971][T10189] loop4: detected capacity change from 0 to 32768
[  203.012965][T10189] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  203.017871][T10189] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.067209][T10189] XFS (loop4): Ending clean mount
[  203.072399][T10189] XFS (loop4): Quotacheck needed: Please wait.
[  203.086721][T10189] XFS (loop4): Quotacheck: Done.
[  203.122289][   T33] audit: type=1800 audit(1756206693.776:78): pid=10189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1642" name="file1" dev="loop4" ino=4422 res=0 errno=0
[  203.124262][T10189] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  203.143472][T10189] XFS (loop4): Unmount and run xfs_repair
[  203.145571][T10189] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  203.147861][T10189] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  203.169565][T10189] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  203.173043][T10189] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  203.176447][T10189] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  203.181943][T10189] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  203.186015][T10189] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  203.190240][T10189] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  203.194177][T10189] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  203.197804][T10189] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  203.207260][T10189] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  203.213918][T10189] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  203.242269][ T6706] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.257302][T10199] loop1: detected capacity change from 0 to 32768
[  203.381462][T10199] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  203.381547][T10199]   allowing incompatible features above 0.0: (unknown version)
[  203.381558][T10199]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  203.400507][T10199] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  203.403794][T10199] bcachefs (loop1): initializing new filesystem
[  203.425522][T10199] bcachefs (loop1): going read-write
[  203.435803][T10199] bcachefs (loop1): marking superblocks
[  203.443381][T10199] bcachefs (loop1): initializing freespace
[  203.449654][T10199] bcachefs (loop1): done initializing freespace
[  203.463543][T10199] bcachefs (loop1): reading snapshots table
[  203.466082][T10199] bcachefs (loop1): reading snapshots done
[  203.496973][T10199] bcachefs (loop1): done starting filesystem
[  203.631863][ T5929] bcachefs (loop1): shutting down
[  203.633953][ T5929] bcachefs (loop1): going read-only
[  203.636082][ T5929] bcachefs (loop1): finished waiting for writes to stop
[  203.641893][ T5929] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  203.674154][ T5929] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  203.677776][ T5929] bcachefs (loop1): clean shutdown complete, journal seq 5
[  203.680938][ T5929] bcachefs (loop1): marking filesystem clean
[  203.691423][ T5929] bcachefs (loop1): shutdown complete
[  203.860847][ T5312] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  204.011039][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.015344][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.019302][ T5312] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  204.023061][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.028932][ T5312] usb 5-1: config 0 descriptor??
[  204.259754][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  204.411090][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.415013][    T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  204.418476][    T9] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  204.422065][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.428918][    T9] usb 6-1: config 0 descriptor??
[  204.439920][ T5312] logitech 0003:046D:C623.000F: unknown main item tag 0x0
[  204.443856][ T5312] logitech 0003:046D:C623.000F: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0
[  204.639580][    T9] Bluetooth: Can't get state to change to load ram patch err
[  204.646738][    T9] Bluetooth: Loading patch file failed
[  204.650610][ T5963] usb 5-1: USB disconnect, device number 31
[  204.653344][    T9] ath3k 6-1:0.0: probe with driver ath3k failed with error -71
[  204.663047][    T9] usb 6-1: USB disconnect, device number 19
[  204.730965][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1652'.
[  205.762213][T10254] loop4: detected capacity change from 0 to 1024
[  205.921953][T10260] loop1: detected capacity change from 0 to 4096
[  205.925450][T10260] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  205.944367][T10260] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  205.951811][T10260] ntfs3(loop1): ino=19, mi_enum_attr
[  205.960530][T10260] ntfs3(loop1): failed to convert "c46c" to cp860
[  205.963378][T10260] ntfs3(loop1): ino=20, mi_enum_attr
[  206.648200][T10265] syz.4.1668 (10265): drop_caches: 2
[  206.777897][T10280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.239577][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  207.389823][    T9] usb 5-1: Using ep0 maxpacket: 32
[  207.395476][    T9] usb 5-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=1c.b2
[  207.398533][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.401878][    T9] usb 5-1: Product: syz
[  207.403494][    T9] usb 5-1: Manufacturer: syz
[  207.405213][    T9] usb 5-1: SerialNumber: syz
[  207.408700][    T9] usb 5-1: config 0 descriptor??
[  207.414390][    T9] xr_serial 5-1:0.0: invalid descriptor buffer length
[  207.630216][ T2212] usb 5-1: USB disconnect, device number 32
[  207.886953][T10310] loop5: detected capacity change from 0 to 4096
[  207.894999][T10310] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  207.921271][T10310] ntfs3(loop5): MFT: r=18, expect seq=1 instead of 0!
[  207.924216][T10310] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  207.927658][T10310] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  208.201681][T10319] tipc: Failed to remove unknown binding: 66,1,1/0:2674956429/2674956431
[  208.276961][T10315] loop4: detected capacity change from 0 to 32768
[  208.284140][T10315] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  208.307442][ T6706] ocfs2: Unmounting device (7,4) on (node local)
[  208.681180][T10337] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1699'.
[  208.684715][T10335] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1699'.
[  208.688198][T10335] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1699'.
[  208.731694][T10327] loop1: detected capacity change from 0 to 131072
[  208.772897][T10327] F2FS-fs (loop1): Bad quota inode 2:2048
[  208.775215][T10327] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-2). Please run fsck to fix.
[  208.779252][T10327] F2FS-fs (loop1): Cannot turn on quotas: error -2
[  208.781931][T10327] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.805847][T10327] F2FS-fs (loop1): Mounted with checkpoint version = 1b41e955
[  209.136372][T10353] netlink: 'syz.5.1705': attribute type 3 has an invalid length.
[  209.191681][T10355] loop5: detected capacity change from 0 to 4096
[  209.212941][T10355] ntfs3(loop5): ino=19, mi_enum_attr
[  209.219259][T10355] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  210.966757][T10407] loop1: detected capacity change from 0 to 32768
[  210.976720][T10407] overlayfs: upper fs needs to support d_type.
[  210.979119][T10407] overlayfs: upper fs does not support tmpfile.
[  210.981938][T10407] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  210.984570][T10407] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  210.984570][T10407] 
[  210.988326][T10407] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  210.991798][T10407] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  210.991798][T10407] 
[  210.995376][T10407] overlayfs: failed to verify upper root origin
[  211.009937][   T53] read_mapping_page failed!
[  211.011820][   T53] ERROR: (device loop1): txCommit: 
[  211.011820][   T53] 
[  211.014513][   T53] jfs_write_inode: jfs_commit_inode failed!
[  211.079734][ T5982] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  211.249556][ T5982] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.253407][ T5982] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.258284][ T5982] usb 5-1: config 0 interface 0 has no altsetting 0
[  211.261490][ T5982] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00
[  211.264822][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.273135][ T5982] usb 5-1: config 0 descriptor??
[  211.368271][T10417] loop1: detected capacity change from 0 to 128
[  211.378695][T10417] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.384272][T10417] ext4 filesystem being mounted at /585/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.408299][ T5929] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.411923][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  211.566608][T10421] loop1: detected capacity change from 0 to 40427
[  211.570165][    T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd
[  211.573999][T10421] F2FS-fs (loop1): Image doesn't support compression
[  211.577040][T10421] F2FS-fs (loop1): invalid crc value
[  211.602402][T10421] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  211.606243][T10421] F2FS-fs (loop1): Start checkpoint disabled!
[  211.608649][T10421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  211.684223][ T5982] itetech 0003:06CB:73F6.0010: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.4-1/input0
[  211.743330][    T9] usb 6-1: config 162 has an invalid interface number: 35 but max is 0
[  211.746840][    T9] usb 6-1: config 162 has no interface number 0
[  211.749303][    T9] usb 6-1: config 162 interface 35 has no altsetting 0
[  211.754147][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  211.759346][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.765433][    T9] usb 6-1: Product: syz
[  211.767060][    T9] usb 6-1: Manufacturer: syz
[  211.768934][    T9] usb 6-1: SerialNumber: syz
[  211.890265][ T5312] usb 5-1: USB disconnect, device number 33
[  211.966974][T10437] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1741'.
[  211.981097][    T9] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:162.35/input/input27
[  211.990812][ T5279] bcm5974 6-1:162.35: could not read from device
[  211.996617][ T5279] bcm5974 6-1:162.35: could not read from device
[  211.998553][    T9] usb 6-1: USB disconnect, device number 20
[  212.007385][T10439] netlink: 'syz.1.1742': attribute type 1 has an invalid length.
[  212.013318][T10439] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1742'.
[  212.025738][ T7669] udevd[7669]: Error opening device "/dev/input/event3": No such file or directory
[  212.029387][ T7669] udevd[7669]: Unable to EVIOCGABS device "/dev/input/event3"
[  212.034712][ T7669] udevd[7669]: Unable to EVIOCGABS device "/dev/input/event3"
[  212.037843][ T7669] udevd[7669]: Unable to EVIOCGABS device "/dev/input/event3"
[  212.042139][ T7669] udevd[7669]: Unable to EVIOCGABS device "/dev/input/event3"
[  212.584275][T10467] veth1_macvtap: left promiscuous mode
[  212.586163][T10467] macsec0: entered allmulticast mode
[  212.592063][T10467] veth1_macvtap: entered promiscuous mode
[  212.594404][T10467] veth1_macvtap: entered allmulticast mode
[  212.596857][T10467] macsec0: left allmulticast mode
[  212.599218][T10467] veth1_macvtap: left allmulticast mode
[  213.235114][T10478] input: syz0 as /devices/virtual/input/input28
[  213.495764][T10484] veth0_macvtap: left promiscuous mode
[  213.812043][T10504] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  213.814035][T10504] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  213.816693][T10504] vhci_hcd vhci_hcd.0: Device attached
[  213.821751][T10505] vhci_hcd: connection closed
[  213.822180][ T5706] vhci_hcd: stop threads
[  213.824886][ T5706] vhci_hcd: release socket
[  213.826189][ T5706] vhci_hcd: disconnect device
[  213.922292][T10514] netlink: 'syz.4.1772': attribute type 29 has an invalid length.
[  213.977040][T10519] Bluetooth: MGMT ver 1.23
[  214.512037][T10528] loop4: detected capacity change from 0 to 32768
[  214.515937][T10528] XFS: noikeep mount option is deprecated.
[  214.527433][T10528] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  214.536452][T10528] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.557459][T10528] XFS (loop4): Ending clean mount
[  214.561004][T10528] XFS (loop4): Quotacheck needed: Please wait.
[  214.567817][T10528] XFS (loop4): Quotacheck: Done.
[  214.593792][ T6706] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  214.713194][T10548] loop5: detected capacity change from 0 to 64
[  214.865063][T10553] loop4: detected capacity change from 0 to 1024
[  214.883111][T10553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.961007][T10557] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  214.964354][T10557] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  215.076998][   T33] audit: type=1800 audit(1756206705.696:79): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1785" name="file1" dev="loop5" ino=5 res=0 errno=0
[  215.097157][T10550] minix: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[  215.108338][   T33] audit: type=1800 audit(1756206705.706:80): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1785" name="file2" dev="loop5" ino=6 res=0 errno=0
[  215.126123][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.298613][T10561] loop1: detected capacity change from 0 to 32768
[  215.305713][T10561] bcachefs: bch2_fs_parse_param() Error parsing option background_compression: option_value
[  215.371560][T10562] loop4: detected capacity change from 0 to 32768
[  215.378711][T10562] 
[  215.378711][T10562]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  215.378711][T10562] 
[  215.412824][ T6706] 
[  215.412824][ T6706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  215.412824][ T6706] 
[  215.416849][ T6706] 
[  215.416849][ T6706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  215.416849][ T6706] 
[  215.960801][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1798'.
[  215.995893][T10587] loop5: detected capacity change from 0 to 1024
[  216.212128][   T33] audit: type=1326 audit(1756206706.866:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.5.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96658ebe9 code=0x7ffc0000
[  216.213534][T10598] syz.5.1804 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  216.222239][   T33] audit: type=1326 audit(1756206706.866:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.5.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96658ebe9 code=0x7ffc0000
[  216.235968][   T33] audit: type=1326 audit(1756206706.866:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.5.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7ff96658ebe9 code=0x7ffc0000
[  216.256272][   T33] audit: type=1326 audit(1756206706.876:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10597 comm="syz.5.1804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff96658ebe9 code=0x7ffc0000
[  216.293657][T10602] loop5: detected capacity change from 0 to 1024
[  216.353194][   T26] hfsplus: b-tree write err: -5, ino 4
[  216.438391][T10606] loop5: detected capacity change from 0 to 4096
[  216.472639][T10606] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  216.475214][T10606] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  216.501881][T10613] netlink: 212056 bytes leftover after parsing attributes in process `syz.1.1811'.
[  216.915506][T10611] loop4: detected capacity change from 0 to 32768
[  216.993403][T10611] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.045397][T10611] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  217.066917][T10611] XFS (loop4): Starting recovery (logdev: internal)
[  217.092014][T10611] XFS (loop4): Ending recovery (logdev: internal)
[  217.145863][ T6706] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  217.429776][   T53] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  217.432405][ T7667] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  217.434703][ T7667] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  217.437648][ T7667] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  217.472945][ T1089] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  217.655682][T10632] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1814'.
[  217.888766][T10638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.897451][T10638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.905616][T10630] loop4: detected capacity change from 0 to 32768
[  217.923139][T10630] 
[  217.923139][T10630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.923139][T10630] 
[  217.939193][T10630] 
[  217.939193][T10630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.939193][T10630] 
[  217.942539][T10630] 
[  217.942539][T10630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.942539][T10630] 
[  217.946595][T10630] 
[  217.946595][T10630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.946595][T10630] 
[  217.950563][T10630] 
[  217.950563][T10630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.950563][T10630] 
[  217.954106][T10630] 
[  217.954106][T10630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.954106][T10630] 
[  217.958426][  T114] 
[  217.958426][  T114]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.958426][  T114] 
[  217.968671][  T514] 
[  217.968671][  T514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.968671][  T514] 
[  217.972989][  T514] 
[  217.972989][  T514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.972989][  T514] 
[  217.977384][  T115] 
[  217.977384][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.977384][  T115] 
[  217.978168][T10638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  217.984450][ T6706] 
[  217.984450][ T6706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.984450][ T6706] 
[  217.987321][T10638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.992053][ T6706] 
[  217.992053][ T6706]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  217.992053][ T6706] 
[  218.048832][T10638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.059806][T10638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.083958][T10638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  218.088940][T10638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.172115][ T5935] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.175109][ T5935] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.201086][ T5935] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.203886][ T5935] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.206396][ T5935] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.211326][ T5935] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.214720][ T5935] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  218.217967][T10660] loop5: detected capacity change from 0 to 2048
[  218.224713][ T5935] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.228680][T10660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.319605][   T33] audit: type=1800 audit(1756206708.966:85): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1832" name="bus" dev="overlay" ino=2057 res=0 errno=0
[  218.331286][T10672] loop1: detected capacity change from 0 to 1024
[  218.344683][T10674] netlink: 'syz.5.1834': attribute type 30 has an invalid length.
[  218.356177][T10672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.368292][T10672] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.1833: Abort forced by user
[  218.372268][T10672] EXT4-fs (loop1): Remounting filesystem read-only
[  218.374868][T10672] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  218.399660][ T5312] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  218.405967][ T5929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.549572][ T5312] usb 5-1: Using ep0 maxpacket: 8
[  218.556435][ T5312] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  218.563238][ T5312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  218.566909][ T5312] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  218.571424][ T5312] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  218.575993][ T5312] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  218.579225][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.790716][ T5312] usb 5-1: GET_CAPABILITIES returned 0
[  218.792723][ T5312] usbtmc 5-1:16.0: can't read capabilities
[  219.049200][    C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  219.052923][T10700] usbtmc 5-1:16.0: Unable to send data, error -71
[  219.539702][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  219.689602][    T9] usb 2-1: Using ep0 maxpacket: 32
[  219.700901][    T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  219.703514][    T9] usb 2-1: config 0 has no interface number 0
[  219.705448][    T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  219.709143][    T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  219.714287][    T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  219.718714][    T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  219.723361][    T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  219.726825][    T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.730907][    T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  219.734508][    T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  219.738695][    T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  219.742952][    T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  219.750553][    T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  219.753884][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.756816][    T9] usb 2-1: Product: syz
[  219.758415][    T9] usb 2-1: Manufacturer: syz
[  219.761208][    T9] usb 2-1: SerialNumber: syz
[  219.764171][    T9] usb 2-1: config 0 descriptor??
[  219.766874][T10702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  219.770716][T10702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  219.774504][    T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  219.777710][    T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  219.783850][    T9] scsi host6: microtekX6
[  220.101079][T10702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.118022][T10702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.129368][ T5312] usb 2-1: USB disconnect, device number 31
[  221.037094][   T33] audit: type=1326 audit(1756206711.686:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10732 comm="syz.5.1851" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96658ebe9 code=0x0
[  221.188624][ T5312] usb 5-1: USB disconnect, device number 34
[  221.419135][T10745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1857'.
[  221.582803][T10751] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  221.632688][T10753] loop5: detected capacity change from 0 to 128
[  221.729581][ T5982] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  221.782535][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1863'.
[  221.786252][T10757] IPVS: Error connecting to the multicast addr
[  221.900579][ T5982] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.914899][ T5982] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  221.918945][ T5982] usb 5-1: config 1 has no interface number 1
[  221.928288][ T5982] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  221.938537][ T5982] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  221.946478][ T5982] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  221.946566][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.946648][ T5982] usb 5-1: Product: syz
[  221.946659][ T5982] usb 5-1: Manufacturer: syz
[  221.946737][ T5982] usb 5-1: SerialNumber: syz
[  221.955665][T10748] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  222.200789][ T5982] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  222.204106][ T5982] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  222.243805][T10767] loop1: detected capacity change from 0 to 512
[  222.245732][ T5982] usb 5-1: USB disconnect, device number 35
[  222.248350][T10767] msdos: Bad value for 'tz'
[  222.391862][ T6149] udevd[6149]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  222.535945][T10771] loop1: detected capacity change from 0 to 64
[  223.111934][   T27] Bluetooth: hci3: Frame reassembly failed (-84)
[  223.241510][T10785] loop5: detected capacity change from 0 to 40427
[  223.244431][T10785] F2FS-fs (loop5): build fault injection rate: 771
[  223.250627][T10785] F2FS-fs (loop5): invalid crc value
[  223.269518][T10785] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.274949][T10785] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  223.312087][   T33] audit: type=1800 audit(1756206713.956:87): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1875" name="file1" dev="loop5" ino=10 res=0 errno=0
[  223.345183][ T7667] syz-executor: attempt to access beyond end of device
[  223.345183][ T7667] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.352343][ T7667] CPU: 0 UID: 0 PID: 7667 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  223.352356][ T7667] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.352362][ T7667] Call Trace:
[  223.352366][ T7667]  <TASK>
[  223.352369][ T7667]  dump_stack_lvl+0x189/0x250
[  223.352384][ T7667]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.352393][ T7667]  ? __pfx_queue_work_on+0x10/0x10
[  223.352401][ T7667]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  223.352411][ T7667]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.352422][ T7667]  f2fs_handle_critical_error+0x37c/0x540
[  223.352435][ T7667]  f2fs_write_end_io+0x886/0xb60
[  223.352446][ T7667]  __submit_merged_bio+0x27a/0x6a0
[  223.352458][ T7667]  __submit_merged_write_cond+0x255/0x530
[  223.352469][ T7667]  f2fs_write_data_pages+0x261d/0x3000
[  223.352479][ T7667]  ? rcu_is_watching+0x15/0xb0
[  223.352494][ T7667]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  223.352513][ T7667]  ? __mod_zone_page_state+0xd7/0x140
[  223.352531][ T7667]  ? folios_put_refs+0x560/0x640
[  223.352541][ T7667]  ? __pfx_folios_put_refs+0x10/0x10
[  223.352549][ T7667]  ? rcu_is_watching+0x15/0xb0
[  223.352556][ T7667]  ? lru_add+0xa2f/0xd80
[  223.352563][ T7667]  ? lru_add+0x198/0xd80
[  223.352570][ T7667]  ? do_raw_spin_lock+0x121/0x290
[  223.352583][ T7667]  ? do_raw_spin_unlock+0x4d/0x240
[  223.352591][ T7667]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  223.352602][ T7667]  do_writepages+0x32e/0x550
[  223.352613][ T7667]  ? rcu_is_watching+0x15/0xb0
[  223.352621][ T7667]  ? do_raw_spin_unlock+0x4d/0x240
[  223.352631][ T7667]  filemap_fdatawrite+0x199/0x240
[  223.352642][ T7667]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  223.352659][ T7667]  ? rcu_is_watching+0x15/0xb0
[  223.352667][ T7667]  ? do_raw_spin_unlock+0x4d/0x240
[  223.352676][ T7667]  f2fs_sync_dirty_inodes+0x31f/0x830
[  223.352686][ T7667]  f2fs_write_checkpoint+0x95a/0x1df0
[  223.352698][ T7667]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  223.352714][ T7667]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  223.352721][ T7667]  ? kfree+0x18e/0x440
[  223.352731][ T7667]  ? kill_f2fs_super+0x298/0x6c0
[  223.352739][ T7667]  kill_f2fs_super+0x2c3/0x6c0
[  223.352747][ T7667]  ? __pfx_kill_f2fs_super+0x10/0x10
[  223.352754][ T7667]  ? radix_tree_delete_item+0x2b6/0x400
[  223.352766][ T7667]  ? shrinker_free+0x2ce/0x3e0
[  223.352774][ T7667]  deactivate_locked_super+0xbc/0x130
[  223.352789][ T7667]  cleanup_mnt+0x425/0x4c0
[  223.352799][ T7667]  task_work_run+0x1d4/0x260
[  223.352810][ T7667]  ? __pfx_task_work_run+0x10/0x10
[  223.352819][ T7667]  ? __x64_sys_umount+0x122/0x160
[  223.352828][ T7667]  ? __pfx___x64_sys_umount+0x10/0x10
[  223.352838][ T7667]  ? rcu_is_watching+0x15/0xb0
[  223.352845][ T7667]  exit_to_user_mode_loop+0xec/0x110
[  223.352857][ T7667]  do_syscall_64+0x2bd/0x3b0
[  223.352868][ T7667]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.352875][ T7667]  ? exc_page_fault+0x9f/0xf0
[  223.352885][ T7667]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.352893][ T7667] RIP: 0033:0x7ff96658ff17
[  223.352901][ T7667] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  223.352908][ T7667] RSP: 002b:00007fff3966d608 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  223.352918][ T7667] RAX: 0000000000000000 RBX: 00007ff966611c05 RCX: 00007ff96658ff17
[  223.352923][ T7667] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3966d6c0
[  223.352929][ T7667] RBP: 00007fff3966d6c0 R08: 0000000000000000 R09: 0000000000000000
[  223.352936][ T7667] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3966e750
[  223.352943][ T7667] R13: 00007ff966611c05 R14: 00000000000367ea R15: 00007fff3966e790
[  223.352956][ T7667]  </TASK>
[  223.352961][ T7667] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  223.667705][T10813] loop5: detected capacity change from 0 to 16
[  223.671477][T10813] erofs (device loop5): mounted with root inode @ nid 36.
[  223.879566][ T5982] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  224.031598][ T5982] usb 2-1: unable to get BOS descriptor or descriptor too short
[  224.041269][ T5982] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  224.047901][ T5982] usb 2-1: string descriptor 0 read error: -22
[  224.050747][ T5982] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  224.054100][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.180439][T10817] loop5: detected capacity change from 0 to 32768
[  224.192989][T10817] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.207124][T10817] XFS (loop5): Ending clean mount
[  224.210467][T10817] XFS (loop5): Quotacheck needed: Please wait.
[  224.215292][T10817] XFS (loop5): Quotacheck: Done.
[  224.248051][ T7667] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  224.267150][ T5982] usb 2-1: USB disconnect, device number 32
[  225.059563][ T5312] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  225.169604][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  225.169618][ T5921] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  225.211726][ T5312] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[  225.214848][ T5312] usb 2-1: config 0 has no interface number 0
[  225.236844][ T5312] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0
[  225.244307][ T5312] usb 2-1: config 0 interface 235 has no altsetting 0
[  225.249610][ T5312] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  225.253111][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.256086][ T5312] usb 2-1: Product: syz
[  225.259790][ T5312] usb 2-1: Manufacturer: syz
[  225.261684][ T5312] usb 2-1: SerialNumber: syz
[  225.275810][ T5312] usb 2-1: config 0 descriptor??
[  225.284529][ T5312] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected
[  225.287575][ T5312] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87
[  225.291221][ T5312] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7
[  225.294892][ T5312] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81
[  225.297969][ T5312] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1
[  225.301454][ T5312] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85
[  225.305413][ T5312] keyspan 2-1:0.235: unsupported endpoint type 0
[  225.309262][ T5312] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  225.494925][ T5982] usb 2-1: USB disconnect, device number 33
[  225.505183][ T5982] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  225.508795][ T5982] keyspan 2-1:0.235: device disconnected
[  225.702765][T10861] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1902'.
[  225.706797][T10861] tipc: Enabled bearer <udp:syz0>, priority 10
[  225.836997][T10857] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  225.839611][T10857] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  225.851721][T10857] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  225.853876][T10857] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  226.064793][T10867] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1905'.
[  226.068484][T10867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1905'.
[  226.072775][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'.
[  226.119492][ T5982] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  226.271711][ T5982] usb 5-1: config 0 has an invalid interface number: 95 but max is 0
[  226.276163][ T5982] usb 5-1: config 0 has no interface number 0
[  226.280887][ T5982] usb 5-1: config 0 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 58888, setting to 1024
[  226.291201][ T5982] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  226.297383][ T5982] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  226.301220][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.304428][ T5982] usb 5-1: Product: syz
[  226.306219][ T5982] usb 5-1: Manufacturer: syz
[  226.308169][ T5982] usb 5-1: SerialNumber: syz
[  226.312452][ T5982] usb 5-1: config 0 descriptor??
[  226.314851][T10865] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  226.520456][ T5982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  226.522767][ T5982] usb 5-1: MIDIStreaming interface descriptor not found
[  226.535252][ T5982] usb 5-1: USB disconnect, device number 36
[  226.576328][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.699554][ T5963] tipc: Node number set to 286413679
[  227.749523][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  227.800716][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.889630][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  228.543469][   T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.553436][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.560335][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.702135][ T5982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.761679][   T33] audit: type=1800 audit(1756206719.416:88): pid=10918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1927" name="/" dev="fuse" ino=1 res=0 errno=0
[  228.852297][ T5312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.922768][T10932] loop4: detected capacity change from 0 to 512
[  228.932797][T10932] EXT4-fs: Ignoring removed i_version option
[  228.935828][T10932] EXT4-fs (loop4): can't mount with both data=journal and dax
[  229.045363][T10942] loop4: detected capacity change from 0 to 256
[  229.064725][T10942] FAT-fs (loop4): Directory bread(block 64) failed
[  229.067533][T10942] FAT-fs (loop4): Directory bread(block 65) failed
[  229.072001][T10942] FAT-fs (loop4): Directory bread(block 66) failed
[  229.077721][T10942] FAT-fs (loop4): Directory bread(block 67) failed
[  229.085692][T10942] FAT-fs (loop4): Directory bread(block 68) failed
[  229.088379][T10942] FAT-fs (loop4): Directory bread(block 69) failed
[  229.095497][T10942] FAT-fs (loop4): Directory bread(block 70) failed
[  229.098128][T10942] FAT-fs (loop4): Directory bread(block 71) failed
[  229.100911][ T5963] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  229.103655][T10942] FAT-fs (loop4): Directory bread(block 72) failed
[  229.106398][T10942] FAT-fs (loop4): Directory bread(block 73) failed
[  229.258182][T10944] loop5: detected capacity change from 0 to 32768
[  229.271278][ T5963] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  229.274985][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.279276][ T5963] usb 2-1: config 0 descriptor??
[  229.389689][ T5982] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  229.486049][ T5963] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  229.520981][T10958] .: renamed from bond0 (while UP)
[  229.552080][ T5982] usb 5-1: unable to get BOS descriptor or descriptor too short
[  229.555970][ T5982] usb 5-1: not running at top speed; connect to a high speed hub
[  229.562671][ T5982] usb 5-1: config 8 has an invalid interface number: 24 but max is 0
[  229.565905][ T5982] usb 5-1: config 8 has no interface number 0
[  229.568454][ T5982] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64
[  229.577054][ T5982] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  229.582721][ T5982] usb 5-1: config 8 interface 24 altsetting 2 endpoint 0x85 has invalid wMaxPacketSize 0
[  229.586712][ T5982] usb 5-1: config 8 interface 24 has no altsetting 0
[  229.602387][ T5982] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  229.606116][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.609271][ T5982] usb 5-1: Product: syz
[  229.612162][ T5982] usb 5-1: Manufacturer: syz
[  229.614152][ T5982] usb 5-1: SerialNumber: syz
[  229.618604][T10946] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  229.695221][ T5963] [drm:udl_init] *ERROR* Selecting channel failed
[  229.705209][ T5963] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 3
[  229.708007][ T5963] [drm] Initialized udl on minor 3
[  229.711465][ T5963] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  229.714957][ T5963] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  229.719391][ T5963] usb 2-1: USB disconnect, device number 34
[  229.722927][  T974] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  229.726243][  T974] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  229.729355][  T974] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  229.820571][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  229.900270][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.969563][ T5921] Bluetooth: hci1: command 0x0406 tx timeout
[  230.053134][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.059562][ T5982] vmk80xx 5-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  230.063426][ T5982] vmk80xx 5-1:8.24: probe with driver vmk80xx failed with error -22
[  230.069669][ T5982] usb 5-1: USB disconnect, device number 37
[  230.550881][   T33] audit: type=1326 audit(1756206721.196:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.559789][   T33] audit: type=1326 audit(1756206721.206:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.582287][   T33] audit: type=1326 audit(1756206721.206:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.599725][   T33] audit: type=1326 audit(1756206721.206:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.608743][   T33] audit: type=1326 audit(1756206721.206:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.617978][   T33] audit: type=1326 audit(1756206721.206:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.627717][   T33] audit: type=1326 audit(1756206721.206:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.641820][   T33] audit: type=1326 audit(1756206721.206:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10975 comm="syz.4.1953" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f585e58ebe9 code=0x7ffc0000
[  230.930126][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.060094][ T5982] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  231.241610][ T5982] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  231.245438][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.254014][ T5982] usb 5-1: config 0 descriptor??
[  231.543571][ T5982] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  231.744741][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.760792][ T5982] [drm:udl_init] *ERROR* Selecting channel failed
[  231.791217][ T5982] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 3
[  231.794404][ T5982] [drm] Initialized udl on minor 3
[  231.802202][ T5982] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  231.816484][ T5982] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  231.826660][ T5963] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  231.839567][ T5982] usb 5-1: USB disconnect, device number 38
[  231.842822][ T5963] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  232.675711][T10998] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1962'.
[  233.103813][T11009] loop5: detected capacity change from 0 to 4096
[  233.110685][T11009] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  233.127937][   T52] net_ratelimit: 1 callbacks suppressed
[  233.127952][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.277775][T11012] loop1: detected capacity change from 0 to 32768
[  233.285952][T11012] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  233.321354][ T5929] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.392451][T11030] loop1: detected capacity change from 0 to 256
[  233.394875][T11030] exfat: Deprecated parameter 'namecase'
[  233.403137][T11030] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  233.503351][T11038] loop4: detected capacity change from 0 to 2048
[  233.514163][T11038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.569596][   T32] wlan1: Trigger new scan to find an IBSS to join
[  233.670959][   T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.675651][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.744449][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.774151][   T52] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  233.921899][   T52] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  233.924903][   T52] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  233.929139][   T52] usb 2-1: config 220 has no interface number 2
[  233.931541][   T52] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  233.936144][   T52] usb 2-1: config 220 interface 0 has no altsetting 0
[  233.938487][   T52] usb 2-1: config 220 interface 76 has no altsetting 0
[  233.941623][   T52] usb 2-1: config 220 interface 1 has no altsetting 0
[  233.946396][   T52] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  233.949663][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.952376][   T52] usb 2-1: Product: syz
[  233.953897][   T52] usb 2-1: Manufacturer: syz
[  233.955448][   T52] usb 2-1: SerialNumber: syz
[  234.129703][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.167129][   T52] usb 2-1: selecting invalid altsetting 0
[  234.170022][   T52] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  234.179523][   T52] usb 2-1: No valid video chain found.
[  234.185736][   T52] usb 2-1: selecting invalid altsetting 0
[  234.189980][   T52] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  234.200831][   T52] usb 2-1: USB disconnect, device number 35
[  234.678833][T11053] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  234.681609][T11053] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  234.770562][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.888902][T11071] loop1: detected capacity change from 0 to 512
[  234.900923][T11071] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  234.910502][T11071] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  234.914505][T11071] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1991: Corrupt directory, running e2fsck is recommended
[  234.936134][T11071] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[  234.943988][T11071] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1991: corrupted in-inode xattr: invalid ea_ino
[  234.949110][T11071] EXT4-fs (loop1): Remounting filesystem read-only
[  234.953313][T11071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.981381][ T5929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.986261][T11077] bridge2: entered promiscuous mode
[  235.018036][T11079] loop4: detected capacity change from 0 to 1024
[  235.028735][T11079] EXT4-fs: Ignoring removed orlov option
[  235.033650][T11079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  235.039039][T11079] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  235.044680][T11079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.082482][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.171348][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.179108][T11094] loop1: detected capacity change from 0 to 512
[  235.191021][T11094] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  235.208619][T11094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  235.226710][T11094] System zones: 1-12
[  235.228607][T11094] EXT4-fs (loop1): orphan cleanup on readonly fs
[  235.236002][T11094] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2001: invalid indirect mapped block 12 (level 1)
[  235.244891][T11094] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2001: invalid indirect mapped block 2 (level 2)
[  235.255085][T11094] EXT4-fs (loop1): 1 truncate cleaned up
[  235.260406][T11094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  235.331781][ T5929] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  235.377657][T11108] loop4: detected capacity change from 0 to 764
[  235.689027][T11099] loop5: detected capacity change from 0 to 32768
[  235.717250][   T33] audit: type=1800 audit(1756206726.366:97): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2003" name="file1" dev="loop5" ino=14 res=0 errno=0
[  236.220228][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  236.479628][T11122] loop5: detected capacity change from 0 to 512
[  236.497744][T11122] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2013: bad orphan inode 17
[  236.520458][T11122] ext4_test_bit(bit=16, block=4) = 1
[  236.526383][T11122] is_bad_inode(inode)=0
[  236.528163][T11122] NEXT_ORPHAN(inode)=0
[  236.532355][T11122] max_ino=32
[  236.533827][T11122] i_nlink=1
[  236.538661][T11122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.601028][ T7667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.609767][   T26] wlan1: Trigger new scan to find an IBSS to join
[  236.856593][T11130] loop5: detected capacity change from 0 to 4096
[  236.875324][T11133] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.945684][T11128] loop1: detected capacity change from 0 to 32768
[  236.958209][T11128] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  236.990563][T11128] XFS (loop1): Ending clean mount
[  236.993531][T11128] XFS (loop1): Quotacheck needed: Please wait.
[  236.998637][T11128] XFS (loop1): Quotacheck: Done.
[  237.016569][ T5929] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  237.089640][ T5963] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  237.240100][ T5963] usb 5-1: Using ep0 maxpacket: 16
[  237.256938][ T5963] usb 5-1: config 0 has an invalid interface number: 142 but max is 0
[  237.264173][ T5963] usb 5-1: config 0 has no interface number 0
[  237.275431][ T5963] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  237.278807][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.281911][ T5963] usb 5-1: Product: syz
[  237.283475][ T5963] usb 5-1: Manufacturer: syz
[  237.284987][ T5963] usb 5-1: SerialNumber: syz
[  237.290192][ T5963] usb 5-1: config 0 descriptor??
[  237.424264][   T33] audit: type=1326 audit(1756206728.076:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.1.2023" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  237.432959][   T33] audit: type=1326 audit(1756206728.076:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.1.2023" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  237.442919][   T33] audit: type=1326 audit(1756206728.076:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.1.2023" exe="/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  237.452971][   T33] audit: type=1326 audit(1756206728.076:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.1.2023" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ca618ebe9 code=0x7ffc0000
[  237.525084][ T5921] Bluetooth: hci2: SCO packet for unknown connection handle 200
[  237.526664][T11159] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2024'.
[  237.532235][ T5963] usb 5-1: Found UVC 0.00 device syz (1bcf:0b40)
[  237.539669][ T5963] usb 5-1: Forcing UVC version to 1.0a
[  237.541568][ T5963] usb 5-1: No valid video chain found.
[  237.546483][ T5963] usb 5-1: USB disconnect, device number 39
[  237.555465][T11159] hsr_slave_1 (unregistering): left promiscuous mode
[  238.088746][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2026'.
[  238.096329][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2026'.
[  238.300024][   T52] net_ratelimit: 2 callbacks suppressed
[  238.300037][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  238.536829][T11174] tc_dump_action: action bad kind
[  238.961332][T11205] loop1: detected capacity change from 0 to 764
[  238.965475][T11205] rock: directory entry would overflow storage
[  238.967596][T11205] rock: sig=0x4654, size=5, remaining=4
[  239.298210][T11213] loop4: detected capacity change from 0 to 32768
[  239.306750][T11213] XFS: noikeep mount option is deprecated.
[  239.441454][ T5962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.590139][   T53] wlan1: Trigger new scan to find an IBSS to join
[  239.595512][ T4346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.600709][ T5963] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.605546][  T974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.609767][T11213] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.630330][T11213] XFS (loop4): Ending clean mount
[  239.633805][T11213] XFS (loop4): Quotacheck needed: Please wait.
[  239.672933][T11213] XFS (loop4): Quotacheck: Done.
[  239.880830][ T6706] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  240.243186][T11261] loop4: detected capacity change from 0 to 512
[  240.250352][T11261] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2065: corrupted in-inode xattr: invalid ea_ino
[  240.259266][T11261] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2065: couldn't read orphan inode 15 (err -117)
[  240.266119][T11261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.313106][ T6706] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.351508][  T974] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  240.449642][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.517181][  T974] usb 2-1: config 0 interface 0 has no altsetting 0
[  240.520567][  T974] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  240.530489][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.540137][  T974] usb 2-1: config 0 descriptor??
[  240.558157][   T53] wlan1: Creating new IBSS network, BSSID 7e:e1:34:96:ff:70
[  240.589714][ T5963] ------------[ cut here ]------------
[  240.591700][ T5963] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  240.595575][ T5963] WARNING: CPU: 0 PID: 5963 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  240.598770][ T5963] Modules linked in:
[  240.600487][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  240.604916][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.609061][ T5963] Workqueue: mld mld_ifc_work
[  240.611314][ T5963] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  240.614021][ T5963] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 71 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 55 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  240.622032][ T5963] RSP: 0018:ffffc90003b1e4d8 EFLAGS: 00010246
[  240.624629][ T5963] RAX: 2f1793547de13900 RBX: 000000000000000c RCX: ffff88801cb3b980
[  240.627818][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  240.631288][ T5963] RBP: dffffc0000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[  240.634504][ T5963] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888104971b28
[  240.637756][ T5963] R13: 0000000000000000 R14: ffff888020ff8e40 R15: ffff888020ffb0d8
[  240.641021][ T5963] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  240.644648][ T5963] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.647348][ T5963] CR2: 00007f5854cf7000 CR3: 000000002367a000 CR4: 00000000000006f0
[  240.650830][ T5963] Call Trace:
[  240.652301][ T5963]  <TASK>
[  240.653651][ T5963]  rate_control_send_low+0x194/0x7a0
[  240.655917][ T5963]  ? desc_read+0x1b8/0x3f0
[  240.657815][ T5963]  rate_control_get_rate+0x20b/0x5d0
[  240.660213][ T5963]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  240.662688][ T5963]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  240.665398][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.667449][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.669661][ T5963]  invoke_tx_handlers_late+0xb6/0x1820
[  240.671982][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.673937][ T5963]  ? ieee80211_tx_h_select_key+0x1090/0x19f0
[  240.676338][ T5963]  ieee80211_tx_dequeue+0x308e/0x4360
[  240.678665][ T5963]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  240.681167][ T5963]  ? __local_bh_enable_ip+0x12d/0x1c0
[  240.683381][ T5963]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  240.685860][ T5963]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  240.688567][ T5963]  ? __local_bh_enable_ip+0x12d/0x1c0
[  240.690914][ T5963]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  240.693257][ T5963]  ? do_raw_spin_unlock+0x4d/0x240
[  240.695335][ T5963]  ieee80211_queue_skb+0x1a31/0x21c0
[  240.697518][ T5963]  ieee80211_tx+0x297/0x420
[  240.699609][ T5963]  ? __pfx_ieee80211_tx+0x10/0x10
[  240.701743][ T5963]  ? ieee80211_xmit+0x315/0x400
[  240.703779][ T5963]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  240.706164][ T5963]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  240.708703][ T5963]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  240.711518][ T5963]  ? skb_network_protocol+0x508/0x760
[  240.713849][ T5963]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  240.716453][ T5963]  ieee80211_subif_start_xmit+0xe0/0x510
[  240.718829][ T5963]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  240.721575][ T5963]  dev_hard_start_xmit+0x2d7/0x830
[  240.723778][ T5963]  __dev_queue_xmit+0x1b8d/0x3b50
[  240.725872][ T5963]  ? __dev_queue_xmit+0x27b/0x3b50
[  240.728126][ T5963]  ? neigh_resolve_output+0x438/0x750
[  240.730541][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.732507][ T5963]  ? neigh_resolve_output+0x438/0x750
[  240.734697][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.736660][ T5963]  ? __pfx___dev_queue_xmit+0x10/0x10
[  240.737080][T11272] loop4: detected capacity change from 0 to 40427
[  240.738882][ T5963]  ? neigh_resolve_output+0x438/0x750
[  240.738907][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.743118][T11272] F2FS-fs (loop4): invalid crc value
[  240.745158][ T5963]  ? read_seqbegin+0x1ac/0x250
[  240.749224][ T5963]  ? __pfx_read_seqbegin+0x10/0x10
[  240.751571][ T5963]  ? __local_bh_enable_ip+0x12d/0x1c0
[  240.753918][ T5963]  ? eth_header+0x11b/0x200
[  240.755913][ T5963]  ? __asan_memcpy+0x40/0x70
[  240.757875][ T5963]  ? eth_header+0x11b/0x200
[  240.759979][ T5963]  ? __pfx_eth_header+0x10/0x10
[  240.762112][ T5963]  ? neigh_resolve_output+0x624/0x750
[  240.764345][ T5963]  ip6_finish_output2+0x11fe/0x16a0
[  240.766420][ T5963]  ? ip6_finish_output2+0x701/0x16a0
[  240.768594][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.770836][ T5963]  ? __pfx_ip6_finish_output2+0x10/0x10
[  240.773222][ T5963]  ? ip6_mtu+0x7d/0x3f0
[  240.774994][ T5963]  ? ip6_mtu+0x321/0x3f0
[  240.775896][T11272] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  240.776844][ T5963]  ? ip6_finish_output+0x2ef/0x4e0
[  240.780281][T11272] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  240.781762][ T5963]  NF_HOOK+0x9e/0x380
[  240.785778][ T5963]  ? NF_HOOK+0x101/0x380
[  240.787748][ T5963]  ? __pfx_NF_HOOK+0x10/0x10
[  240.789903][ T5963]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  240.792401][ T5963]  ? do_raw_spin_unlock+0x4d/0x240
[  240.794658][ T5963]  ? icmp6_dst_alloc+0x3a5/0x420
[  240.796823][ T5963]  ? icmp6_dst_alloc+0x3a5/0x420
[  240.798983][ T5963]  mld_sendpack+0x800/0xd80
[  240.801174][ T5963]  ? mld_sendpack+0x1de/0xd80
[  240.803278][ T5963]  ? __pfx_mld_sendpack+0x10/0x10
[  240.805485][ T5963]  mld_ifc_work+0x83e/0xd60
[  240.807506][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.809699][ T5963]  ? process_scheduled_works+0x9ef/0x17b0
[  240.812190][ T5963]  process_scheduled_works+0xae1/0x17b0
[  240.814627][ T5963]  ? __pfx_process_scheduled_works+0x10/0x10
[  240.815194][T11272] syz.4.2069: attempt to access beyond end of device
[  240.815194][T11272] loop4: rw=2049, sector=77824, nr_sectors = 2048 limit=40427
[  240.817259][ T5963]  worker_thread+0x8a0/0xda0
[  240.823627][ T5963]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  240.826313][ T5963]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  240.828825][ T5963]  ? __kthread_parkme+0x7b/0x200
[  240.831128][ T5963]  kthread+0x711/0x8a0
[  240.832893][ T5963]  ? __pfx_worker_thread+0x10/0x10
[  240.835133][ T5963]  ? __pfx_kthread+0x10/0x10
[  240.837191][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.839242][ T5963]  ? __pfx_kthread+0x10/0x10
[  240.841423][ T5963]  ret_from_fork+0x3fc/0x770
[  240.843479][ T5963]  ? __pfx_ret_from_fork+0x10/0x10
[  240.845688][ T5963]  ? __switch_to_asm+0x39/0x70
[  240.847847][ T5963]  ? __switch_to_asm+0x33/0x70
[  240.850088][ T5963]  ? __pfx_kthread+0x10/0x10
[  240.852144][ T5963]  ret_from_fork_asm+0x1a/0x30
[  240.854259][ T5963]  </TASK>
[  240.855610][ T5963] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  240.858461][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) 
[  240.862204][ T5963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  240.866264][ T5963] Workqueue: mld mld_ifc_work
[  240.868166][ T5963] Call Trace:
[  240.869522][ T5963]  <TASK>
[  240.870737][ T5963]  dump_stack_lvl+0x99/0x250
[  240.872592][ T5963]  ? __asan_memcpy+0x40/0x70
[  240.874421][ T5963]  ? __pfx_dump_stack_lvl+0x10/0x10
[  240.876596][ T5963]  ? __pfx__printk+0x10/0x10
[  240.878450][ T5963]  vpanic+0x281/0x750
[  240.880045][ T5963]  ? __pfx__printk+0x10/0x10
[  240.881979][ T5963]  ? __pfx_vpanic+0x10/0x10
[  240.883861][ T5963]  ? is_bpf_text_address+0x292/0x2b0
[  240.886066][ T5963]  panic+0xb9/0xc0
[  240.887654][ T5963]  ? __pfx_panic+0x10/0x10
[  240.889505][ T5963]  __warn+0x31b/0x4b0
[  240.891083][ T5963]  ? __rate_control_send_low+0x5df/0x820
[  240.893374][ T5963]  ? __rate_control_send_low+0x5df/0x820
[  240.895570][ T5963]  report_bug+0x2be/0x4f0
[  240.897357][ T5963]  ? __rate_control_send_low+0x5df/0x820
[  240.899670][ T5963]  ? __rate_control_send_low+0x5df/0x820
[  240.901932][ T5963]  ? __rate_control_send_low+0x5e1/0x820
[  240.904139][ T5963]  handle_bug+0x84/0x160
[  240.905892][ T5963]  exc_invalid_op+0x1a/0x50
[  240.907766][ T5963]  asm_exc_invalid_op+0x1a/0x20
[  240.909640][ T5963] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  240.912074][ T5963] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 20 71 b0 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 d2 55 93 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  240.919786][ T5963] RSP: 0018:ffffc90003b1e4d8 EFLAGS: 00010246
[  240.922285][ T5963] RAX: 2f1793547de13900 RBX: 000000000000000c RCX: ffff88801cb3b980
[  240.925516][ T5963] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  240.928734][ T5963] RBP: dffffc0000000000 R08: ffff88804b024253 R09: 1ffff1100960484a
[  240.931835][ T5963] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888104971b28
[  240.935058][ T5963] R13: 0000000000000000 R14: ffff888020ff8e40 R15: ffff888020ffb0d8
[  240.938285][ T5963]  ? __rate_control_send_low+0x5de/0x820
[  240.940573][ T5963]  rate_control_send_low+0x194/0x7a0
[  240.942763][ T5963]  ? desc_read+0x1b8/0x3f0
[  240.944603][ T5963]  rate_control_get_rate+0x20b/0x5d0
[  240.946794][ T5963]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  240.948993][ T5963]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  240.951356][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.953270][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.955165][ T5963]  invoke_tx_handlers_late+0xb6/0x1820
[  240.957323][ T5963]  ? rcu_is_watching+0x15/0xb0
[  240.959199][ T5963]  ? ieee80211_tx_h_select_key+0x1090/0x19f0
[  240.961594][ T5963]  ieee80211_tx_dequeue+0x308e/0x4360
[  240.963745][ T5963]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  240.966063][ T5963]  ? __local_bh_enable_ip+0x12d/0x1c0
[  240.968271][ T5963]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  240.970761][ T5963]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  240.973339][ T5963]  ? __local_bh_enable_ip+0x12d/0x1c0
[  240.975452][ T5963]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  240.977658][ T5963]  ? do_raw_spin_unlock+0x4d/0x240
[  240.979651][ T5963]  ieee80211_queue_skb+0x1a31/0x21c0
[  240.981817][ T5963]  ieee80211_tx+0x297/0x420
[  240.983607][ T5963]  ? __pfx_ieee80211_tx+0x10/0x10
[  240.985589][ T5963]  ? ieee80211_xmit+0x315/0x400
[  240.987603][ T5963]  __ieee80211_subif_start_xmit+0xccf/0x1610
[  240.990000][ T5963]  ? __ieee80211_subif_start_xmit+0x2be/0x1610
[  240.992429][ T5963]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  240.994960][ T5963]  ? skb_network_protocol+0x508/0x760
[  240.997087][ T5963]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  240.999528][ T5963]  ieee80211_subif_start_xmit+0xe0/0x510
[  241.001729][ T5963]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  241.004278][ T5963]  dev_hard_start_xmit+0x2d7/0x830
[  241.006352][ T5963]  __dev_queue_xmit+0x1b8d/0x3b50
[  241.008391][ T5963]  ? __dev_queue_xmit+0x27b/0x3b50
[  241.010501][ T5963]  ? neigh_resolve_output+0x438/0x750
[  241.012640][ T5963]  ? rcu_is_watching+0x15/0xb0
[  241.014535][ T5963]  ? neigh_resolve_output+0x438/0x750
[  241.016781][ T5963]  ? rcu_is_watching+0x15/0xb0
[  241.018755][ T5963]  ? __pfx___dev_queue_xmit+0x10/0x10
[  241.020959][ T5963]  ? neigh_resolve_output+0x438/0x750
[  241.023093][ T5963]  ? rcu_is_watching+0x15/0xb0
[  241.024976][ T5963]  ? read_seqbegin+0x1ac/0x250
[  241.026859][ T5963]  ? __pfx_read_seqbegin+0x10/0x10
[  241.028831][ T5963]  ? __local_bh_enable_ip+0x12d/0x1c0
[  241.030969][ T5963]  ? eth_header+0x11b/0x200
[  241.032823][ T5963]  ? __asan_memcpy+0x40/0x70
[  241.034731][ T5963]  ? eth_header+0x11b/0x200
[  241.036588][ T5963]  ? __pfx_eth_header+0x10/0x10
[  241.038589][ T5963]  ? neigh_resolve_output+0x624/0x750
[  241.040815][ T5963]  ip6_finish_output2+0x11fe/0x16a0
[  241.042973][ T5963]  ? ip6_finish_output2+0x701/0x16a0
[  241.045155][ T5963]  ? rcu_is_watching+0x15/0xb0
[  241.047175][ T5963]  ? __pfx_ip6_finish_output2+0x10/0x10
[  241.049477][ T5963]  ? ip6_mtu+0x7d/0x3f0
[  241.051165][ T5963]  ? ip6_mtu+0x321/0x3f0
[  241.052923][ T5963]  ? ip6_finish_output+0x2ef/0x4e0
[  241.054972][ T5963]  NF_HOOK+0x9e/0x380
[  241.056611][ T5963]  ? NF_HOOK+0x101/0x380
[  241.058360][ T5963]  ? __pfx_NF_HOOK+0x10/0x10
[  241.060150][ T5963]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  241.062400][ T5963]  ? do_raw_spin_unlock+0x4d/0x240
[  241.064452][ T5963]  ? icmp6_dst_alloc+0x3a5/0x420
[  241.066443][ T5963]  ? icmp6_dst_alloc+0x3a5/0x420
[  241.068433][ T5963]  mld_sendpack+0x800/0xd80
[  241.070336][ T5963]  ? mld_sendpack+0x1de/0xd80
[  241.072266][ T5963]  ? __pfx_mld_sendpack+0x10/0x10
[  241.074200][ T5963]  mld_ifc_work+0x83e/0xd60
[  241.076006][ T5963]  ? rcu_is_watching+0x15/0xb0
[  241.077925][ T5963]  ? process_scheduled_works+0x9ef/0x17b0
[  241.080089][ T5963]  process_scheduled_works+0xae1/0x17b0
[  241.082227][ T5963]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.084564][ T5963]  worker_thread+0x8a0/0xda0
[  241.086368][ T5963]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.088857][ T5963]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.091115][ T5963]  ? __kthread_parkme+0x7b/0x200
[  241.093009][ T5963]  kthread+0x711/0x8a0
[  241.094565][ T5963]  ? __pfx_worker_thread+0x10/0x10
[  241.096584][ T5963]  ? __pfx_kthread+0x10/0x10
[  241.098407][ T5963]  ? rcu_is_watching+0x15/0xb0
[  241.100299][ T5963]  ? __pfx_kthread+0x10/0x10
[  241.102205][ T5963]  ret_from_fork+0x3fc/0x770
[  241.104074][ T5963]  ? __pfx_ret_from_fork+0x10/0x10
[  241.106120][ T5963]  ? __switch_to_asm+0x39/0x70
[  241.108014][ T5963]  ? __switch_to_asm+0x33/0x70
[  241.109879][ T5963]  ? __pfx_kthread+0x10/0x10
[  241.111673][ T5963]  ret_from_fork_asm+0x1a/0x30
[  241.113636][ T5963]  </TASK>
[  241.115605][ T5963] Kernel Offset: disabled
[  241.117326][ T5963] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:12:10  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006e RBX=000000000000006e RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003b1dc70
R8 =ffff88801fe98237 R9 =1ffff11003fd3046 R10=dffffc0000000000 R11=ffffffff854f1c80
R12=dffffc0000000000 R13=ffffffff99afa909 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1cfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5854cf7000 CR3=000000002367a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffff0000000000 0000000000000000 XMM05=0000000000000021 0000000000002f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=303a312d322f312d 322f326273752f31
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000080000 RDX=ffffc90003f92000
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=ffff88801b0d35e0 RSP=ffffc90006fefac0
R8 =ffff88801b0d35df R9 =1ffff1100361a6bb R10=dffffc0000000000 R11=ffffed100361a6bc
R12=ffffffff822e4b5d R13=ffffffff822e4b5d R14=ffffffff8e139ea0 R15=0000000000000001
RIP=ffffffff8b799153 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f585f3216c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5855378000 CR3=000000011c0d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f585f3205a0 00007f585f320580
XMM02=00007f585f3206e0 00007f585f320560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f585f3205a0 XMM05=0000000000000000 00007f585f3206e0
XMM06=00007f585f3206e0 00007f585f320560 XMM07=00007f585f3205a0 00007f585f320580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f585e612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
