last executing test programs:

2m56.851811033s ago: executing program 0 (id=276):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x2fff, 0x1, &(0x7f00000000c0)='r', 0x5})

2m56.787199592s ago: executing program 0 (id=277):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000e00)='./bus\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0xfc, 0xdc4, &(0x7f0000003c00)="$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")
creat(&(0x7f0000040040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x5)

2m56.720895151s ago: executing program 0 (id=280):
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)

2m56.66516111s ago: executing program 0 (id=281):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

2m56.546256616s ago: executing program 0 (id=285):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@noinit_itable}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x65)
mkdirat(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000840)='./file0/../file0\x00', 0x0, 0x20230a0, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

2m56.137825218s ago: executing program 0 (id=293):
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x42, 0x3c, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x18})

2m56.114060669s ago: executing program 32 (id=293):
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x42, 0x3c, 0xc0, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38)
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff6, 0x20006, 0xfffffffffffffffc}], 0x1, 0x6, 0x0, 0x2, 0x7, 0x18})

2m49.042062234s ago: executing program 3 (id=349):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={[{@logbufs={'logbufs', 0x3d, 0x2}}, {@noalign}, {@sysvgroups}, {@inode64}, {@logbufs={'logbufs', 0x3d, 0x6}}]}, 0x1, 0xb919, &(0x7f0000001440)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2m48.137505319s ago: executing program 3 (id=357):
r0 = socket$igmp(0x2, 0x3, 0x2)
getsockopt$inet_pktinfo(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000480)=0x2)

2m47.584114438s ago: executing program 3 (id=359):
r0 = socket(0x1e, 0x4, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10)

2m47.322717445s ago: executing program 3 (id=361):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1200009, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, 0x0, 0x10a01, 0x56aa4f46aad4d687)

2m47.189723696s ago: executing program 3 (id=362):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockname(r0, 0x0, &(0x7f0000000280))

2m46.743074235s ago: executing program 3 (id=371):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m46.629762244s ago: executing program 33 (id=371):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m43.433355808s ago: executing program 2 (id=399):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xa0031, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x5, 0x802, 0xdf, 0x1f, 0x402, 0x1004})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

2m43.27421752s ago: executing program 2 (id=401):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0))

2m42.360810866s ago: executing program 2 (id=406):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0)

2m42.294388567s ago: executing program 2 (id=407):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

2m42.169904323s ago: executing program 2 (id=408):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x9)

2m41.933150421s ago: executing program 2 (id=409):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
sendto(r0, 0x0, 0x0, 0x8800, 0x0, 0x0)

2m41.693285583s ago: executing program 34 (id=409):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60)
sendto(r0, 0x0, 0x0, 0x8800, 0x0, 0x0)

2.979939969s ago: executing program 5 (id=2767):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.418793134s ago: executing program 5 (id=2772):
r0 = syz_io_uring_setup(0x10d6, &(0x7f0000000340)={0x0, 0x6730, 0x80, 0x5, 0xe}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x7, 0x2}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x51, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0)

2.23611665s ago: executing program 1 (id=2775):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x5409, 0x0)

2.235952334s ago: executing program 5 (id=2776):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x18)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}], 0x1}, 0x0)

2.131257149s ago: executing program 5 (id=2778):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x300}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0)

2.09501455s ago: executing program 5 (id=2781):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="68cee02bc855d998f4117cf3759cf171d5abaa3a0351d2759cc7a29fd9673b", 0x1f}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000004)

1.931167401s ago: executing program 5 (id=2783):
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000b00)='./file0/../file0/file0/file0\x00', 0x400)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x6000, 0x0)
write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x4, 0x40488060, 0x0, 0x0, 0x0, 0x9b, 0x0, 0x0, 0x40, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8001000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x738}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x0, 0x16, 0x0, 0x12754f40, 0x0, {0x1, 0x7, 0x2, 0x4, 0x3, 0x100000000000008, 0x80000000, 0x800, 0x3, 0x6000, 0xffffffff, 0x0, r6, 0x0, 0x8049}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c8301020301090229000100000000090429000002020100052402000005"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40004}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, @generic={0x66, 0x0, 0x0, 0x0, 0xf1}, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xa}, 0x94)
ioctl$PIO_SCRNMAP(r7, 0x4b52, &(0x7f00000001c0))

1.799478763s ago: executing program 1 (id=2784):
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0)

670.907572ms ago: executing program 4 (id=2789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

609.751566ms ago: executing program 4 (id=2790):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="441f08d600270bcf724ef54e91e6ffbe002a5f89000000000000000000", 0x1d)

609.525777ms ago: executing program 4 (id=2791):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x5c, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4044}, 0x40000)

530.957268ms ago: executing program 4 (id=2792):
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

209.762378ms ago: executing program 1 (id=2793):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f0000008200)=[{{0x0, 0x6, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)=""/153, 0x99}, {&(0x7f00000009c0)=""/4110, 0x100e}, {&(0x7f0000000640)=""/211, 0xd3}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001a00)=""/156, 0x9c}, {&(0x7f0000001f40)=""/213, 0xd5}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000002d40)=""/4115, 0x1013}, {&(0x7f0000000440)=""/68, 0x44}, {&(0x7f0000000840)=""/245, 0xf5}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x3}], 0x5, 0x12142, 0x0)

209.288708ms ago: executing program 1 (id=2794):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

130.195793ms ago: executing program 1 (id=2795):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000440000004400000006000000040000000000000e04000000000000000000000002000010040000000b0004000100000004fd5b00050000000000000000000004000000000400000000000008030000000000000061"], 0x0, 0x62}, 0x28)

130.009616ms ago: executing program 1 (id=2796):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x800401, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$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")

109.64µs ago: executing program 4 (id=2797):
socket(0x2, 0x3, 0xff)
close(0x3)

0s ago: executing program 4 (id=2798):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="7a0a00ff0000000071107f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

kernel console output (not intermixed with test programs):

fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  122.795600][ T8186] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.646: corrupted inode contents
[  122.799998][ T8186] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.646: mark_inode_dirty error
[  122.803913][ T8186] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  122.810903][ T8186] EXT4-fs (loop5): 1 truncate cleaned up
[  122.814884][ T8186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.820050][ T8186] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.841501][ T7210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.874500][ T8194] netlink: 'syz.5.648': attribute type 12 has an invalid length.
[  122.877490][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'.
[  122.892262][ T8194] netlink: 'syz.5.648': attribute type 12 has an invalid length.
[  122.896531][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'.
[  122.900751][ T8194] Zero length message leads to an empty skb
[  122.903086][   T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  122.906308][   T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  122.910636][   T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  122.914372][   T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  122.966124][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.649'.
[  122.970366][ T8196] smc: net device bond0 applied user defined pnetid SYZ
[  123.438214][ T8210] loop5: detected capacity change from 0 to 2048
[  123.457881][ T8210] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  123.470009][ T8210] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  123.492901][ T5906] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  123.561702][ T7210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.692440][ T5906] usb 5-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[  123.707299][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.732953][ T5906] usb 5-1: config 0 descriptor??
[  123.738017][ T5906] usb 5-1: Invalid firmware size=18.
[  123.942169][ T5906] usb 5-1: USB disconnect, device number 4
[  124.050612][ T8218] loop1: detected capacity change from 0 to 40427
[  124.058738][ T8218] F2FS-fs (loop1): Image doesn't support compression
[  124.067915][ T8218] F2FS-fs (loop1): invalid crc value
[  124.122062][ T8218] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  124.127070][ T8218] F2FS-fs (loop1): Start checkpoint disabled!
[  124.131881][ T8218] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  124.146573][ T8218] F2FS-fs (loop1): Image doesn't support compression
[  124.235625][ T8231] netlink: 'syz.5.665': attribute type 1 has an invalid length.
[  124.394090][ T8237] loop1: detected capacity change from 0 to 8
[  124.496513][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'.
[  124.563081][   T52] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  124.580968][ T8247] loop1: detected capacity change from 0 to 64
[  124.638461][ T8249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'.
[  124.718506][   T52] usb 6-1: config 0 has no interfaces?
[  124.724294][   T52] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  124.729440][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.732661][   T52] usb 6-1: Product: syz
[  124.736093][   T52] usb 6-1: Manufacturer: syz
[  124.738080][   T52] usb 6-1: SerialNumber: syz
[  124.747522][   T52] usb 6-1: config 0 descriptor??
[  124.813176][ T5873] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  124.838302][ T8265] loop1: detected capacity change from 0 to 164
[  124.952130][ T8271] loop1: detected capacity change from 0 to 1024
[  124.965561][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0
[  124.969118][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0
[  124.972463][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  124.981249][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0
[  124.989260][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  124.992537][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.996959][ T5873] usb 5-1: Product: syz
[  124.998593][ T5873] usb 5-1: Manufacturer: syz
[  125.000503][ T5873] usb 5-1: SerialNumber: syz
[  125.012678][ T8233] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  125.014414][ T5873] usb 5-1: config 0 descriptor??
[  125.018477][ T8271] hfsplus: bad catalog file entry
[  125.022691][ T8233] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  125.024477][ T5873] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  125.031276][ T5873] em28xx 5-1:0.0: Device initialization failed.
[  125.035728][ T5873] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  125.068055][  T724] hfsplus: b-tree write err: -5, ino 3
[  125.070031][  T724] hfsplus: bad catalog file entry
[  125.070971][ T5906] usb 6-1: USB disconnect, device number 3
[  125.246118][ T5763] usb 5-1: USB disconnect, device number 5
[  125.296203][ T8277] loop1: detected capacity change from 0 to 32768
[  125.356105][ T8277] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  125.356118][ T8277]   allowing incompatible features above 0.0: (unknown version)
[  125.356122][ T8277]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  125.373203][ T8277] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  125.376159][ T8277] bcachefs (loop1): initializing new filesystem
[  125.382355][ T8277] bcachefs (loop1): going read-write
[  125.389854][ T8277] bcachefs (loop1): marking superblocks
[  125.418970][ T8277] bcachefs (loop1): initializing freespace
[  125.426887][ T8277] bcachefs (loop1): done initializing freespace
[  125.432323][ T8277] bcachefs (loop1): reading snapshots table
[  125.436547][ T8277] bcachefs (loop1): reading snapshots done
[  125.453454][ T8277] bcachefs (loop1): done starting filesystem
[  125.491753][   T33] audit: type=1800 audit(1755556309.485:18): pid=8277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.686" name="file1" dev="loop1" ino=4099 res=0 errno=0
[  125.493216][ T8277] bcachefs (loop1): requested incompat feature 1.16: reflink_p_may_update_opts currently not enabled, allowed up to 1.16: reflink_p_may_update_opts
[  125.493216][ T8277]   set version_upgrade=incompat to enable
[  125.539059][ T8277] syz.1.686 (8277) used greatest stack depth: 16552 bytes left
[  125.551032][ T5844] bcachefs (loop1): shutting down
[  125.554578][ T5844] bcachefs (loop1): going read-only
[  125.556821][ T5844] bcachefs (loop1): finished waiting for writes to stop
[  125.561720][ T5844] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8
[  125.601139][ T5844] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  125.619703][ T5844] bcachefs (loop1): clean shutdown complete, journal seq 11
[  125.625084][ T5844] bcachefs (loop1): marking filesystem clean
[  125.681471][ T5844] bcachefs (loop1): shutdown complete
[  125.950606][ T8294] loop5: detected capacity change from 0 to 40427
[  125.964329][ T8294] F2FS-fs (loop5): invalid crc value
[  126.020432][ T8294] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.025088][ T8294] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  126.452903][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  126.602869][ T5906] usb 6-1: Using ep0 maxpacket: 8
[  126.607166][ T5906] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  126.610665][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.614951][ T5906] usb 6-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  126.618761][ T5906] usb 6-1: config 0 has no interface number 0
[  126.621465][ T5906] usb 6-1: config 0 has no interface number 1
[  126.625301][ T5906] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  126.629005][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.635624][ T5906] usb 6-1: config 0 descriptor??
[  126.640469][ T5906] usb 6-1: unknown number of interfaces: 2
[  126.855408][ T5763] usb 6-1: USB disconnect, device number 4
[  127.295310][ T8329] loop1: detected capacity change from 0 to 128
[  127.379454][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'.
[  127.730496][ T8342] loop4: detected capacity change from 0 to 512
[  127.735988][ T8342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  127.752254][ T8342] EXT4-fs (loop4): 1 truncate cleaned up
[  127.763579][ T8346] loop1: detected capacity change from 0 to 2048
[  127.763709][ T8342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.769624][ T8346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.793661][ T8346] UDF-fs: error (device loop1): udf_rename: failed to find renamed entry again in directory (ino 1376)
[  127.923072][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.069008][ T8348] loop5: detected capacity change from 0 to 32768
[  128.103969][ T8364] loop4: detected capacity change from 0 to 736
[  128.133018][ T5763] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  128.156002][ T8364] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[  128.209249][ T8348] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  128.209265][ T8348]   allowing incompatible features above 0.0: (unknown version)
[  128.209273][ T8348]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  128.236186][ T8348] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  128.239498][ T8348] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  128.242459][ T8348] bcachefs (loop5): Version upgrade required:
[  128.242459][ T8348] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  128.242459][ T8348] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  128.242459][ T8348]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  128.269616][ T8348] bcachefs (loop5): dropping and reconstructing all alloc info
[  128.280325][ T8348] bcachefs (loop5): accounting_read... done
[  128.287634][ T8348] bcachefs (loop5): alloc_read... done
[  128.289863][ T8348] bcachefs (loop5): snapshots_read...
[  128.290032][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.295118][ T8348]  done
[  128.296312][ T8348] bcachefs (loop5): done starting filesystem
[  128.299720][ T5763] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  128.302571][ T5763] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  128.309666][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.314234][ T5763] usb 2-1: config 0 descriptor??
[  128.333849][ T5763] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  128.339930][ T5763] dvb-usb: bulk message failed: -22 (3/0)
[  128.340193][ T7210] bcachefs (loop5): shutting down
[  128.346040][ T5763] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  128.350216][ T5763] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  128.352696][ T5763] usb 2-1: media controller created
[  128.367151][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  128.385017][ T7210] bcachefs (loop5): shutdown complete
[  128.389743][ T5763] dvb-usb: bulk message failed: -22 (6/0)
[  128.391779][ T5763] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  128.420167][ T8374] loop4: detected capacity change from 0 to 512
[  128.421606][ T5763] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  128.429435][ T5763] dvb-usb: schedule remote query interval to 150 msecs.
[  128.432034][ T5763] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  128.459024][ T8374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.471800][ T8374] ext4 filesystem being mounted at /117/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.490213][   T33] audit: type=1800 audit(1755556312.485:19): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.713" name="file1" dev="loop4" ino=15 res=0 errno=0
[  128.499144][   T33] audit: type=1800 audit(1755556312.495:20): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.713" name="file2" dev="loop4" ino=16 res=0 errno=0
[  128.585095][ T5763] dvb-usb: bulk message failed: -22 (1/0)
[  128.587199][ T5763] dvb-usb: error while querying for an remote control event.
[  128.653417][ T5763] usb 2-1: USB disconnect, device number 20
[  128.676432][ T5763] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  128.772940][ T7254] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  128.954967][ T7254] usb 5-1: config 0 has an invalid interface number: 48 but max is 2
[  128.957636][ T7254] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  128.961241][ T7254] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  128.965201][ T7254] usb 5-1: config 0 has no interface number 0
[  128.967224][ T7254] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  128.971040][ T7254] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  128.977142][ T7254] usb 5-1: config 0 interface 48 has no altsetting 0
[  128.979604][ T7254] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  128.982660][ T7254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.987035][ T7254] usb 5-1: config 0 descriptor??
[  129.226417][ T7254] usb 5-1: string descriptor 0 read error: -71
[  129.243228][ T7254] usb 5-1: USB disconnect, device number 6
[  129.509512][ T8393] loop5: detected capacity change from 0 to 4096
[  129.537820][ T8394] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.609130][ T8398] openvswitch: netlink: IP tunnel dst address not specified
[  129.700941][ T8385] loop1: detected capacity change from 0 to 32768
[  129.708010][ T8385] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  129.789468][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.090512][ T8419] loop4: detected capacity change from 0 to 1024
[  130.169631][ T8404] loop1: detected capacity change from 0 to 32768
[  130.299283][   T52] IPVS: starting estimator thread 0...
[  130.314950][ T8404] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[  130.314963][ T8404]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  130.329725][ T8404] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  130.353034][ T8404] bcachefs (loop1): recovering from clean shutdown, journal seq 8
[  130.356386][ T8404] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  130.356386][ T8404]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  130.384107][ T8435] IPVS: using max 80 ests per chain, 192000 per kthread
[  130.422292][ T8404] bcachefs (loop1): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  130.432638][ T8404] bcachefs (loop1): check_topology... done
[  130.444979][ T8404] bcachefs (loop1): accounting_read... done
[  130.451757][ T8404] bcachefs (loop1): alloc_read... done
[  130.464522][ T8404] bcachefs (loop1): snapshots_read... done
[  130.467242][ T8404] bcachefs (loop1): check_allocations...
[  130.472044][ T8404] bcachefs (loop1): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  130.492097][ T8404] bcachefs (loop1): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  130.529572][ T8404]  done
[  130.538867][ T8452] loop4: detected capacity change from 0 to 128
[  130.541821][ T8404] bcachefs (loop1): going read-write
[  130.560087][ T8404] bcachefs (loop1): journal_replay...
[  130.623606][ T8452] syz.4.745: attempt to access beyond end of device
[  130.623606][ T8452] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  130.629559][ T8404]  done
[  130.634276][ T8404] bcachefs (loop1): check_lrus... done
[  130.637292][ T8452] syz.4.745: attempt to access beyond end of device
[  130.637292][ T8452] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  130.637676][ T8404] bcachefs (loop1): check_backpointers_to_extents... done
[  130.647930][ T8404] bcachefs (loop1): check_extents_to_backpointers... done
[  130.656484][ T8404] bcachefs (loop1): check_inodes... done
[  130.659851][ T8404] bcachefs (loop1): resume_logged_ops... done
[  130.662582][ T8404] bcachefs (loop1): delete_dead_inodes... done
[  130.667152][ T8404] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  130.670234][ T8404] bcachefs (loop1): check_extents_to_backpointers...
[  130.671164][ T8404] bcachefs (loop1): scanning for missing backpointers in 1/512 buckets
[  130.678864][ T8404]  done
[  130.680697][ T8404] bcachefs (loop1): check_inodes... done
[  130.683415][ T8404] bcachefs (loop1): resume_logged_ops... done
[  130.686149][ T8404] bcachefs (loop1): delete_dead_inodes... done
[  130.690135][ T8404] bcachefs (loop1): done starting filesystem
[  130.723614][ T8404] syz.1.725 (8404) used greatest stack depth: 15112 bytes left
[  130.728389][ T5844] bcachefs (loop1): shutting down
[  130.730319][ T5844] bcachefs (loop1): going read-only
[  130.732296][ T5844] bcachefs (loop1): finished waiting for writes to stop
[  130.735876][ T5844] bcachefs (loop1): flushing journal and stopping allocators, journal seq 18
[  130.745382][ T5844] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 19
[  130.749905][ T5844] bcachefs (loop1): clean shutdown complete, journal seq 20
[  130.754676][ T5844] bcachefs (loop1): marking filesystem clean
[  130.786011][ T5844] bcachefs (loop1): shutdown complete
[  130.809285][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'.
[  130.882883][ T5763] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  130.938735][ T8466] loop4: detected capacity change from 0 to 2048
[  130.970095][ T8466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.976404][ T8466] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.984761][ T8466] EXT4-fs error (device loop4): __ext4_new_inode:1073: comm syz.4.751: reserved inode found cleared - inode=1
[  131.010491][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.044437][ T5763] usb 6-1: Using ep0 maxpacket: 8
[  131.048833][ T5763] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  131.051371][ T5763] usb 6-1: config 0 has no interface number 0
[  131.056385][ T5763] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  131.059765][ T5763] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  131.066791][ T5763] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  131.071100][ T5763] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  131.076490][ T5763] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  131.082797][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.090384][ T5763] usb 6-1: config 0 descriptor??
[  131.104975][ T5763] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  131.563046][ T7254] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  131.756986][ T7254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  131.762982][ T7254] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  131.769647][ T7254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  131.773209][ T7254] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  131.796614][ T7254] usb 5-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  131.799656][ T7254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.802580][ T7254] usb 5-1: Product: syz
[  131.804980][ T7254] usb 5-1: Manufacturer: syz
[  131.806797][ T7254] usb 5-1: SerialNumber: syz
[  131.815176][ T7254] usb 5-1: config 0 descriptor??
[  131.826658][ T7254] kvaser_usb 5-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  131.829132][ T7254] kvaser_usb 5-1:0.0: error -EMSGSIZE: Failed to initialize card
[  131.831788][ T7254] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90
[  131.872221][ T8487] netlink: 'syz.1.747': attribute type 1 has an invalid length.
[  131.957498][   T33] audit: type=1326 audit(1755556315.955:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  131.977811][   T33] audit: type=1326 audit(1755556315.955:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  131.995568][   T33] audit: type=1326 audit(1755556315.965:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.761" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  132.005641][   T33] audit: type=1326 audit(1755556315.965:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  132.014884][   T33] audit: type=1326 audit(1755556315.965:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8492 comm="syz.1.761" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  132.031917][ T5763] usb 5-1: USB disconnect, device number 7
[  132.161077][ T8499] loop1: detected capacity change from 0 to 512
[  132.170507][ T8499] EXT4-fs: Ignoring removed bh option
[  132.177054][ T8499] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  132.192174][ T8499] EXT4-fs (loop1): 1 truncate cleaned up
[  132.195901][ T8499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.236813][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.491420][ T8508] loop1: detected capacity change from 0 to 1024
[  132.497569][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.499696][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.510391][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.530698][   T33] audit: type=1800 audit(1755556316.525:26): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.767" name="bus" dev="loop1" ino=18 res=0 errno=0
[  132.552127][ T8508] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.767: Allocating blocks 385-513 which overlap fs metadata
[  132.570347][ T8508] EXT4-fs (loop1): pa ffff88810ad49570: logic 16, phys. 129, len 24
[  132.574055][ T8508] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  132.579740][ T8508] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1
[  132.585485][ T8508] EXT4-fs (loop1): This should not happen!! Data will be lost
[  132.585485][ T8508] 
[  132.634473][ T5844] Trying to write to read-only block-device loop1
[  132.640179][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.842879][ T5873] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  133.089792][ T5873] usb 5-1: config index 0 descriptor too short (expected 149, got 148)
[  133.094201][ T5873] usb 5-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config
[  133.099027][ T5873] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  133.108373][ T5873] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  133.112133][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  133.115134][ T5873] usb 5-1: SerialNumber: syz
[  133.137354][ T5873] usb 5-1: 0:2 : does not exist
[  133.139293][ T5873] usb 5-1: unit 48 not found!
[  133.326759][ T5906] usb 5-1: USB disconnect, device number 8
[  133.644544][ T5906] usb 6-1: USB disconnect, device number 5
[  133.693077][ T5906] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  133.766780][ T8528] loop5: detected capacity change from 0 to 4096
[  133.809628][ T8531] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.824676][   T33] audit: type=1800 audit(1755556317.815:27): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.775" name="file1" dev="loop5" ino=15 res=0 errno=0
[  133.995026][ T8547] netlink: 'syz.1.783': attribute type 24 has an invalid length.
[  134.098585][ T5873] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x4
[  134.104623][ T5873] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x2
[  134.107774][ T5873] hid-generic 0000:3000000:0000.0005: unknown main item tag 0x3
[  134.122700][ T5873] hid-generic 0000:3000000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [sy] on syz0
[  134.139101][ T8554] syzkaller0: entered allmulticast mode
[  134.439269][ T8577] loop1: detected capacity change from 0 to 512
[  134.535880][ T5873] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  134.646702][ T8581] loop1: detected capacity change from 0 to 32768
[  134.693046][ T5873] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.696797][ T5873] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.699824][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0
[  134.702120][ T5873] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  134.728412][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.734226][ T5873] usb 5-1: config 0 descriptor??
[  134.766020][ T8593] loop5: detected capacity change from 0 to 1024
[  134.800349][ T8593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.824469][ T7210] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.062073][ T8617] loop5: detected capacity change from 0 to 2048
[  135.076580][ T8617] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.100292][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'.
[  135.110251][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.816'.
[  135.237586][ T8613] loop1: detected capacity change from 0 to 40427
[  135.241286][ T8613] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  135.244175][ T8613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  135.253551][ T8613] F2FS-fs (loop1): invalid crc value
[  135.319266][ T8613] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  135.324506][ T8613] F2FS-fs (loop1): Try to recover 2th superblock, ret: -30
[  135.328102][ T8613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  135.349858][ T5873] usb 5-1: string descriptor 0 read error: -22
[  135.642904][ T5763] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  135.650739][ T5873] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0006/input/input13
[  135.740832][ T5873] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0006/input/input14
[  135.771593][ T5873] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0006/input/input15
[  135.813744][ T5873] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0006/input/input16
[  135.815833][ T5763] usb 6-1: Using ep0 maxpacket: 16
[  135.847864][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.851309][ T5763] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.857160][ T5873] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  135.872269][ T5763] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  135.890637][ T5763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.920370][ T5763] usb 6-1: config 0 descriptor??
[  135.923005][ T5873] usb 5-1: USB disconnect, device number 9
[  136.095022][ T8641] sctp: [Deprecated]: syz.1.825 (pid 8641) Use of int in maxseg socket option.
[  136.095022][ T8641] Use struct sctp_assoc_value instead
[  136.345957][ T5763] apple 0003:05AC:024B.0007: unknown main item tag 0x6
[  136.354408][ T5763] apple 0003:05AC:024B.0007: ignoring exceeding usage max
[  136.358407][ T5763] apple 0003:05AC:024B.0007: invalid report_size 16640
[  136.361501][ T5763] apple 0003:05AC:024B.0007: item 0 2 1 7 parsing failed
[  136.365490][ T5763] apple 0003:05AC:024B.0007: parse failed
[  136.368142][ T5763] apple 0003:05AC:024B.0007: probe with driver apple failed with error -22
[  136.469551][ T8652] loop4: detected capacity change from 0 to 8
[  136.475025][ T8652] SQUASHFS error: zlib decompression failed, data probably corrupt
[  136.478109][ T8652] SQUASHFS error: Failed to read block 0x9b: -5
[  136.480633][ T8652] SQUASHFS error: Unable to read metadata cache entry [99]
[  136.484720][ T8652] SQUASHFS error: Unable to read inode 0x127
[  136.547317][ T7254] usb 6-1: USB disconnect, device number 6
[  136.772811][ T5873] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  136.932883][ T5873] usb 5-1: Using ep0 maxpacket: 16
[  136.940624][ T5873] usb 5-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  136.944214][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.947363][ T5873] usb 5-1: Product: syz
[  136.949048][ T5873] usb 5-1: Manufacturer: syz
[  136.950883][ T5873] usb 5-1: SerialNumber: syz
[  136.955695][ T5873] usb 5-1: config 0 descriptor??
[  136.960317][ T5873] usb-storage 5-1:0.0: USB Mass Storage device detected
[  137.095032][ T8662] loop5: detected capacity change from 0 to 16
[  137.107023][ T8662] erofs (device loop5): mounted with root inode @ nid 36.
[  137.116728][   T33] audit: type=1800 audit(1755556321.115:28): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.834" name="file1" dev="loop5" ino=86 res=0 errno=0
[  137.179037][ T5763] usb 5-1: USB disconnect, device number 10
[  137.294338][ T5906] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  137.370879][ T8666] loop5: detected capacity change from 0 to 40427
[  137.377898][ T8666] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  137.380772][ T8666] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  137.385330][ T8666] F2FS-fs (loop5): invalid crc value
[  137.388928][ T8666] F2FS-fs (loop5): invalid journal entries nats 26624 sits 6
[  137.391818][ T8666] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-22)
[  137.454075][ T5906] usb 2-1: Using ep0 maxpacket: 8
[  137.462431][ T5906] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  137.471578][ T5906] usb 2-1: config 179 has no interface number 0
[  137.477498][ T5906] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  137.494576][ T5906] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  137.498713][ T5906] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  137.503539][ T5906] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  137.507816][ T5906] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  137.512533][ T5906] usb 2-1: config 179 interface 65 has no altsetting 0
[  137.515487][ T5906] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  137.518507][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.528534][ T8660] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  137.549274][ T5906] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17
[  137.621659][ T5280] input input17: unable to receive magic message: -110
[  137.647356][ T5280] input input17: unable to receive magic message: -32
[  137.656966][ T5280] input input17: unable to receive magic message: -32
[  137.679429][ T5280] input input17: unable to receive magic message: -32
[  137.685636][ T5280] input input17: unable to receive magic message: -32
[  137.695025][ T5280] input input17: unable to receive magic message: -32
[  137.755166][ T5906] usb 2-1: USB disconnect, device number 21
[  137.757608][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  137.912946][ T7254] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  138.097819][ T7254] usb 6-1: config 0 has an invalid interface number: 113 but max is 0
[  138.101437][ T7254] usb 6-1: config 0 has no interface number 0
[  138.109693][ T7254] usb 6-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a
[  138.113585][ T7254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.116756][ T7254] usb 6-1: Product: syz
[  138.118476][ T7254] usb 6-1: Manufacturer: syz
[  138.120028][ T7254] usb 6-1: SerialNumber: syz
[  138.126633][ T7254] usb 6-1: config 0 descriptor??
[  138.354779][ T7254] snd_usb_variax 6-1:0.113: Line 6 Variax Workbench found
[  138.361516][ T7254] usb 6-1: selecting invalid altsetting 1
[  138.364003][ T7254] snd_usb_variax 6-1:0.113: set_interface failed
[  138.366861][ T7254] snd_usb_variax 6-1:0.113: Line 6 Variax Workbench now disconnected
[  138.370312][ T7254] snd_usb_variax 6-1:0.113: probe with driver snd_usb_variax failed with error -22
[  138.378803][ T7254] usb 6-1: USB disconnect, device number 7
[  138.545846][ T8695] batman_adv: batadv0: Adding interface: dummy0
[  138.549375][ T8695] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  138.560374][ T8695] batman_adv: batadv0: Interface activated: dummy0
[  138.599850][ T8695] batadv0: mtu less than device minimum
[  138.604475][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.612260][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.619593][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.627434][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.634206][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.641499][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.648754][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.655023][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.660324][ T8695] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  138.930503][ T8700] loop1: detected capacity change from 0 to 256
[  139.073964][ T8704] loop1: detected capacity change from 0 to 1764
[  139.087120][ T8706] loop4: detected capacity change from 0 to 128
[  139.101934][ T8706] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.108184][ T8706] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.141870][ T8706] syz.4.850 (pid 8706) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  139.207818][ T8706] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-sse2)"
[  139.232423][ T7030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.284779][  T975] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  139.358177][ T8724] loop4: detected capacity change from 0 to 1024
[  139.367800][ T8724] EXT4-fs: Ignoring removed bh option
[  139.369928][ T8724] EXT4-fs: inline encryption not supported
[  139.384388][ T8724] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  139.392118][ T8724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  139.400328][ T8724] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.856: lblock 2 mapped to illegal pblock 2 (length 1)
[  139.410015][ T8724] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  139.414129][ T8724] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.856: lblock 0 mapped to illegal pblock 48 (length 1)
[  139.425618][ T8724] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  139.429198][ T8724] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.856: Failed to acquire dquot type 0
[  139.435759][ T8724] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  139.439533][ T8724] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.856: mark_inode_dirty error
[  139.446082][ T8724] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  139.450632][ T8724] EXT4-fs (loop4): 1 orphan inode deleted
[  139.458426][ T8724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.458656][  T975] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  139.476950][  T975] usb 6-1: config 0 has an invalid interface number: 3 but max is 2
[  139.480646][  T975] usb 6-1: config 0 has no interface number 0
[  139.485486][   T35] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  139.491216][  T975] usb 6-1: config 0 has no interface number 1
[  139.494475][  T975] usb 6-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30
[  139.497594][   T35] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  139.500126][  T975] usb 6-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  139.505741][   T35] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u10:1: Failed to release dquot type 0
[  139.520456][  T975] usb 6-1: config 0 interface 3 has no altsetting 0
[  139.526187][  T975] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  139.529126][  T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.533681][ T8724] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.856: lblock 0 mapped to illegal pblock 48 (length 1)
[  139.544705][ T8724] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117
[  139.550116][  T975] usb 6-1: config 0 descriptor??
[  139.562627][ T8724] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  139.599463][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.761739][  T975] usb 6-1: Could not set interface, error -71
[  139.777846][  T975] usb 6-1: selecting invalid altsetting 0
[  139.780062][  T975] usb 6-1: Could not set interface, error -22
[  139.791487][  T975] usb 6-1: USB disconnect, device number 8
[  139.826737][ T8741] loop4: detected capacity change from 0 to 512
[  139.845458][ T8741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.855217][ T8741] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.875234][ T8735] loop1: detected capacity change from 0 to 32768
[  139.878292][   T33] audit: type=1800 audit(1755556323.875:29): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.864" name="file1" dev="loop4" ino=15 res=0 errno=0
[  139.885378][ T8735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.861 (8735)
[  139.889712][ T8735] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  139.895182][   T33] audit: type=1800 audit(1755556323.875:30): pid=8741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.864" name="file2" dev="loop4" ino=16 res=0 errno=0
[  139.913191][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.974873][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.865'.
[  140.126204][ T8764] loop1: detected capacity change from 0 to 1024
[  140.347373][ T8781] dlm: no locking on control device
[  140.853096][ T8794] loop4: detected capacity change from 0 to 40427
[  140.862522][ T8794] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  140.867452][ T8794] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  140.884913][ T8810] loop5: detected capacity change from 0 to 4096
[  140.886363][ T8794] F2FS-fs (loop4): invalid crc value
[  140.983373][ T5763] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  141.029548][ T8794] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.043866][ T8794] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  141.053529][ T8794] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  141.116048][ T8794] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  141.138988][ T5763] usb 2-1: config 5 has an invalid interface number: 233 but max is 1
[  141.148115][ T5763] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  141.162840][ T5763] usb 2-1: config 5 has no interface number 1
[  141.171202][ T5763] usb 2-1: config 5 interface 233 has no altsetting 0
[  142.006504][ T5763] usb 2-1: string descriptor 0 read error: -71
[  142.009302][ T5763] usb 2-1: New USB device found, idVendor=1e2d, idProduct=0085, bcdDevice=96.e8
[  142.012629][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.021422][ T8829] loop5: detected capacity change from 0 to 512
[  142.044570][ T5763] usb 2-1: can't set config #5, error -71
[  142.061650][ T5763] usb 2-1: USB disconnect, device number 22
[  142.096120][ T8831] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  142.382921][ T5906] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  142.392995][  T975] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  142.533005][ T5906] usb 6-1: Using ep0 maxpacket: 32
[  142.543069][ T5906] usb 6-1: config 0 has an invalid interface number: 48 but max is 0
[  142.543103][  T975] usb 5-1: Using ep0 maxpacket: 32
[  142.546303][ T5906] usb 6-1: config 0 has no interface number 0
[  142.551364][ T5906] usb 6-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30
[  142.555773][  T975] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  142.556444][ T5906] usb 6-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55
[  142.559904][  T975] usb 5-1: config 0 has no interface number 0
[  142.566056][ T5906] usb 6-1: config 0 interface 48 has no altsetting 0
[  142.572076][  T975] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  142.577038][ T5906] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  142.580979][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.584462][  T975] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  142.584527][  T975] usb 5-1: config 0 interface 126 has no altsetting 0
[  142.587058][  T975] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  142.597458][ T5906] usb 6-1: Product: syz
[  142.598395][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.606314][  T975] usb 5-1: Product: syz
[  142.608126][  T975] usb 5-1: Manufacturer: syz
[  142.610298][ T5906] usb 6-1: Manufacturer: syz
[  142.613029][  T975] usb 5-1: SerialNumber: syz
[  142.617216][  T975] usb 5-1: config 0 descriptor??
[  142.620599][ T8835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  142.622685][ T5906] usb 6-1: SerialNumber: syz
[  142.628036][ T8835] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  142.640618][ T5906] usb 6-1: config 0 descriptor??
[  142.859761][ T5906] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  142.873870][ T5906] gspca_ov534_9: reg_w failed -71
[  142.981852][ T8837] loop1: detected capacity change from 0 to 40427
[  143.044509][  T975] ir_usb 5-1:0.126: IR Dongle converter detected
[  143.187997][ T8841] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes
[  143.248191][  T975] usb 5-1: IR Dongle converter now attached to ttyUSB0
[  143.281089][ T5906] gspca_ov534_9: Unknown sensor 0000
[  143.281139][ T5906] ov534_9 6-1:0.48: probe with driver ov534_9 failed with error -22
[  143.297689][ T5906] usb 6-1: USB disconnect, device number 9
[  143.298491][ T8847] trusted_key: encrypted_key: keyword 'new/' not recognized
[  143.371907][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  143.398854][ T8853] loop5: detected capacity change from 0 to 1024
[  143.439724][  T724] hfsplus: b-tree write err: -5, ino 4
[  143.474236][  T975] usb 5-1: USB disconnect, device number 11
[  143.507280][  T975] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  143.511200][  T975] ir_usb 5-1:0.126: device disconnected
[  143.811670][ T8870] loop1: detected capacity change from 0 to 4096
[  144.069874][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'.
[  145.236723][ T8894] loop1: detected capacity change from 0 to 32768
[  145.473202][ T8906] loop1: detected capacity change from 0 to 8
[  145.932505][ T5906] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  146.096700][ T5906] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.104961][ T5906] usb 6-1: config 0 interface 0 has no altsetting 0
[  146.111297][ T5906] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00
[  146.116553][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.132637][ T5906] usb 6-1: config 0 descriptor??
[  146.356800][ T8929] loop4: detected capacity change from 0 to 2048
[  146.400141][ T8929] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  146.405502][ T8929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  146.445570][ T7030] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.527424][ T8937] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.943'.
[  146.551972][ T5906] magicmouse 0003:05AC:0269.0008: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.5-1/input0
[  146.785192][    T9] usb 6-1: USB disconnect, device number 10
[  147.191656][ T8943] loop4: detected capacity change from 0 to 32768
[  147.202405][ T8943] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.218700][ T8943] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  147.226716][ T8943] XFS (loop4): Starting recovery (logdev: internal)
[  147.238359][ T8943] XFS (loop4): Ending recovery (logdev: internal)
[  147.259576][ T7030] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.499373][ T8966] loop4: detected capacity change from 0 to 128
[  147.522194][ T8966] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.531522][ T8966] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.543735][ T8966] netlink: 'syz.4.953': attribute type 29 has an invalid length.
[  147.546642][ T8966] netlink: 'syz.4.953': attribute type 29 has an invalid length.
[  147.549599][ T8966] netlink: 500 bytes leftover after parsing attributes in process `syz.4.953'.
[  147.564344][ T7030] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.845297][ T8983] loop1: detected capacity change from 0 to 32768
[  148.235105][ T5906] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  148.292960][  T975] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  148.311102][ T9002] loop5: detected capacity change from 0 to 8
[  148.336303][ T9002] unable to read xattr id index table
[  148.393062][ T5906] usb 2-1: Using ep0 maxpacket: 16
[  148.399634][ T5906] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  148.409855][ T5906] usb 2-1: config 0 has no interface number 0
[  148.416639][ T5906] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  148.420434][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.424774][ T5906] usb 2-1: Product: syz
[  148.426999][ T5906] usb 2-1: Manufacturer: syz
[  148.430805][ T5906] usb 2-1: SerialNumber: syz
[  148.437251][ T5906] usb 2-1: config 0 descriptor??
[  148.442325][ T5906] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  148.463151][  T975] usb 5-1: Using ep0 maxpacket: 8
[  148.469013][  T975] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  148.473079][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.476840][  T975] usb 5-1: Product: syz
[  148.478622][  T975] usb 5-1: Manufacturer: syz
[  148.480604][  T975] usb 5-1: SerialNumber: syz
[  148.487999][  T975] usb 5-1: config 0 descriptor??
[  148.493742][  T975] radioshark2 5-1:0.0: Invalid radioSHARK2 device
[  148.496279][  T975] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22
[  148.499685][  T975] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  148.662881][ T5873] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  148.699318][  T975] usb 5-1: USB disconnect, device number 12
[  148.825830][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.830110][ T5873] usb 6-1: config 0 has no interfaces?
[  148.832408][ T5873] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  148.836378][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.842075][ T5873] usb 6-1: config 0 descriptor??
[  149.287854][ T9007] loop4: detected capacity change from 0 to 256
[  149.338229][ T9007] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  149.526434][ T5906] gspca_spca1528: reg_w err -71
[  149.528718][ T5906] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  149.570572][ T5906] usb 2-1: USB disconnect, device number 23
[  149.770516][ T9014] syzkaller0: entered promiscuous mode
[  149.774618][ T9014] syzkaller0: entered allmulticast mode
[  149.839125][ T9004] loop5: detected capacity change from 0 to 131072
[  149.844729][ T9004] F2FS-fs (loop5): invalid crc value
[  149.890905][ T9004] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.896277][ T9004] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  149.932540][ T9004] F2FS-fs (loop5): f2fs_lookup: inode (ino=4) has zero i_nlink
[  149.956015][ T5906] usb 6-1: USB disconnect, device number 11
[  151.399975][ T9032] tipc: Trying to set illegal importance in message
[  151.500121][ T9041] syz.4.981: attempt to access beyond end of device
[  151.500121][ T9041] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0
[  151.506016][ T9041] hpfs: hpfs_map_sector(): read error
[  151.526035][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'.
[  151.531741][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'.
[  151.577583][ T9043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'.
[  151.582936][ T9043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.982'.
[  151.748416][ T9045] loop1: detected capacity change from 0 to 40427
[  152.044334][ T5763] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  152.203046][ T5763] usb 5-1: Using ep0 maxpacket: 16
[  152.220071][ T5763] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[  152.225763][ T5763] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  152.229500][ T5763] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  152.233749][ T5763] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[  152.237474][ T5763] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  152.241527][ T5763] usb 5-1: config 0 has no interface number 0
[  152.244871][ T5763] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  152.249741][ T5763] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  152.254607][ T5763] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  152.259018][ T5763] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  152.265404][ T5763] usb 5-1: config 0 interface 125 has no altsetting 0
[  152.268366][ T5763] usb 5-1: config 0 interface 125 has no altsetting 2
[  152.473579][ T5763] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  152.476633][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.479222][ T5763] usb 5-1: Product: syz
[  152.480553][ T5763] usb 5-1: Manufacturer: syz
[  152.482122][ T5763] usb 5-1: SerialNumber: syz
[  152.489256][ T5763] usb 5-1: config 0 descriptor??
[  152.492591][ T5763] usb 5-1: selecting invalid altsetting 2
[  152.696038][    C0] usb 5-1: async_complete: urb error -71
[  152.698163][    C0] usb 5-1: async_complete: urb error -71
[  152.700150][    C0] usb 5-1: async_complete: urb error -71
[  152.702114][    C0] usb 5-1: async_complete: urb error -71
[  152.706705][ T5763] get_1284_register: usb error -71
[  152.708613][ T5763] uss720 5-1:0.125: probe with driver uss720 failed with error -71
[  152.714080][ T5763] usb 5-1: USB disconnect, device number 13
[  153.143749][ T5763] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  153.296283][ T5763] usb 2-1: not running at top speed; connect to a high speed hub
[  153.300879][ T5763] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  153.304766][ T5763] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.309134][ T5763] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  153.314766][ T5763] usb 2-1: config 1 has no interface number 1
[  153.317417][ T5763] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  153.322043][ T5763] usb 2-1: config 1 interface 2 has no altsetting 0
[  153.327441][ T5763] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.331197][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.337814][ T5763] usb 2-1: Product: syz
[  153.339743][ T5763] usb 2-1: Manufacturer: syz
[  153.341633][ T5763] usb 2-1: SerialNumber: syz
[  153.416348][ T9098] loop4: detected capacity change from 0 to 32768
[  153.442409][ T9098] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  153.457561][ T9098] XFS (loop4): Ending clean mount
[  153.465630][ T9098] XFS (loop4): Quotacheck needed: Please wait.
[  153.493925][ T9098] XFS (loop4): Quotacheck: Done.
[  153.506736][   T33] audit: type=1800 audit(1755556337.505:31): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1006" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  153.517075][   T33] audit: type=1800 audit(1755556337.515:32): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1006" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  153.565457][ T5763] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  153.568576][ T5763] usb 2-1: 2:1 : format type 9 is not supported yet
[  153.571257][ T5763] usb 2-1: selecting invalid altsetting 0
[  153.587957][ T5763] usb 2-1: USB disconnect, device number 24
[  153.619307][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.909272][ T7030] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.185812][ T9125] IPv6: sit1: Disabled Multicast RS
[  154.187994][ T9125] sit1: entered allmulticast mode
[  154.316779][ T9131] loop1: detected capacity change from 0 to 4096
[  154.373088][  T975] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  154.382567][ T5236] Bluetooth: unknown link type 97
[  154.385356][ T5236] Bluetooth: hci0: connection err: -111
[  154.564091][  T975] usb 5-1: Using ep0 maxpacket: 32
[  154.568529][  T975] usb 5-1: config 0 interface 0 has no altsetting 0
[  154.573160][  T975] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  154.576701][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.580265][  T975] usb 5-1: Product: syz
[  154.581818][  T975] usb 5-1: Manufacturer: syz
[  154.583916][  T975] usb 5-1: SerialNumber: syz
[  154.593313][  T975] usb 5-1: config 0 descriptor??
[  155.001849][  T975] gs_usb 5-1:0.0: Configuring for 1 interfaces
[  155.207459][ T9149] net_ratelimit: 10 callbacks suppressed
[  155.207477][ T9149] IPv6: addrconf: prefix option has invalid lifetime
[  155.238074][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1025'.
[  155.387041][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1029'.
[  155.431645][ T9161] loop1: detected capacity change from 0 to 512
[  155.446564][ T9161] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  155.452372][ T9161] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup
[  155.457766][ T9161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  155.480712][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.645739][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.648334][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.825556][ T5906] usb 5-1: USB disconnect, device number 14
[  155.876826][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'.
[  155.987639][ T9189] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  155.991765][ T9189] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  156.883131][  T975] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  157.066255][  T975] usb 5-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config
[  157.088444][  T975] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  157.097628][  T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.100313][  T975] usb 5-1: Product: syz
[  157.101733][  T975] usb 5-1: Manufacturer: syz
[  157.116674][  T975] usb 5-1: SerialNumber: syz
[  157.194188][  T975] usb 5-1: config 0 descriptor??
[  157.501670][  T975] usb 5-1: bad CDC descriptors
[  157.504287][  T975] usb 5-1: unsupported MDLM descriptors
[  157.508175][  T975] usb 5-1: USB disconnect, device number 15
[  158.244315][ T9307] loop1: detected capacity change from 0 to 32768
[  158.372914][  T975] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  158.525330][  T975] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  158.528433][  T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.532908][  T975] usb 5-1: config 0 descriptor??
[  158.539196][  T975] cp210x 5-1:0.0: cp210x converter detected
[  158.592838][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  158.742890][ T5906] usb 2-1: Using ep0 maxpacket: 8
[  158.743700][  T975] usb 5-1: cp210x converter now attached to ttyUSB0
[  158.752897][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  158.756798][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.759995][ T5906] usb 2-1: Product: syz
[  158.761603][ T5906] usb 2-1: Manufacturer: syz
[  158.765080][ T5906] usb 2-1: SerialNumber: syz
[  158.769199][ T5906] usb 2-1: config 0 descriptor??
[  158.938203][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1066'.
[  158.948277][    T9] usb 5-1: USB disconnect, device number 16
[  158.960869][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  158.970387][    T9] cp210x 5-1:0.0: device disconnected
[  158.985895][ T9321] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1066'.
[  158.993078][ T5906] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  159.010350][ T9321] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1066'.
[  159.763356][ T5906] usb write operation failed. (-71)
[  159.778340][ T5906] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  159.782085][ T5906] dvbdev: DVB: registering new adapter (Terratec H7)
[  159.786629][ T5906] usb 2-1: media controller created
[  159.788799][ T5906] usb read operation failed. (-71)
[  159.791369][ T5906] usb write operation failed. (-71)
[  159.804712][ T5906] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  159.822628][ T5906] usb 2-1: USB disconnect, device number 25
[  159.865701][ T9339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'.
[  160.378102][ T9377] loop4: detected capacity change from 0 to 256
[  160.448387][   T33] audit: type=1326 audit(1755556344.445:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9382 comm="syz.1.1094" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35a518ebe9 code=0x0
[  160.465761][ T9385] netlink: 'syz.4.1093': attribute type 1 has an invalid length.
[  160.468508][ T9385] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1093'.
[  160.598682][ T9398] loop4: detected capacity change from 0 to 16
[  160.613604][ T9398] erofs (device loop4): mounted with root inode @ nid 36.
[  160.625193][ T9398] erofs (device loop4): invalid tail-packing pclustersize 32768
[  160.627994][ T9398] erofs (device loop4): invalid tail-packing pclustersize 32768
[  160.631159][ T9398] erofs (device loop4): read error -117 @ 32811 of nid 36
[  161.629136][ T9444] loop1: detected capacity change from 0 to 512
[  161.823694][ T9452] loop1: detected capacity change from 0 to 512
[  162.682953][ T9489] batadv_slave_0: entered promiscuous mode
[  162.686786][ T9488] batadv_slave_0: left promiscuous mode
[  162.762168][ T9497] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1142'.
[  163.288790][ T9535] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1159'.
[  164.138828][ T9562] loop1: detected capacity change from 0 to 512
[  164.163469][ T9562] EXT4-fs: Ignoring removed oldalloc option
[  164.381537][  T975] IPVS: starting estimator thread 0...
[  164.474048][ T9578] IPVS: using max 80 ests per chain, 192000 per kthread
[  164.657964][ T9610] loop1: detected capacity change from 0 to 256
[  164.683981][ T9612] overlayfs: failed to clone upperpath
[  164.701493][ T9614] loop1: detected capacity change from 0 to 128
[  164.708079][ T9614] EXT4-fs: Ignoring removed nobh option
[  164.719274][ T9612] overlayfs: failed to clone lowerpath
[  164.811795][ T9618] loop1: detected capacity change from 0 to 1024
[  164.817714][ T9620] libceph: resolve 'c' (ret=-3): failed
[  165.021353][ T5236] Bluetooth: hci2: link tx timeout
[  165.026990][ T5236] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  165.110968][ T9648] netlink: 'syz.4.1213': attribute type 2 has an invalid length.
[  166.074070][  T975] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  166.222920][  T975] usb 2-1: Using ep0 maxpacket: 16
[  166.226726][  T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.237200][  T975] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  166.240905][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.244801][  T975] usb 2-1: Product: syz
[  166.246615][  T975] usb 2-1: Manufacturer: syz
[  166.248881][  T975] usb 2-1: SerialNumber: syz
[  166.256785][  T975] usb 2-1: config 0 descriptor??
[  166.267931][  T975] pegasus_notetaker 2-1:0.0: Invalid number of endpoints
[  166.270972][  T975] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  166.475399][ T5880] usb 2-1: USB disconnect, device number 26
[  166.517723][ T9723] IPv6: addrconf: prefix option has invalid lifetime
[  167.044275][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  167.478157][ T9769] loop1: detected capacity change from 0 to 16
[  167.487028][ T9769] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  167.777471][ T9791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'.
[  167.851477][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1280'.
[  168.984492][ T9819] loop1: detected capacity change from 0 to 512
[  169.651495][ T9833] vxcan0: tx address claim with different name
[  169.772430][ T9838] bridge: RTM_NEWNEIGH with invalid ether address
[  170.052980][ T9848] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  170.334732][ T9858] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1310'.
[  170.661046][ T9892] sch_tbf: burst 8256 is lower than device lo mtu (65550) !
[  171.022938][ T5880] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  171.172995][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  171.180382][ T5880] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  171.184080][ T5880] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  171.187772][ T5880] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 26
[  171.195119][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.198915][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  171.202129][ T5880] usb 2-1: SerialNumber: syz
[  171.214641][ T9902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  171.217785][ T9902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  171.430171][ T5880] usb 2-1: USB disconnect, device number 27
[  172.104364][ T9944] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4.
[  172.702684][ T9986] 9pnet_rdma: rdma_create_trans (9986): problem binding to privport: 13
[  173.577780][T10005] loop1: detected capacity change from 0 to 2048
[  173.641166][T10009] !: renamed from dummy0 (while UP)
[  173.852336][ T7254] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  173.867665][ T7254] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  174.642123][T10052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1402'.
[  174.870132][T10064] loop1: detected capacity change from 0 to 128
[  174.987567][T10072] loop1: detected capacity change from 0 to 8
[  175.049076][T10076] capability: warning: `syz.5.1413' uses 32-bit capabilities (legacy support in use)
[  175.251071][T10090] can0: slcan on ttyS3.
[  175.303383][T10090] can0 (unregistered): slcan off ttyS3.
[  175.308601][T10090] Falling back ldisc for ttyS3.
[  175.747573][T10104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1426'.
[  175.839278][T10110] tipc: Started in network mode
[  175.841367][T10110] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  175.845236][T10110] tipc: Enabled bearer <eth:team0>, priority 0
[  177.032458][    T9] tipc: Node number set to 11578026
[  177.172689][T10146] loop1: detected capacity change from 0 to 32768
[  177.305347][T10153] loop1: detected capacity change from 0 to 128
[  178.502147][T10185] loop1: detected capacity change from 0 to 32768
[  178.871148][T10191] loop1: detected capacity change from 0 to 40427
[  179.585515][T10232] loop1: detected capacity change from 0 to 32768
[  179.592656][T10232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1482 (10232)
[  179.598300][T10232] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  179.812534][   T33] audit: type=1326 audit(1755556363.805:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.5.1486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7ffc0000
[  179.837940][   T33] audit: type=1326 audit(1755556363.805:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.5.1486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7ffc0000
[  179.864559][   T33] audit: type=1326 audit(1755556363.825:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.5.1486" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e89b8d550 code=0x7ffc0000
[  179.878333][   T33] audit: type=1326 audit(1755556363.825:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.5.1486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7ffc0000
[  179.889313][   T33] audit: type=1326 audit(1755556363.825:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10240 comm="syz.5.1486" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7ffc0000
[  179.903107][   T52] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  180.085287][   T52] usb 2-1: config 0 interface 0 has no altsetting 0
[  180.087939][   T52] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  180.091660][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.143900][   T52] usb 2-1: config 0 descriptor??
[  180.651663][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  181.002519][T10268] team0: No ports can be present during mode change
[  182.159062][   T52] video4linux radio48: keene_cmd_set failed (-71)
[  182.161713][   T52] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  182.163311][T10302] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1514'.
[  182.166319][   T52] usb 2-1: USB disconnect, device number 28
[  183.931757][T10382] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1550'.
[  184.380394][T10398] loop1: detected capacity change from 0 to 512
[  184.726881][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'.
[  185.832562][   T33] audit: type=1326 audit(1755556369.825:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  185.841672][   T33] audit: type=1326 audit(1755556369.825:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  185.851025][   T33] audit: type=1326 audit(1755556369.855:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  185.867108][   T33] audit: type=1326 audit(1755556369.855:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  185.892232][   T33] audit: type=1326 audit(1755556369.855:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10443 comm="syz.1.1577" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  185.941016][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1579'.
[  186.375894][T10482] netlink: 'syz.5.1595': attribute type 25 has an invalid length.
[  186.378757][T10482] netlink: 'syz.5.1595': attribute type 7 has an invalid length.
[  186.460374][T10490] all (unregistering): Released all slaves
[  186.538832][T10500] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65)
[  186.743274][   T33] audit: type=1326 audit(1755556370.735:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10445 comm="syz.1.1578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7fc00000
[  187.405291][T10537] loop1: detected capacity change from 0 to 32768
[  187.412303][T10537] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1620 (10537)
[  187.429269][T10537] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  187.597055][T10537] loop1: detected capacity change from 0 to 32768
[  187.868577][T10562] fuse: Bad value for 'fd'
[  188.012845][ T7254] usb 2-1: new low-speed USB device number 29 using dummy_hcd
[  188.142599][T10564] overlayfs: failed to resolve './file0': -2
[  188.153061][T10578] vxcan1: tx address claim with dlc 0
[  188.171642][ T7254] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  188.180463][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  188.186603][ T7254] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.191610][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  188.196215][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  188.202055][ T7254] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  188.204854][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  188.215470][ T7254] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.219268][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  188.233128][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  188.246049][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'.
[  188.251809][T10586] sctp: [Deprecated]: syz.4.1644 (pid 10586) Use of int in maxseg socket option.
[  188.251809][T10586] Use struct sctp_assoc_value instead
[  188.265434][ T7254] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  188.268599][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  188.272047][ T7254] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  188.279794][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  188.283657][ T7254] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  188.306835][ T7254] usb 2-1: string descriptor 0 read error: -22
[  188.309204][ T7254] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  188.312308][ T7254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.339828][ T7254] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  188.540081][ T5906] usb 2-1: USB disconnect, device number 29
[  189.159336][T10640] futex_wake_op: syz.5.1671 tries to shift op by -1; fix this program
[  190.194987][T10671] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  190.612941][ T7254] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  190.767258][ T7254] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  190.770071][ T7254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.772654][ T7254] usb 2-1: Product: syz
[  190.774896][ T7254] usb 2-1: Manufacturer: syz
[  190.776414][ T7254] usb 2-1: SerialNumber: syz
[  190.782975][ T7254] r8152-cfgselector 2-1: Unknown version 0x0000
[  190.785487][ T7254] r8152-cfgselector 2-1: config 0 descriptor??
[  191.199856][ T7254] r8152-cfgselector 2-1: USB disconnect, device number 30
[  191.966615][T10730] loop1: detected capacity change from 0 to 128
[  192.129331][T10736] bridge0: entered promiscuous mode
[  192.451572][T10748] loop1: detected capacity change from 0 to 32768
[  192.459775][T10748] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES
[  192.467112][T10748] bcachefs: bch2_fs_get_tree() error: EACCES
[  192.852888][ T5880] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  193.006320][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  193.012826][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  193.018548][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  193.022450][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  193.028201][ T5880] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  193.032181][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.037624][ T5880] usb 2-1: config 0 descriptor??
[  193.478309][ T5880] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  193.676374][T10807] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  193.722436][T10810] batadv_slave_1: entered promiscuous mode
[  193.725393][T10809] batadv_slave_1: left promiscuous mode
[  193.783486][T10814] bond0: entered promiscuous mode
[  193.785326][T10814] bond_slave_0: entered promiscuous mode
[  193.787658][T10814] bond_slave_1: entered promiscuous mode
[  193.789624][T10814] syz_tun: entered promiscuous mode
[  193.795518][T10814] batadv0: entered promiscuous mode
[  193.799646][T10814] hsr1: entered allmulticast mode
[  193.801641][T10814] bond0: entered allmulticast mode
[  193.807044][T10814] bond_slave_0: entered allmulticast mode
[  193.809611][T10814] bond_slave_1: entered allmulticast mode
[  193.811744][T10814] syz_tun: entered allmulticast mode
[  193.815618][T10814] batadv0: entered allmulticast mode
[  193.818806][T10814] 8021q: adding VLAN 0 to HW filter on device hsr1
[  193.828183][T10814] bond0: left promiscuous mode
[  193.829992][T10814] bond_slave_0: left promiscuous mode
[  193.831848][T10814] bond_slave_1: left promiscuous mode
[  193.834021][T10814] syz_tun: left promiscuous mode
[  193.836864][T10814] batadv0: left promiscuous mode
[  193.858517][T10818] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.870465][T10818] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.873411][T10818] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.932301][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.934974][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.081388][ T7254] usb 2-1: USB disconnect, device number 31
[  194.487023][T10868] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  194.681869][T10878] loop1: detected capacity change from 0 to 512
[  195.271661][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1789'.
[  196.709553][T10960] loop1: detected capacity change from 0 to 256
[  196.869447][T10964] netlink: 'syz.1.1816': attribute type 16 has an invalid length.
[  196.874430][T10964] netlink: 'syz.1.1816': attribute type 3 has an invalid length.
[  196.877726][T10964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1816'.
[  197.361236][T10990] loop1: detected capacity change from 0 to 4096
[  197.424241][   T33] audit: type=1326 audit(1755556381.425:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  197.445284][   T33] audit: type=1326 audit(1755556381.425:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  197.474524][   T33] audit: type=1326 audit(1755556381.425:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  197.493962][   T33] audit: type=1326 audit(1755556381.425:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a518ebe9 code=0x7ffc0000
[  197.745220][T11003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'.
[  198.023015][ T5880] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  198.182971][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  198.187991][ T5880] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.192635][ T5880] usb 2-1: config 7 has an invalid interface number: 112 but max is 1
[  198.196639][ T5880] usb 2-1: config 7 has no interface number 1
[  198.199354][ T5880] usb 2-1: config 7 interface 112 has no altsetting 0
[  198.203477][ T5880] usb 2-1: config 7 interface 0 has no altsetting 0
[  198.207785][ T5880] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=b5.bb
[  198.211476][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.215500][ T5880] usb 2-1: Product: syz
[  198.217347][ T5880] usb 2-1: Manufacturer: syz
[  198.219436][ T5880] usb 2-1: SerialNumber: syz
[  198.433364][ T5880] xr_serial 2-1:7.112: xr_serial converter detected
[  198.439499][ T5880] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  198.442183][ T5880] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  198.454249][ T5880] usb 2-1: USB disconnect, device number 32
[  198.458126][ T5880] xr_serial 2-1:7.112: device disconnected
[  199.011288][T11045] loop1: detected capacity change from 0 to 512
[  199.088454][T11047] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1856'.
[  200.056429][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'.
[  201.206601][T11159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1908'.
[  201.215777][T11159] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1908'.
[  201.678706][T11191] infiniband syz0: set down
[  201.680601][T11191] infiniband syz0: added ipvlan1
[  201.706058][T11191] RDS/IB: syz0: added
[  201.708124][T11191] smc: adding ib device syz0 with port count 1
[  201.710549][T11191] smc:    ib device syz0 port 1 has pnetid 
[  202.781174][T11229] loop1: detected capacity change from 0 to 32768
[  202.784959][T11229] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES
[  202.788964][T11229] bcachefs: bch2_fs_get_tree() error: EACCES
[  203.155479][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1953'.
[  203.198889][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1954'.
[  203.203210][ T5906] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  203.287997][T11266] rdma_rxe: rxe_newlink: failed to add ipvlan1
[  203.393087][ T5906] usb 2-1: Using ep0 maxpacket: 8
[  203.397986][ T5906] usb 2-1: config 0 has an invalid descriptor of length 16, skipping remainder of the config
[  203.401884][ T5906] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  203.405351][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.418436][ T5906] usb 2-1: config 0 descriptor??
[  203.428895][ T5906] usb 2-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  203.431991][ T5906] usb 2-1: No valid video chain found.
[  203.626378][ T7254] usb 2-1: USB disconnect, device number 33
[  204.068383][T11290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1967'.
[  204.260209][T11296] loop1: detected capacity change from 0 to 8
[  204.364116][T11298] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  204.366341][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  204.374954][T11298] vhci_hcd vhci_hcd.0: Device attached
[  204.394031][T11298] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5)
[  204.396440][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  204.400529][T11298] vhci_hcd vhci_hcd.0: Device attached
[  204.414036][T11298] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7)
[  204.416322][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  204.420787][T11298] vhci_hcd vhci_hcd.0: Device attached
[  204.432405][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.440753][T11298] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11)
[  204.442897][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  204.446016][T11298] vhci_hcd vhci_hcd.0: Device attached
[  204.448891][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.452154][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.462017][T11298] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17)
[  204.464203][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  204.471847][T11298] vhci_hcd vhci_hcd.0: Device attached
[  204.476909][T11305] vhci_hcd: connection closed
[  204.477094][T11303] vhci_hcd: connection closed
[  204.480505][   T13] vhci_hcd: stop threads
[  204.485403][T11301] vhci_hcd: connection closed
[  204.485561][T11299] vhci_hcd: connection closed
[  204.492945][   T13] vhci_hcd: release socket
[  204.496975][   T13] vhci_hcd: disconnect device
[  204.506358][   T13] vhci_hcd: stop threads
[  204.508129][   T13] vhci_hcd: release socket
[  204.513371][   T13] vhci_hcd: disconnect device
[  204.529971][   T13] vhci_hcd: stop threads
[  204.531751][   T13] vhci_hcd: release socket
[  204.539511][T11307] vhci_hcd: connection closed
[  204.539759][   T13] vhci_hcd: disconnect device
[  204.550862][   T13] vhci_hcd: stop threads
[  204.552606][   T13] vhci_hcd: release socket
[  204.563219][   T13] vhci_hcd: disconnect device
[  204.565856][   T13] vhci_hcd: stop threads
[  204.567581][   T13] vhci_hcd: release socket
[  204.573370][   T13] vhci_hcd: disconnect device
[  204.625738][ T5906] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  204.629664][ T5906] usb 35-1: enqueue for inactive port 0
[  204.697916][ T5906] vhci_hcd: vhci_device speed not set
[  204.725743][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'.
[  204.728956][T11322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1977'.
[  204.762370][T11326] overlay: Bad value for 'uuid'
[  206.505917][    T9] libceph: connect (1)[c::]:6789 error -101
[  206.508902][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  206.514567][    T9] libceph: connect (1)[c::]:6789 error -101
[  206.516721][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  206.545743][T11394] loop1: detected capacity change from 0 to 16
[  206.550522][T11394] erofs (device loop1): mounted with root inode @ nid 36.
[  206.573521][T11394] erofs (device loop1): bogus lookback distance 1388 @ lcn 42 of nid 36
[  206.579034][T11394] erofs (device loop1): read error -117 @ 43 of nid 36
[  206.658457][T11389] ceph: No mds server is up or the cluster is laggy
[  208.065488][T11429] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2020'.
[  208.311667][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2025'.
[  208.379422][T11444] loop1: detected capacity change from 0 to 8
[  208.696841][T11454] loop1: detected capacity change from 0 to 40427
[  209.780478][T11493] 9pnet_fd: Insufficient options for proto=fd
[  209.990570][T11500] loop1: detected capacity change from 0 to 32768
[  209.997475][T11500] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2052 (11500)
[  210.007221][T11500] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  210.214216][T11516] loop1: detected capacity change from 0 to 256
[  210.282049][   T33] audit: type=1326 audit(1755556394.275:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.303614][   T33] audit: type=1326 audit(1755556394.275:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.312614][   T33] audit: type=1326 audit(1755556394.275:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.322195][   T33] audit: type=1326 audit(1755556394.275:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.332672][   T33] audit: type=1326 audit(1755556394.275:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.342146][   T33] audit: type=1326 audit(1755556394.275:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.355348][   T33] audit: type=1326 audit(1755556394.275:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.364838][   T33] audit: type=1326 audit(1755556394.275:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.375438][   T33] audit: type=1326 audit(1755556394.275:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.384417][   T33] audit: type=1326 audit(1755556394.275:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11476 comm="syz.5.2042" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e89b8ebe9 code=0x7fc00000
[  210.550282][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2068'.
[  210.557538][T11535] sctp: [Deprecated]: syz.5.2068 (pid 11535) Use of int in maxseg socket option.
[  210.557538][T11535] Use struct sctp_assoc_value instead
[  210.733195][T11538] netlink: 'syz.1.2062': attribute type 3 has an invalid length.
[  210.735869][T11538] netlink: 'syz.1.2062': attribute type 1 has an invalid length.
[  210.739117][T11538] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2062'.
[  210.743061][T11538] NCSI netlink: No device for ifindex 33022
[  211.312590][T11555] loop1: detected capacity change from 0 to 8
[  211.409035][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'.
[  211.431800][T11560] sctp: [Deprecated]: syz.1.2075 (pid 11560) Use of int in maxseg socket option.
[  211.431800][T11560] Use struct sctp_assoc_value instead
[  212.582519][T11579] loop1: detected capacity change from 0 to 128
[  212.610895][T11579] FAT-fs (loop1): bogus number of reserved sectors
[  212.615985][T11579] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  212.619057][T11579] FAT-fs (loop1): Can't find a valid FAT filesystem
[  213.415353][T11601] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 3944. macoff=96
[  213.457533][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2097'.
[  213.556858][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2098'.
[  213.931306][T11618] loop1: detected capacity change from 0 to 256
[  214.014479][T11626] raw_sendmsg: syz.1.2108 forgot to set AF_INET. Fix it!
[  214.230645][T11630] loop1: detected capacity change from 0 to 32768
[  214.339371][T11658] netlink: 'syz.1.2123': attribute type 3 has an invalid length.
[  214.342072][T11658] netlink: 'syz.1.2123': attribute type 1 has an invalid length.
[  214.344997][T11658] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2123'.
[  214.436971][T11664] gtp0: entered promiscuous mode
[  214.445038][T11664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'.
[  214.752878][  T975] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  214.926834][  T975] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  214.929870][  T975] usb 2-1: config 0 has no interface number 0
[  214.940257][  T975] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=98.2a
[  214.947392][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.950658][  T975] usb 2-1: Product: syz
[  214.952484][  T975] usb 2-1: Manufacturer: syz
[  214.956159][  T975] usb 2-1: SerialNumber: syz
[  214.967828][  T975] usb 2-1: config 0 descriptor??
[  215.577570][  T975] snd_usb_variax 2-1:0.113: Line 6 Variax Workbench found
[  215.580105][  T975] usb 2-1: selecting invalid altsetting 1
[  215.582015][  T975] snd_usb_variax 2-1:0.113: set_interface failed
[  215.593584][  T975] snd_usb_variax 2-1:0.113: Line 6 Variax Workbench now disconnected
[  215.599494][  T975] snd_usb_variax 2-1:0.113: probe with driver snd_usb_variax failed with error -22
[  215.610579][  T975] usb 2-1: USB disconnect, device number 34
[  215.829822][T11687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  216.112440][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2145'.
[  216.197796][T11715] loop1: detected capacity change from 0 to 256
[  216.316696][T11727] loop1: detected capacity change from 0 to 512
[  216.614832][T11735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2159'.
[  216.621837][T11735] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.625508][T11735] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.792980][ T5906] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  216.864657][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'.
[  216.952978][ T5906] usb 2-1: Using ep0 maxpacket: 8
[  216.956298][ T5906] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  216.959208][ T5906] usb 2-1: config 0 has an invalid interface number: 49 but max is 2
[  216.962403][ T5906] usb 2-1: config 0 has no interface number 1
[  216.965343][ T5906] usb 2-1: config 0 has no interface number 2
[  216.967362][ T5906] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  216.970220][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.976326][ T5906] usb 2-1: config 0 descriptor??
[  216.981249][ T5906] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  217.182946][ T5906] usb 2-1: USB disconnect, device number 35
[  217.778568][T11790] trusted_key: encrypted_key: hex blob is missing
[  217.918442][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  217.918453][   T33] audit: type=1800 audit(1755556619.913:68): pid=11801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2190" name="bus" dev="tmpfs" ino=3370 res=0 errno=0
[  217.977826][T11794] loop1: detected capacity change from 0 to 32768
[  218.328008][T11829] tmpfs: User quota block hardlimit too large.
[  218.393371][    T9] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  218.554348][    T9] usb 2-1: config 0 has an invalid interface number: 46 but max is 8
[  218.559023][    T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  218.562411][    T9] usb 2-1: config 0 has no interface number 0
[  218.566906][    T9] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  218.570765][    T9] usb 2-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  218.576857][    T9] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  218.580682][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.584095][    T9] usb 2-1: Product: syz
[  218.585539][    T9] usb 2-1: Manufacturer: syz
[  218.587272][    T9] usb 2-1: SerialNumber: syz
[  218.590387][    T9] usb 2-1: config 0 descriptor??
[  218.593126][T11809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  218.598226][    T9] ums-karma 2-1:0.46: USB Mass Storage device detected
[  218.652132][    T9] ums-karma 2-1:0.46: probe with driver ums-karma failed with error -5
[  218.805783][    T9] usb 2-1: USB disconnect, device number 36
[  219.168748][T11852] overlayfs: failed to clone upperpath
[  219.636399][T11871] loop1: detected capacity change from 0 to 16
[  219.644971][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'.
[  219.700881][T11873] loop1: detected capacity change from 0 to 8192
[  219.997582][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'.
[  220.001382][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2231'.
[  220.153146][ T5906] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  220.326054][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  220.548816][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  220.552328][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  220.557378][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  220.564201][ T5906] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  220.567554][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.570445][ T5906] usb 2-1: Product: syz
[  220.571982][ T5906] usb 2-1: Manufacturer: syz
[  220.574054][ T5906] usb 2-1: SerialNumber: syz
[  220.578835][ T5906] usb 2-1: config 0 descriptor??
[  220.583739][ T5906] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  220.922922][ T5906] usb 2-1: USB disconnect, device number 37
[  221.679497][   T55] Bluetooth: hci2: unexpected event for opcode 0x0c6d
[  221.820044][T11928] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.2246'.
[  221.828869][T11928] netlink: 4268 bytes leftover after parsing attributes in process `syz.5.2246'.
[  222.315862][T11937] loop1: detected capacity change from 0 to 8192
[  222.366300][ T6087]  loop1: p3 p4
[  222.367645][ T6087] loop1: partition table partially beyond EOD, truncated
[  222.370502][ T6087] loop1: p3 start 8323105 is beyond EOD, truncated
[  222.376757][T11937]  loop1: p3 p4
[  222.378217][T11937] loop1: partition table partially beyond EOD, truncated
[  222.380910][T11937] loop1: p3 start 8323105 is beyond EOD, truncated
[  222.429429][ T6087] udevd[6087]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  222.459146][ T6087] udevd[6087]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  222.506653][T11941] loop1: detected capacity change from 0 to 2048
[  222.609152][T11944] bridge0: entered allmulticast mode
[  222.614068][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'.
[  222.617182][T11944] bridge_slave_1: left allmulticast mode
[  222.619330][T11944] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.623987][T11944] bridge_slave_0: left allmulticast mode
[  222.625952][T11944] bridge_slave_0: left promiscuous mode
[  222.627951][T11944] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.701610][T11944] bridge0 (unregistering): left allmulticast mode
[  222.982211][T11959] loop1: detected capacity change from 0 to 4096
[  223.103005][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2267'.
[  223.156785][T11978] loop1: detected capacity change from 0 to 2048
[  223.359271][T11996] loop1: detected capacity change from 0 to 512
[  224.553780][    T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  224.686979][T12062] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  224.693120][T12062] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  224.715450][    T9] usb 2-1: config index 0 descriptor too short (expected 69, got 36)
[  224.718632][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.736596][    T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[  224.740228][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.743433][    T9] usb 2-1: Product: syz
[  224.747794][    T9] usb 2-1: Manufacturer: syz
[  224.750373][    T9] usb 2-1: SerialNumber: syz
[  224.757376][    T9] usb 2-1: config 0 descriptor??
[  224.765494][    T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  225.709020][    T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[  225.711390][    T9] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  225.720917][    T9] usb 2-1: USB disconnect, device number 38
[  225.837455][T12080] netlink: 'syz.5.2317': attribute type 21 has an invalid length.
[  225.840179][T12080] netlink: 'syz.5.2317': attribute type 1 has an invalid length.
[  225.842965][T12080] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2317'.
[  226.016352][T12092] batadv_slave_1: entered promiscuous mode
[  226.020271][T12091] batadv_slave_1: left promiscuous mode
[  226.105742][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2325'.
[  226.110207][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2325'.
[  226.297073][T12112] netlink: 'syz.1.2334': attribute type 4 has an invalid length.
[  226.319623][T12112] netlink: 'syz.1.2334': attribute type 4 has an invalid length.
[  226.674009][  T975] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  226.833887][  T975] usb 2-1: Using ep0 maxpacket: 8
[  226.837410][  T975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  226.840212][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  226.844808][  T975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  226.849127][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  226.853492][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  226.859426][  T975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  226.861769][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  226.866870][  T975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  226.870701][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  226.875525][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  226.882450][  T975] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  226.886802][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  226.893896][  T975] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  226.898718][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  226.903415][  T975] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  226.923501][  T975] usb 2-1: string descriptor 0 read error: -22
[  226.925752][  T975] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  226.928603][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.946423][  T975] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  227.161788][    T9] usb 2-1: USB disconnect, device number 39
[  227.935525][T12172] netlink: 'syz.1.2362': attribute type 2 has an invalid length.
[  227.940096][T12172] netlink: 'syz.1.2362': attribute type 1 has an invalid length.
[  228.008132][T12180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2366'.
[  228.011547][T12180] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  228.016675][T12180] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.048394][T12182] netlink: 536 bytes leftover after parsing attributes in process `syz.1.2367'.
[  228.354289][  T975] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  228.636811][  T975] usb 2-1: Using ep0 maxpacket: 16
[  228.645429][  T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.649889][  T975] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  228.653631][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.665267][  T975] usb 2-1: config 0 descriptor??
[  228.915710][T12204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2376'.
[  228.919883][T12203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2376'.
[  229.091961][  T975] creative-sb0540 0003:041E:3100.000B: unbalanced delimiter at end of report description
[  229.098315][  T975] creative-sb0540 0003:041E:3100.000B: parse failed
[  229.103459][  T975] creative-sb0540 0003:041E:3100.000B: probe with driver creative-sb0540 failed with error -22
[  229.296705][  T975] usb 2-1: USB disconnect, device number 40
[  229.574989][T12232] netlink: 'syz.5.2390': attribute type 21 has an invalid length.
[  229.577785][T12232] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2390'.
[  229.580909][T12232] netlink: 'syz.5.2390': attribute type 4 has an invalid length.
[  229.584026][T12232] netlink: 'syz.5.2390': attribute type 5 has an invalid length.
[  229.589795][T12232] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2390'.
[  229.660334][T12236] sit0: entered promiscuous mode
[  229.670962][T12236] netlink: 21 bytes leftover after parsing attributes in process `syz.5.2392'.
[  230.262115][T12260] sctp: [Deprecated]: syz.4.2401 (pid 12260) Use of struct sctp_assoc_value in delayed_ack socket option.
[  230.262115][T12260] Use struct sctp_sack_info instead
[  230.368230][T12270] netlink: 'syz.5.2406': attribute type 15 has an invalid length.
[  230.647900][   T55] Bluetooth: hci2: unexpected event for opcode 0x200a
[  230.772239][T12288] loop1: detected capacity change from 0 to 128
[  230.912076][T12300] loop1: detected capacity change from 0 to 128
[  231.527245][T12334] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2433'.
[  232.114551][  T975] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  232.274681][  T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.278202][  T975] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  232.281341][  T975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.293219][  T975] usb 2-1: config 0 descriptor??
[  232.299318][T12347] virtiofs: Unknown parameter 'always'
[  232.302982][  T975] pwc: Askey VC010 type 2 USB webcam detected.
[  232.581385][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2441'.
[  232.585244][T12355] bond0: invalid ARP target 0.0.0.0 specified for addition
[  232.587815][T12355] bond0: option arp_ip_target: invalid value (0)
[  232.704296][  T975] pwc: recv_control_msg error -32 req 02 val 2b00
[  232.707281][  T975] pwc: recv_control_msg error -32 req 02 val 2700
[  232.709881][  T975] pwc: recv_control_msg error -32 req 02 val 2c00
[  232.712848][  T975] pwc: recv_control_msg error -32 req 04 val 1000
[  232.716148][  T975] pwc: recv_control_msg error -32 req 04 val 1300
[  232.719085][  T975] pwc: recv_control_msg error -32 req 04 val 1400
[  232.721742][  T975] pwc: recv_control_msg error -32 req 02 val 2000
[  232.725044][  T975] pwc: recv_control_msg error -32 req 02 val 2100
[  232.728936][  T975] pwc: recv_control_msg error -32 req 04 val 1500
[  232.731732][  T975] pwc: recv_control_msg error -32 req 02 val 2500
[  232.734289][  T975] pwc: recv_control_msg error -32 req 02 val 2400
[  232.737433][  T975] pwc: recv_control_msg error -32 req 02 val 2600
[  232.740144][  T975] pwc: recv_control_msg error -32 req 02 val 2900
[  232.742885][  T975] pwc: recv_control_msg error -32 req 02 val 2800
[  232.946239][  T975] pwc: recv_control_msg error -71 req 04 val 1200
[  232.953783][  T975] pwc: Registered as video103.
[  232.960890][  T975] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19
[  232.971527][  T975] usb 2-1: USB disconnect, device number 41
[  233.496750][T12365] loop1: detected capacity change from 0 to 512
[  233.499786][T12365] EXT4-fs: Ignoring removed bh option
[  233.581027][   T55] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  233.723744][T12369] lo speed is unknown, defaulting to 1000
[  233.726129][T12369] lo speed is unknown, defaulting to 1000
[  233.730169][T12369] lo speed is unknown, defaulting to 1000
[  233.769289][T12369] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  233.860956][T12369] lo speed is unknown, defaulting to 1000
[  233.864329][T12369] lo speed is unknown, defaulting to 1000
[  233.867130][T12369] lo speed is unknown, defaulting to 1000
[  234.548272][T12410] loop1: detected capacity change from 0 to 32768
[  234.555847][T12410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2462 (12410)
[  234.563373][T12410] BTRFS error: failed to open device for path /dev/loop1 with flags 0x23: -13
[  234.794222][T12424] Invalid ELF header magic: != ELF
[  234.846009][T12426] binder: 12425:12426 ioctl c0306201 0 returned -14
[  234.903749][T12428] IPv6: NLM_F_REPLACE set, but no existing node found!
[  234.991758][T12438] loop1: detected capacity change from 0 to 512
[  236.334663][T12469] loop1: detected capacity change from 0 to 256
[  236.359461][T12469] MINIX-fs: mounting file system with errors, running fsck is recommended
[  236.366974][T12469] MINIX-fs warning: remounting fs with errors, running fsck is recommended
[  236.670029][T12472] loop1: detected capacity change from 0 to 512
[  237.170808][T12502] syzkaller0: create flow: hash 888962462 index 1
[  237.227737][T12501] syzkaller0: delete flow: hash 888962462 index 1
[  239.207900][T12549] netlink: 'syz.5.2525': attribute type 2 has an invalid length.
[  239.263640][T12555] loop1: detected capacity change from 0 to 512
[  239.694466][   T33] audit: type=1800 audit(1755556641.680:69): pid=12575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2535" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  241.264625][T12617] openvswitch: netlink: Duplicate or invalid key (type 0).
[  241.267247][T12617] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  242.257008][T12637] loop1: detected capacity change from 0 to 2048
[  242.767436][T12640] loop1: detected capacity change from 0 to 32768
[  242.772070][T12640] bcachefs (/dev/loop1): error reading superblock: error opening /dev/loop1: EACCES
[  242.781487][T12640] bcachefs: bch2_fs_get_tree() error: EACCES
[  242.855275][T12651] loop1: detected capacity change from 0 to 4096
[  243.166732][    T9] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  243.317786][    T9] usb 2-1: config 5 has an invalid interface number: 234 but max is 0
[  243.321033][    T9] usb 2-1: config 5 has no interface number 0
[  243.323413][    T9] usb 2-1: config 5 interface 234 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  243.331263][    T9] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0027, bcdDevice=6e.03
[  243.334871][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.338435][    T9] usb 2-1: Product: syz
[  243.340084][    T9] usb 2-1: Manufacturer: syz
[  243.341886][    T9] usb 2-1: SerialNumber: syz
[  243.349676][T12654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  243.357375][    T9] kvaser_usb 2-1:5.234: error -EPROTO: Cannot get software info
[  243.360414][    T9] kvaser_usb 2-1:5.234: probe with driver kvaser_usb failed with error -71
[  243.574142][    T9] usb 2-1: USB disconnect, device number 42
[  244.139205][   T55] Bluetooth: hci0: unexpected event for opcode 0x0c7b
[  245.166853][T12692] loop1: detected capacity change from 0 to 1024
[  245.172865][T12692] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  245.181030][T12692] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  245.184814][T12692] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  245.189058][T12692] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.2588: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  245.195893][T12692] EXT4-fs (loop1): no journal found
[  245.198124][T12692] EXT4-fs (loop1): can't get journal size
[  245.201739][T12692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  245.233140][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.284176][T12695] loop1: detected capacity change from 0 to 512
[  245.350725][T12697] openvswitch: netlink: IPv4 tun info is not correct
[  245.651305][T12705] loop1: detected capacity change from 0 to 32768
[  245.752208][T12723] loop1: detected capacity change from 0 to 512
[  246.001677][T12737] loop1: detected capacity change from 0 to 512
[  246.910154][T12759] loop1: detected capacity change from 0 to 256
[  247.196390][    T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  247.356935][    T9] usb 2-1: Using ep0 maxpacket: 16
[  247.360303][    T9] usb 2-1: config 8 has an invalid interface number: 57 but max is 0
[  247.363285][    T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  247.367026][    T9] usb 2-1: config 8 has no interface number 0
[  247.369150][    T9] usb 2-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  247.373563][    T9] usb 2-1: config 8 interface 57 has no altsetting 0
[  247.378023][    T9] usb 2-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44
[  247.381040][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.383499][    T9] usb 2-1: Product: syz
[  247.384802][    T9] usb 2-1: Manufacturer: syz
[  247.387535][    T9] usb 2-1: SerialNumber: syz
[  247.602165][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  247.604413][    T9] usb 2-1: MIDIStreaming interface descriptor not found
[  247.620265][    T9] usb 2-1: USB disconnect, device number 43
[  247.873464][T12774] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  247.877903][T12774] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  248.013197][T12782] overlayfs: failed to clone upperpath
[  248.617454][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  248.766747][    T9] usb 2-1: Using ep0 maxpacket: 32
[  248.771242][    T9] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  248.775005][    T9] usb 2-1: config 0 has no interface number 0
[  248.778090][    T9] usb 2-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  248.781653][    T9] usb 2-1: config 0 interface 2 has no altsetting 0
[  248.785902][    T9] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  248.791044][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.794432][    T9] usb 2-1: Product: syz
[  248.795935][    T9] usb 2-1: Manufacturer: syz
[  248.799967][    T9] usb 2-1: SerialNumber: syz
[  248.804359][    T9] usb 2-1: config 0 descriptor??
[  248.916146][T12802] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.2636'.
[  249.014820][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  249.040974][    T9] usb 2-1: USB disconnect, device number 44
[  249.058434][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  249.071369][T12808] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2639'.
[  249.623579][T12834] gretap0: entered promiscuous mode
[  249.899461][T12851] loop1: detected capacity change from 0 to 4096
[  250.029103][T12861] tipc: Started in network mode
[  250.031430][T12861] tipc: Node identity , cluster identity 4711
[  250.034051][T12861] tipc: Failed to set node id, please configure manually
[  250.040019][T12861] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  250.049223][    T9] IPVS: starting estimator thread 0...
[  250.148143][T12864] IPVS: using max 80 ests per chain, 192000 per kthread
[  250.207192][T12874] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2671'.
[  250.632877][T12886] loop1: detected capacity change from 0 to 32768
[  250.648050][T12886] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  250.648050][T12886] members_v1 (size 64):
[  250.648050][T12886] nr_devices mismatch: have 0 entries, should be 8
[  250.656517][T12886] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  250.715759][T12903] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2685'.
[  251.050211][T12917] rtc_cmos 00:04: Alarms can be up to one day in the future
[  251.425535][T12949] overlayfs: conflicting lowerdir path
[  251.675848][T12963] loop1: detected capacity change from 0 to 512
[  251.756048][T12967] trusted_key: encrypted_key: keylen parameter is missing
[  252.017792][    T9] rtc_cmos 00:04: Alarms can be up to one day in the future
[  252.021795][    T9] rtc_cmos 00:04: Alarms can be up to one day in the future
[  252.025613][    T9] rtc_cmos 00:04: Alarms can be up to one day in the future
[  252.031755][    T9] rtc_cmos 00:04: Alarms can be up to one day in the future
[  252.035380][    T9] rtc rtc0: __rtc_set_alarm: err=-22
[  252.052019][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2728'.
[  252.063870][T12992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2728'.
[  252.170581][   T33] audit: type=1326 audit(1755556654.168:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12997 comm="syz.4.2731" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb52b98ebe9 code=0x0
[  252.273567][T13004] loop7: detected capacity change from 0 to 524255232
[  252.549779][T13021] netlink: 'syz.1.2741': attribute type 1 has an invalid length.
[  252.552426][T13021] netlink: 'syz.1.2741': attribute type 4 has an invalid length.
[  252.555019][T13021] netlink: 212 bytes leftover after parsing attributes in process `syz.1.2741'.
[  253.087766][T13023] loop1: detected capacity change from 0 to 32768
[  253.358272][T13030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2744'.
[  253.362248][T13030] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  253.365277][T13030] batadv0: mtu less than device minimum
[  253.368256][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.372837][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.377430][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.382378][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.387109][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.392338][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.397732][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.403095][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.408598][T13030] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  253.500981][T13030] batman_adv: batadv0: Removing interface: batadv_slave_1
[  253.566246][T13036] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.616845][T13045] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2751'.
[  253.619952][T13045] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2751'.
[  253.796743][T13063] netlink: 'syz.5.2760': attribute type 4 has an invalid length.
[  253.976420][T13061] lo speed is unknown, defaulting to 1000
[  254.435664][T13068] lo speed is unknown, defaulting to 1000
[  254.949828][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2768'.
[  255.001853][T13070] loop1: detected capacity change from 0 to 32768
[  255.013509][T13070] XFS: ikeep mount option is deprecated.
[  255.384022][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.386714][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.597569][    T9] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  256.773341][    T9] usb 2-1: config 4 has an invalid interface number: 231 but max is 0
[  256.776812][    T9] usb 2-1: config 4 has no interface number 0
[  256.782868][    T9] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  256.786728][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.792108][    T9] usb 2-1: Product: syz
[  256.793912][    T9] usb 2-1: Manufacturer: syz
[  256.795792][    T9] usb 2-1: SerialNumber: syz
[  256.810856][    T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  257.011579][    T9] vp7045: USB control message 'out' went wrong.
[  257.014230][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  257.025155][    T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  257.036237][    T9] usb 2-1: USB disconnect, device number 45
[  257.821137][T13150] loop1: detected capacity change from 0 to 32768
[  257.835022][T13150] ocfs2: Readonly device (7,1) detected. Cluster services will not be used for this mount. Recovery will be skipped.
[  257.843246][T13150] ocfs2: Mounting device (7,1) on (node local, slot 65535) with writeback data mode.
[  257.859183][ T5844] INFO: trying to register non-static key.
[  257.861151][ T5844] The code is fine but needs lockdep annotation, or maybe
[  257.864121][ T5844] you didn't initialize this object before use?
[  257.866578][ T5844] turning off the locking correctness validator.
[  257.869071][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  257.869087][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  257.869094][ T5844] Call Trace:
[  257.869100][ T5844]  <TASK>
[  257.869106][ T5844]  dump_stack_lvl+0x189/0x250
[  257.869124][ T5844]  ? rcu_is_watching+0x15/0xb0
[  257.869137][ T5844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.869150][ T5844]  ? __pfx__printk+0x10/0x10
[  257.869166][ T5844]  ? __is_module_percpu_address+0x39b/0x3f0
[  257.869179][ T5844]  ? is_module_address+0x17/0xf0
[  257.869195][ T5844]  assign_lock_key+0x133/0x150
[  257.869207][ T5844]  register_lock_class+0x105/0x320
[  257.869225][ T5844]  __lock_acquire+0x99/0xd20
[  257.869241][ T5844]  ? ktime_get+0x3e/0x1f0
[  257.869255][ T5844]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  257.869268][ T5844]  lock_acquire+0x120/0x360
[  257.869283][ T5844]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  257.869299][ T5844]  _raw_spin_lock_irqsave+0xa7/0xf0
[  257.869314][ T5844]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  257.869327][ T5844]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  257.869340][ T5844]  ? ktime_get+0x1cb/0x1f0
[  257.869351][ T5844]  ocfs2_mark_lockres_freeing+0x125/0x580
[  257.869364][ T5844]  ? __pfx_ocfs2_mark_lockres_freeing+0x10/0x10
[  257.869381][ T5844]  ? ocfs2_journal_shutdown+0x64b/0xaf0
[  257.869396][ T5844]  ? __pfx_ocfs2_journal_shutdown+0x10/0x10
[  257.869408][ T5844]  ? kfree+0x18e/0x440
[  257.869422][ T5844]  ocfs2_dlm_shutdown+0x3a/0x240
[  257.869434][ T5844]  ocfs2_dismount_volume+0x46a/0x8d0
[  257.869480][ T5844]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  257.869494][ T5844]  ? __pfx_evict_inodes+0x10/0x10
[  257.869510][ T5844]  ? __pfx_ocfs2_put_super+0x10/0x10
[  257.869531][ T5844]  generic_shutdown_super+0x135/0x2c0
[  257.869544][ T5844]  kill_block_super+0x44/0x90
[  257.869559][ T5844]  deactivate_locked_super+0xbc/0x130
[  257.869571][ T5844]  cleanup_mnt+0x425/0x4c0
[  257.869585][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.869601][ T5844]  task_work_run+0x1d4/0x260
[  257.869618][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  257.869631][ T5844]  ? __x64_sys_umount+0x122/0x160
[  257.869646][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  257.869661][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  257.869676][ T5844]  do_syscall_64+0x2bd/0x3b0
[  257.869690][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  257.869703][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.869714][ T5844]  ? exc_page_fault+0x9f/0xf0
[  257.869729][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.869740][ T5844] RIP: 0033:0x7f35a518ff17
[  257.869752][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  257.869761][ T5844] RSP: 002b:00007ffc1164a938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  257.869773][ T5844] RAX: 0000000000000000 RBX: 00007f35a5211c05 RCX: 00007f35a518ff17
[  257.869781][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1164a9f0
[  257.869788][ T5844] RBP: 00007ffc1164a9f0 R08: 0000000000000000 R09: 0000000000000000
[  257.869794][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1164ba80
[  257.869802][ T5844] R13: 00007f35a5211c05 R14: 000000000003eec7 R15: 00007ffc1164bac0
[  257.869814][ T5844]  </TASK>
[  258.000593][ T5844] ocfs2: Unmounting device (7,1) on (node local)
[  258.011710][ T5844] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  258.015897][ T5844] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  258.018687][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  258.022905][ T5844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  258.026556][ T5844] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  258.028706][ T5844] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 6c e1 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 4c e1 83 fe 48 8b 3b 49 81 c7 88
[  258.035657][ T5844] RSP: 0018:ffffc900043af340 EFLAGS: 00010202
[  258.037966][ T5844] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888109653980
[  258.040713][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  258.043556][ T5844] RBP: ffffc900043afa70 R08: ffff88803d213177 R09: 1ffff11007a4262e
[  258.046572][ T5844] R10: dffffc0000000000 R11: ffffed1007a4262f R12: fffff52000875e78
[  258.049754][ T5844] R13: ffff88803d213420 R14: dffffc0000000000 R15: ffff88803d2133f8
[  258.053088][ T5844] FS:  0000555563405500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  258.056710][ T5844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.059530][ T5844] CR2: 00005555634205c8 CR3: 000000002aaec000 CR4: 00000000000006f0
[  258.062825][ T5844] Call Trace:
[  258.064246][ T5844]  <TASK>
[  258.065501][ T5844]  ? rcu_is_watching+0x15/0xb0
[  258.067414][ T5844]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  258.069609][ T5844]  ? __switch_to+0xdae/0x1670
[  258.071583][ T5844]  ? __bpf_trace_sched_switch+0x17a/0x1e0
[  258.073861][ T5844]  ? __pfx___switch_to+0x10/0x10
[  258.075913][ T5844]  ? finish_task_switch+0x18b/0x950
[  258.078149][ T5844]  ? rcu_is_watching+0x15/0xb0
[  258.080181][ T5844]  ? rcu_is_watching+0x15/0xb0
[  258.082177][ T5844]  ? finish_task_switch+0x32b/0x950
[  258.084040][ T5844]  ? rcu_is_watching+0x15/0xb0
[  258.085784][ T5844]  ? trace_sched_exit_tp+0x36/0x110
[  258.087846][ T5844]  ? __schedule+0x17ae/0x4cc0
[  258.089515][ T5844]  ? __asan_memset+0x22/0x50
[  258.091353][ T5844]  ? __pfx___schedule+0x10/0x10
[  258.093307][ T5844]  ? __resched_curr+0x202/0x3e0
[  258.095230][ T5844]  ? do_raw_spin_lock+0x121/0x290
[  258.096902][ T5844]  ? rcu_is_watching+0x15/0xb0
[  258.098510][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  258.100181][ T5844]  ? _raw_spin_unlock+0x28/0x50
[  258.101831][ T5844]  ? writeback_single_inode+0x43e/0x6a0
[  258.103720][ T5844]  ? write_inode_now+0x160/0x1d0
[  258.105555][ T5844]  ? __pfx_write_inode_now+0x10/0x10
[  258.107385][ T5844]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  258.109344][ T5844]  ? inode_wait_for_writeback+0xf9/0x290
[  258.111267][ T5844]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  258.113559][ T5844]  ? rcu_is_watching+0x15/0xb0
[  258.115373][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  258.117418][ T5844]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  258.119640][ T5844]  evict+0x504/0x9c0
[  258.121199][ T5844]  ? __pfx_evict+0x10/0x10
[  258.123044][ T5844]  ? do_raw_spin_unlock+0x4d/0x240
[  258.125196][ T5844]  ? _raw_spin_unlock+0x28/0x50
[  258.127231][ T5844]  ? iput+0x6d8/0x9d0
[  258.128862][ T5844]  ocfs2_free_slot_info+0x79/0x260
[  258.130759][ T5844]  ocfs2_delete_osb+0x58/0x170
[  258.132648][ T5844]  ocfs2_dismount_volume+0x57a/0x8d0
[  258.134850][ T5844]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  258.137259][ T5844]  ? __pfx_evict_inodes+0x10/0x10
[  258.139384][ T5844]  ? __pfx_ocfs2_put_super+0x10/0x10
[  258.141607][ T5844]  generic_shutdown_super+0x135/0x2c0
[  258.143876][ T5844]  kill_block_super+0x44/0x90
[  258.145857][ T5844]  deactivate_locked_super+0xbc/0x130
[  258.148060][ T5844]  cleanup_mnt+0x425/0x4c0
[  258.149913][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.152016][ T5844]  task_work_run+0x1d4/0x260
[  258.153853][ T5844]  ? __pfx_task_work_run+0x10/0x10
[  258.155782][ T5844]  ? __x64_sys_umount+0x122/0x160
[  258.157487][ T5844]  ? exit_to_user_mode_loop+0x40/0x110
[  258.159296][ T5844]  exit_to_user_mode_loop+0xec/0x110
[  258.161082][ T5844]  do_syscall_64+0x2bd/0x3b0
[  258.162717][ T5844]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.164460][ T5844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.166760][ T5844]  ? exc_page_fault+0x9f/0xf0
[  258.168611][ T5844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.170943][ T5844] RIP: 0033:0x7f35a518ff17
[  258.172706][ T5844] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  258.179752][ T5844] RSP: 002b:00007ffc1164a938 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  258.182613][ T5844] RAX: 0000000000000000 RBX: 00007f35a5211c05 RCX: 00007f35a518ff17
[  258.185317][ T5844] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc1164a9f0
[  258.188076][ T5844] RBP: 00007ffc1164a9f0 R08: 0000000000000000 R09: 0000000000000000
[  258.191001][ T5844] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc1164ba80
[  258.194407][ T5844] R13: 00007f35a5211c05 R14: 000000000003eec7 R15: 00007ffc1164bac0
[  258.197796][ T5844]  </TASK>
[  258.199171][ T5844] Modules linked in:
[  258.201592][ T5844] ---[ end trace 0000000000000000 ]---
[  258.208086][ T5844] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  258.210309][ T5844] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 6c e1 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 4c e1 83 fe 48 8b 3b 49 81 c7 88
[  258.218951][ T5844] RSP: 0018:ffffc900043af340 EFLAGS: 00010202
[  258.221272][ T5844] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888109653980
[  258.224255][ T5844] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  258.227005][ T5844] RBP: ffffc900043afa70 R08: ffff88803d213177 R09: 1ffff11007a4262e
[  258.230081][ T5844] R10: dffffc0000000000 R11: ffffed1007a4262f R12: fffff52000875e78
[  258.233031][ T5844] R13: ffff88803d213420 R14: dffffc0000000000 R15: ffff88803d2133f8
[  258.236091][ T5844] FS:  0000555563405500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  258.240144][ T5844] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  258.242794][ T5844] CR2: 00005555634205c8 CR3: 000000002aaec000 CR4: 00000000000006f0
[  258.245631][ T5844] Kernel panic - not syncing: Fatal exception
[  258.248428][ T5844] Kernel Offset: disabled
[  258.249920][ T5844] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:34:01  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043af1b0
R8 =ffff888107da8237 R9 =1ffff11020fb5046 R10=dffffc0000000000 R11=ffffffff854eff30
R12=dffffc0000000000 R13=ffffffff99af990e R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854effac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555563405500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555634205c8 CR3=000000002aaec000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f35a5212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=47738b5666fd6400 RBX=ffffffff81968308 RCX=47738b5666fd6400 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32417ff8 CR3=000000010fca2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0500000224050001 0202000029040900 XMM03=0000000100290209 01030201839c0083
XMM04=31ac227c4c43c380 01223ff9e4d726e2 XMM05=0000000000000000 89c601d550781835
XMM06=0fdd0279a8284a58 51110a2d364628c6 XMM07=b0d920bd80496da4 661ea2f90267e043
XMM08=31ac227c4c43c380 01223ff9e4d726e2 XMM09=0000000000000000 00007f5e89c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
