last executing test programs:

1m56.983417171s ago: executing program 2 (id=137):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r0, 0x0, 0x0)

1m56.894374381s ago: executing program 2 (id=138):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="42e8", 0x2}, {0x0, 0xfffffd66}], 0x2, 0x0, 0x1e0)

1m56.893435418s ago: executing program 2 (id=139):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24)

1m56.783176793s ago: executing program 2 (id=140):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')

1m56.585166124s ago: executing program 2 (id=141):
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
ioctl(r0, 0x400c4d07, &(0x7f0000000900))

1m56.337183589s ago: executing program 2 (id=142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000240)="37fe018761", 0x5, 0x4048890, 0x0, 0x0)
accept$nfc_llcp(r1, 0x0, 0x0)

1m56.288711004s ago: executing program 32 (id=142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$packet(r1, &(0x7f0000000240)="37fe018761", 0x5, 0x4048890, 0x0, 0x0)
accept$nfc_llcp(r1, 0x0, 0x0)

50.777371303s ago: executing program 3 (id=1035):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000002d40)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x80000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})

50.706355114s ago: executing program 3 (id=1036):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d9be2440830447374d52000000010902581e01000000000904"], 0x0)

49.536947582s ago: executing program 3 (id=1048):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, 0x0, 0x0)
r4 = socket(0xa, 0x1, 0x0)
ioctl$sock_netdev_private(r4, 0x8990, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)

48.662905902s ago: executing program 3 (id=1057):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x516, &(0x7f0000000ac0)="$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")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
unshare(0x20000400)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
pselect6(0x40, &(0x7f0000000100)={0x9, 0x8000000000000, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, 0x0, 0x0, 0x0, 0x0)

48.5320323s ago: executing program 3 (id=1061):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x34, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}, [@nested={0x20, 0xe, 0x0, 0x1, [@nested={0x1c, 0x151, 0x0, 0x1, [@generic="b2d6a68dad388e50eb1efdd50e95f03930f4741e3879f87d"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)

48.176639978s ago: executing program 3 (id=1069):
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1)

48.081404919s ago: executing program 33 (id=1069):
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1)

41.045038756s ago: executing program 4 (id=1165):
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

40.902001719s ago: executing program 4 (id=1166):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900b59d0000009ba56a0000", 0x0, 0x6403, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

40.822666092s ago: executing program 4 (id=1168):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)={0x10, 0x402c, 0x1}, 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000)

40.822409s ago: executing program 4 (id=1170):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

40.632473386s ago: executing program 4 (id=1173):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084)

40.384318547s ago: executing program 4 (id=1174):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)

40.282190475s ago: executing program 34 (id=1174):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4)

33.574144013s ago: executing program 1 (id=1257):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x801}, 0x0)

33.458318927s ago: executing program 1 (id=1259):
r0 = syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
getdents64(r0, 0x0, 0x0)
chdir(&(0x7f0000000000)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x8103, 0x0)

33.435997009s ago: executing program 1 (id=1262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r1, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0)

33.362776613s ago: executing program 1 (id=1265):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x59}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYBLOB="07de9ae3004865f36195c93617594bca658e0b966b6d116ecd4910edb0e65f31cb794b50544910eb6456aa609c6861b309b45ef6567d4e820a14ff961ba2f4a3713fdf8adc13aa34115d481dc607cf6ecefc260ef52c3ec19b03986055d54904fe9cd76a923407c252e18073e276f22da9f4d528729fe74609970ff0f1fd20dedc46c4c077d1907c6e56c95506ef8d787b61e0c37b0159a50a5f6be5dfa0afe9eaeed8ffd1a325b8982c80dd9e45d1aea60565aa8c0f427ebeac1f101ad7c598679e1899e7fc2462b3e55ec2b037aeec6af78d058f96bef36411fe2e5db3c4575668515aac63f8ce589f000845efd4e4321cecb196", @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES16, @ANYRES32], 0x5, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4ec42, 0x40)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
write$binfmt_elf32(r0, &(0x7f0000000e00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x7, 0x5, 0x6, 0x1, 0x2, 0x6, 0x0, 0x130, 0x38, 0x33b, 0x1, 0x4, 0x20, 0x1, 0x3, 0x145d, 0x8}, [{0x6474e551, 0x3, 0x3, 0x1, 0x101, 0xff, 0xffffffff, 0x8}]}, 0x58)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1000008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

32.820396218s ago: executing program 1 (id=1275):
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, "006074333200009bb3c2ce0000000000000000011800f5ff0100fffffffdff00"})

31.963264764s ago: executing program 1 (id=1285):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a8000/0x12000)=nil, 0x12000, 0x13)

31.878500887s ago: executing program 35 (id=1285):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001a8000/0x12000)=nil, 0x12000, 0x13)

1.941176431s ago: executing program 5 (id=1652):
r0 = userfaultfd(0x801)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)

1.180405236s ago: executing program 6 (id=1660):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000001e80)=[{&(0x7f0000001bc0)=""/210, 0xd2}], 0x1)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000200))

1.061697116s ago: executing program 0 (id=1662):
mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

1.061497733s ago: executing program 0 (id=1663):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x4004800)
setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000ac0)='Z', 0x1)

940.888097ms ago: executing program 0 (id=1664):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20022e2e, 0x10040, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}})

693.770121ms ago: executing program 5 (id=1665):
prctl$PR_GET_IO_FLUSHER(0x3a)

617.981575ms ago: executing program 6 (id=1666):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, 0x0)

617.846393ms ago: executing program 5 (id=1667):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x2, 0x59555956, 0x3, @discrete={0xff, 0x8000}})

569.130361ms ago: executing program 6 (id=1668):
syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0)

568.964356ms ago: executing program 5 (id=1669):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x1)

509.369008ms ago: executing program 6 (id=1670):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x7ffffffe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x4000010)

509.255905ms ago: executing program 5 (id=1671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000108000240000000020500030000000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0)

509.110409ms ago: executing program 6 (id=1672):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r0 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000019340)=[{}, {}, {}, {}], 0x0, 0x0, 0x0})

499.428318ms ago: executing program 5 (id=1673):
syz_usb_connect(0x3, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000590760205f0501d0928c000000010902120001100000000904"], 0x0)

430.147538ms ago: executing program 6 (id=1674):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0xa1e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x7d, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

92.114295ms ago: executing program 0 (id=1675):
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0)
prctl$PR_SET_MM_MAP(0x49, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

91.95971ms ago: executing program 0 (id=1676):
openat$tun(0xffffffffffffff9c, 0x0, 0x6241, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000002280)="00112233445500112233445688ca", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)

0s ago: executing program 0 (id=1677):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0), 0x1f, 0x28, 0x0, 0xffffffffffffff30}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})

kernel console output (not intermixed with test programs):

cted capacity change from 0 to 128
[  121.036974][ T5669] uclogic 0003:28BD:0042.0007: failed retrieving string descriptor #100: -71
[  121.051052][ T5669] uclogic 0003:28BD:0042.0007: failed retrieving pen parameters: -71
[  121.054840][ T5669] uclogic 0003:28BD:0042.0007: pen probing failed: -71
[  121.060019][ T5669] uclogic 0003:28BD:0042.0007: failed probing parameters: -71
[  121.064168][ T5669] uclogic 0003:28BD:0042.0007: probe with driver uclogic failed with error -71
[  121.069635][ T8096] loop1: detected capacity change from 0 to 1024
[  121.074099][ T8096] EXT4-fs: Ignoring removed bh option
[  121.078449][ T5669] usb 1-1: USB disconnect, device number 14
[  121.100904][ T8096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.138098][ T5593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.169772][ T8100] loop1: detected capacity change from 0 to 512
[  121.206961][ T8100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.210687][ T8100] ext4 filesystem being mounted at /335/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.219695][ T8100] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.924: corrupted inode contents
[  121.228108][ T8100] EXT4-fs (loop1): Remounting filesystem read-only
[  121.243900][ T5593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.506959][ T8119] loop1: detected capacity change from 0 to 256
[  121.510952][ T8119] exfat: Deprecated parameter 'namecase'
[  121.524563][ T8119] exfat: Deprecated parameter 'utf8'
[  121.526808][ T8121] loop3: detected capacity change from 0 to 16
[  121.527220][ T8119] exfat: Deprecated parameter 'namecase'
[  121.531142][ T8119] exfat: Deprecated parameter 'utf8'
[  121.539367][ T8121] erofs (device loop3): mounted with root inode @ nid 36.
[  121.540473][ T8119] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d)
[  121.549126][ T8119] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  121.583693][   T33] audit: type=1804 audit(1785563975.630:30): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.932" name=2F6E6577726F6F742F3333392FE91F7189591E9233614B2F627573 dev="loop1" ino=1048617 res=1 errno=0
[  121.831785][ T8127] loop0: detected capacity change from 0 to 32768
[  121.836923][ T8127] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.935 (8127)
[  121.844836][ T8127] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.849039][ T8127] BTRFS info (device loop0): using sha256 checksum algorithm
[  121.944095][ T8127] BTRFS info (device loop0): enabling ssd optimizations
[  121.946577][ T8154] netlink: 'syz.3.942': attribute type 4 has an invalid length.
[  121.947961][ T8127] BTRFS info (device loop0): turning on sync discard
[  121.953738][ T8127] BTRFS info (device loop0): enabling free space tree
[  121.956296][ T8127] BTRFS info (device loop0): use zlib compression, level 3
[  122.193701][   T33] audit: type=1800 audit(1785563976.240:31): pid=8162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.935" name="file1" dev="loop0" ino=260 res=0 errno=0
[  122.228224][ T8161] loop1: detected capacity change from 0 to 4096
[  122.342877][ T8161] ntfs3(loop1): ino=19, mi_enum_attr
[  122.351533][ T8161] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  122.601749][ T5598] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.634417][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  122.786919][   T10] usb 4-1: Using ep0 maxpacket: 32
[  122.796997][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.813642][   T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  122.817333][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.820514][   T10] usb 4-1: Product: syz
[  122.824936][   T10] usb 4-1: Manufacturer: syz
[  122.826853][   T10] usb 4-1: SerialNumber: syz
[  122.832525][   T32] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  122.836761][   T10] usb 4-1: config 0 descriptor??
[  122.843712][   T10] usb 4-1: bad CDC descriptors
[  122.857159][   T10] usb 4-1: unsupported MDLM descriptors
[  122.984065][   T32] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  122.987468][   T32] usb 2-1: config 0 has no interface number 0
[  122.989986][   T32] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  122.997970][   T32] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  123.001603][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.004870][   T32] usb 2-1: Product: syz
[  123.006518][   T32] usb 2-1: Manufacturer: syz
[  123.008506][   T32] usb 2-1: SerialNumber: syz
[  123.019245][   T32] usb 2-1: config 0 descriptor??
[  123.034134][   T32] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  123.047897][ T5700] usb 4-1: USB disconnect, device number 18
[  123.102695][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  123.252155][   T10] usb 1-1: Using ep0 maxpacket: 32
[  123.257646][   T10] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  123.261150][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.265538][   T10] usb 1-1: config 0 has no interface number 0
[  123.268816][   T10] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  123.274435][   T10] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  123.279548][   T10] usb 1-1: config 0 interface 8 has no altsetting 0
[  123.285141][   T10] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  123.289488][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.292887][   T10] usb 1-1: Product: syz
[  123.294989][   T10] usb 1-1: Manufacturer: syz
[  123.296879][   T10] usb 1-1: SerialNumber: syz
[  123.300798][   T10] usb 1-1: config 0 descriptor??
[  123.515913][   T10] ath6kl: Failed to submit usb control message: -71
[  123.518785][   T10] ath6kl: unable to send the bmi data to the device: -71
[  123.521731][   T10] ath6kl: Unable to send get target info: -71
[  123.525491][   T10] ath6kl: Failed to init ath6kl core: -71
[  123.533864][   T10] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71
[  123.541472][   T10] usb 1-1: USB disconnect, device number 15
[  123.666818][ T8191] loop3: detected capacity change from 0 to 512
[  123.679773][ T8191] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  123.699249][ T8191] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.957: invalid indirect mapped block 4294967295 (level 0)
[  123.706799][ T8191] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  123.709485][ T8191] EXT4-fs (loop3): Remounting filesystem read-only
[  123.713277][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  123.713292][    C0] EXT4-fs (loop3): initial error at time 1785563977: ext4_free_branches:1023: inode 16
[  123.713352][    C0] EXT4-fs (loop3): last error at time 1785563977: ext4_free_branches:1023: inode 16
[  123.726540][ T8191] EXT4-fs (loop3): 1 orphan inode deleted
[  123.728368][ T8191] EXT4-fs (loop3): 1 truncate cleaned up
[  123.730723][ T8191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.737206][ T8191] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #2: comm syz.3.957: directory missing '..'
[  123.751011][ T6054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.392082][  T860] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  124.563752][  T860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.569285][  T860] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  124.572581][  T860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.575249][  T860] usb 1-1: Product: syz
[  124.576630][  T860] usb 1-1: Manufacturer: syz
[  124.578246][  T860] usb 1-1: SerialNumber: syz
[  124.582018][  T860] usb 1-1: config 0 descriptor??
[  124.586013][  T860] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  124.797083][   T10] usb 1-1: USB disconnect, device number 16
[  125.190569][ T8215] loop3: detected capacity change from 0 to 4096
[  125.207771][ T8215] ntfs3(loop3): ino=19, mi_enum_attr
[  125.209964][ T8215] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  125.228202][   T33] audit: type=1800 audit(1785563979.280:32): pid=8215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.967" name="file1" dev="loop3" ino=30 res=0 errno=0
[  125.303233][ T6275] ntfs3(loop3): ino=5, mi_enum_attr
[  125.329587][ T8217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.968'.
[  125.333858][ T8217] netlink: 104 bytes leftover after parsing attributes in process `syz.3.968'.
[  125.434465][ T8223] vhci_hcd vhci_hcd.0: failed to lookup sock
[  125.593321][ T5649] usb 2-1: USB disconnect, device number 16
[  125.597110][ T5649] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  125.682523][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  125.753159][  T860] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  125.776781][ T8239] loop1: detected capacity change from 0 to 512
[  125.790328][ T8239] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.979: missing EA_INODE flag
[  125.798221][ T8239] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  125.800154][ T8239] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.979: error while reading EA inode 12 err=-117
[  125.803930][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  125.803945][    C0] EXT4-fs (loop1): initial error at time 1785563979: ext4_xattr_inode_iget:441: inode 12
[  125.803964][    C0] EXT4-fs (loop1): last error at time 1785563979: ext4_xattr_inode_iget:441: inode 12
[  125.821199][ T8239] loop1: lost filesystem error report for type 5 error -117
[  125.821785][ T8239] EXT4-fs (loop1): 1 orphan inode deleted
[  125.828531][ T8239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.835809][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.838932][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.845258][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  125.848637][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  125.851378][   T10] usb 4-1: SerialNumber: syz
[  126.002027][  T860] usb 1-1: Using ep0 maxpacket: 32
[  126.013629][  T860] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  126.016915][  T860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.024244][  T860] usb 1-1: config 0 descriptor??
[  126.036245][  T860] as10x_usb: device has been detected
[  126.050962][  T860] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  126.247545][  T860] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  126.305300][   T10] usb 4-1: 0:2 : does not exist
[  126.326396][   T10] usb 4-1: USB disconnect, device number 19
[  126.355024][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.360741][  T860] as10x_usb: error during firmware upload part1
[  126.364876][  T860] Registered device nBox DVB-T Dongle
[  126.367008][  T860] usb 1-1: USB disconnect, device number 17
[  126.392927][  T860] Unregistered device nBox DVB-T Dongle
[  126.396171][  T860] as10x_usb: device has been disconnected
[  126.678289][ T5593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.952059][ T5060] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  127.044068][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  127.102184][ T5060] usb 4-1: Using ep0 maxpacket: 16
[  127.107144][ T5060] usb 4-1: config 1 interface 0 has no altsetting 0
[  127.111372][ T8254] loop0: detected capacity change from 0 to 32768
[  127.112824][ T5060] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40
[  127.120403][ T5060] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.129360][ T5060] usb 4-1: Product: syz
[  127.134020][ T5060] usb 4-1: Manufacturer: syz
[  127.135963][ T5060] usb 4-1: SerialNumber: syz
[  127.141916][ T8254] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.160427][ T8254] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  127.171301][ T8254] XFS (loop0): Starting recovery (logdev: internal)
[  127.183450][ T8254] XFS (loop0): Ending recovery (logdev: internal)
[  127.203458][   T10] usb 2-1: Using ep0 maxpacket: 32
[  127.209168][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.213904][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  127.217644][   T10] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  127.222531][   T10] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  127.227925][   T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.231749][   T10] usb 2-1: config 1 interface 1 has no altsetting 0
[  127.239251][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  127.247180][ T5598] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.250606][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.259995][   T10] usb 2-1: Product: syz
[  127.261876][   T10] usb 2-1: Manufacturer: syz
[  127.265446][   T10] usb 2-1: SerialNumber: syz
[  127.380056][ T5060] usbhid 4-1:1.0: can't add hid device: -71
[  127.384403][ T5060] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  127.392337][ T5060] usb 4-1: USB disconnect, device number 20
[  127.489653][   T10] usb 2-1: selecting invalid altsetting 0
[  127.712883][   T10] usb 2-1: 1:1: cannot get freq (v2/v3): err -32
[  127.922645][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.992'.
[  127.927386][ T8277] l2tp_ppp: sess 2/0: no socket in recv
[  128.107738][ T5060] usb 2-1: USB disconnect, device number 17
[  128.150612][ T8288] xt_hashlimit: size too large, truncated to 1048576
[  128.522998][ T8294] loop3: detected capacity change from 0 to 32768
[  128.532752][ T8294] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  128.545560][ T8294] XFS (loop3): Ending clean mount
[  128.563260][   T33] audit: type=1800 audit(1785563982.620:33): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.999" name="bus" dev="loop3" ino=4425 res=0 errno=0
[  128.590296][   T33] audit: type=1800 audit(1785563982.640:34): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.999" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  128.681263][ T6054] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  129.477602][ T8333] loop0: detected capacity change from 0 to 32768
[  129.938232][ T5882]  loop0: p1 < > p3 < p5 p6 p7 > p4[DM]
[  129.957393][ T5882] loop0: p5 size 50331648 extends beyond EOD, truncated
[  129.971505][ T5882] loop0: p7 size 1048576 extends beyond EOD, truncated
[  129.984832][ T8333]  loop0: p1 < > p3 < p5 p6 p7 > p4[DM]
[  129.989003][ T8333] loop0: p5 size 50331648 extends beyond EOD, truncated
[  129.994377][ T8333] loop0: p7 size 1048576 extends beyond EOD, truncated
[  130.079006][ T8343] loop1: detected capacity change from 0 to 512
[  130.101483][ T8343] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  130.126301][ T8346] netlink: 'syz.0.1019': attribute type 3 has an invalid length.
[  130.129040][ T8346] netlink: 'syz.0.1019': attribute type 27 has an invalid length.
[  130.133194][ T8343] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1018: iget: bad i_size value: 360287970189639680
[  130.142003][ T8343] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  130.142280][ T8343] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1018: couldn't read orphan inode 15 (err -117)
[  130.152016][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  130.152048][ T8343] loop1: lost filesystem error report for type 5 error -117
[  130.154311][    C1] EXT4-fs (loop1): initial error at time 1785563984: ext4_orphan_get:1391
[  130.155328][ T8343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.156580][    C1] : inode 15
[  130.163919][    C1] EXT4-fs (loop1): last error at time 1785563984: ext4_orphan_get:1396
[  130.190368][ T5596] udevd[5596]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  130.194419][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  130.197356][ T7036] udevd[7036]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  130.199597][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  130.203527][ T6219] udevd[6219]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  130.206926][ T5723] udevd[5723]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[  130.208456][ T8343] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 13: comm syz.1.1018: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=12, rec_len=4096, size=4096 fake=1
[  130.222049][ T5701] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  130.242927][ T5599] udevd[5599]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  130.247877][ T5723] udevd[5723]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory
[  130.263778][ T6219] udevd[6219]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  130.279555][ T5593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.377836][ T5701] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  130.380946][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.383448][ T5701] usb 4-1: Product: syz
[  130.385062][ T5701] usb 4-1: Manufacturer: syz
[  130.387092][ T5701] usb 4-1: SerialNumber: syz
[  130.390630][ T5701] usb 4-1: config 0 descriptor??
[  130.412071][   T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  130.566683][   T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  130.570498][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.573950][   T10] usb 1-1: Product: syz
[  130.575623][   T10] usb 1-1: Manufacturer: syz
[  130.577170][   T10] usb 1-1: SerialNumber: syz
[  130.579981][   T10] usb 1-1: config 0 descriptor??
[  130.582034][  T860] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  130.610063][ T5701] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  130.734233][  T860] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  130.737017][  T860] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  130.740696][  T860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  130.744365][  T860] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  130.747945][  T860] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  130.753445][  T860] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  130.756785][  T860] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  130.759814][  T860] usb 2-1: Product: syz
[  130.761359][  T860] usb 2-1: Manufacturer: syz
[  130.771654][  T860] cdc_wdm 2-1:1.0: skipping garbage
[  130.773757][  T860] cdc_wdm 2-1:1.0: skipping garbage
[  130.776694][  T860] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  130.778886][  T860] cdc_wdm 2-1:1.0: Unknown control protocol
[  131.217875][ T5701] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  131.227197][ T5701] usb 4-1: USB disconnect, device number 21
[  131.387943][  T860] usb 2-1: USB disconnect, device number 18
[  131.598790][   T10] usb 1-1: f81604_read: reg: 100f failed: -EPIPE
[  131.809291][   T10] usb 1-1: f81604_read: reg: 200e failed: -EPROTO
[  131.818436][   T10] usb 1-1: USB disconnect, device number 18
[  131.835162][   T10] usb 1-1: f81604_read: reg: 100f failed: -ENODEV
[  131.854476][ T5339] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  131.867572][ T5339] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  131.890534][   T10] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  131.939616][ T8363] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1026'.
[  132.009577][ T8369] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  132.294197][ T8392] binder: 8391:8392 ioctl c0306201 200000000040 returned -14
[  132.312070][ T5649] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  132.437566][ T8400] loop0: detected capacity change from 0 to 64
[  132.447779][ T8400] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop0
[  132.472043][ T5649] usb 2-1: Using ep0 maxpacket: 32
[  132.476052][ T5649] usb 2-1: unable to get BOS descriptor or descriptor too short
[  132.483122][ T5649] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[  132.486478][ T5649] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  132.501129][ T5649] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[  132.511266][ T5649] usb 2-1: config 128 has no interface number 0
[  132.514762][ T5649] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  132.519091][ T5649] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.522332][ T5649] usb 2-1: config 128 interface 127 has no altsetting 0
[  132.529366][ T5649] usb 2-1: language id specifier not provided by device, defaulting to English
[  132.538901][ T5649] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  132.542507][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.545387][ T5649] usb 2-1: Product: syz
[  132.546672][ T5649] usb 2-1: Manufacturer: syz
[  132.548413][ T5649] usb 2-1: SerialNumber: syz
[  132.562698][ T5701] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  132.724629][ T5701] usb 4-1: config index 0 descriptor too short (expected 7768, got 18)
[  132.727967][ T5701] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  132.730748][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.736601][ T5701] usb 4-1: config 0 descriptor??
[  132.794608][ T5649] usb 2-1: USB disconnect, device number 19
[  132.809277][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.947913][   T10] usb 4-1: USB disconnect, device number 22
[  133.072078][ T5701] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  133.222112][ T5701] usb 1-1: Using ep0 maxpacket: 8
[  133.228395][ T5701] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  133.232279][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.235394][ T5701] usb 1-1: Product: syz
[  133.237041][ T5701] usb 1-1: Manufacturer: syz
[  133.238963][ T5701] usb 1-1: SerialNumber: syz
[  133.243345][ T5701] usb 1-1: config 0 descriptor??
[  133.448887][ T5701] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  133.536617][ T8420] SET target dimension over the limit!
[  134.095333][ T5701] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  134.100145][ T5701] usb 1-1: USB disconnect, device number 19
[  134.260351][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.263914][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.301829][ T8440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.306731][ T8440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.339307][ T5648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.342729][ T5648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.345796][ T5648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.348584][ T5648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.413597][ T8442] loop3: detected capacity change from 0 to 512
[  134.451848][ T8442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.466595][ T8442] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.534888][ T6054] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  134.542756][ T6054] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  134.718548][ T8457] loop1: detected capacity change from 0 to 4096
[  134.742914][ T8457] EXT4-fs: Ignoring removed orlov option
[  134.751815][ T8457] EXT4-fs (loop1): Test dummy encryption mode enabled
[  134.758752][ T8457] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.805154][ T6054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.870990][ T8457] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  134.904469][ T5593] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.995378][ T8472] syz_tun: entered allmulticast mode
[  134.998086][ T8471] syz_tun: left allmulticast mode
[  135.077730][ T8478] loop0: detected capacity change from 0 to 128
[  135.091282][ T5891] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.096170][ T5891] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.099783][ T5891] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.103369][ T5891] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.106426][ T5891] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.117994][ T4982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  135.121251][ T8478] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  135.127272][ T4982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  135.130521][ T4982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  135.132189][ T8478] hpfs: filesystem error: improperly stopped
[  135.135886][ T8478] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  135.138420][ T8478] hpfs: You really don't want any checks? You are crazy...
[  135.141069][ T8478] hpfs: hpfs_map_sector(): read error
[  135.144425][ T8478] hpfs: code page support is disabled
[  135.146077][ T4982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  135.146274][ T8478] hpfs: hpfs_map_4sectors(): unaligned read
[  135.150634][ T8478] hpfs: hpfs_map_4sectors(): unaligned read
[  135.152771][ T4982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  135.153098][ T8478] hpfs: filesystem error: unable to find root dir
[  135.178313][ T8478] hpfs: hpfs_map_4sectors(): unaligned read
[  135.181326][ T8478] hpfs: hpfs_map_sector(): read error
[  135.287784][ T8490] loop0: detected capacity change from 0 to 4096
[  135.332716][ T5060] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  135.348866][ T8496] loop0: detected capacity change from 0 to 164
[  135.380931][ T8496] Unsupported NM flag settings (240)
[  135.505649][ T5060] usb 2-1: Using ep0 maxpacket: 16
[  135.511144][ T5060] usb 2-1: unable to get BOS descriptor or descriptor too short
[  135.515825][ T5060] usb 2-1: config 9 has an invalid interface number: 57 but max is 0
[  135.519035][ T5060] usb 2-1: config 9 has no interface number 0
[  135.521555][ T5060] usb 2-1: config 9 interface 57 has no altsetting 0
[  135.527510][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.530487][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.533660][ T8481] bridge_slave_0: entered allmulticast mode
[  135.536745][ T5060] usb 2-1: string descriptor 0 read error: -22
[  135.537592][ T8481] bridge_slave_0: entered promiscuous mode
[  135.539006][ T5060] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  135.543344][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.544656][ T5060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.546762][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.556995][ T8481] bridge_slave_1: entered allmulticast mode
[  135.560820][ T8481] bridge_slave_1: entered promiscuous mode
[  135.580657][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.585461][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.606826][ T8481] team0: Port device team_slave_0 added
[  135.611332][ T8481] team0: Port device team_slave_1 added
[  135.634328][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.637199][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.648163][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.654212][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.656935][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  135.667237][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.720562][ T8481] hsr_slave_0: entered promiscuous mode
[  135.723931][ T8481] hsr_slave_1: entered promiscuous mode
[  135.726089][ T8481] debugfs: 'hsr0' already exists in 'hsr'
[  135.728207][ T8481] Cannot create hsr debugfs directory
[  135.772398][ T5060]  (null): keene_cmd_main failed (-71)
[  135.787369][ T5060] video4linux radio48: keene_cmd_main failed (-71)
[  135.789973][ T5060] radio-keene 2-1:9.57: V4L2 device registered as radio48
[  135.803714][ T5060] usb 2-1: USB disconnect, device number 20
[  135.967314][ T8481] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  135.972912][ T8481] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  135.977172][ T8481] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  135.981280][ T8481] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  136.021894][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.024947][ T8481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.028169][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.030997][ T8481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.102624][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.114560][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.118074][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.134053][ T8481] 8021q: adding VLAN 0 to HW filter on device team0
[  136.140992][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.143881][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.154312][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.157183][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.373965][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.443925][ T8542] loop1: detected capacity change from 0 to 32768
[  136.451293][ T8542] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1088 (8542)
[  136.461829][ T8542] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.465250][ T8542] BTRFS info (device loop1): using blake2b checksum algorithm
[  136.497991][ T8542] BTRFS info (device loop1): enabling ssd optimizations
[  136.500668][ T8542] BTRFS info (device loop1): turning on async discard
[  136.512041][ T8542] BTRFS info (device loop1): enabling free space tree
[  136.514166][ T8542] BTRFS info (device loop1): use zlib compression, level 3
[  136.574129][ T8481] veth0_vlan: entered promiscuous mode
[  136.579027][ T8481] veth1_vlan: entered promiscuous mode
[  136.602693][ T8481] veth0_macvtap: entered promiscuous mode
[  136.607121][ T8481] veth1_macvtap: entered promiscuous mode
[  136.625796][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.641737][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.648113][ T5648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.654656][ T5488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.662189][ T5488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.664875][ T5488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.729053][ T3362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.729379][ T5593] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.731793][ T3362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.769871][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.776001][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.947223][ T8577] Non-string source
[  137.026611][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'.
[  137.030680][ T8584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.057301][ T8584] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.067531][ T8587] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  137.205792][ T5891] Bluetooth: hci2: command tx timeout
[  137.421642][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'.
[  137.532401][  T860] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  137.684681][  T860] usb 2-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  137.688139][  T860] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.690119][  T860] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00
[  137.696073][  T860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.699923][  T860] usb 2-1: config 0 descriptor??
[  137.742102][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  137.881053][ T8638] loop0: detected capacity change from 0 to 1024
[  137.884381][ T8638] EXT4-fs: Ignoring removed nomblk_io_submit option
[  137.897671][   T10] usb 5-1: Using ep0 maxpacket: 8
[  137.907222][ T8638] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c018, mo2=0102]
[  137.910178][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  137.914271][ T8638] System zones: 0-1, 3-12
[  137.915866][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.919785][   T10] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  137.924060][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  137.925292][ T8638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.927222][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  137.930560][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.939689][   T10] usb 5-1: config 0 descriptor??
[  137.961040][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.061568][ T8647] loop0: detected capacity change from 0 to 256
[  138.119854][  T860] wacom 0003:056A:00B4.0008: unknown main item tag 0x1
[  138.125627][ T8649] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  138.125775][  T860] wacom 0003:056A:00B4.0008: unknown main item tag 0x5
[  138.130700][  T860] wacom 0003:056A:00B4.0008: unknown main item tag 0x6
[  138.333393][ T5669] usb 2-1: USB disconnect, device number 21
[  138.348913][   T10] hid (null): unknown global tag 0xa3
[  138.351106][   T10] hid (null): unknown global tag 0xc
[  138.362327][   T10] hid (null): unknown global tag 0xd
[  138.365824][   T10] hid-multitouch 0003:0EEF:72D0.0009: unexpected long global item
[  138.375176][   T10] hid-multitouch 0003:0EEF:72D0.0009: probe with driver hid-multitouch failed with error -22
[  138.376044][ T8656] loop0: detected capacity change from 0 to 64
[  138.445609][ T6291] kworker/u10:26: attempt to access beyond end of device
[  138.445609][ T6291] loop0: rw=8388609, sector=2590, nr_sectors = 2 limit=64
[  138.450063][ T6291] Buffer I/O error on dev loop0, logical block 1295, lost async page write
[  138.556347][  T860] usb 5-1: USB disconnect, device number 2
[  138.599614][ T5701] IPVS: starting estimator thread 0...
[  138.688469][ T8671] syzkaller0: entered promiscuous mode
[  138.690676][ T8671] syzkaller0: entered allmulticast mode
[  138.702183][ T8665] IPVS: using max 47 ests per chain, 112800 per kthread
[  138.809884][   T33] audit: type=1400 audit(1785563992.860:35): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=":+%%:" pid=8674 comm="syz.0.1137"
[  138.916103][ T8681] loop0: detected capacity change from 0 to 1024
[  139.118999][ T8685] XFS (nullb0): Invalid superblock magic number
[  139.166150][  T860] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  139.183813][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  139.211305][ T8692] loop4: detected capacity change from 0 to 64
[  139.235191][ T8692] Trying to free block not in datazone
[  139.283074][ T5891] Bluetooth: hci2: command tx timeout
[  139.322061][  T860] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  139.325539][  T860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.340074][  T860] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[  139.351138][   T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  139.357923][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.360652][   T10] usb 2-1: Product: syz
[  139.364643][   T10] usb 2-1: Manufacturer: syz
[  139.366097][   T10] usb 2-1: SerialNumber: syz
[  139.372432][   T10] usb 2-1: config 0 descriptor??
[  139.379129][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  139.826466][  T860] gspca_sn9c20x: Write register 1001 failed -71
[  139.841188][  T860] gspca_sn9c20x: Device initialization failed
[  139.920184][  T860] gspca_sn9c20x 1-1:252.0: probe with driver gspca_sn9c20x failed with error -71
[  139.931681][  T860] usb 1-1: USB disconnect, device number 20
[  139.983278][   T10] gspca_sunplus: reg_r err -71
[  139.986579][   T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  139.997058][   T10] usb 2-1: USB disconnect, device number 22
[  140.482452][   T33] audit: type=1326 audit(1785563994.540:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.499802][   T33] audit: type=1326 audit(1785563994.540:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.512188][   T33] audit: type=1326 audit(1785563994.540:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.532399][   T33] audit: type=1326 audit(1785563994.540:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.540787][   T33] audit: type=1326 audit(1785563994.540:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.561198][   T33] audit: type=1326 audit(1785563994.540:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.563240][ T5649] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  140.594100][   T33] audit: type=1326 audit(1785563994.540:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.603231][   T33] audit: type=1326 audit(1785563994.550:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.611381][   T33] audit: type=1326 audit(1785563994.550:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.0.1151" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7cfe79e019 code=0x7ffc0000
[  140.764555][ T5649] usb 5-1: unable to get BOS descriptor or descriptor too short
[  140.769509][ T5649] usb 5-1: config 142 has an invalid interface number: 251 but max is 0
[  140.775091][ T5649] usb 5-1: config 142 has no interface number 0
[  140.777530][ T5649] usb 5-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  140.784883][ T5649] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt
[  140.792686][ T5649] usb 5-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt
[  140.797794][ T5649] usb 5-1: config 142 interface 251 has no altsetting 0
[  140.802928][ T5649] usb 5-1: string descriptor 0 read error: -22
[  140.805179][ T5649] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80
[  140.808491][ T5649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.814720][ T8703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  140.817379][ T8703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  140.820799][ T5649] cypress_m8 5-1:142.251: HID->COM RS232 Adapter converter detected
[  140.825770][ T5649] usb 5-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[  141.033281][   T10] usb 5-1: USB disconnect, device number 3
[  141.040664][   T10] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[  141.045045][ T5669] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  141.049240][   T10] cypress_m8 5-1:142.251: device disconnected
[  141.192034][ T5649] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  141.196205][ T5669] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  141.199486][ T5669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.210463][ T5669] usb 2-1: config 0 descriptor??
[  141.215688][ T5669] cp210x 2-1:0.0: cp210x converter detected
[  141.343837][ T5649] usb 1-1: unable to get BOS descriptor or descriptor too short
[  141.362335][ T5891] Bluetooth: hci2: command tx timeout
[  141.366297][ T5649] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.369431][ T5649] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  141.380757][ T5649] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  141.392091][ T5649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.394796][ T5649] usb 1-1: Product: syz
[  141.396125][ T5649] usb 1-1: Manufacturer: syz
[  141.397556][ T5649] usb 1-1: SerialNumber: syz
[  141.427043][ T5669] usb 2-1: cp210x converter now attached to ttyUSB0
[  141.630182][  T860] usb 2-1: USB disconnect, device number 23
[  141.640148][  T860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.645685][  T860] cp210x 2-1:0.0: device disconnected
[  141.845923][  T860] usb 1-1: USB disconnect, device number 21
[  141.941243][ T8740] ALSA: mixer_oss: invalid OSS volume ':'
[  141.943332][ T8740] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  141.945583][ T8740] ALSA: mixer_oss: invalid OSS volume '5'
[  141.947500][ T8740] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  141.949701][ T8740] ALSA: mixer_oss: invalid OSS volume '6'
[  141.951585][ T8740] ALSA: mixer_oss: invalid OSS volume '010000E0'
[  141.956106][ T8740] ALSA: mixer_oss: invalid OSS volume '7'
[  142.226701][ T8750] loop1: detected capacity change from 0 to 8
[  142.230093][ T8750] unable to read xattr id index table
[  142.503093][  T860] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  142.669534][  T860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.676995][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.682500][  T860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.685523][  T860] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  142.693180][  T860] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  142.696114][  T860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.706582][  T860] hub 2-1:1.0: bad descriptor, ignoring hub
[  142.713026][  T860] hub 2-1:1.0: probe with driver hub failed with error -5
[  142.718106][  T860] cdc_wdm 2-1:1.0: skipping garbage
[  142.720083][  T860] cdc_wdm 2-1:1.0: skipping garbage
[  142.726964][  T860] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[  142.745342][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.786178][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.834512][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.867609][ T4982] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.873169][ T4982] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.876226][ T4982] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.879641][ T4982] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.888099][ T4982] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.971493][   T12] bridge_slave_1: left allmulticast mode
[  142.976947][   T12] bridge_slave_1: left promiscuous mode
[  142.981114][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.989907][   T12] bridge_slave_0: left allmulticast mode
[  142.996912][   T12] bridge_slave_0: left promiscuous mode
[  142.999268][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.032324][ T5060] usb 2-1: USB disconnect, device number 24
[  143.203208][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.209131][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.214293][   T12] bond0 (unregistering): Released all slaves
[  143.652690][   T12] hsr_slave_0: left promiscuous mode
[  143.658317][   T12] hsr_slave_1: left promiscuous mode
[  143.661762][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.669440][ T8786] loop1: detected capacity change from 0 to 128
[  143.669622][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.675714][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.678536][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.684525][ T8786] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  143.689440][ T8786] hpfs: filesystem error: improperly stopped
[  143.691813][ T8786] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  143.701183][ T8786] hpfs: You really don't want any checks? You are crazy...
[  143.704142][   T12] veth1_macvtap: left promiscuous mode
[  143.705992][   T12] veth0_macvtap: left promiscuous mode
[  143.707814][   T12] veth1_vlan: left promiscuous mode
[  143.709503][   T12] veth0_vlan: left promiscuous mode
[  143.712117][ T8786] hpfs: Code page index out of array
[  143.716158][ T8786] hpfs: code page support is disabled
[  143.718530][ T8786] hpfs: hpfs_map_4sectors(): unaligned read
[  143.721049][ T8786] hpfs: hpfs_map_4sectors(): unaligned read
[  143.741552][ T8786] hpfs: filesystem error: unable to find root dir
[  143.810539][ T8786] hpfs: hpfs_map_4sectors(): unaligned read
[  143.919323][   T12] team0 (unregistering): Port device team_slave_1 removed
[  143.943791][   T12] team0 (unregistering): Port device team_slave_0 removed
[  144.205644][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.208224][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.210748][ T8759] bridge_slave_0: entered allmulticast mode
[  144.216086][ T8759] bridge_slave_0: entered promiscuous mode
[  144.219858][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.222689][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.231179][ T8759] bridge_slave_1: entered allmulticast mode
[  144.241917][ T8759] bridge_slave_1: entered promiscuous mode
[  144.309327][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.321021][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.369897][ T8759] team0: Port device team_slave_0 added
[  144.377653][ T8759] team0: Port device team_slave_1 added
[  144.412982][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.415055][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  144.423819][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.428585][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.430678][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  144.441334][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.485602][ T8759] hsr_slave_0: entered promiscuous mode
[  144.487816][ T8759] hsr_slave_1: entered promiscuous mode
[  144.489797][ T8759] debugfs: 'hsr0' already exists in 'hsr'
[  144.491626][ T8759] Cannot create hsr debugfs directory
[  144.830425][ T8759] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  144.838338][ T8759] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  144.842676][ T8759] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  144.847637][ T8759] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  144.918288][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0
[  144.929162][ T8759] 8021q: adding VLAN 0 to HW filter on device team0
[  144.942719][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.945689][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.962244][ T4982] Bluetooth: hci2: command tx timeout
[  144.964200][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.964290][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state
[  145.072382][ T5669] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  145.149962][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.222061][ T5669] usb 2-1: Using ep0 maxpacket: 16
[  145.229500][ T5669] usb 2-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 24, changing to 8
[  145.233747][ T5669] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  145.238229][ T5669] usb 2-1: config 1 interface 0 has no altsetting 0
[  145.246729][ T5669] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.40
[  145.249616][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.252404][ T5669] usb 2-1: Product: syz
[  145.253945][ T5669] usb 2-1: Manufacturer: syz
[  145.255530][ T5669] usb 2-1: SerialNumber: syz
[  145.278360][ T8759] veth0_vlan: entered promiscuous mode
[  145.284482][ T8759] veth1_vlan: entered promiscuous mode
[  145.299641][ T8759] veth0_macvtap: entered promiscuous mode
[  145.306177][ T8759] veth1_macvtap: entered promiscuous mode
[  145.319973][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0
[  145.327628][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  145.337682][ T5488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  145.343168][ T5488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  145.346585][ T5488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  145.375625][ T5488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  145.432065][ T6275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.437274][ T6275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.458477][ T6291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  145.468092][ T6291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  145.475708][ T5669] usbhid 2-1:1.0: can't add hid device: -71
[  145.477592][ T5669] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  145.488847][ T5669] usb 2-1: USB disconnect, device number 25
[  146.132198][ T5701] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  146.292054][ T5701] usb 1-1: Using ep0 maxpacket: 16
[  146.299451][ T5701] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  146.304986][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.307907][ T5701] usb 1-1: Product: syz
[  146.311998][ T5701] usb 1-1: Manufacturer: syz
[  146.313611][ T5701] usb 1-1: SerialNumber: syz
[  146.316408][ T5701] usb 1-1: config 0 descriptor??
[  146.320859][ T5701] gspca_main: spca508-2.14.0 probing 041e:4018
[  146.710267][ T5701] gspca_spca508: reg_read err -32
[  146.716322][ T5701] gspca_spca508: reg_read err -32
[  146.718769][ T5701] gspca_spca508: reg_read err -32
[  146.723835][ T5701] gspca_spca508: reg_read err -32
[  146.927492][ T5701] gspca_spca508: reg write: error -71
[  146.930532][ T5701] spca508 1-1:0.0: probe with driver spca508 failed with error -71
[  146.951008][ T5701] usb 1-1: USB disconnect, device number 22
[  147.044419][ T4982] Bluetooth: hci2: command tx timeout
[  147.772807][ T5669] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  147.925055][ T5669] usb 1-1: unable to get BOS descriptor or descriptor too short
[  147.928924][ T5669] usb 1-1: not running at top speed; connect to a high speed hub
[  147.935703][ T5669] usb 1-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40
[  147.939363][ T5669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.942724][ T5669] usb 1-1: Product: syz
[  147.944437][ T5669] usb 1-1: Manufacturer: syz
[  147.946353][ T5669] usb 1-1: SerialNumber: syz
[  148.165639][ T5669] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  148.168493][ T5669] usb 1-1: MIDIStreaming interface descriptor not found
[  148.225967][ T5669] usb 1-1: USB disconnect, device number 23
[  148.277123][ T5723] udevd[5723]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.665235][ T8977] netlink: 'syz.5.1241': attribute type 9 has an invalid length.
[  148.739473][ T8981] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  148.778843][ T8982] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1242'.
[  149.087599][ T8996] loop1: detected capacity change from 0 to 32768
[  149.127015][ T4982] Bluetooth: hci2: command tx timeout
[  149.188442][ T8998] loop0: detected capacity change from 0 to 32768
[  149.192548][ T8998] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1251 (8998)
[  149.200488][ T8998] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  149.205287][ T8998] BTRFS info (device loop0): using crc32c checksum algorithm
[  149.233522][ T8998] BTRFS info (device loop0): enabling ssd optimizations
[  149.239668][ T8998] BTRFS info (device loop0): turning on async discard
[  149.243155][ T8998] BTRFS info (device loop0): enabling free space tree
[  149.306411][ T5598] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  149.563438][ T9030] loop1: detected capacity change from 0 to 16
[  149.571280][ T9030] erofs (device loop1): mounted with root inode @ nid 36.
[  149.622028][ T9034] binder: Binderfs stats mode cannot be changed during a remount
[  149.798482][ T9038] loop0: detected capacity change from 0 to 32768
[  149.810456][ T9046] loop5: detected capacity change from 0 to 2048
[  149.824333][ T9038] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #71: fs_generation is 3923181505
[  149.830485][ T9038] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  149.834763][ T9038] OCFS2: File system is now read-only.
[  149.836839][ T9038] (syz.0.1263,9038,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  149.839564][ T9038] (syz.0.1263,9038,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  149.843256][ T9046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.857875][ T9038] (syz.0.1263,9038,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  149.860800][ T9038] (syz.0.1263,9038,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  149.860814][ T9038] (syz.0.1263,9038,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  149.882207][ T9038] (syz.0.1263,9038,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  149.884805][ T9038] (syz.0.1263,9038,1):ocfs2_fill_super:1177 ERROR: status = -30
[  149.990911][ T9042] loop1: detected capacity change from 0 to 40427
[  150.005455][ T9042] F2FS-fs (loop1): build fault injection rate: 174
[  150.007871][ T9042] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  150.010753][ T9042] F2FS-fs (loop1): invalid crc value
[  150.046345][ T9042] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  150.053377][ T9042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  150.085409][   T33] audit: type=1800 audit(1785564004.130:45): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1265" name="file1" dev="loop1" ino=10 res=0 errno=0
[  150.098330][   T33] audit: type=1800 audit(1785564004.150:46): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1265" name="file1" dev="loop1" ino=10 res=0 errno=0
[  150.126242][ T9042] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c5/0xe90
[  150.133528][ T9042] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:20, node_footer[nid:20,ino:20,ofs:0,cpver:0,blkaddr:0]
[  150.140584][ T9042] overlayfs: cleanup of 'work/#18' failed (-117)
[  150.154897][ T9042] overlayfs: failed to set xattr on upper
[  150.170496][ T9042] overlayfs: ...falling back to redirect_dir=nofollow.
[  150.173262][ T9042] overlayfs: ...falling back to index=off.
[  150.192018][ T9042] overlayfs: ...falling back to uuid=null.
[  150.218194][ T5593] syz-executor: attempt to access beyond end of device
[  150.218194][ T5593] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  150.225453][ T5593] syz-executor: attempt to access beyond end of device
[  150.225453][ T5593] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  150.405655][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  150.495560][ T9079] netlink: 1072 bytes leftover after parsing attributes in process `syz.0.1281'.
[  150.563613][   T24] usb 6-1: Using ep0 maxpacket: 8
[  150.566787][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.570602][   T24] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  150.574301][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.584729][   T24] usb 6-1: config 0 descriptor??
[  150.601828][ T6314] kworker/u9:32: attempt to access beyond end of device
[  150.601828][ T6314] loop1: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  150.607104][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: kworker/u9:32 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  150.607118][ T6314] Tainted: [L]=SOFTLOCKUP
[  150.607121][ T6314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.607126][ T6314] Workqueue: writeback wb_workfn (flush-7:1)
[  150.607143][ T6314] Call Trace:
[  150.607146][ T6314]  <TASK>
[  150.607150][ T6314]  dump_stack_lvl+0xe8/0x150
[  150.607161][ T6314]  f2fs_handle_critical_error+0x36f/0x530
[  150.607175][ T6314]  f2fs_write_end_io+0xcfc/0x1030
[  150.607184][ T6314]  ? __submit_merged_bio+0x258/0x700
[  150.607196][ T6314]  __submit_merged_bio+0x258/0x700
[  150.607206][ T6314]  __submit_merged_write_cond+0x3c9/0x4e0
[  150.607220][ T6314]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  150.607240][ T6314]  f2fs_write_data_pages+0x2afc/0x37d0
[  150.607247][ T6314]  ? arch_stack_walk+0x11b/0x150
[  150.607270][ T6314]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.607283][ T6314]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  150.607305][ T6314]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  150.607321][ T6314]  ? __lock_acquire+0x683/0x2cd0
[  150.607335][ T6314]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  150.607344][ T6314]  ? f2fs_update_inode+0x1394/0x25c0
[  150.607363][ T6314]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.607371][ T6314]  do_writepages+0x338/0x560
[  150.607383][ T6314]  ? reacquire_held_locks+0x104/0x190
[  150.607391][ T6314]  ? writeback_sb_inodes+0x46a/0x1b30
[  150.607402][ T6314]  __writeback_single_inode+0x12e/0x1050
[  150.607413][ T6314]  writeback_sb_inodes+0x9eb/0x1b30
[  150.607430][ T6314]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  150.607454][ T6314]  ? rcu_is_watching+0x15/0xb0
[  150.607462][ T6314]  ? queue_io+0x2d3/0x4a0
[  150.607471][ T6314]  wb_writeback+0x426/0xb40
[  150.607479][ T6314]  ? queue_io+0x2d1/0x4a0
[  150.607490][ T6314]  ? __pfx_wb_writeback+0x10/0x10
[  150.607496][ T6314]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.607512][ T6314]  wb_workfn+0x414/0xf50
[  150.607523][ T6314]  ? look_up_lock_class+0x57/0x110
[  150.607539][ T6314]  ? __pfx_wb_workfn+0x10/0x10
[  150.607551][ T6314]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.607561][ T6314]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  150.607576][ T6314]  ? rcu_is_watching+0x15/0xb0
[  150.607585][ T6314]  ? process_scheduled_works+0x9bd/0x1470
[  150.607593][ T6314]  process_scheduled_works+0xa2f/0x1470
[  150.607611][ T6314]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.607621][ T6314]  ? assign_work+0x3cf/0x5d0
[  150.607631][ T6314]  worker_thread+0xa44/0xfb0
[  150.607649][ T6314]  kthread+0x388/0x470
[  150.607659][ T6314]  ? __pfx_worker_thread+0x10/0x10
[  150.607665][ T6314]  ? __pfx_kthread+0x10/0x10
[  150.607675][ T6314]  ret_from_fork+0x51e/0xb90
[  150.607684][ T6314]  ? __pfx_ret_from_fork+0x10/0x10
[  150.607692][ T6314]  ? __switch_to+0xc7d/0x1450
[  150.607701][ T6314]  ? __pfx_kthread+0x10/0x10
[  150.607710][ T6314]  ret_from_fork_asm+0x1a/0x30
[  150.607726][ T6314]  </TASK>
[  150.607729][ T6314] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  150.705946][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: kworker/u9:32 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  150.705959][ T6314] Tainted: [L]=SOFTLOCKUP
[  150.705961][ T6314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.705966][ T6314] Workqueue: writeback wb_workfn (flush-7:1)
[  150.705984][ T6314] Call Trace:
[  150.705987][ T6314]  <TASK>
[  150.705991][ T6314]  dump_stack_lvl+0xe8/0x150
[  150.706002][ T6314]  f2fs_handle_critical_error+0x36f/0x530
[  150.706016][ T6314]  f2fs_write_end_io+0xcfc/0x1030
[  150.706031][ T6314]  __submit_merged_bio+0x258/0x700
[  150.706041][ T6314]  __submit_merged_write_cond+0x3c9/0x4e0
[  150.706056][ T6314]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  150.706076][ T6314]  f2fs_write_data_pages+0x2afc/0x37d0
[  150.706084][ T6314]  ? arch_stack_walk+0x11b/0x150
[  150.706108][ T6314]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.706121][ T6314]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  150.706143][ T6314]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  150.706159][ T6314]  ? __lock_acquire+0x683/0x2cd0
[  150.706173][ T6314]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  150.706183][ T6314]  ? f2fs_update_inode+0x1394/0x25c0
[  150.706193][ T6314]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.706202][ T6314]  do_writepages+0x338/0x560
[  150.706214][ T6314]  ? reacquire_held_locks+0x104/0x190
[  150.706223][ T6314]  ? writeback_sb_inodes+0x46a/0x1b30
[  150.706233][ T6314]  __writeback_single_inode+0x12e/0x1050
[  150.706245][ T6314]  writeback_sb_inodes+0x9eb/0x1b30
[  150.706263][ T6314]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  150.706288][ T6314]  ? rcu_is_watching+0x15/0xb0
[  150.706300][ T6314]  ? queue_io+0x2d3/0x4a0
[  150.706314][ T6314]  wb_writeback+0x426/0xb40
[  150.706325][ T6314]  ? queue_io+0x2d1/0x4a0
[  150.706342][ T6314]  ? __pfx_wb_writeback+0x10/0x10
[  150.706351][ T6314]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.706366][ T6314]  wb_workfn+0x414/0xf50
[  150.706377][ T6314]  ? look_up_lock_class+0x57/0x110
[  150.706393][ T6314]  ? __pfx_wb_workfn+0x10/0x10
[  150.706404][ T6314]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.706415][ T6314]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  150.706430][ T6314]  ? rcu_is_watching+0x15/0xb0
[  150.706439][ T6314]  ? process_scheduled_works+0x9bd/0x1470
[  150.706447][ T6314]  process_scheduled_works+0xa2f/0x1470
[  150.706465][ T6314]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.706476][ T6314]  ? assign_work+0x3cf/0x5d0
[  150.706485][ T6314]  worker_thread+0xa44/0xfb0
[  150.706504][ T6314]  kthread+0x388/0x470
[  150.706514][ T6314]  ? __pfx_worker_thread+0x10/0x10
[  150.706521][ T6314]  ? __pfx_kthread+0x10/0x10
[  150.706530][ T6314]  ret_from_fork+0x51e/0xb90
[  150.706540][ T6314]  ? __pfx_ret_from_fork+0x10/0x10
[  150.706548][ T6314]  ? __switch_to+0xc7d/0x1450
[  150.706557][ T6314]  ? __pfx_kthread+0x10/0x10
[  150.706567][ T6314]  ret_from_fork_asm+0x1a/0x30
[  150.706583][ T6314]  </TASK>
[  150.706586][ T6314] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  150.799024][   T24] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  150.799083][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: kworker/u9:32 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  150.799096][ T6314] Tainted: [L]=SOFTLOCKUP
[  150.799098][ T6314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.799103][ T6314] Workqueue: writeback wb_workfn (flush-7:1)
[  150.799120][ T6314] Call Trace:
[  150.799123][ T6314]  <TASK>
[  150.799127][ T6314]  dump_stack_lvl+0xe8/0x150
[  150.799138][ T6314]  f2fs_handle_critical_error+0x36f/0x530
[  150.799151][ T6314]  f2fs_write_end_io+0xcfc/0x1030
[  150.799167][ T6314]  __submit_merged_bio+0x258/0x700
[  150.799177][ T6314]  __submit_merged_write_cond+0x3c9/0x4e0
[  150.799190][ T6314]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  150.799210][ T6314]  f2fs_write_data_pages+0x2afc/0x37d0
[  150.799217][ T6314]  ? arch_stack_walk+0x11b/0x150
[  150.799240][ T6314]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.799253][ T6314]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  150.799275][ T6314]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  150.799291][ T6314]  ? __lock_acquire+0x683/0x2cd0
[  150.799304][ T6314]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  150.799314][ T6314]  ? f2fs_update_inode+0x1394/0x25c0
[  150.799323][ T6314]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.799334][ T6314]  do_writepages+0x338/0x560
[  150.799346][ T6314]  ? reacquire_held_locks+0x104/0x190
[  150.799354][ T6314]  ? writeback_sb_inodes+0x46a/0x1b30
[  150.799364][ T6314]  __writeback_single_inode+0x12e/0x1050
[  150.799376][ T6314]  writeback_sb_inodes+0x9eb/0x1b30
[  150.799393][ T6314]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  150.799418][ T6314]  ? rcu_is_watching+0x15/0xb0
[  150.799427][ T6314]  ? queue_io+0x2d3/0x4a0
[  150.799436][ T6314]  wb_writeback+0x426/0xb40
[  150.799444][ T6314]  ? queue_io+0x2d1/0x4a0
[  150.799455][ T6314]  ? __pfx_wb_writeback+0x10/0x10
[  150.799461][ T6314]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.799477][ T6314]  wb_workfn+0x414/0xf50
[  150.799487][ T6314]  ? look_up_lock_class+0x57/0x110
[  150.799502][ T6314]  ? __pfx_wb_workfn+0x10/0x10
[  150.799514][ T6314]  ? do_raw_spin_lock+0x12b/0x2f0
[  150.799524][ T6314]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  150.799539][ T6314]  ? rcu_is_watching+0x15/0xb0
[  150.799548][ T6314]  ? process_scheduled_works+0x9bd/0x1470
[  150.799556][ T6314]  process_scheduled_works+0xa2f/0x1470
[  150.799575][ T6314]  ? __pfx_process_scheduled_works+0x10/0x10
[  150.799585][ T6314]  ? assign_work+0x3cf/0x5d0
[  150.799595][ T6314]  worker_thread+0xa44/0xfb0
[  150.799613][ T6314]  kthread+0x388/0x470
[  150.799623][ T6314]  ? __pfx_worker_thread+0x10/0x10
[  150.799629][ T6314]  ? __pfx_kthread+0x10/0x10
[  150.799639][ T6314]  ret_from_fork+0x51e/0xb90
[  150.799649][ T6314]  ? __pfx_ret_from_fork+0x10/0x10
[  150.799656][ T6314]  ? __switch_to+0xc7d/0x1450
[  150.799665][ T6314]  ? __pfx_kthread+0x10/0x10
[  150.799675][ T6314]  ret_from_fork_asm+0x1a/0x30
[  150.799690][ T6314]  </TASK>
[  150.799693][ T6314] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  151.205133][ T4982] Bluetooth: hci2: command tx timeout
[  151.278261][ T9095] loop0: detected capacity change from 0 to 64
[  151.311137][ T5669] usb 6-1: USB disconnect, device number 2
[  151.332568][ T5891] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  151.339180][ T5891] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  151.344808][ T5891] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  151.348721][ T5891] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  151.354078][ T5891] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  151.419867][ T5488] bridge_slave_1: left allmulticast mode
[  151.432117][ T5488] bridge_slave_1: left promiscuous mode
[  151.434700][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.447440][ T5488] bridge_slave_0: left allmulticast mode
[  151.449770][ T5488] bridge_slave_0: left promiscuous mode
[  151.457765][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.656933][ T5488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  151.661516][ T5488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  151.665942][ T5488] bond0 (unregistering): Released all slaves
[  151.949789][ T5488] hsr_slave_0: left promiscuous mode
[  151.958908][ T5488] hsr_slave_1: left promiscuous mode
[  151.963365][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.972970][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.080278][ T5488] team0 (unregistering): Port device team_slave_1 removed
[  152.088504][ T5488] team0 (unregistering): Port device team_slave_0 removed
[  152.474150][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.478421][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.481738][ T9096] bridge_slave_0: entered allmulticast mode
[  152.489767][ T9096] bridge_slave_0: entered promiscuous mode
[  152.503433][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.506456][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.509917][ T9096] bridge_slave_1: entered allmulticast mode
[  152.525783][ T9096] bridge_slave_1: entered promiscuous mode
[  152.539793][ T9147] loop0: detected capacity change from 0 to 8
[  152.550312][ T9147] unable to read inode lookup table
[  152.584252][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.590182][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.649348][ T9096] team0: Port device team_slave_0 added
[  152.655386][ T9096] team0: Port device team_slave_1 added
[  152.675378][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.677793][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.686137][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.690505][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.693194][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  152.701834][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.735626][ T9096] hsr_slave_0: entered promiscuous mode
[  152.738691][ T9096] hsr_slave_1: entered promiscuous mode
[  152.808232][ T5701] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  152.966752][ T9096] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  152.974362][ T9096] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  152.984681][ T9096] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  152.995431][ T9096] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  153.026699][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.029505][ T9096] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.032622][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.035425][ T9096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.081545][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.090699][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.093568][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.110283][ T9096] 8021q: adding VLAN 0 to HW filter on device team0
[  153.128146][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.130411][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.144617][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.147166][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.310022][ T9163] loop0: detected capacity change from 0 to 131072
[  153.313981][ T9163] F2FS-fs (loop0): invalid crc value
[  153.342021][ T5701] usb 6-1: Using ep0 maxpacket: 8
[  153.346805][ T9163] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.353330][ T5701] usb 6-1: unable to get BOS descriptor or descriptor too short
[  153.355790][ T9163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  153.361902][ T5701] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  153.366317][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.367152][ T4982] Bluetooth: hci0: command tx timeout
[  153.368850][ T5701] usb 6-1: Product: syz
[  153.368858][ T5701] usb 6-1: Manufacturer: syz
[  153.368863][ T5701] usb 6-1: SerialNumber: syz
[  153.495842][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  153.585268][ T5701] usb 6-1: selecting invalid altsetting 1
[  153.620356][ T9096] veth0_vlan: entered promiscuous mode
[  153.625521][ T9096] veth1_vlan: entered promiscuous mode
[  153.641322][ T9096] veth0_macvtap: entered promiscuous mode
[  153.646682][ T9096] veth1_macvtap: entered promiscuous mode
[  153.651837][ T5701] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  153.655834][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.660128][ T5701] usb 6-1: USB disconnect, device number 3
[  153.661565][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.669082][ T5647] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.673061][ T5647] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.675747][ T5647] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.678351][ T5647] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.710602][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.739322][   T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.749109][   T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.768167][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.770681][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.953907][   T33] audit: type=1800 audit(1785564008.010:47): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1305" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  154.134606][ T9226] UHID_CREATE from different security context by process 90 (syz.5.1311), this is not allowed.
[  154.322697][   T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  154.357679][ T9246] loop6: detected capacity change from 0 to 512
[  154.369549][ T9246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  154.386654][ T9246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.391456][ T9246] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.404401][ T9246] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  154.410264][ T9246] EXT4-fs (loop6): Remounting filesystem read-only
[  154.421856][ T9096] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.425953][ T3362] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  154.430788][ T3362] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  154.482129][   T24] usb 1-1: Using ep0 maxpacket: 8
[  154.487405][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  154.491198][   T24] usb 1-1: config 6 has an invalid interface number: 54 but max is 0
[  154.496421][   T24] usb 1-1: config 6 has no interface number 0
[  154.498710][   T24] usb 1-1: config 6 interface 54 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  154.512159][   T24] usb 1-1: config 6 interface 54 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024
[  154.515478][   T24] usb 1-1: config 6 interface 54 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  154.519165][   T24] usb 1-1: config 6 interface 54 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  154.527397][   T24] usb 1-1: config 6 interface 54 has no altsetting 0
[  154.531875][   T24] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=5a.74
[  154.535648][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.538617][   T24] usb 1-1: Product: syz
[  154.540176][   T24] usb 1-1: Manufacturer: syz
[  154.542325][   T24] usb 1-1: SerialNumber: syz
[  154.546121][ T9221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  154.656944][ T9257] loop6: detected capacity change from 0 to 4096
[  154.690021][ T9258] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.713947][ T9257] NILFS (loop6): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  154.718517][ T9257] NILFS (loop6): nilfs_sufile_do_free: segment 9 is already clean
[  154.757416][   T24] comedi comedi5: Endpoint has wrong direction
[  154.759419][   T24] dt9812 1-1:6.54: driver 'dt9812' failed to auto-configure device.
[  154.770254][   T24] usb 1-1: USB disconnect, device number 24
[  155.006083][ T9276] usb usb5: usbfs: process 9276 (syz.6.1330) did not claim interface 0 before use
[  155.130756][ T9241] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  155.134866][ T9241] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  155.141606][ T9241] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  155.145297][ T9241] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  155.366165][ T9296] loop5: detected capacity change from 0 to 4096
[  155.387822][ T9296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.526918][   T33] audit: type=1800 audit(1785564009.580:48): pid=9307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1342" name="bulk_qlen" dev="configfs" ino=20600 res=0 errno=0
[  155.552214][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.889613][ T5701] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  155.969665][ T9337] netlink: 'syz.6.1351': attribute type 12 has an invalid length.
[  155.973176][ T9337] netlink: 'syz.6.1351': attribute type 29 has an invalid length.
[  155.976597][ T9337] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1351'.
[  155.980567][ T9337] netlink: 'syz.6.1351': attribute type 1 has an invalid length.
[  155.992467][ T9337] netlink: 'syz.6.1351': attribute type 2 has an invalid length.
[  156.193357][ T5701] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.196482][ T5701] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  156.200307][ T5701] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  156.205658][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.212896][ T5701] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  156.429251][ T5701] usb 6-1: USB disconnect, device number 4
[  156.903292][ T5701] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  157.020722][ T9369] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1363'.
[  157.072329][ T5701] usb 7-1: config 0 interface 0 altsetting 95 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  157.090032][ T5701] usb 7-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.103863][ T5701] usb 7-1: config 0 interface 0 has no altsetting 0
[  157.106461][ T5701] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  157.118352][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.137329][ T5701] usb 7-1: config 0 descriptor??
[  157.143249][ T9363] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  157.698247][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.708734][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.711686][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.724996][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.727810][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.741419][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.763862][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.781702][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.794618][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.802826][ T5701] topre 0003:0853:0148.000A: unknown main item tag 0x0
[  157.820816][ T9375] loop5: detected capacity change from 0 to 512
[  157.822941][ T5701] topre 0003:0853:0148.000A: hidraw0: USB HID v0.01 Device [HID 0853:0148] on usb-dummy_hcd.6-1/input0
[  157.824155][ T9375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  157.836735][ T9375] EXT4-fs (loop5): 1 truncate cleaned up
[  157.850170][ T9375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.860010][ T5701] usb 7-1: USB disconnect, device number 2
[  158.031227][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.215202][ T9379] netlink: 'syz.5.1367': attribute type 4 has an invalid length.
[  158.256519][ T9379] netlink: 'syz.5.1367': attribute type 4 has an invalid length.
[  158.771497][ T9399] program syz.5.1377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  158.864065][ T9405] loop5: detected capacity change from 0 to 256
[  158.875575][ T9405] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  159.093720][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1387'.
[  159.395764][ T9441] loop6: detected capacity change from 0 to 512
[  159.481527][ T9441] EXT4-fs error (device loop6): ext4_quota_enable:7188: comm syz.6.1388: Bad quota inum: 12023, type: 1
[  159.485198][ T9441] loop6: lost filesystem error report for type 5 error -117
[  159.486637][ T9441] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix.
[  159.494427][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  159.494438][    C1] EXT4-fs (loop6): initial error at time 1785564013: ext4_quota_enable:7188
[  159.494448][    C1] EXT4-fs (loop6): last error at time 1785564013: ext4_quota_enable:7188
[  159.510643][ T9441] EXT4-fs (loop6): mount failed
[  160.494063][ T9467] xt_SECMARK: invalid mode: 2
[  160.497711][ T5701] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  160.662261][ T5701] usb 1-1: Using ep0 maxpacket: 16
[  160.701753][ T5701] usb 1-1: config index 0 descriptor too short (expected 37359, got 202)
[  160.716814][ T5701] usb 1-1: config 33 has too many interfaces: 95, using maximum allowed: 32
[  160.723329][ T5701] usb 1-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  160.732908][ T5701] usb 1-1: config 33 has 1 interface, different from the descriptor's value: 95
[  160.745359][ T5701] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.751858][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.755831][ T5701] usb 1-1: Product: syz
[  160.757785][ T5701] usb 1-1: Manufacturer: syz
[  160.761112][ T5701] usb 1-1: SerialNumber: syz
[  160.973993][ T5701] usb 1-1: 0:2 : does not exist
[  160.981034][ T5701] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  161.005748][ T5701] usb 1-1: USB disconnect, device number 25
[  161.026332][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.278803][ T9476] loop5: detected capacity change from 0 to 128
[  161.284867][ T9476] EXT4-fs: Ignoring removed orlov option
[  161.286876][ T9476] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.297679][ T9476] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.302555][ T9476] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.350570][ T8759] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.854025][ T5669] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  161.888389][ T9503] Bluetooth: MGMT ver 1.23
[  162.012178][ T5669] usb 6-1: Using ep0 maxpacket: 32
[  162.025488][ T5669] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  162.029132][ T5669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.046089][ T5669] gspca_main: nw80x-2.14.0 probing 055f:d001
[  162.158728][ T9515] loop0: detected capacity change from 0 to 4096
[  162.171382][ T9515] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  162.202129][ T9515] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  162.223814][ T6266] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  162.229571][ T5598] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  162.232587][ T5598] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  162.235302][ T5598] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  162.239551][ T6266] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  162.497519][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1433'.
[  162.651673][ T5669] gspca_nw80x: reg_w err -71
[  162.654335][ T5669] nw80x 6-1:16.0: probe with driver nw80x failed with error -71
[  162.666253][ T5669] usb 6-1: USB disconnect, device number 5
[  162.990220][ T9554] loop0: detected capacity change from 0 to 64
[  163.202972][ T9564] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1451'.
[  163.332823][ T9578] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  163.335176][ T9578] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  163.339569][ T9578] vhci_hcd vhci_hcd.0: Device attached
[  163.343852][ T9579] vhci_hcd: connection closed
[  163.347365][   T12] vhci_hcd vhci_hcd.5: stop threads
[  163.351561][   T12] vhci_hcd vhci_hcd.5: release socket
[  163.355001][   T12] vhci_hcd vhci_hcd.5: disconnect device
[  163.937460][ T9602] loop6: detected capacity change from 0 to 128
[  163.944702][ T9602] ufs: You didn't specify the type of your ufs filesystem
[  163.944702][ T9602] 
[  163.944702][ T9602] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  163.944702][ T9602] 
[  163.944702][ T9602] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  163.959010][ T9602] ufs: ufstype=old is supported read-only
[  163.962025][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  163.967590][ T9602] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  164.086515][ T9608] loop5: detected capacity change from 0 to 512
[  164.093643][ T9608] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  164.099219][ T9608] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1461: bad orphan inode 131083
[  164.106220][ T9608] loop5: lost filesystem error report for type 5 error -117
[  164.110306][ T9608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.113084][   T24] usb 1-1: Using ep0 maxpacket: 32
[  164.138935][   T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  164.150954][   T24] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  164.162643][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  164.165304][   T24] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  164.175190][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.175440][ T9608] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.1461: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0
[  164.193079][   T24] usb 1-1: config 0 descriptor??
[  164.234124][ T8759] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.532072][ T5700] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  164.616327][   T24] wacom 0003:056A:00C5.000B: ignoring exceeding usage max
[  164.620608][   T24] hid_parser_main: 30 callbacks suppressed
[  164.620622][   T24] wacom 0003:056A:00C5.000B: unknown main item tag 0x6
[  164.626231][   T24] wacom 0003:056A:00C5.000B: unknown main item tag 0x0
[  164.628970][   T24] wacom 0003:056A:00C5.000B: unknown main item tag 0x0
[  164.631739][   T24] wacom 0003:056A:00C5.000B: unknown main item tag 0x0
[  164.646607][   T24] wacom 0003:056A:00C5.000B: hidraw0: USB HID v0.81 Device [HID 056a:00c5] on usb-dummy_hcd.0-1/input0
[  164.682223][ T5700] usb 6-1: Using ep0 maxpacket: 8
[  164.686429][ T5700] usb 6-1: unable to get BOS descriptor or descriptor too short
[  164.691373][ T5700] usb 6-1: config 4 has an invalid interface number: 133 but max is 0
[  164.695258][ T5700] usb 6-1: config 4 has no interface number 0
[  164.707553][ T5700] usb 6-1: New USB device found, idVendor=12d1, idProduct=8b88, bcdDevice=f3.59
[  164.711147][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.716410][ T5700] usb 6-1: Product: syz
[  164.718183][ T5700] usb 6-1: Manufacturer: syz
[  164.720041][ T5700] usb 6-1: SerialNumber: syz
[  164.750507][ T9623] uprobe: syz.6.1464:9623 failed to unregister, leaking uprobe
[  164.776088][ T9623] uprobe: syz.6.1464:9623 failed to unregister, leaking uprobe
[  164.843619][  T860] usb 1-1: USB disconnect, device number 26
[  164.941062][ T5700] huawei_cdc_ncm 6-1:4.133: CDC Union missing and no IAD found
[  164.944489][ T5700] huawei_cdc_ncm 6-1:4.133: bind() failure
[  164.953023][ T5700] usb 6-1: USB disconnect, device number 6
[  165.001827][ T9626] loop6: detected capacity change from 0 to 32768
[  165.014861][ T9626] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.024519][ T9626] XFS (loop6): Ending clean mount
[  165.090386][ T9096] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.302229][ T9638] nbd6: detected capacity change from 0 to 63
[  165.313505][ T9640] block nbd6: NBD_DISCONNECT
[  165.315665][ T9640] block nbd6: Disconnected due to user request.
[  165.318426][ T9640] block nbd6: shutting down sockets
[  165.324318][    C0] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.325512][    C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.328017][    C0] Buffer I/O error on dev nbd6, logical block 0, async page read
[  165.333788][    C1] Buffer I/O error on dev nbd6, logical block 1, async page read
[  165.340738][    C1] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.343864][    C1] Buffer I/O error on dev nbd6, logical block 2, async page read
[  165.346306][    C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.349631][    C1] Buffer I/O error on dev nbd6, logical block 3, async page read
[  165.352888][ T5882] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.358282][ T5882] Buffer I/O error on dev nbd6, logical block 0, async page read
[  165.386990][ T5882] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.390805][ T5882] Buffer I/O error on dev nbd6, logical block 1, async page read
[  165.407888][ T5882] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.432051][ T5882] Buffer I/O error on dev nbd6, logical block 2, async page read
[  165.434519][ T5882] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.437935][ T5882] Buffer I/O error on dev nbd6, logical block 3, async page read
[  165.441338][ T5882] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.458881][ T5882] Buffer I/O error on dev nbd6, logical block 0, async page read
[  165.461766][ T5882] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  165.465197][ T5882] Buffer I/O error on dev nbd6, logical block 1, async page read
[  165.467866][ T5882] ldm_validate_partition_table(): Disk read failed.
[  165.470368][ T5882] Dev nbd6: unable to read RDB block 0
[  165.472626][ T5882]  nbd6: unable to read partition table
[  165.480707][ T5882] ldm_validate_partition_table(): Disk read failed.
[  165.483874][ T5882] Dev nbd6: unable to read RDB block 0
[  165.492583][ T5882]  nbd6: unable to read partition table
[  165.832088][ T5700] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  165.982082][ T5700] usb 6-1: Using ep0 maxpacket: 16
[  165.986265][ T5700] usb 6-1: config 0 has an invalid interface number: 68 but max is 0
[  165.989798][ T5700] usb 6-1: config 0 has no interface number 0
[  165.992487][ T5700] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 254, setting to 64
[  165.999567][ T5700] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  166.003175][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.006200][ T5700] usb 6-1: Product: syz
[  166.007647][ T5700] usb 6-1: Manufacturer: syz
[  166.009458][ T5700] usb 6-1: SerialNumber: syz
[  166.012644][ T5700] usb 6-1: config 0 descriptor??
[  166.025590][ T5700] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  166.225856][   T12] usb 6-1: Failed to submit usb control message: -71
[  166.226172][ T5656] usb 6-1: USB disconnect, device number 7
[  166.228354][   T12] usb 6-1: unable to send the bmi data to the device: -71
[  166.235006][   T12] usb 6-1: unable to get target info from device
[  166.237248][   T12] usb 6-1: could not get target info (-71)
[  166.239331][   T12] usb 6-1: could not probe fw (-71)
[  166.474996][   T33] audit: type=1326 audit(1785564020.530:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.6.1479" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30ff9e019 code=0x7ffc0000
[  166.485139][   T33] audit: type=1326 audit(1785564020.530:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.6.1479" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30ff9e019 code=0x7ffc0000
[  166.491806][   T33] audit: type=1326 audit(1785564020.530:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.6.1479" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fc30ff9e019 code=0x7ffc0000
[  166.511403][   T33] audit: type=1326 audit(1785564020.530:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.6.1479" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30ff9e019 code=0x7ffc0000
[  166.522399][   T33] audit: type=1326 audit(1785564020.530:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9669 comm="syz.6.1479" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30ff9e019 code=0x7ffc0000
[  166.738441][ T9688] loop0: detected capacity change from 0 to 128
[  166.762156][ T5656] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  166.789096][ T9690] loop5: detected capacity change from 0 to 128
[  166.799700][ T9690] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  166.915200][ T5656] usb 7-1: Using ep0 maxpacket: 16
[  166.919378][ T5656] usb 7-1: config 8 has an invalid interface number: 206 but max is 0
[  166.925874][ T5656] usb 7-1: config 8 has no interface number 0
[  166.928374][ T5656] usb 7-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  166.933529][ T5656] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  166.938222][ T5656] usb 7-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  166.943607][ T5656] usb 7-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0
[  166.948373][ T5656] usb 7-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  166.954023][ T5656] usb 7-1: config 8 interface 206 has no altsetting 0
[  166.964680][ T5656] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  166.968950][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.978756][ T5656] usb 7-1: Product: syz
[  166.981070][ T5656] usb 7-1: Manufacturer: syz
[  166.982955][ T5656] usb 7-1: SerialNumber: syz
[  167.046421][ T5701] kernel write not supported for file /sg0 (pid: 5701 comm: kworker/1:5)
[  167.059243][ T9706] netlink: 'syz.0.1497': attribute type 4 has an invalid length.
[  167.061659][ T9706] netlink: 'syz.0.1497': attribute type 1 has an invalid length.
[  167.072076][ T9706] netlink: 61175 bytes leftover after parsing attributes in process `syz.0.1497'.
[  167.199397][ T5656] garmin_gps 7-1:8.206: Garmin GPS usb/tty converter detected
[  167.209097][ T5656] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -90
[  167.213618][ T5656] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -90
[  167.222320][ T5656] usb 7-1: USB disconnect, device number 3
[  167.228869][ T5656] garmin_gps 7-1:8.206: device disconnected
[  167.322233][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  167.412218][ T5060] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  167.482050][   T24] usb 6-1: Using ep0 maxpacket: 16
[  167.485967][   T24] usb 6-1: config index 0 descriptor too short (expected 30768, got 72)
[  167.489277][   T24] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  167.493101][   T24] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  167.497071][   T24] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  167.503133][   T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  167.506653][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.509736][   T24] usb 6-1: Product: syz
[  167.511417][   T24] usb 6-1: Manufacturer: syz
[  167.513567][   T24] usb 6-1: SerialNumber: syz
[  167.564167][ T5060] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  167.567744][ T5060] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129
[  167.574544][ T5060] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  167.578327][ T5060] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.581725][ T5060] usb 1-1: Product: syz
[  167.583518][ T5060] usb 1-1: Manufacturer: syz
[  167.585702][ T5060] usb 1-1: SerialNumber: syz
[  167.589670][ T5060] usb 1-1: config 0 descriptor??
[  167.726924][   T24] usb 6-1: USB disconnect, device number 8
[  167.806036][ T5060] mos7840 1-1:0.0: required endpoints missing
[  167.817916][ T5060] usb 1-1: USB disconnect, device number 27
[  168.242087][    T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  168.271903][ T9723] cgroup: Need name or subsystem set
[  168.408293][    T9] usb 7-1: Using ep0 maxpacket: 32
[  168.423139][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  168.426566][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.433920][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.445651][    T9] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  168.448519][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.468889][    T9] usb 7-1: Product: syz
[  168.470237][    T9] usb 7-1: Manufacturer: syz
[  168.471701][    T9] usb 7-1: SerialNumber: syz
[  168.690679][    T9] usb 7-1: unit 4 not found!
[  168.693819][    T9] usb 7-1: unit 0 not found!
[  168.762139][ T5656] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  168.872355][   T24] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  168.912252][ T5656] usb 6-1: Using ep0 maxpacket: 8
[  168.915952][ T5656] usb 6-1: config 162 has an invalid interface number: 84 but max is 2
[  168.922598][ T5656] usb 6-1: config 162 has an invalid interface number: 3 but max is 2
[  168.927895][ T5656] usb 6-1: config 162 has no interface number 0
[  168.930404][ T5656] usb 6-1: config 162 has no interface number 1
[  168.934406][ T5656] usb 6-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  168.952513][ T5656] usb 6-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  168.956828][ T5656] usb 6-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  168.961502][ T5656] usb 6-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  168.966825][ T5656] usb 6-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  168.970912][ T5656] usb 6-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  168.978843][ T5656] usb 6-1: config 162 interface 84 has no altsetting 0
[  168.981632][ T5656] usb 6-1: config 162 interface 2 has no altsetting 0
[  168.988062][ T5656] usb 6-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  168.991688][ T5656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.995280][ T5656] usb 6-1: Product: syz
[  168.997028][ T5656] usb 6-1: Manufacturer: syz
[  168.999017][ T5656] usb 6-1: SerialNumber: syz
[  169.045433][   T24] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  169.048751][   T24] usb 1-1: config 0 has no interface number 0
[  169.051372][   T24] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  169.056753][   T24] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  169.062965][   T24] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  169.066649][   T24] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  169.069849][   T24] usb 1-1: Manufacturer: syz
[  169.071826][   T24] usb 1-1: SerialNumber: syz
[  169.077144][   T24] usb 1-1: config 0 descriptor??
[  169.108680][ T5701] usb 7-1: USB disconnect, device number 4
[  169.240198][ T4982] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  169.246694][ T5656] usb 6-1: USB disconnect, device number 9
[  169.694247][   T24] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input12
[  169.919993][   T24] usb 1-1: USB disconnect, device number 28
[  169.946922][ T9759] loop5: detected capacity change from 0 to 256
[  169.969781][ T9759] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d)
[  170.351034][ T9763] comedi comedi0: dt2815: I/O port conflict (0x3,2)
[  170.880832][ T9785] loop5: detected capacity change from 0 to 1024
[  171.042624][ T5656] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  171.204373][ T5656] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  171.208015][ T5656] usb 7-1: config 0 has no interface number 0
[  171.210733][ T5656] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  171.217451][ T5656] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  171.221236][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.224163][ T5656] usb 7-1: Product: syz
[  171.225538][ T5656] usb 7-1: Manufacturer: syz
[  171.227255][ T5656] usb 7-1: SerialNumber: syz
[  171.230604][ T5656] usb 7-1: config 0 descriptor??
[  171.237718][ T5656] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  171.500368][    C1] usb 7-1: yurex_control_callback - control failed: -2
[  171.504659][    T9] usb 7-1: USB disconnect, device number 5
[  171.509850][    T9] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  172.005528][ T9806] loop5: detected capacity change from 0 to 4096
[  172.203215][ T9821] bridge0: port 3(vlan2) entered blocking state
[  172.206143][ T9821] bridge0: port 3(vlan2) entered disabled state
[  172.218811][ T9821] vlan2: entered allmulticast mode
[  172.220648][ T9821] geneve0: entered allmulticast mode
[  172.232850][ T9821] vlan2: entered promiscuous mode
[  172.234617][ T9821] geneve0: entered promiscuous mode
[  172.343705][ T9830] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  172.399155][ T9826] loop6: detected capacity change from 0 to 32768
[  172.424197][ T9826] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1550 (9826)
[  172.431562][ T9826] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  172.435326][ T9826] BTRFS info (device loop6): using blake2b checksum algorithm
[  172.442371][ T5656] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  172.513575][ T9826] BTRFS info (device loop6 state EC): setting nodatasum
[  172.515661][ T9826] BTRFS info (device loop6 state EC): setting nodatacow
[  172.517840][ T9826] BTRFS info (device loop6 state EC): force clearing of disk cache
[  172.520025][ T9826] BTRFS info (device loop6 state EC): enabling auto defrag
[  172.522987][ T9826] BTRFS info (device loop6 state EC): ignoring data csums
[  172.560321][ T9096] BTRFS info (device loop6 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  172.603539][ T5656] usb 1-1: Using ep0 maxpacket: 32
[  172.619811][ T5656] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30
[  172.623221][ T5656] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  172.627110][ T5656] usb 1-1: config 0 interface 0 has no altsetting 0
[  172.629312][ T5656] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00
[  172.651268][ T5656] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.664980][ T5656] usb 1-1: config 0 descriptor??
[  172.921110][ T5656] usbhid 1-1:0.0: can't add hid device: -71
[  172.923097][ T5656] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  172.933344][ T5656] usb 1-1: USB disconnect, device number 29
[  173.028230][ T9864] loop6: detected capacity change from 0 to 32768
[  173.031433][ T9864] jfs_mount: dbMount failed w/rc = -22
[  173.033562][ T9864] Mount JFS Failure: -22
[  173.034999][ T9864] jfs_mount failed w/return code = -22
[  173.292149][   T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  173.452010][   T24] usb 7-1: Using ep0 maxpacket: 32
[  173.456060][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.460109][   T24] usb 7-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00
[  173.464236][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.470676][   T24] usb 7-1: config 0 descriptor??
[  173.653041][ T9871] gadgetfs: bound to dummy_udc driver
[  173.901540][   T24] wacom 0003:056A:00BB.000C: unbalanced delimiter at end of report description
[  173.904559][ T5656] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  173.907299][    C1] gadgetfs: connected
[  173.910680][ T5656] gadgetfs: disconnected
[  173.912854][   T24] wacom 0003:056A:00BB.000C: parse failed
[  173.914739][   T24] wacom 0003:056A:00BB.000C: probe with driver wacom failed with error -22
[  174.104897][ T5700] usb 7-1: USB disconnect, device number 6
[  174.369623][ T5656] usb 1-1: not running at top speed; connect to a high speed hub
[  174.374938][ T5656] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=fe.8c
[  174.377675][ T5656] usb 1-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3
[  174.380899][ T5656] usb 1-1: Product: syz
[  174.382640][ T5656] usb 1-1: Manufacturer: syz
[  174.384180][ T5656] usb 1-1: SerialNumber: syz
[  174.599437][ T5656] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  174.603364][ T5656] usb 1-1: setting power ON
[  174.605767][ T5656] dvb-usb: bulk message failed: -22 (2/0)
[  174.613912][ T5656] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  174.625557][ T5656] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  174.634128][ T5656] dvb_usb_cxusb 1-1:105.0: probe with driver dvb_usb_cxusb failed with error -22
[  174.651427][ T5656] usb 1-1: USB disconnect, device number 30
[  175.207083][ T9903] loop0: detected capacity change from 0 to 512
[  175.279227][ T9903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.292325][ T9903] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.307004][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1581'.
[  175.317561][ T9910] netlink: 67 bytes leftover after parsing attributes in process `syz.5.1581'.
[  175.322634][ T5598] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.381097][ T9891] loop6: detected capacity change from 0 to 131072
[  175.451916][ T9891] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.461386][ T9891] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  175.793923][ T9922] loop5: detected capacity change from 0 to 32768
[  175.829014][ T9924] loop0: detected capacity change from 0 to 32768
[  175.841262][ T9922] XFS (loop5): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent.
[  175.881266][ T9924] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  175.906161][ T8759] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  175.957112][ T9924] syz.0.1587 (9924) used greatest stack depth: 19184 bytes left
[  175.973487][ T9940] loop6: detected capacity change from 0 to 128
[  175.987591][ T9940] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  176.003165][ T9940] hpfs: filesystem error: improperly stopped
[  176.005534][ T9940] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  176.014600][ T9940] hpfs: You really don't want any checks? You are crazy...
[  176.017150][ T9940] hpfs: Code page index out of array
[  176.018941][ T9940] hpfs: code page support is disabled
[  176.021011][ T9940] hpfs: hpfs_map_4sectors(): unaligned read
[  176.027002][ T9940] hpfs: hpfs_map_4sectors(): unaligned read
[  176.029026][ T9940] hpfs: filesystem error: unable to find root dir
[  176.036226][ T9940] hpfs: hpfs_map_4sectors(): unaligned read
[  176.039912][ T5598] ocfs2: Unmounting device (7,0) on (node local)
[  176.145973][ T9942] loop6: detected capacity change from 0 to 4096
[  176.192257][ T9945] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.197374][ T9942] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  176.205551][ T9942] NILFS (loop6): mounting fs with errors
[  176.245173][ T9942] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 159744
[  176.247863][ T9942] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=15)
[  176.250905][ T9942] NILFS (loop6): error -5 truncating bmap (ino=15)
[  176.670913][ T9964] loop6: detected capacity change from 0 to 256
[  177.099588][ T9989] dummy0: entered promiscuous mode
[  177.102401][ T9989] gretap0: entered promiscuous mode
[  177.104710][ T9989] hsr2: entered allmulticast mode
[  177.106259][ T9989] dummy0: entered allmulticast mode
[  177.107900][ T9989] gretap0: entered allmulticast mode
[  177.125850][ T9991] bond1: entered promiscuous mode
[  177.127436][ T9991] bond1: entered allmulticast mode
[  178.126620][T10012] netlink: 'syz.6.1619': attribute type 19 has an invalid length.
[  178.130110][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1619'.
[  178.162607][T10012] netlink: 'syz.6.1619': attribute type 19 has an invalid length.
[  178.165757][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1619'.
[  178.169456][ T5488] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.173725][ T5488] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.177187][ T5488] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.195785][ T5488] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.255507][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1623'.
[  178.259172][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1623'.
[  178.266336][T10020] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  178.274074][T10019] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1623'.
[  178.280415][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1623'.
[  178.287318][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1623'.
[  178.406837][T10030] input: syz0 as /devices/virtual/input/input13
[  178.461123][T10032] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1630'.
[  178.600902][T10040] ceph: No mds server is up or the cluster is laggy
[  178.605123][    T9] libceph: connect (1)[c::]:6789 error -101
[  178.607634][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  178.742154][ T5656] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  178.892240][ T5656] usb 6-1: Using ep0 maxpacket: 16
[  178.896112][ T5656] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  178.901122][ T5656] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  178.904819][ T5656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.907304][ T5656] usb 6-1: Product: syz
[  178.908719][ T5656] usb 6-1: Manufacturer: syz
[  178.910195][ T5656] usb 6-1: SerialNumber: syz
[  178.926137][ T5656] r8152-cfgselector 6-1: Unknown version 0x0000
[  178.928734][ T5656] r8152-cfgselector 6-1: config 0 descriptor??
[  179.346271][ T5656] r8152-cfgselector 6-1: USB disconnect, device number 10
[  179.678518][ T5488] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.811229][ T5488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.900514][ T5488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.157462][T10064] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  180.394101][T10052] loop6: detected capacity change from 0 to 131072
[  180.411663][T10052] F2FS-fs (loop6): Wrong CP boundary, start(512) end(1536) blocks(0)
[  180.414944][T10052] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  180.420082][T10052] F2FS-fs (loop6): invalid crc value
[  180.460622][T10052] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.460912][ T5488] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.469145][T10052] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  180.471282][T10052] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  180.551367][T10073] loop0: detected capacity change from 0 to 16
[  180.572763][T10073] erofs (device loop0): mounted with root inode @ nid 36.
[  180.594665][ T5488] bridge_slave_1: left allmulticast mode
[  180.603436][ T5488] bridge_slave_1: left promiscuous mode
[  180.608715][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.622959][ T5488] bridge_slave_0: left allmulticast mode
[  180.626903][ T5488] bridge_slave_0: left promiscuous mode
[  180.630939][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.797697][T10077] loop6: detected capacity change from 0 to 128
[  180.837346][T10077] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  180.850487][T10077] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  180.857316][ T5488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.877749][ T5488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.892518][ T5649] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  180.896639][ T9096] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.901458][ T5488] bond0 (unregistering): Released all slaves
[  181.031095][T10090] loop6: detected capacity change from 0 to 512
[  181.072298][ T5649] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.075577][ T5649] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  181.085164][ T5649] usb 1-1: config 1 has no interface number 0
[  181.090886][ T5649] usb 1-1: New USB device found, idVendor=041e, idProduct=3f04, bcdDevice= 0.40
[  181.096545][ T5649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.107209][ T5649] usb 1-1: Product: syz
[  181.108615][ T5649] usb 1-1: Manufacturer: syz
[  181.114973][ T5649] usb 1-1: SerialNumber: syz
[  181.224148][ T5488] hsr_slave_0: left promiscuous mode
[  181.227926][ T5488] hsr_slave_1: left promiscuous mode
[  181.230617][ T5488] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.233466][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.236850][ T5488] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.239615][ T5488] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.250562][ T5488] veth1_macvtap: left promiscuous mode
[  181.252469][ T5488] veth0_macvtap: left promiscuous mode
[  181.254301][ T5488] veth1_vlan: left promiscuous mode
[  181.257664][ T5488] veth0_vlan: left promiscuous mode
[  181.351075][ T5649] usb 1-1: 1:0 : does not exist
[  181.353945][ T5649] usb 1-1: 1:2 : does not exist
[  181.355926][ T5649] usb 1-1: 1:3 : does not exist
[  181.357931][ T5649] usb 1-1: BAAD HEADPHONE p_chmask mismatch
[  181.404406][  T860] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  181.414658][ T5649] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22
[  181.427401][ T5649] usb 1-1: USB disconnect, device number 31
[  181.463190][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  181.569115][  T860] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  181.580399][  T860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  181.586241][  T860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  181.594169][  T860] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  181.596860][  T860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.599206][  T860] usb 6-1: Product: syz
[  181.600569][  T860] usb 6-1: Manufacturer: syz
[  181.612734][  T860] usb 6-1: SerialNumber: syz
[  181.619850][  T860] usb 6-1: config 0 descriptor??
[  181.624379][ T5488] team0 (unregistering): Port device team_slave_1 removed
[  181.630220][  T860] iguanair 6-1:0.0: probe with driver iguanair failed with error -12
[  181.630367][T10114] loop6: detected capacity change from 0 to 4096
[  181.640561][ T5488] team0 (unregistering): Port device team_slave_0 removed
[  181.677932][T10114] ntfs3(loop6): ino=1e, "file1" fiemap(xattr) is not supported
[  181.764385][T10118] loop6: detected capacity change from 0 to 1764
[  181.832683][  T860] usb 6-1: USB disconnect, device number 11
[  182.085720][T10137] netdevsim netdevsim0: Direct firmware load for .. @ failed with error -2
[  182.089445][T10137] netdevsim netdevsim0: Falling back to sysfs fallback for: .. @
[  182.802154][ T5649] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  182.842052][ T5700] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  182.953826][ T5649] usb 6-1: Using ep0 maxpacket: 32
[  182.956936][ T5649] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  182.963885][ T5649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.981589][ T5649] gspca_main: nw80x-2.14.0 probing 055f:d001
[  183.003432][ T5700] usb 7-1: Using ep0 maxpacket: 8
[  183.011660][ T5700] usb 7-1: config 0 interface 0 altsetting 125 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.017695][ T5700] usb 7-1: config 0 interface 0 has no altsetting 0
[  183.020315][ T5700] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0a1e, bcdDevice= 0.00
[  183.024356][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.034089][ T5700] usb 7-1: config 0 descriptor??
[  183.062688][T10172] loop0: detected capacity change from 0 to 4096
[  183.078714][T10173] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.087880][T10172] ------------[ cut here ]------------
[  183.089635][T10172] ret == -ENOENT
[  183.089642][T10172] WARNING: fs/nilfs2/ioctl.c:757 at nilfs_ioctl_prepare_clean_segments+0x7f7/0x810, CPU#0: syz.0.1677/10172
[  183.094413][T10172] Modules linked in:
[  183.096110][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.0.1677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  183.100063][T10172] Tainted: [L]=SOFTLOCKUP
[  183.101454][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.104926][T10172] RIP: 0010:nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.107205][T10172] Code: fe e9 2e fa ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c c0 fa ff ff 4c 89 f7 e8 34 33 66 fe e9 b3 fa ff ff e8 aa e3 fb fd 90 <0f> 0b 90 41 bf fe ff ff ff e9 e3 fe ff ff 66 66 2e 0f 1f 84 00 00
[  183.113465][T10172] RSP: 0018:ffffc9000b6df640 EFLAGS: 00010287
[  183.115366][T10172] RAX: ffffffff83c91b26 RBX: 00000000fffffffe RCX: 0000000000080000
[  183.117802][T10172] RDX: ffffc90008381000 RSI: 0000000000000d6b RDI: 0000000000000d6c
[  183.120220][T10172] RBP: ffffc9000b6df730 R08: ffff8881043f3b00 R09: 0000000000000002
[  183.122981][T10172] R10: 00000000fffffffe R11: 0000000000000002 R12: dffffc0000000000
[  183.125427][T10172] R13: ffff88802276e000 R14: ffff88802276e1a8 R15: 000000000000000b
[  183.127880][T10172] FS:  00007f7cff7286c0(0000) GS:ffff88818de52000(0000) knlGS:0000000000000000
[  183.130628][T10172] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.132820][T10172] CR2: 0000001b32623ffc CR3: 000000016cd1c000 CR4: 00000000000006f0
[  183.135360][T10172] Call Trace:
[  183.136524][T10172]  <TASK>
[  183.137535][T10172]  ? rcu_is_watching+0x15/0xb0
[  183.139127][T10172]  ? __pfx_nilfs_ioctl_prepare_clean_segments+0x10/0x10
[  183.141352][T10172]  ? nilfs_bmap_save+0x33/0x120
[  183.142999][T10172]  ? nilfs_mdt_save_to_shadow_map+0x1a8/0x1c0
[  183.144929][T10172]  nilfs_clean_segments+0x185/0xa50
[  183.146640][T10172]  ? nilfs_ioctl_move_blocks+0x978/0xdd0
[  183.148421][T10172]  ? __pfx_nilfs_clean_segments+0x10/0x10
[  183.150202][T10172]  ? _copy_from_user+0x94/0xb0
[  183.151695][T10172]  nilfs_ioctl+0x2619/0x2780
[  183.153278][T10172]  ? __pfx_nilfs_ioctl+0x10/0x10
[  183.155058][T10172]  ? kasan_save_track+0x4f/0x80
[  183.156668][T10172]  ? kasan_save_track+0x3e/0x80
[  183.158265][T10172]  ? kasan_save_free_info+0x40/0x50
[  183.160225][T10172]  ? __kasan_slab_free+0x5c/0x80
[  183.162424][T10172]  ? kfree+0x1c1/0x630
[  183.164113][T10172]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  183.166323][T10172]  ? security_file_ioctl+0xc3/0x2a0
[  183.168423][T10172]  ? __se_sys_ioctl+0x47/0x170
[  183.170375][T10172]  ? do_syscall_64+0x170/0xf80
[  183.172420][T10172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.174920][T10172]  ? kasan_quarantine_put+0xbb/0x1f0
[  183.177114][T10172]  ? tomoyo_path_number_perm+0x219/0x5f0
[  183.179360][T10172]  ? tomoyo_path_number_perm+0x219/0x5f0
[  183.181644][T10172]  ? do_vfs_ioctl+0x116f/0x1540
[  183.183702][T10172]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  183.185634][T10172]  ? hook_file_ioctl+0x1eb/0x590
[  183.187656][T10172]  ? __fget_files+0x2a/0x420
[  183.189501][T10172]  ? __fget_files+0x2a/0x420
[  183.191372][T10172]  ? __fget_files+0x3a2/0x420
[  183.193357][T10172]  ? __fget_files+0x2a/0x420
[  183.195208][T10172]  ? bpf_lsm_file_ioctl+0x9/0x20
[  183.197231][T10172]  ? __pfx_nilfs_ioctl+0x10/0x10
[  183.199261][T10172]  __se_sys_ioctl+0xfc/0x170
[  183.201142][T10172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.203597][T10172]  do_syscall_64+0x170/0xf80
[  183.205481][T10172]  ? trace_irq_disable+0x3b/0x150
[  183.207412][T10172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.209677][T10172] RIP: 0033:0x7f7cfe79e019
[  183.211447][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.214683][ T5649] gspca_nw80x: reg_w err -71
[  183.218993][T10172] RSP: 002b:00007f7cff728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.223993][T10172] RAX: ffffffffffffffda RBX: 00007f7cfea25fa0 RCX: 00007f7cfe79e019
[  183.225901][ T5649] nw80x 6-1:16.0: probe with driver nw80x failed with error -71
[  183.226490][T10172] RDX: 0000200000000640 RSI: 0000000040786e88 RDI: 0000000000000004
[  183.226498][T10172] RBP: 00007f7cfe83500c R08: 0000000000000000 R09: 0000000000000000
[  183.226503][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.238658][ T5649] usb 6-1: USB disconnect, device number 12
[  183.239157][T10172] R13: 00007f7cfea26038 R14: 00007f7cfea25fa0 R15: 00007ffd7ddd1aa8
[  183.244772][T10172]  </TASK>
[  183.246063][T10172] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  183.248882][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.0.1677 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  183.253072][T10172] Tainted: [L]=SOFTLOCKUP
[  183.254737][T10172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.258611][T10172] Call Trace:
[  183.259911][T10172]  <TASK>
[  183.261094][T10172]  vpanic+0x56c/0xa60
[  183.262667][T10172]  ? __pfx__printk+0x10/0x10
[  183.264481][T10172]  ? __pfx_vpanic+0x10/0x10
[  183.266239][T10172]  ? is_bpf_text_address+0x292/0x2b0
[  183.268303][T10172]  ? is_bpf_text_address+0x26/0x2b0
[  183.270348][T10172]  panic+0xc5/0xd0
[  183.271816][T10172]  ? __pfx_panic+0x10/0x10
[  183.273589][T10172]  __warn+0x315/0x4f0
[  183.275144][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.277679][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.280020][T10172]  __report_bug+0x28e/0x530
[  183.281423][T10172]  ? __pfx_nilfs_mdt_submit_block+0x10/0x10
[  183.283278][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.285378][T10172]  ? __pfx___report_bug+0x10/0x10
[  183.286960][T10172]  ? nilfs_mdt_read_block+0x312/0x320
[  183.288792][T10172]  ? nilfs_mdt_get_block+0xb32/0xb80
[  183.290445][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.292440][T10172]  report_bug+0x16a/0x220
[  183.293763][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.295797][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f9/0x810
[  183.297811][T10172]  handle_bug+0x9c/0x200
[  183.299160][T10172]  exc_invalid_op+0x1a/0x50
[  183.300565][T10172]  asm_exc_invalid_op+0x1a/0x20
[  183.302033][T10172] RIP: 0010:nilfs_ioctl_prepare_clean_segments+0x7f7/0x810
[  183.304293][T10172] Code: fe e9 2e fa ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c c0 fa ff ff 4c 89 f7 e8 34 33 66 fe e9 b3 fa ff ff e8 aa e3 fb fd 90 <0f> 0b 90 41 bf fe ff ff ff e9 e3 fe ff ff 66 66 2e 0f 1f 84 00 00
[  183.310450][T10172] RSP: 0018:ffffc9000b6df640 EFLAGS: 00010287
[  183.312336][T10172] RAX: ffffffff83c91b26 RBX: 00000000fffffffe RCX: 0000000000080000
[  183.314843][T10172] RDX: ffffc90008381000 RSI: 0000000000000d6b RDI: 0000000000000d6c
[  183.317373][T10172] RBP: ffffc9000b6df730 R08: ffff8881043f3b00 R09: 0000000000000002
[  183.319805][T10172] R10: 00000000fffffffe R11: 0000000000000002 R12: dffffc0000000000
[  183.322253][T10172] R13: ffff88802276e000 R14: ffff88802276e1a8 R15: 000000000000000b
[  183.324727][T10172]  ? nilfs_ioctl_prepare_clean_segments+0x7f6/0x810
[  183.326787][T10172]  ? rcu_is_watching+0x15/0xb0
[  183.328327][T10172]  ? __pfx_nilfs_ioctl_prepare_clean_segments+0x10/0x10
[  183.330841][T10172]  ? nilfs_bmap_save+0x33/0x120
[  183.332734][T10172]  ? nilfs_mdt_save_to_shadow_map+0x1a8/0x1c0
[  183.335136][T10172]  nilfs_clean_segments+0x185/0xa50
[  183.337026][T10172]  ? nilfs_ioctl_move_blocks+0x978/0xdd0
[  183.338900][T10172]  ? __pfx_nilfs_clean_segments+0x10/0x10
[  183.340698][T10172]  ? _copy_from_user+0x94/0xb0
[  183.342227][T10172]  nilfs_ioctl+0x2619/0x2780
[  183.343871][T10172]  ? __pfx_nilfs_ioctl+0x10/0x10
[  183.345776][T10172]  ? kasan_save_track+0x4f/0x80
[  183.347696][T10172]  ? kasan_save_track+0x3e/0x80
[  183.349555][T10172]  ? kasan_save_free_info+0x40/0x50
[  183.351400][T10172]  ? __kasan_slab_free+0x5c/0x80
[  183.352964][T10172]  ? kfree+0x1c1/0x630
[  183.354253][T10172]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  183.356040][T10172]  ? security_file_ioctl+0xc3/0x2a0
[  183.357671][T10172]  ? __se_sys_ioctl+0x47/0x170
[  183.359161][T10172]  ? do_syscall_64+0x170/0xf80
[  183.360619][T10172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.362470][T10172]  ? kasan_quarantine_put+0xbb/0x1f0
[  183.364082][T10172]  ? tomoyo_path_number_perm+0x219/0x5f0
[  183.365755][T10172]  ? tomoyo_path_number_perm+0x219/0x5f0
[  183.367483][T10172]  ? do_vfs_ioctl+0x116f/0x1540
[  183.368959][T10172]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  183.370468][T10172]  ? hook_file_ioctl+0x1eb/0x590
[  183.372237][T10172]  ? __fget_files+0x2a/0x420
[  183.373709][T10172]  ? __fget_files+0x2a/0x420
[  183.375133][T10172]  ? __fget_files+0x3a2/0x420
[  183.376550][T10172]  ? __fget_files+0x2a/0x420
[  183.378166][T10172]  ? bpf_lsm_file_ioctl+0x9/0x20
[  183.380027][T10172]  ? __pfx_nilfs_ioctl+0x10/0x10
[  183.381859][T10172]  __se_sys_ioctl+0xfc/0x170
[  183.383682][T10172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.386081][T10172]  do_syscall_64+0x170/0xf80
[  183.387878][T10172]  ? trace_irq_disable+0x3b/0x150
[  183.389817][T10172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.392079][T10172] RIP: 0033:0x7f7cfe79e019
[  183.393739][T10172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.401146][T10172] RSP: 002b:00007f7cff728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.404352][T10172] RAX: ffffffffffffffda RBX: 00007f7cfea25fa0 RCX: 00007f7cfe79e019
[  183.407387][T10172] RDX: 0000200000000640 RSI: 0000000040786e88 RDI: 0000000000000004
[  183.410442][T10172] RBP: 00007f7cfe83500c R08: 0000000000000000 R09: 0000000000000000
[  183.413386][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  183.415853][T10172] R13: 00007f7cfea26038 R14: 00007f7cfea25fa0 R15: 00007ffd7ddd1aa8
[  183.418314][T10172]  </TASK>
[  183.419935][T10172] Kernel Offset: disabled
[  183.421281][T10172] Rebooting in 86400 seconds..
