last executing test programs:

2m39.598582856s ago: executing program 1 (id=1332):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x41, 0x20, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48)

2m39.528618791s ago: executing program 1 (id=1333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='429\x00\x0067295 2\t\x00\x00\x00\x00\x00\x00\x000 0\n', 0x18)

2m39.467693398s ago: executing program 1 (id=1335):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007050102000200070581020002000705"], 0x0)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)

2m38.257008758s ago: executing program 1 (id=1346):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d)

2m37.984913984s ago: executing program 1 (id=1351):
mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0xf5, 0x7a}, 0x20)

2m37.638735347s ago: executing program 1 (id=1358):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x2, 0x5de, &(0x7f00000006c0)="$eJzs3cFvHFcdB/DvrGPHDlLqpElTEBJWOYAakdi7kQkSCCgFWahClbj0aiWb2somjewtcnuAgLjS/gvlYM4cOKEg5cCZf8GoRwR334Jmdna9sZ3Ujl3vOv18pLfvzbyZN7/5aeZpZleWA3xlLb2XyccpsnT1nY1yeWuz1dnabN3rt5OcTdJIppMU5eq/Jfk8eZheydf7HUP1HsWnS7dWHn1ypbc0XZdq++J5+x3MIJbZXqxVfVzjNY883s4ZziW5WNcwck/6/r1v9xHvSwBgnBXJxH7rZ3/0p36zfA/oPRX3nrFPtYejDgAAAABOwCvb2c5Gzo86DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhN6v//X9Sl0W/PpTiXZDrJVL0udftUezzqAAAAAAAAAADgGHxrO9vZyPn+8pOi+s3/jWrhUvX5tXyY9bSzlmvZyHK66WYtC0lmhwaa2ljudtcWDrBnc/eeE+l215onc74AAAAAAAAA8JL6Q5Z2fv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBxUCQTvaoql/rt2TTOJJlOMlVu9zB51G+fZo9HHQAAAACcgFe2s52NnO8vPymqd/7Xqvf+6XyY++lmNd100s7t6ruA3lt/Y2uz1dnabN0ry95xf/q/Q4VRjZjedw/7H3m+2uLyYI+l/CK/ztXM5d2sZTW/yXK6aWcub1et5RSZLccq6h36se6N9ydPLb37RbG+XkUykztZrWK7llv5IJ3cTqM6h2qb4aPtPeLvy+wUP64dMEe367o8oV/W9XiYrTIyOcjIfJ37MhsXnp+JQ14nu4+0kMbgO6hLX0LOz9V1meu3xzrnzaGr77XnZyKZb/73wUrn/t2VO+tXx+eUXtDuTLSGMnHlRTNx5uTiPz5TdTZ6s+jhZss3qn3PZzW/yge5nXZuZj43s5gbaWUxP8jiUF4vH+BeaxzuXvv2d+vGZJKf1/V4KPN6YSivwzPdbNU3vGYnSxePf0Y68426UV6sb43djHRh19zcz8Srz8/En5+Un+ud+3fXVpYfHPB436nrMgM/G6tMlNfLxcEk8vTVUfa9um/fQtV3adDX2NN3edD3RXfqVP0Mt3ekZtV3Zd++VtX3+lDffk85AIy9c2+em5r5z8y/Zj6b+ePMysw702+dvXn2m1OZ/OeZv0/8tfGXxg+LN/NZfrvz/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy49Y8+vrvc6bTXTl3jd+MRhobGaW5MPKtr1DMT8GW73r334Pr6Rx9/b/Xe8vvt99v3bywsNm/cmF/8/s3rd1Y77fne56jDBACO0c5D/6gjAQAAAAAAAAAAAAAAnuUk/tJ41OcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC85N7L5OMUWZi/Nl8ubm22OmXpt3c2nE5SlI1/JPk8eZheyezQaMWzDlN8unRr5dEnV3bGmu5v3ysTRzmJp2Jp7IrpqOM1jzxeMcjMXJKLdQ0j9/8AAAD//wGBAGU=")

2m37.564665824s ago: executing program 32 (id=1358):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x2, 0x5de, &(0x7f00000006c0)="$eJzs3cFvHFcdB/DvrGPHDlLqpElTEBJWOYAakdi7kQkSCCgFWahClbj0aiWb2somjewtcnuAgLjS/gvlYM4cOKEg5cCZf8GoRwR334Jmdna9sZ3Ujl3vOv18pLfvzbyZN7/5aeZpZleWA3xlLb2XyccpsnT1nY1yeWuz1dnabN3rt5OcTdJIppMU5eq/Jfk8eZheydf7HUP1HsWnS7dWHn1ypbc0XZdq++J5+x3MIJbZXqxVfVzjNY883s4ZziW5WNcwck/6/r1v9xHvSwBgnBXJxH7rZ3/0p36zfA/oPRX3nrFPtYejDgAAAABOwCvb2c5Gzo86DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhN6v//X9Sl0W/PpTiXZDrJVL0udftUezzqAAAAAAAAAADgGHxrO9vZyPn+8pOi+s3/jWrhUvX5tXyY9bSzlmvZyHK66WYtC0lmhwaa2ljudtcWDrBnc/eeE+l215onc74AAAAAAAAA8JL6Q5Z2fv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBxUCQTvaoql/rt2TTOJJlOMlVu9zB51G+fZo9HHQAAAACcgFe2s52NnO8vPymqd/7Xqvf+6XyY++lmNd100s7t6ruA3lt/Y2uz1dnabN0ry95xf/q/Q4VRjZjedw/7H3m+2uLyYI+l/CK/ztXM5d2sZTW/yXK6aWcub1et5RSZLccq6h36se6N9ydPLb37RbG+XkUykztZrWK7llv5IJ3cTqM6h2qb4aPtPeLvy+wUP64dMEe367o8oV/W9XiYrTIyOcjIfJ37MhsXnp+JQ14nu4+0kMbgO6hLX0LOz9V1meu3xzrnzaGr77XnZyKZb/73wUrn/t2VO+tXx+eUXtDuTLSGMnHlRTNx5uTiPz5TdTZ6s+jhZss3qn3PZzW/yge5nXZuZj43s5gbaWUxP8jiUF4vH+BeaxzuXvv2d+vGZJKf1/V4KPN6YSivwzPdbNU3vGYnSxePf0Y68426UV6sb43djHRh19zcz8Srz8/En5+Un+ud+3fXVpYfHPB436nrMgM/G6tMlNfLxcEk8vTVUfa9um/fQtV3adDX2NN3edD3RXfqVP0Mt3ekZtV3Zd++VtX3+lDffk85AIy9c2+em5r5z8y/Zj6b+ePMysw702+dvXn2m1OZ/OeZv0/8tfGXxg+LN/NZfrvz/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy49Y8+vrvc6bTXTl3jd+MRhobGaW5MPKtr1DMT8GW73r334Pr6Rx9/b/Xe8vvt99v3bywsNm/cmF/8/s3rd1Y77fne56jDBACO0c5D/6gjAQAAAAAAAAAAAAAAnuUk/tJ41OcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC85N7L5OMUWZi/Nl8ubm22OmXpt3c2nE5SlI1/JPk8eZheyezQaMWzDlN8unRr5dEnV3bGmu5v3ysTRzmJp2Jp7IrpqOM1jzxeMcjMXJKLdQ0j9/8AAAD//wGBAGU=")

2m9.746435344s ago: executing program 3 (id=1626):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)

2m9.656184608s ago: executing program 3 (id=1627):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x202, 0x402)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x1, 0x0, 0x4, 0x0})

2m9.655789825s ago: executing program 3 (id=1628):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000001000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

2m6.985594456s ago: executing program 3 (id=1644):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000000c0)={[{@fat=@gid}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)

2m6.546524198s ago: executing program 3 (id=1650):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000240)="c48f86382be0671b05d3bcdec58f52cb0d81bff1c10f74e2b6cb", 0x1a}], 0x2}}], 0x1, 0x4004c8c0)
sendto$inet6(r0, &(0x7f0000000700)="cedc", 0x2, 0x3b00, 0x0, 0x0)

2m5.706477576s ago: executing program 3 (id=1654):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)

2m5.483700094s ago: executing program 33 (id=1654):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68)

1m1.708019038s ago: executing program 0 (id=2208):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"})
close(r0)
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
read$snddsp(r1, &(0x7f0000000240)=""/203, 0xcb)

1m1.576705034s ago: executing program 0 (id=2210):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "cf"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}}, 0x0)

1m1.426404262s ago: executing program 0 (id=2213):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/crypto\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0)

1m1.327699542s ago: executing program 0 (id=2216):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000d0f000/0x4000)=nil)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
syz_clone3(&(0x7f00000003c0)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

1m0.993659626s ago: executing program 0 (id=2217):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m0.848828194s ago: executing program 0 (id=2219):
epoll_create1(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
socket(0x2, 0xa, 0x300)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x44)

45.568006176s ago: executing program 34 (id=2219):
epoll_create1(0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
socket(0x2, 0xa, 0x300)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x44)

6.92251584s ago: executing program 4 (id=2587):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8205, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x101}}, {@data_err_ignore}, {@i_version}, {@minixdf}, {@orlov}]}, 0x1, 0x616, &(0x7f0000001140)="$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")

6.654430773s ago: executing program 4 (id=2588):
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000380)=""/19)

6.562907684s ago: executing program 4 (id=2589):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e3659902362b, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x7, 0x1})

6.56275175s ago: executing program 4 (id=2590):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x267)

6.42551434s ago: executing program 4 (id=2591):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)

6.269163091s ago: executing program 4 (id=2592):
r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
flock(r2, 0x6)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')

5.995208744s ago: executing program 35 (id=2592):
r0 = fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0)
flock(r2, 0x6)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')

1.790348562s ago: executing program 5 (id=2621):
socket$inet(0x2, 0xa, 0x8)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x9}}}}}, 0x0)

1.450973317s ago: executing program 5 (id=2624):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10)

530.673428ms ago: executing program 2 (id=2628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

530.482244ms ago: executing program 5 (id=2629):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$peeksig(0x4209, r0, &(0x7f0000000000)={0x9, 0x7ffffffe}, 0x0)

413.192825ms ago: executing program 2 (id=2630):
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80002)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7)

321.254941ms ago: executing program 5 (id=2631):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010022a004"], 0x24}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

320.957233ms ago: executing program 2 (id=2632):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet(0x2, 0x3, 0x1)
setsockopt$inet_opts(r0, 0x0, 0xb, &(0x7f0000000000)="89", 0x1)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x4000, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@local}, {@dev}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0)

211.714474ms ago: executing program 2 (id=2633):
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='btrfs\x00', 0x0, 0x0)

180.731496ms ago: executing program 5 (id=2634):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @empty}}, 0x3, 0x4}, &(0x7f00000001c0)=0x90)

81.956068ms ago: executing program 2 (id=2635):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80)

462.927µs ago: executing program 5 (id=2636):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800718, &(0x7f0000000240)={[{@delalloc}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@errors_remount}, {@resuid}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x754}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x20ad}}]}, 0x22, 0x4a7, &(0x7f00000010c0)="$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")

0s ago: executing program 2 (id=2637):
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000001c0)=[{0x4e71, 0x0, 0x0, 0x40}, {0x6, 0x0, 0x6}, {0x7, 0x5, 0x0, 0x5}]}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x20)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r6, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1)
sendmsg$nl_netfilter(r5, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x394}, 0x1, 0x0, 0x0, 0x4040}, 0x20b62ff0d9f8e8e7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000180)={[{@test_dummy_encryption_v1}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
write(r7, &(0x7f0000000200)='1', 0x1)

kernel console output (not intermixed with test programs):

388197][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  192.392285][   T10] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  192.396222][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.405895][ T9650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  192.411988][ T9650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  192.419512][ T9650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  192.429187][   T10] mos7720 1-1:1.0: Moschip 2 port adapter converter detected
[  192.433875][ T5655] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  192.441522][ T5655] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  192.448481][ T5655] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  192.453211][ T5655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.837645][   T10] usb 1-1: mos7720: usb_control_msg() failed: -71
[  192.860776][   T10] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  192.911256][   T10] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  192.913262][ T5655] gud 3-1:1.0: probe with driver gud failed with error -71
[  192.919154][    T9] usb 4-1: USB disconnect, device number 2
[  192.964438][   T10] usb 1-1: USB disconnect, device number 27
[  192.966372][    C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  192.994236][ T5655] usb 3-1: USB disconnect, device number 28
[  193.046602][   T10] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  193.093056][   T10] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  193.098514][   T10] mos7720 1-1:1.0: device disconnected
[  193.103991][ T9656] ip_tables: iptables: counters copy to user failed while replacing table
[  193.292957][ T9664] loop3: detected capacity change from 0 to 764
[  193.504733][ T9668] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1537'.
[  193.604603][ T9666] loop3: detected capacity change from 0 to 32768
[  193.634356][ T9666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1536 (9666)
[  193.672942][ T9666] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  193.696892][ T9666] BTRFS info (device loop3): using sha256 checksum algorithm
[  193.733931][ T9687] Can't find ip_set type bitmap:ip,mac
[  193.774299][ T9666] BTRFS info (device loop3): rebuilding free space tree
[  193.863183][ T9666] BTRFS info (device loop3): checking UUID tree
[  193.867975][ T9666] BTRFS info (device loop3): enabling ssd optimizations
[  193.878806][ T9666] BTRFS info (device loop3): using spread ssd allocation scheme
[  193.888491][ T9666] BTRFS info (device loop3): turning on async discard
[  193.896324][ T9666] BTRFS info (device loop3): enabling free space tree
[  193.903160][ T9666] BTRFS info (device loop3): force clearing of disk cache
[  193.907133][ T9666] BTRFS info (device loop3): use zlib compression, level 3
[  193.942946][ T9666] BTRFS info (device loop3): Snapshot src from another FS
[  194.052219][ T9185] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.240812][ T9706] ip_tables: iptables: counters copy to user failed while replacing table
[  194.409051][ T9712] SET target dimension over the limit!
[  194.478064][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  194.681642][ T9711] loop0: detected capacity change from 0 to 32768
[  194.691258][ T9711] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1548 (9711)
[  194.723242][ T9711] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  194.732705][ T9711] BTRFS info (device loop0): using blake2b checksum algorithm
[  194.773561][ T9711] BTRFS info (device loop0): enabling ssd optimizations
[  194.778699][ T9711] BTRFS info (device loop0): turning on async discard
[  194.786850][ T9711] BTRFS info (device loop0): enabling free space tree
[  194.845113][ T5596] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  194.900366][ T5700] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  195.056161][ T5700] usb 4-1: Using ep0 maxpacket: 16
[  195.071570][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.088166][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  195.100669][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  195.109758][ T5700] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  195.118328][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.133927][ T5700] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  195.137897][ T5700] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  195.148007][ T5700] usb 4-1: Manufacturer: syz
[  195.159246][ T5700] usb 4-1: config 0 descriptor??
[  195.375260][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.386056][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.390682][ T5663] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  195.401049][ T5700] rc_core: Couldn't load IR keymap rc-hauppauge
[  195.406689][ T5700] Registered IR keymap rc-empty
[  195.410929][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.429859][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.462232][ T5700] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  195.474182][ T5700] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12
[  195.502778][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.519829][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.539798][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.552241][ T5663] usb 1-1: config 1 descriptor has 1 excess byte, ignoring
[  195.554683][ T5663] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.559787][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.560918][ T5663] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  195.566122][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.569316][ T5663] usb 1-1: Product: syz
[  195.571429][ T5663] usb 1-1: Manufacturer: syz
[  195.573040][ T5663] usb 1-1: SerialNumber: syz
[  195.577915][ T5663] rtl8150 1-1:1.0: couldn't find required endpoints
[  195.580246][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.582896][ T5663] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  195.600882][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.621443][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.639728][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.659742][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.679839][ T5700] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  195.706135][ T5700] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  195.719653][ T5700] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  195.784788][    T9] usb 1-1: USB disconnect, device number 28
[  195.846102][ T5663] usb 4-1: USB disconnect, device number 3
[  196.124060][ T9756] kAFS: unable to lookup cell 'syz0'
[  196.389972][ T9767] loop2: detected capacity change from 0 to 256
[  197.266590][ T9796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1578'.
[  197.692782][ T9807] loop0: detected capacity change from 0 to 2048
[  197.724814][ T9809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1583'.
[  197.727700][ T9809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1583'.
[  197.742315][ T9807]  loop0: p1 p2 p3
[  197.742315][ T9807]  p1: <netbsd:bad subpartition - ignored
[  197.742315][ T9807]  p5 (ignored 240 more) >
[  197.751625][ T9807] loop0: partition table partially beyond EOD, truncated
[  197.754564][ T9807] loop0: p1 size 16777216 extends beyond EOD, truncated
[  197.774237][ T9807] loop0: p2 size 458752 extends beyond EOD, truncated
[  197.801186][ T9807] loop0: p3 start 3036741376 is beyond EOD, truncated
[  198.080245][    T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  198.270641][    T9] usb 1-1: config 0 has an invalid interface number: 134 but max is 0
[  198.273422][    T9] usb 1-1: config 0 has no interface number 0
[  198.276391][    T9] usb 1-1: config 0 interface 134 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  198.281440][    T9] usb 1-1: config 0 interface 134 has no altsetting 0
[  198.289345][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23
[  198.292762][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.295323][    T9] usb 1-1: Product: syz
[  198.296926][    T9] usb 1-1: Manufacturer: syz
[  198.298375][    T9] usb 1-1: SerialNumber: syz
[  198.307708][    T9] usb 1-1: config 0 descriptor??
[  198.438380][ T9819] loop2: detected capacity change from 0 to 512
[  198.497642][ T9819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  198.502565][ T9819] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.525879][    T9] ftdi_sio 1-1:0.134: FTDI USB Serial Device converter detected
[  198.535534][    T9] ftdi_sio ttyUSB0: unknown device type: 0x223
[  198.549253][    T9] usb 1-1: USB disconnect, device number 29
[  198.552569][    T9] ftdi_sio 1-1:0.134: device disconnected
[  198.651233][ T9824] loop3: detected capacity change from 0 to 512
[  198.674888][ T9824] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  198.695194][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  198.699493][ T9824] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1589: invalid indirect mapped block 256 (level 1)
[  198.704874][ T9824] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  198.705196][ T9824] EXT4-fs (loop3): Remounting filesystem read-only
[  198.710192][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  198.710203][    C0] EXT4-fs (loop3): initial error at time 1787570190: ext4_free_branches:1023: inode 13
[  198.710216][    C0] EXT4-fs (loop3): last error at time 1787570190: ext4_free_branches:1023: inode 13
[  198.729490][ T9824] EXT4-fs (loop3): 1 truncate cleaned up
[  198.737111][ T9824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.801446][ T9185] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.141972][ T5663] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  199.314510][ T5663] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  199.327091][ T5663] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  199.342784][ T5663] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  199.351241][ T5663] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  199.362700][ T5663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.381108][ T9831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  199.678183][ T9840] loop2: detected capacity change from 0 to 131072
[  199.696450][ T9840] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(12321792)
[  199.699581][ T9840] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  199.746804][ T9840] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  199.760991][ T9840] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  199.764090][ T9840] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  200.080374][ T9853] loop0: detected capacity change from 0 to 32768
[  200.136549][ T9853] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.163107][ T9853] XFS (loop0): Ending clean mount
[  200.230621][ T5596] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.533751][ T9867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1604'.
[  200.920178][  T804] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  200.962734][ T9879] loop0: detected capacity change from 0 to 4096
[  200.973129][ T9879] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  200.995013][ T5663] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  200.998914][ T5663] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input13
[  201.002440][ T9879] ntfs3(loop0): $Secure::$SDH is corrupted.
[  201.004453][ T9879] ntfs3(loop0): Failed to initialize $Secure (-22).
[  201.048132][ T5663] usb 4-1: USB disconnect, device number 4
[  201.050264][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  201.075074][  T804] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  201.078074][  T804] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  201.102477][  T804] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  201.110038][  T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.122325][  T804] usb 3-1: Product: syz
[  201.123689][  T804] usb 3-1: Manufacturer: syz
[  201.126205][  T804] usb 3-1: SerialNumber: syz
[  201.186593][  T804] usb 3-1: config 0 descriptor??
[  201.211262][  T804] gspca_main: sunplus-2.14.0 probing 055f:c630
[  201.437188][ T9887] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1612'.
[  201.890904][ T9902] binder: 9901:9902 ioctl c0306201 200000000080 returned -14
[  201.896641][ T9902] binder: 9901:9902 ioctl c0306201 2000000003c0 returned -14
[  202.002398][ T9906] loop0: detected capacity change from 0 to 512
[  202.039145][ T9906] EXT4-fs (loop0): Test dummy encryption mode enabled
[  202.058954][ T9906] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.1619: corrupted in-inode xattr: invalid ea_ino
[  202.070032][ T9906] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  202.072101][ T9906] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1619: couldn't read orphan inode 15 (err -117)
[  202.079576][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  202.081583][    C0] EXT4-fs (loop0): initial error at time 1787570193: ext4_iget_extra_inode:5180: inode 15
[  202.084531][    C0] EXT4-fs (loop0): last error at time 1787570193: ext4_iget_extra_inode:5180: inode 15
[  202.089003][ T9906] loop0: lost filesystem error report for type 5 error -117
[  202.090805][ T9906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.139514][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.669796][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  202.830010][    T9] usb 1-1: Using ep0 maxpacket: 32
[  202.834806][    T9] usb 1-1: config 0 has an invalid interface number: 10 but max is 0
[  202.838740][    T9] usb 1-1: config 0 has no interface number 0
[  202.842256][    T9] usb 1-1: config 0 interface 10 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.847395][    T9] usb 1-1: config 0 interface 10 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.853610][    T9] usb 1-1: config 0 interface 10 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  202.863132][    T9] usb 1-1: config 0 interface 10 has no altsetting 0
[  202.869155][    T9] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  202.875008][    T9] usb 1-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[  202.878406][    T9] usb 1-1: Manufacturer: syz
[  202.896748][    T9] usb 1-1: config 0 descriptor??
[  203.016546][  T804] gspca_sunplus: reg_r err -71
[  203.023568][  T804] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  203.045679][  T804] usb 3-1: USB disconnect, device number 29
[  203.311506][    T9] uclogic 0003:145F:0212.0009: interface is invalid, ignoring
[  203.510474][    T9] usb 1-1: USB disconnect, device number 30
[  203.909651][ T4984] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  203.912192][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  204.569452][ T9938] sd 0:0:0:0: PR command failed: 1026
[  204.572486][  T804] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  204.575638][ T9938] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  204.578394][ T9938] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  204.731070][  T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  204.738938][  T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.749810][  T804] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  204.752624][  T804] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  204.755110][  T804] usb 4-1: Product: syz
[  204.757971][  T804] usb 4-1: config 0 descriptor??
[  204.766826][  T804] hub 4-1:0.0: USB hub found
[  204.970264][  T804] hub 4-1:0.0: 1 port detected
[  205.180159][    T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  205.520757][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  205.526091][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.529294][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[  205.533707][    T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00
[  205.536524][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.545602][    T9] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected
[  205.550581][    T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  205.554967][    T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  205.562562][    T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88
[  205.565391][    T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6
[  205.572076][    T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  205.649130][    T9] hub 4-1:0.0: activate --> -90
[  205.892624][   T10] usb 3-1: USB disconnect, device number 30
[  205.906989][   T10] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  205.915727][   T10] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  205.924898][   T10] keyspan 3-1:1.0: device disconnected
[  206.257135][    T9] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  206.257891][ T2350] usb 4-1: USB disconnect, device number 5
[  206.260552][    T9] usb 4-1-port1: attempt power cycle
[  206.702027][ T9967] loop2: detected capacity change from 0 to 32768
[  206.704974][ T9967] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1642 (9967)
[  206.714764][ T9967] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  206.718220][ T9967] BTRFS info (device loop2): using blake2b checksum algorithm
[  206.721758][ T9967] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  206.729335][ T9967] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  206.736414][ T9967] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  206.750214][ T9967] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  206.766439][ T9967] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  206.780847][ T9967] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  206.871017][ T9967] BTRFS info (device loop2 state E): enabling ssd optimizations
[  206.873791][ T9967] BTRFS info (device loop2 state E): using spread ssd allocation scheme
[  206.876974][ T9967] BTRFS info (device loop2 state E): enabling free space tree
[  206.879936][ T9967] BTRFS info (device loop2 state E): enabling auto defrag
[  206.882632][ T9967] BTRFS info (device loop2 state E): ignoring bad roots
[  206.891029][ T9967] BTRFS info (device loop2 state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  207.017311][ T9985] loop3: detected capacity change from 0 to 256
[  207.255768][ T9185] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff)
[  207.297604][ T9185] FAT-fs (loop3): Filesystem has been set read-only
[  207.306551][ T9185] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff)
[  207.326801][ T9995] warning: `syz.0.1648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  208.534933][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  208.911665][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  208.918923][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  208.924613][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  208.937397][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  208.951530][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  209.048689][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.221845][T10025] netlink: 'syz.2.1659': attribute type 3 has an invalid length.
[  209.228961][T10025] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1659'.
[  209.283843][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.881469][T10029] loop2: detected capacity change from 0 to 131072
[  209.884047][T10029] xfs: Deprecated parameter 'ikeep'
[  209.885637][T10029] XFS: ikeep mount option is deprecated.
[  210.006868][T10029] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  210.102295][T10029] XFS (loop2): Starting recovery (logdev: internal)
[  210.121200][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.132173][T10029] XFS (loop2): Ending recovery (logdev: internal)
[  210.637667][T10009] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.643232][T10009] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.646376][T10009] bridge_slave_0: entered allmulticast mode
[  210.650257][T10009] bridge_slave_0: entered promiscuous mode
[  210.671129][T10009] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.673970][T10009] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.676283][T10009] bridge_slave_1: entered allmulticast mode
[  210.679007][T10009] bridge_slave_1: entered promiscuous mode
[  210.702623][   T13] bridge_slave_1: left allmulticast mode
[  210.709731][   T13] bridge_slave_1: left promiscuous mode
[  210.716203][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.741443][   T13] bridge_slave_0: left allmulticast mode
[  210.746687][   T13] bridge_slave_0: left promiscuous mode
[  210.751245][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.009722][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.017633][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.023538][   T13] bond0 (unregistering): Released all slaves
[  211.037069][ T5340] 8021q: adding VLAN 0 to HW filter on device eth1
[  211.062445][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.075390][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.119676][ T4984] Bluetooth: hci0: command tx timeout
[  211.169375][T10009] team0: Port device team_slave_0 added
[  211.192396][T10009] team0: Port device team_slave_1 added
[  211.343815][   T34] audit: type=1326 audit(1787570202.682:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1669" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa418f9e0d9 code=0x7fc00000
[  211.366032][   T34] audit: type=1326 audit(1787570202.692:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1669" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa418f9e0d9 code=0x7fc00000
[  211.586624][   T34] audit: type=1326 audit(1787570202.922:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1669" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa418f97e57 code=0x7fc00000
[  211.619483][   T34] audit: type=1326 audit(1787570202.922:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1669" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa418f3f459 code=0x7fc00000
[  211.640256][   T34] audit: type=1326 audit(1787570202.922:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1669" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa418f3f51d code=0x7fc00000
[  211.675502][   T34] audit: type=1326 audit(1787570202.922:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10067 comm="syz.0.1669" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa418f9e0d9 code=0x7fc00000
[  211.693507][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.695931][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  211.751071][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.755955][ T5340] 8021q: adding VLAN 0 to HW filter on device eth2
[  211.763944][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.768087][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  211.778196][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.808966][ T5602] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  211.958063][T10009] hsr_slave_0: entered promiscuous mode
[  211.964128][T10009] hsr_slave_1: entered promiscuous mode
[  211.984224][T10009] debugfs: 'hsr0' already exists in 'hsr'
[  211.996967][T10009] Cannot create hsr debugfs directory
[  212.145947][   T34] audit: type=1326 audit(1787570203.482:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.0.1671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa418f9e0d9 code=0x7ffc0000
[  212.163835][   T34] audit: type=1326 audit(1787570203.482:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.0.1671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa418f9e0d9 code=0x7ffc0000
[  212.201336][   T34] audit: type=1326 audit(1787570203.482:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.0.1671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa418f9e0d9 code=0x7ffc0000
[  212.216902][   T34] audit: type=1326 audit(1787570203.482:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10082 comm="syz.0.1671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa418f9e0d9 code=0x7ffc0000
[  212.517901][ T5340] 8021q: adding VLAN 0 to HW filter on device eth3
[  212.653911][   T13] hsr_slave_0: left promiscuous mode
[  212.663158][   T13] hsr_slave_1: left promiscuous mode
[  212.673264][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.683436][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.694228][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.697538][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.751598][   T13] veth1_macvtap: left promiscuous mode
[  212.757041][   T13] veth0_macvtap: left promiscuous mode
[  212.761019][   T13] veth1_vlan: left promiscuous mode
[  212.767232][   T13] veth0_vlan: left promiscuous mode
[  213.084282][   T13] team0 (unregistering): Port device team_slave_1 removed
[  213.096557][   T13] team0 (unregistering): Port device team_slave_0 removed
[  213.189873][ T4984] Bluetooth: hci0: command tx timeout
[  213.697925][ T5340] 8021q: adding VLAN 0 to HW filter on device eth4
[  213.765300][T10009] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  213.787784][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  213.796803][T10009] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  213.801256][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  213.813322][T10009] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  213.818659][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  213.823829][T10009] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  213.828334][T10009] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  213.870113][   T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  213.889440][   T13] IPVS: stop unused estimator thread 0...
[  213.984321][T10009] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.995471][T10009] 8021q: adding VLAN 0 to HW filter on device team0
[  214.010676][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.012957][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  214.034897][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  214.040085][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  214.050758][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.056266][   T10] usb 3-1: config 0 descriptor??
[  214.067674][   T10] smsusb:smsusb_probe: board id=8, interface number 0
[  214.079458][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.082267][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  214.089084][   T10] smsusb:smsusb_probe: Device initialized with return code -19
[  214.237358][T10009] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.285132][ T5663] usb 3-1: USB disconnect, device number 31
[  214.289249][T10009] veth0_vlan: entered promiscuous mode
[  214.314054][T10009] veth1_vlan: entered promiscuous mode
[  214.346647][T10009] veth0_macvtap: entered promiscuous mode
[  214.353023][T10009] veth1_macvtap: entered promiscuous mode
[  214.363532][T10009] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.371631][T10009] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.400326][ T5647] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.411172][ T5647] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.416626][ T5647] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.433975][ T5647] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.551182][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.557762][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.598089][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.603326][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.681008][T10153] pimreg: entered allmulticast mode
[  214.686182][T10153] pimreg: left allmulticast mode
[  215.270043][ T4984] Bluetooth: hci0: command tx timeout
[  215.305065][T10177] loop4: detected capacity change from 0 to 164
[  215.390612][T10177] nfs4: Unexpected value for 'acl'
[  215.422923][T10179] loop2: detected capacity change from 0 to 4096
[  215.496576][T10187] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  215.833567][ T5648] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  216.132751][ T5648] usb 5-1: unable to get BOS descriptor or descriptor too short
[  216.144814][ T5648] usb 5-1: not running at top speed; connect to a high speed hub
[  216.153402][ T5648] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  216.162214][ T5648] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  216.174834][ T5648] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  216.196438][ T5648] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.204965][ T5648] usb 5-1: Product: syz
[  216.213744][ T5648] usb 5-1: Manufacturer: syz
[  216.220941][ T5648] usb 5-1: SerialNumber: syz
[  216.457376][ T5648] usb 5-1: unit 65 not found!
[  216.459644][ T5648] usb 5-1: unit 0 not found!
[  216.655917][ T5648] usb 5-1: USB disconnect, device number 2
[  216.750126][T10202] netlink: 'syz.0.1706': attribute type 12 has an invalid length.
[  217.229992][   T34] kauditd_printk_skb: 10 callbacks suppressed
[  217.230008][   T34] audit: type=1326 audit(1787570208.562:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.258497][   T34] audit: type=1326 audit(1787570208.562:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.266984][   T34] audit: type=1326 audit(1787570208.592:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.275282][   T34] audit: type=1326 audit(1787570208.592:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.282240][   T34] audit: type=1326 audit(1787570208.592:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.288962][   T34] audit: type=1326 audit(1787570208.592:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.299860][   T34] audit: type=1326 audit(1787570208.592:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.309118][   T34] audit: type=1326 audit(1787570208.592:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.317863][   T34] audit: type=1326 audit(1787570208.592:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10214 comm="syz.4.1711" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efda1f9e0d9 code=0x7ffc0000
[  217.349877][ T4984] Bluetooth: hci0: command tx timeout
[  217.553774][T10230] 9p: Bad value for 'wfdno'
[  219.100934][T10253] netlink: 'syz.4.1728': attribute type 10 has an invalid length.
[  219.126952][T10253] 8021q: adding VLAN 0 to HW filter on device batadv0
[  219.142011][T10253] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  221.271342][T10302] loop4: detected capacity change from 0 to 2048
[  221.312151][T10304] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.344005][T10304] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  221.347241][T10304] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  221.356412][T10304] Remounting filesystem read-only
[  221.364064][T10009] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  221.955327][T10338] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  222.115041][T10349] loop2: detected capacity change from 0 to 128
[  222.565329][T10364] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  222.572717][T10364] batman_adv: batadv0: Adding interface: wlan0
[  222.575938][T10364] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  222.585073][T10364] batman_adv: batadv0: Interface activated: wlan0
[  223.264937][T10383] program syz.2.1781 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  224.001911][T10402] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1790'.
[  224.086985][T10407] loop2: detected capacity change from 0 to 1024
[  224.114111][T10407] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  224.121625][T10411] loop4: detected capacity change from 0 to 128
[  224.131979][T10411] ubifs: Bad value for 'compr'
[  224.197354][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'.
[  224.202794][T10413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.222823][T10413] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.701982][T10477] fuse: Bad value for 'fd'
[  227.255801][   T34] audit: type=1326 audit(1787570218.592:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.285141][   T34] audit: type=1326 audit(1787570218.602:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.323916][   T34] audit: type=1326 audit(1787570218.602:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.359117][   T34] audit: type=1326 audit(1787570218.602:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.380543][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'.
[  227.387944][   T34] audit: type=1326 audit(1787570218.602:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.395423][T10508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'.
[  227.409799][   T34] audit: type=1326 audit(1787570218.602:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.444924][   T34] audit: type=1326 audit(1787570218.612:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.476534][   T34] audit: type=1326 audit(1787570218.612:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.506961][   T34] audit: type=1326 audit(1787570218.612:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.523645][   T34] audit: type=1326 audit(1787570218.612:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.2.1821" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  227.631049][T10517] loop4: detected capacity change from 0 to 256
[  227.646080][T10517] exfat: Deprecated parameter 'utf8'
[  227.654708][T10517] exfat: Deprecated parameter 'namecase'
[  227.667096][T10517] exfat: Deprecated parameter 'namecase'
[  227.709615][T10517] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  227.761397][   T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  227.936195][   T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  227.941506][   T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  227.944578][   T10] usb 3-1: Product: syz
[  227.946202][   T10] usb 3-1: SerialNumber: syz
[  227.962346][   T10] usb 3-1: config 0 descriptor??
[  228.177475][   T10] hso 3-1:0.0: Failed to find BULK eps
[  228.384510][   T10] usb 3-1: USB disconnect, device number 32
[  230.858122][T10585] loop4: detected capacity change from 0 to 512
[  230.898122][T10585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.922179][T10585] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  231.046849][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.059140][ T4984] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  232.753500][T10608] loop4: detected capacity change from 0 to 16
[  232.769130][T10608] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  232.973904][T10618] loop4: detected capacity change from 0 to 16
[  233.026689][T10618] erofs (device loop4): mounted with root inode @ nid 36.
[  233.044239][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1871'.
[  233.104203][   T56] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  233.133027][T10618] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  233.151667][T10618] erofs (device loop4): read error -117 @ 0 of nid 89
[  233.162519][   T34] kauditd_printk_skb: 9 callbacks suppressed
[  233.162527][   T34] audit: type=1800 audit(1787570224.502:115): pid=10618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1870" name="file2" dev="loop4" ino=89 res=0 errno=0
[  233.190229][T10625] loop2: detected capacity change from 0 to 256
[  233.223252][T10625] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  235.140096][T10665] loop4: detected capacity change from 0 to 4096
[  235.211182][T10665] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  235.568078][T10687] ucma_write: process 140 (syz.4.1900) changed security contexts after opening file descriptor, this is not allowed.
[  235.821054][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.824549][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.829689][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.833475][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.839185][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.843191][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.846509][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.851365][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.854830][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  235.858706][T10681] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  236.206397][T10703] loop4: detected capacity change from 0 to 1024
[  236.365719][T10705] loop4: detected capacity change from 0 to 512
[  236.384326][T10705] EXT4-fs: Ignoring removed orlov option
[  236.420136][T10705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.429694][T10705] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.547799][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.013126][T10736] loop4: detected capacity change from 0 to 2048
[  237.026359][T10736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.157505][T10741] sctp: [Deprecated]: syz.4.1925 (pid 10741) Use of int in max_burst socket option.
[  237.157505][T10741] Use struct sctp_assoc_value instead
[  237.747527][T10767] loop4: detected capacity change from 0 to 1764
[  237.793949][T10767] iso9660: Corrupted directory entry in block 2 of inode 1920
[  240.470386][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  240.652752][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  240.656013][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  240.664308][   T10] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  240.667154][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.672334][   T10] usb 3-1: Product: syz
[  240.674873][   T10] usb 3-1: Manufacturer: syz
[  240.676436][   T10] usb 3-1: SerialNumber: syz
[  240.982745][T10799] loop4: detected capacity change from 0 to 32768
[  240.997062][   T10] usb 3-1: unit 4 not found!
[  241.040139][T10799] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.175361][T10799] XFS (loop4): Ending clean mount
[  241.189389][T10799] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  241.194688][T10799] XFS (loop4): Unmount and run xfs_repair
[  241.196684][T10799] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  241.199625][T10799] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  241.203034][T10799] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  241.206448][T10799] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  241.209984][T10799] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  241.213328][T10799] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  241.216599][T10799] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  241.220209][T10799] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  241.223643][T10799] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  241.227113][T10799] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  241.268937][   T10] usb 3-1: USB disconnect, device number 33
[  241.285098][T10009] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.397285][T10009] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  241.457982][ T5601] udevd[5601]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  241.840249][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1953'.
[  242.002692][T10825] bond1 (unregistering): Released all slaves
[  242.969332][ T5647] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.052346][T10843] loop4: detected capacity change from 0 to 1024
[  243.064246][T10843] hfsplus: failed to load attributes file
[  243.365484][T10857] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.484161][T10859] loop4: detected capacity change from 0 to 1024
[  243.789704][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  243.939706][   T10] usb 3-1: Using ep0 maxpacket: 32
[  243.948309][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  243.953979][   T10] usb 3-1: config 0 has no interface number 0
[  243.956253][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[  243.962909][   T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  243.966190][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.969225][   T10] usb 3-1: Product: syz
[  243.972921][   T10] usb 3-1: Manufacturer: syz
[  243.975904][   T10] usb 3-1: SerialNumber: syz
[  243.985984][   T10] usb 3-1: config 0 descriptor??
[  244.709727][   T33] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  244.896215][   T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  244.898914][   T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  244.904854][   T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  244.907348][   T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  244.914964][   T10] usb 3-1: USB disconnect, device number 34
[  245.711038][   T33] usb 5-1: Using ep0 maxpacket: 16
[  245.722503][   T33] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  245.728964][   T33] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  245.741584][   T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.746746][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  245.751357][   T33] usb 5-1: SerialNumber: syz
[  245.774789][   T33] mos7720 5-1:1.0: required endpoints missing
[  245.974644][  T804] usb 5-1: USB disconnect, device number 3
[  246.944219][T10915] loop4: detected capacity change from 0 to 32768
[  247.014884][T10915] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  247.078246][T10915] XFS (loop4): Ending clean mount
[  247.115327][T10915] XFS (loop4): Quotacheck needed: Please wait.
[  247.227925][T10915] XFS (loop4): Quotacheck: Done.
[  247.250368][   T34] audit: type=1800 audit(1787570238.592:116): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1999" name="bus" dev="loop4" ino=9291 res=0 errno=0
[  247.379451][T10009] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  249.388661][T10943] loop4: detected capacity change from 0 to 40427
[  249.392742][T10943] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  249.395600][T10943] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  249.449373][T10943] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  249.464014][T10943] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  249.466644][T10943] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  249.739688][   T33] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  249.905707][   T33] usb 5-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  249.914416][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.929069][T10962] loop2: detected capacity change from 0 to 512
[  249.934202][   T33] usb 5-1: config 0 descriptor??
[  249.945182][T10962] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  249.960037][T10962] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  249.968352][T10962] EXT4-fs (loop2): orphan cleanup on readonly fs
[  249.974193][T10962] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.2015: iget: bad i_size value: 12154761577498
[  249.984024][T10962] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  249.984381][T10962] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2015: couldn't read orphan inode 13 (err -117)
[  249.991313][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  249.991328][    C0] EXT4-fs (loop2): initial error at time 1787570241: ext4_orphan_get:1399: inode 13
[  249.991343][    C0] EXT4-fs (loop2): last error at time 1787570241: ext4_orphan_get:1399: inode 13
[  250.012187][T10962] loop2: lost filesystem error report for type 5 error -117
[  250.013336][T10962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  250.028182][T10962] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.2015: dx entry: limit 65535 != root limit 120
[  250.037120][T10962] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2015: Corrupt directory, running e2fsck is recommended
[  250.061903][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.127629][T10972] loop2: detected capacity change from 0 to 512
[  250.135036][T10972] EXT4-fs: Ignoring removed mblk_io_submit option
[  250.148139][T10972] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  250.173777][T10972] EXT4-fs (loop2): 1 truncate cleaned up
[  250.177192][T10972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.216699][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.338255][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'.
[  250.353181][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'.
[  250.376754][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'.
[  250.384967][T10981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2021'.
[  250.461075][T10983] loop2: detected capacity change from 0 to 8192
[  250.662942][T10983]  loop2: p1 < > p2 < > p4 < >
[  250.672324][T10983] loop2: partition table partially beyond EOD, truncated
[  250.691037][T10983] loop2: p1 start 83886080 is beyond EOD, truncated
[  250.707280][T10983] loop2: p2 start 16776960 is beyond EOD, truncated
[  250.964095][T10989] syz.4.2008: attempt to access beyond end of device
[  250.964095][T10989] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  250.977173][T10989] syz.4.2008: attempt to access beyond end of device
[  250.977173][T10989] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  250.987292][ T5044]  loop2: p1 < > p2 < > p4 < >
[  250.998200][ T5044] loop2: partition table partially beyond EOD, truncated
[  251.000283][T10989] syz.4.2008 (10989) used greatest stack depth: 16960 bytes left
[  251.019203][ T5044] loop2: p1 start 83886080 is beyond EOD, truncated
[  251.036370][ T5044] loop2: p2 start 16776960 is beyond EOD, truncated
[  251.360981][ T5601] udevd[5601]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  251.379031][ T5601] udevd[5601]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  252.105578][T11000] fuse: Bad value for 'fd'
[  252.126016][T11000] 9pnet_fd: p9_fd_create_unix (11000): problem connecting socket: ./file0: -111
[  252.352299][T11006] loop2: detected capacity change from 0 to 128
[  252.368817][T11006] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  252.390534][T11006] hpfs: filesystem error: improperly stopped
[  252.397027][T11006] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  252.406832][T11006] hpfs: You really don't want any checks? You are crazy...
[  252.417125][T11006] hpfs: Code page index out of array
[  252.418848][T11006] hpfs: code page support is disabled
[  252.431232][T11006] hpfs: hpfs_map_4sectors(): unaligned read
[  252.437122][T11006] hpfs: hpfs_map_4sectors(): unaligned read
[  252.442900][T11006] hpfs: filesystem error: unable to find root dir
[  252.648379][   T33] usbhid 5-1:0.0: can't add hid device: -71
[  252.656307][   T33] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  252.668515][   T33] usb 5-1: USB disconnect, device number 4
[  253.337925][T11011] loop2: detected capacity change from 0 to 1024
[  253.349198][T11011] EXT4-fs: Ignoring removed orlov option
[  253.377937][T11011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.478505][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.931145][T11019] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  254.460086][  T804] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  254.493837][T11016] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  254.610814][  T804] usb 5-1: not running at top speed; connect to a high speed hub
[  254.620546][  T804] usb 5-1: config 2 has an invalid interface number: 85 but max is 0
[  254.627122][  T804] usb 5-1: config 2 has no interface number 0
[  254.631210][  T804] usb 5-1: config 2 interface 85 has no altsetting 0
[  254.645541][  T804] usb 5-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5
[  254.649640][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.654979][  T804] usb 5-1: Product: syz
[  254.656277][  T804] usb 5-1: Manufacturer: syz
[  254.658581][  T804] usb 5-1: SerialNumber: syz
[  254.912977][  T804] gspca_main: conex-2.14.0 probing 0572:0041
[  254.988778][T11054] loop2: detected capacity change from 0 to 4096
[  255.055811][T11054] ntfs3(loop2): ino=b, mi_enum_attr
[  255.063858][T11054] ntfs3(loop2): Failed to load $Extend (-22).
[  255.070356][T11054] ntfs3(loop2): Failed to initialize $Extend.
[  255.110981][  T804] usb 5-1: USB disconnect, device number 5
[  255.547564][T11075] jffs2: notice: (11075) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  255.698027][   T10] kernel write not supported for file /sg0 (pid: 10 comm: kworker/0:1)
[  255.740317][  T804] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  255.917785][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  255.949657][  T804] usb 3-1: Using ep0 maxpacket: 8
[  256.011991][  T804] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.020031][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.029321][  T804] usb 3-1: config 0 interface 0 altsetting 249 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  256.053057][  T804] usb 3-1: config 0 interface 0 has no altsetting 0
[  256.064046][  T804] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  256.067056][  T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.152878][  T804] usb 3-1: config 0 descriptor??
[  256.439698][   T33] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  256.575510][  T804] kye 0003:0458:0138.000A: unknown main item tag 0x3
[  256.579348][  T804] kye 0003:0458:0138.000A: unknown main item tag 0x1
[  256.582642][  T804] kye 0003:0458:0138.000A: reserved main item tag 0xd
[  256.585632][  T804] kye 0003:0458:0138.000A: ignoring exceeding usage max
[  256.588917][  T804] kye 0003:0458:0138.000A: ignoring exceeding usage max
[  256.592026][  T804] kye 0003:0458:0138.000A: usage index exceeded
[  256.594524][  T804] kye 0003:0458:0138.000A: item 0 0 2 2 parsing failed
[  256.597675][  T804] kye 0003:0458:0138.000A: parse failed
[  256.600485][  T804] kye 0003:0458:0138.000A: probe with driver kye failed with error -22
[  256.601817][   T33] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.619594][   T33] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  256.622702][   T33] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  256.628925][   T33] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00
[  256.644246][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.659595][   T33] usb 5-1: Product: syz
[  256.660863][   T33] usb 5-1: Manufacturer: syz
[  256.662326][   T33] usb 5-1: SerialNumber: syz
[  256.672471][   T33] uvcvideo 5-1:1.0: Found Unit with invalid ID 0
[  256.676258][   T33] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (046d:0821)
[  256.680203][   T33] uvcvideo 5-1:1.0: No valid video chain found.
[  256.774600][  T804] usb 3-1: USB disconnect, device number 35
[  256.873264][   T33] usb 5-1: USB disconnect, device number 6
[  257.515131][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'.
[  257.825094][T11122] loop4: detected capacity change from 0 to 32768
[  257.832757][T11122] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2081 (11122)
[  257.860834][T11122] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.867702][T11122] BTRFS info (device loop4): using crc32c checksum algorithm
[  257.930552][T11122] BTRFS info (device loop4): enabling ssd optimizations
[  257.953956][T11122] BTRFS info (device loop4): turning on flush-on-commit
[  257.956163][T11122] BTRFS info (device loop4): enabling free space tree
[  257.971780][T11122] BTRFS info (device loop4): enabling auto defrag
[  257.984933][T11122] BTRFS info (device loop4): use lzo compression, level 1
[  257.991833][T11122] BTRFS info (device loop4): max_inline set to 4096
[  258.010673][T11122] BTRFS critical (device loop4 state E): emergency shutdown
[  258.037810][T10009] BTRFS info (device loop4 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.305166][T11144] loop4: detected capacity change from 0 to 2048
[  258.362162][T11144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.646598][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.949785][   T33] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  259.099661][   T33] usb 5-1: Using ep0 maxpacket: 8
[  259.108636][   T33] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.113079][   T33] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  259.127335][   T33] usb 5-1: config 0 interface 0 has no altsetting 0
[  259.130044][   T33] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  259.132835][   T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.141304][   T33] usb 5-1: config 0 descriptor??
[  259.566292][   T33] wacom 0003:056A:00E5.000B: hidraw0: USB HID v0.08 Joystick [HID 056a:00e5] on usb-dummy_hcd.4-1/input0
[  259.771162][   T33] usb 5-1: USB disconnect, device number 7
[  260.463733][T11162] netlink: 'syz.4.2092': attribute type 8 has an invalid length.
[  261.988133][T11179] loop2: detected capacity change from 0 to 32768
[  262.030566][T11179] ERROR: (device loop2): dbAlloc: the hint is outside the map
[  262.030566][T11179] 
[  262.074111][T11179] ialloc: diAlloc returned -5!
[  263.005384][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'.
[  263.174354][T11202] FAULT_INJECTION: forcing a failure.
[  263.174354][T11202] name fail_futex, interval 1, probability 0, space 0, times 1
[  263.190172][T11202] CPU: 0 UID: 0 PID: 11202 Comm: syz.2.2110 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  263.190192][T11202] Tainted: [L]=SOFTLOCKUP
[  263.190196][T11202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.190203][T11202] Call Trace:
[  263.190208][T11202]  <TASK>
[  263.190212][T11202]  dump_stack_lvl+0xe8/0x150
[  263.190232][T11202]  should_fail_ex+0x40c/0x560
[  263.190246][T11202]  get_futex_key+0x1b3/0x1580
[  263.190265][T11202]  ? __pfx_get_futex_key+0x10/0x10
[  263.190277][T11202]  ? aa_file_perm+0x18b/0x15f0
[  263.190291][T11202]  futex_wait_setup+0x4a/0x590
[  263.190303][T11202]  ? __futex_wait+0xdf/0x400
[  263.190313][T11202]  __futex_wait+0x15f/0x400
[  263.190323][T11202]  ? __pfx___futex_wait+0x10/0x10
[  263.190333][T11202]  ? __pfx_futex_wake_mark+0x10/0x10
[  263.190343][T11202]  ? futex_hash+0x4e/0x2b0
[  263.190353][T11202]  ? futex_hash+0x4e/0x2b0
[  263.190362][T11202]  ? futex_hash+0x275/0x2b0
[  263.190373][T11202]  futex_wait+0x121/0x390
[  263.190382][T11202]  ? __pfx_futex_wait+0x10/0x10
[  263.190398][T11202]  do_futex+0x3e7/0x4e0
[  263.190411][T11202]  ? __pfx_do_futex+0x10/0x10
[  263.190421][T11202]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  263.190435][T11202]  __se_sys_futex+0x3a8/0x450
[  263.190448][T11202]  ? ksys_write+0x242/0x270
[  263.190459][T11202]  ? __pfx___se_sys_futex+0x10/0x10
[  263.190471][T11202]  ? __pfx_ksys_write+0x10/0x10
[  263.190482][T11202]  ? __x64_sys_futex+0x21/0xf0
[  263.190518][T11202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.190530][T11202]  do_syscall_64+0x174/0x580
[  263.190541][T11202]  ? trace_irq_disable+0x3b/0x140
[  263.190556][T11202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.190566][T11202] RIP: 0033:0x7f7c7439e0d9
[  263.190575][T11202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  263.190583][T11202] RSP: 002b:00007f7c753020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  263.190593][T11202] RAX: ffffffffffffffda RBX: 00007f7c74625fa8 RCX: 00007f7c7439e0d9
[  263.190599][T11202] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c74625fa8
[  263.190604][T11202] RBP: 00007f7c74625fa0 R08: 0000000000000000 R09: 0000000000000000
[  263.190609][T11202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  263.190613][T11202] R13: 00007f7c74626038 R14: 00007ffc4dfe93b0 R15: 00007ffc4dfe9498
[  263.190626][T11202]  </TASK>
[  263.904114][T11212] loop2: detected capacity change from 0 to 32768
[  263.912401][T11212] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2114 (11212)
[  263.945998][T11212] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  263.949487][T11212] BTRFS info (device loop2): using sha256 checksum algorithm
[  263.988618][T11212] BTRFS info (device loop2): enabling ssd optimizations
[  263.993940][T11212] BTRFS info (device loop2): turning on async discard
[  263.997088][T11212] BTRFS info (device loop2): enabling free space tree
[  264.081662][ T5602] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  264.109597][T11238] Bluetooth: MGMT ver 1.23
[  264.388852][T11242] synth uevent: /devices/platform/pcspkr: unknown uevent action string
[  264.409301][T11242] platform pcspkr: uevent: failed to send synthetic uevent: -22
[  264.458639][T11246] loop2: detected capacity change from 0 to 7
[  264.471639][T11246] Dev loop2: unable to read RDB block 7
[  264.478239][T11246]  loop2: unable to read partition table
[  264.487031][T11246] loop2: partition table beyond EOD, truncated
[  264.499655][T11246] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5)
[  265.012464][T11270] loop4: detected capacity change from 0 to 736
[  265.274707][T11276] loop4: detected capacity change from 0 to 128
[  265.292448][T11276] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.304026][T11276] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.327624][T10009] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.799782][T11301] loop2: detected capacity change from 0 to 1764
[  266.007784][  T804] usb 5-1: new high-speed USB device number 8 using dummy_hcd

syzkaller
syzkaller login: [  266.262571][  T804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  266.269655][  T804] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  266.274438][  T804] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  266.284361][  T804] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  266.291395][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.299792][  T804] usb 5-1: Product: syz
[  266.301533][  T804] usb 5-1: Manufacturer: syz
[  266.302976][  T804] usb 5-1: SerialNumber: syz
[  266.313260][  T804] usb 5-1: config 0 descriptor??
[  266.318896][T11299] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  266.321429][T11299] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  266.327540][  T804] usb 5-1: ucan: probing device on interface #0
[  266.499004][T11319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2155'.
[  266.887994][T11324] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  266.924549][T11324] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  266.924622][T11327] loop2: detected capacity change from 0 to 256
[  266.949039][T11324] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  266.951460][T11327] vfat: Bad value for 'shortname'
[  266.988934][T11324] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  267.022326][  T804] ucan 5-1:0.0 can0: registered device
[  267.079979][T11324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  267.330861][T11299] loop4: detected capacity change from 0 to 40427
[  267.336132][T11299] F2FS-fs (loop4): Image doesn't support compression
[  267.338182][T11299] F2FS-fs (loop4): build fault injection type: 0x4
[  267.341032][T11299] F2FS-fs (loop4): invalid crc value
[  267.387163][T11299] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  267.396277][T11299] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  267.537396][  T804] ucan 5-1:0.0 can0: firmware string: unknown
[  267.553747][  T804] usb 5-1: USB disconnect, device number 8
[  267.797378][T11342] batadv1: entered promiscuous mode
[  267.802840][T11342] batadv1: entered allmulticast mode
[  267.891906][T11348] overlayfs: failed to clone lowerpath
[  268.341634][   T33] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  268.457391][T11372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2179'.
[  268.509694][   T33] usb 5-1: Using ep0 maxpacket: 16
[  268.515067][   T33] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  268.520798][   T33] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.529626][   T33] usb 5-1: config 0 has no interface number 0
[  268.533753][   T33] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  268.539411][   T33] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  268.543813][   T33] usb 5-1: Product: syz
[  268.547453][   T33] usb 5-1: Manufacturer: syz
[  268.552919][   T33] usb 5-1: SerialNumber: syz
[  268.570270][   T33] usb 5-1: config 0 descriptor??
[  268.798499][   T33] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  268.804382][   T33] uvcvideo 5-1:0.105: No valid video chain found.
[  268.838439][   T33] usb 5-1: USB disconnect, device number 9
[  270.006170][T11405] loop4: detected capacity change from 0 to 128
[  270.023462][T11405] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.047308][T11405] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.113018][T10009] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.894812][T11413] loop4: detected capacity change from 0 to 32768
[  270.975050][T11413] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.205531][T11413] XFS (loop4): Ending clean mount
[  271.287596][T10009] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  271.340394][T11425] loop2: detected capacity change from 0 to 32768
[  271.368865][T11425] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2202 (11425)
[  271.485119][T11425] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  271.498913][T11425] BTRFS info (device loop2): using crc32c checksum algorithm
[  271.681021][T11425] BTRFS info (device loop2): enabling ssd optimizations
[  271.688688][T11425] BTRFS info (device loop2): turning on async discard
[  271.701886][T11425] BTRFS info (device loop2): enabling free space tree
[  271.822638][ T5602] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  272.317838][T11464] kAFS: bad VL server IP address
[  272.580021][T11474] loop4: detected capacity change from 0 to 512
[  272.594689][T11474] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  272.661218][T11474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.677436][T11474] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  272.852915][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.097466][T11472] loop2: detected capacity change from 0 to 32768
[  273.141537][T11472] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2214 (11472)
[  273.180764][T11472] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.185948][T11472] BTRFS info (device loop2): using sha256 checksum algorithm
[  273.396268][T11472] BTRFS info (device loop2): enabling ssd optimizations
[  273.399140][T11472] BTRFS info (device loop2): turning on async discard
[  273.402228][T11472] BTRFS info (device loop2): enabling free space tree
[  273.557177][ T5602] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.366987][T11525] loop4: detected capacity change from 0 to 4096
[  274.389499][T11528] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.403504][T11525] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  274.456212][T11525] Remounting filesystem read-only
[  274.514280][   T34] audit: type=1326 audit(1787570265.852:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.2.2232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  274.544098][   T34] audit: type=1326 audit(1787570265.852:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.2.2232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  274.580206][   T34] audit: type=1326 audit(1787570265.872:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.2.2232" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  274.606867][   T34] audit: type=1326 audit(1787570265.872:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.2.2232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  274.624430][   T34] audit: type=1326 audit(1787570265.872:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11530 comm="syz.2.2232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7439e0d9 code=0x7ffc0000
[  274.881759][T11539] loop2: detected capacity change from 0 to 2048
[  274.916676][T11539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  276.181082][  T804] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  276.341224][  T804] usb 5-1: config index 0 descriptor too short (expected 1572, got 36)
[  276.347604][  T804] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  276.362731][  T804] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  276.369948][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.382837][  T804] usb 5-1: Product: syz
[  276.388928][  T804] usb 5-1: Manufacturer: syz
[  276.400782][  T804] usb 5-1: SerialNumber: syz
[  276.453130][  T804] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input17
[  276.475018][ T5627] bridge_slave_1: left promiscuous mode
[  276.486684][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.500366][ T5627] bridge_slave_0: left allmulticast mode
[  276.505840][ T5627] bridge_slave_0: left promiscuous mode
[  276.511025][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.553438][T11566] input: syz0 as /devices/virtual/input/input18
[  276.646266][ T5029] bcm5974 5-1:1.0: could not read from device
[  276.681749][  T804] bcm5974 5-1:1.0: could not read from device
[  276.714381][ T5029] bcm5974 5-1:1.0: could not read from device
[  276.742181][ T5029] bcm5974 5-1:1.0: could not read from device
[  276.747313][  T804] input: failed to attach handler mousedev to device input17, error: -5
[  276.775514][  T804] usb 5-1: USB disconnect, device number 10
[  276.778429][ T5029] bcm5974 5-1:1.0: could not read from device
[  276.870313][ T5593] bcm5974 5-1:1.0: could not read from device
[  276.905029][ T5593] udevd[5593]: Error opening device "/dev/input/event3": No such file or directory
[  276.922411][ T5593] udevd[5593]: Unable to EVIOCGABS device "/dev/input/event3"
[  276.927586][ T5593] udevd[5593]: Unable to EVIOCGABS device "/dev/input/event3"
[  276.937639][ T5593] udevd[5593]: Unable to EVIOCGABS device "/dev/input/event3"
[  276.943670][ T5593] udevd[5593]: Unable to EVIOCGABS device "/dev/input/event3"
[  277.584775][T11571] loop4: detected capacity change from 0 to 512
[  277.617579][T11571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.645306][T11571] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.733731][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.177686][ T5627] batman_adv: batadv0: Removing interface: ip6gretap1
[  278.232107][T11577] loop4: detected capacity change from 0 to 32768
[  278.282561][ T5627] bond1 (unregistering): (slave ip6gretap2): Releasing active interface
[  278.311665][T11577] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  278.556605][T10009] ocfs2: Unmounting device (7,4) on (node local)
[  278.795263][ T5627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  278.808449][ T5627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  278.822472][ T5627] bond0 (unregistering): Released all slaves
[  278.854879][ T5627] bond1 (unregistering): Released all slaves
[  278.883519][T11575] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  279.433683][T11594] loop4: detected capacity change from 0 to 764
[  279.507877][T11594] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  279.543895][T11596] loop2: detected capacity change from 0 to 512
[  279.609748][T11596] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  279.640180][T11596] EXT4-fs (loop2): orphan cleanup on readonly fs
[  279.649781][T11596] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  279.660279][T11596] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  279.665948][T11596] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.2259: bad orphan inode 768
[  279.673279][T11596] loop2: lost filesystem error report for type 5 error -117
[  279.679580][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  279.683901][    C1] EXT4-fs (loop2): initial error at time 1787570271: ext4_orphan_get:1425
[  279.686466][    C1] EXT4-fs (loop2): last error at time 1787570271: ext4_orphan_get:1425
[  279.694743][T11596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  279.773896][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.785336][ T5627] hsr_slave_0: left promiscuous mode
[  279.810476][ T5627] hsr_slave_1: left promiscuous mode
[  279.816168][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.824535][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  279.854610][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.857336][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  280.187460][ T5627] veth0_macvtap: left promiscuous mode
[  280.193473][ T5627] veth1_vlan: left promiscuous mode
[  280.198605][ T5627] veth0_vlan: left promiscuous mode
[  280.397480][T11619] loop4: detected capacity change from 0 to 64
[  280.472788][T11619] syz.4.2270: attempt to access beyond end of device
[  280.472788][T11619] loop4: rw=8388608, sector=3584, nr_sectors = 2 limit=64
[  280.562000][T11619] Buffer I/O error on dev loop4, logical block 1792, async page read
[  280.592823][T11619] syz.4.2270: attempt to access beyond end of device
[  280.592823][T11619] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  280.614085][T11619] Buffer I/O error on dev loop4, logical block 56576, async page read
[  280.655550][T11622] syz.4.2270: attempt to access beyond end of device
[  280.655550][T11622] loop4: rw=8388608, sector=3584, nr_sectors = 2 limit=64
[  280.669871][T11622] Buffer I/O error on dev loop4, logical block 1792, async page read
[  280.679772][T11622] syz.4.2270: attempt to access beyond end of device
[  280.679772][T11622] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  280.745814][T11622] Buffer I/O error on dev loop4, logical block 56576, async page read
[  281.170801][ T5627] team0 (unregistering): Port device team_slave_1 removed
[  281.200690][ T5627] team0 (unregistering): Port device team_slave_0 removed
[  282.584236][ T5627] IPVS: stop unused estimator thread 0...
[  283.236233][T11650] loop2: detected capacity change from 0 to 40427
[  283.245072][T11650] F2FS-fs (loop2): Image doesn't support compression
[  283.265324][T11650] F2FS-fs (loop2): build fault injection rate: 690
[  283.281884][T11650] F2FS-fs (loop2): invalid crc value
[  283.387685][T11650] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  283.417992][T11650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  283.440374][T11650] syz.2.2283: attempt to access beyond end of device
[  283.440374][T11650] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  284.543908][T11672] loop4: detected capacity change from 0 to 64
[  284.561422][T11671] loop2: detected capacity change from 0 to 2048
[  284.571203][T11672] syz.4.2291: attempt to access beyond end of device
[  284.571203][T11672] loop4: rw=8388608, sector=1024, nr_sectors = 2 limit=64
[  284.594735][T11672] Buffer I/O error on dev loop4, logical block 512, async page read
[  284.604983][T11672] syz.4.2291: attempt to access beyond end of device
[  284.604983][T11672] loop4: rw=8388608, sector=113152, nr_sectors = 2 limit=64
[  284.624492][T11671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.625172][T11672] Buffer I/O error on dev loop4, logical block 56576, async page read
[  284.636015][T11671] ext4 filesystem being mounted at /760/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.723749][T11677] netlink: 'syz.4.2292': attribute type 32 has an invalid length.
[  284.754740][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.010425][T11691] loop2: detected capacity change from 0 to 4096
[  285.021437][T11691] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  285.081079][T11691] ntfs3(loop2): ino=19, mi_enum_attr
[  285.090135][T11691] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  285.431065][T11703] loop4: detected capacity change from 0 to 512
[  285.467012][T11703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  285.479013][T11703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2c018, mo2=0002]
[  285.540037][T11703] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.2301: bad orphan inode 16
[  285.549332][T11703] loop4: lost filesystem error report for type 5 error -117
[  285.549656][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  285.555125][    C1] EXT4-fs (loop4): initial error at time 1787570276: ext4_orphan_get:1425
[  285.558526][    C1] EXT4-fs (loop4): last error at time 1787570276: ext4_orphan_get:1425
[  285.562765][T11703] ext4_test_bit(bit=15, block=4) = 0
[  285.564879][T11703] EXT4-fs (loop4): 1 orphan inode deleted
[  285.589887][T11703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.856939][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.974521][T11711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2303'.
[  286.992217][T11711] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2303'.
[  288.404242][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  288.423036][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  288.431452][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  288.435958][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  288.444391][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  288.701115][T11716] loop2: detected capacity change from 0 to 32768
[  288.710560][T11716] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2304 (11716)
[  288.748833][T11716] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  288.763020][T11716] BTRFS info (device loop2): using blake2b checksum algorithm
[  288.930653][T11716] BTRFS info (device loop2): enabling ssd optimizations
[  288.936856][T11716] BTRFS info (device loop2): turning on async discard
[  288.949031][T11716] BTRFS info (device loop2): enabling free space tree
[  289.115773][ T5602] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  289.712980][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.469862][ T4984] Bluetooth: hci3: command tx timeout
[  290.555033][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.312957][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.320900][T11774] loop4: detected capacity change from 0 to 4096
[  291.330902][T11774] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  291.354971][ T5601] udevd[5601]: incorrect nilfs2 checksum on /dev/loop4
[  291.376008][T11774] NILFS (loop4): mounting unchecked fs
[  291.389988][ T5601] udevd[5601]: incorrect nilfs2 checksum on /dev/loop4
[  291.434324][T11774] NILFS (loop4): recovery complete
[  291.443863][T11780] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.487849][   T34] audit: type=1800 audit(1787570282.822:122): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2317" name="in_ports" dev="configfs" ino=29496 res=0 errno=0
[  291.574444][T11720] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.577699][T11720] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.581006][T11720] bridge_slave_0: entered allmulticast mode
[  291.590447][T11720] bridge_slave_0: entered promiscuous mode
[  292.292729][T11720] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.298454][T11720] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.303959][T11720] bridge_slave_1: entered allmulticast mode
[  292.326702][T11720] bridge_slave_1: entered promiscuous mode
[  292.350174][ T5700] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  292.507767][ T4984] Bluetooth: hci2: unexpected event for opcode 0x0c5a
[  292.551004][ T4984] Bluetooth: hci3: command tx timeout
[  292.553716][ T5700] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  292.576433][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.576793][ T5700] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  292.588331][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.607961][ T5700] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  292.623303][T11720] team0: Port device team_slave_0 added
[  292.627326][T11720] team0: Port device team_slave_1 added
[  292.627569][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.648694][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.651845][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.662545][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.668452][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.671395][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.682259][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.692595][ T5700] pl2303 5-1:1.0: required endpoints missing
[  292.705335][ T5700] pl2303 5-1:1.1: pl2303 converter detected
[  292.716131][ T5700] usb 5-1: pl2303 converter now attached to ttyUSB0
[  292.812337][   T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  292.841341][T11720] hsr_slave_0: entered promiscuous mode
[  292.843853][T11720] hsr_slave_1: entered promiscuous mode
[  292.946219][ T2350] usb 5-1: USB disconnect, device number 11
[  292.975864][   T10] usb 3-1: Using ep0 maxpacket: 16
[  292.976898][ T2350] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  292.982111][   T10] usb 3-1: config 64 has an invalid interface number: 238 but max is 0
[  292.992104][   T10] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  292.992143][ T2350] pl2303 5-1:1.1: device disconnected
[  293.003795][   T10] usb 3-1: config 64 has no interface number 0
[  293.008395][   T10] usb 3-1: config 64 interface 238 has no altsetting 0
[  293.027785][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[  293.044011][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.057778][   T10] usb 3-1: Product: syz
[  293.059285][   T10] usb 3-1: Manufacturer: syz
[  293.065079][   T10] usb 3-1: SerialNumber: syz
[  293.152974][   T13] bridge_slave_1: left allmulticast mode
[  293.156904][   T13] bridge_slave_1: left promiscuous mode
[  293.159724][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.183618][   T13] bridge_slave_0: left allmulticast mode
[  293.185984][   T13] bridge_slave_0: left promiscuous mode
[  293.188492][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.309225][   T10] uvcvideo 3-1:64.238: Found Unit with invalid ID 0
[  293.320022][   T10] uvcvideo 3-1:64.238: Found UVC 0.00 device syz (046d:087c)
[  293.323896][   T10] uvcvideo 3-1:64.238: No valid video chain found.
[  293.334226][   T10] usb 3-1: USB disconnect, device number 36
[  293.812050][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.839336][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.858980][   T13] bond0 (unregistering): Released all slaves
[  293.877146][   T13] bond1 (unregistering): Released all slaves
[  293.948720][   T13] bond2 (unregistering): Released all slaves
[  294.030570][ T5340] 8021q: adding VLAN 0 to HW filter on device eth5
[  294.611852][T11798] comedi comedi1: reset error (fatal)
[  294.639672][ T4984] Bluetooth: hci3: command tx timeout
[  295.044718][T11815] loop2: detected capacity change from 0 to 2048
[  295.101141][T11815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.208038][ T5340] 8021q: adding VLAN 0 to HW filter on device eth6
[  295.242075][   T34] audit: type=1800 audit(1787570286.572:123): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2329" name="bus" dev="loop2" ino=18 res=0 errno=0
[  295.487930][   T13] batman_adv: batadv0: Interface deactivated: wlan0
[  295.521183][ T5602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.528876][   T13] batman_adv: batadv0: Removing interface: wlan0
[  295.611854][T11720] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  295.635436][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  295.649165][T11720] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  295.683955][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  295.689444][T11720] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  295.722503][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  295.739473][T11720] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  295.775577][T11720] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  295.993873][ T5340] 8021q: adding VLAN 0 to HW filter on device eth7
[  296.129524][T11720] 8021q: adding VLAN 0 to HW filter on device bond0
[  296.177508][T11720] 8021q: adding VLAN 0 to HW filter on device team0
[  296.208894][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.211330][ T9642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.260599][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.263030][ T9642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.341253][T11859] netlink: 'syz.2.2336': attribute type 29 has an invalid length.
[  296.353468][T11859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'.
[  296.485919][T11720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  296.515609][ T5340] 8021q: adding VLAN 0 to HW filter on device eth8
[  296.617607][T11720] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.709862][ T4984] Bluetooth: hci3: command tx timeout
[  296.779489][T11720] veth0_vlan: entered promiscuous mode
[  296.789361][T11720] veth1_vlan: entered promiscuous mode
[  296.834930][T11720] veth0_macvtap: entered promiscuous mode
[  296.842301][T11720] veth1_macvtap: entered promiscuous mode
[  296.854040][T11720] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.888619][T11888] loop2: detected capacity change from 0 to 16
[  296.906050][T11888] erofs (device loop2): compressed inode (nid 36) is invalid in a plain filesystem
[  296.935352][T11720] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.985427][ T9551] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.005393][ T9551] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.015459][ T9551] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.034897][ T9551] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.518642][   T13] hsr_slave_0: left promiscuous mode
[  297.532973][   T13] hsr_slave_1: left promiscuous mode
[  297.536068][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.542927][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.735822][T11909] loop4: detected capacity change from 0 to 32768
[  297.823111][   T13] veth1_macvtap: left promiscuous mode
[  297.827041][   T13] veth0_macvtap: left promiscuous mode
[  297.875557][   T13] veth0_vlan: left promiscuous mode
[  297.915561][T11909] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  297.951556][T11909] XFS (loop4): Ending clean mount
[  297.960271][T11909] XFS (loop4): Quotacheck needed: Please wait.
[  298.047637][T11909] XFS (loop4): Quotacheck: Done.
[  298.518636][T10009] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  300.164954][   T13] team0 (unregistering): Port device team_slave_1 removed
[  300.195719][   T13] team0 (unregistering): Port device team_slave_0 removed
[  300.425546][ T9640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.449871][ T9640] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.655427][ T9640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.662444][ T9640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.569874][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  301.703551][T11971] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2362'.
[  301.769834][    T9] usb 6-1: Using ep0 maxpacket: 8
[  301.790340][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  301.798062][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.815982][T11975] loop4: detected capacity change from 0 to 512
[  301.818222][    T9] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  301.868323][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  301.876329][T11975] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2362: iget: bad i_size value: 38620345925642
[  301.882163][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.886489][T11975] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  301.887042][T11975] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2362: couldn't read orphan inode 15 (err -117)
[  301.889982][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  301.889997][    C0] EXT4-fs (loop4): initial error at time 1787570293: ext4_orphan_get:1399: inode 15
[  301.890011][    C0] EXT4-fs (loop4): last error at time 1787570293: ext4_orphan_get:1399: inode 15
[  301.908267][    T9] usb 6-1: Product: syz
[  301.909846][    T9] usb 6-1: Manufacturer: syz
[  301.911339][    T9] usb 6-1: SerialNumber: syz
[  301.932292][T11975] loop4: lost filesystem error report for type 5 error -117
[  302.118043][T11975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.145226][    T9] cdc_ncm 6-1:1.0: bind() failure
[  302.158108][    T9] mos7720 6-1:1.0: required endpoints missing
[  302.175214][    T9] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  302.182058][T11971] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 2147483647 > max in inode 18
[  302.189433][    T9] cdc_ncm 6-1:1.1: bind() failure
[  302.199916][    T9] mos7720 6-1:1.1: required endpoints missing
[  302.240968][    T9] usb 6-1: USB disconnect, device number 2
[  303.742618][ T5656] IPVS: starting estimator thread 0...
[  303.747327][T12018] IPVS: sed: FWM 3 0x00000003 - no destination available
[  303.754656][    C0] IPVS: sed: FWM 3 0x00000003 - no destination available
[  303.830243][T12019] IPVS: using max 67 ests per chain, 160800 per kthread
[  304.066632][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.093435][T12023] loop5: detected capacity change from 0 to 2048
[  304.114062][T12023] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18881, location=18881
[  304.198228][T12023] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  304.393430][T12035] loop5: detected capacity change from 0 to 64
[  304.865373][T12050] loop5: detected capacity change from 0 to 32768
[  304.870756][T12050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2384 (12050)
[  304.877522][T12050] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.880655][T12050] BTRFS info (device loop5): using sha256 checksum algorithm
[  304.946723][T12050] BTRFS info (device loop5): enabling ssd optimizations
[  304.949200][T12050] BTRFS info (device loop5): turning on sync discard
[  304.952301][T12050] BTRFS info (device loop5): enabling free space tree
[  304.971312][   T34] audit: type=1800 audit(1787570296.302:124): pid=12050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2384" name="file1" dev="loop5" ino=260 res=0 errno=0
[  305.170464][ T5656] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  306.039664][ T5656] usb 5-1: Using ep0 maxpacket: 16
[  306.454490][ T5656] usb 5-1: too many configurations: 123, using maximum allowed: 8
[  306.662478][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.729734][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.759428][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.822151][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.877275][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.905704][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.938692][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.948168][ T5656] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.979482][ T5656] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  306.995202][ T5656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  307.011132][ T5656] usb 5-1: SerialNumber: syz
[  307.024828][ T5656] usb 5-1: config 0 descriptor??
[  307.066442][ T5656] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19
[  307.273988][ T5029] bcm5974 5-1:0.0: could not read from device
[  307.327318][ T5029] bcm5974 5-1:0.0: could not read from device
[  307.387278][ T5029] bcm5974 5-1:0.0: could not read from device
[  307.390258][ T5656] usb 5-1: USB disconnect, device number 12
[  307.589899][T11720] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  307.911180][T12087] ata1.00: invalid command format 221
[  308.198896][T12100] loop5: detected capacity change from 0 to 512
[  308.235613][T12100] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.2396: casefold flag without casefold feature
[  308.246730][T12100] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  308.247098][T12100] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2396: couldn't read orphan inode 15 (err -117)
[  308.250248][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  308.250265][    C0] EXT4-fs (loop5): initial error at time 1787570299: ext4_orphan_get:1399: inode 15
[  308.250290][    C0] EXT4-fs (loop5): last error at time 1787570299: ext4_orphan_get:1399: inode 15
[  308.262080][T12100] loop5: lost filesystem error report for type 5 error -117
[  308.263474][T12100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.291503][T11720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.378078][T12108] loop5: detected capacity change from 0 to 128
[  308.451793][T12112] loop5: detected capacity change from 0 to 2048
[  308.508115][T12112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  308.527958][   T34] audit: type=1800 audit(1787570299.862:125): pid=12112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2401" name="file1" dev="loop5" ino=18 res=0 errno=0
[  308.554654][T11720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.876452][T12130] loop4: detected capacity change from 0 to 4096
[  308.880346][T12130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  308.886649][T12130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.214404][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.054925][T12143] loop4: detected capacity change from 0 to 32768
[  310.086655][T12143] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2413 (12143)
[  310.335190][T12143] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  310.339482][T12143] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  310.541889][T12143] BTRFS info (device loop4): enabling ssd optimizations
[  310.547954][T12143] BTRFS info (device loop4): turning on async discard
[  310.551414][T12143] BTRFS info (device loop4): enabling free space tree
[  310.589645][   T34] audit: type=1800 audit(1787570301.922:126): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2413" name="bus" dev="loop4" ino=263 res=0 errno=0
[  311.010694][T10009] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  311.364707][T12179] loop4: detected capacity change from 0 to 2048
[  311.445180][T12179]  loop4: p1 p2 p3
[  311.445180][T12179]  p1: <netbsd: >
[  311.455979][T12179] loop4: p1 size 16779263 extends beyond EOD, truncated
[  311.476218][T12179] loop4: p2 size 458752 extends beyond EOD, truncated
[  311.539375][T12179] loop4: p3 start 3036741376 is beyond EOD, truncated
[  311.680732][T12185] netlink: 'syz.2.2423': attribute type 1 has an invalid length.
[  312.414968][T12191] loop4: detected capacity change from 0 to 131072
[  312.420539][T12191] F2FS-fs (loop4): invalid crc value
[  312.469969][T12191] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  312.480669][T12191] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  312.865889][T12211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  312.902198][T12213] bridge0: left promiscuous mode
[  312.904510][T12213] bridge0: entered allmulticast mode
[  313.198090][T12224] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2434'.
[  313.421476][T12232] C: renamed from veth1_to_team (while UP)
[  314.087427][T12232] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2437'.
[  314.382024][T12237] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  314.391908][T12237] bond2 (unregistering): Released all slaves
[  315.575019][T12292] loop5: detected capacity change from 0 to 512
[  315.968526][   T34] audit: type=1400 audit(1787570307.302:127): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=12299 comm="syz.4.2463"
[  316.222044][T12306] loop5: detected capacity change from 0 to 4096
[  316.256007][T12307] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  316.273750][T12306] NILFS (loop5): bad btree node (ino=3, blocknr=0): level = 0, flags = 0x0, nchildren = 0
[  316.287602][T12306] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=3)
[  316.302341][T12306] Remounting filesystem read-only
[  316.305874][T12306] NILFS (loop5): error -5 preparing GC: cannot mark copying blocks dirty
[  316.329704][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  316.513361][    T9] usb 5-1: Using ep0 maxpacket: 8
[  316.531366][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  316.536988][    T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[  316.547445][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.799833][T12319] 9p: Bad value for 'rfdno'
[  317.087403][T12322] loop5: detected capacity change from 0 to 2048
[  317.506363][    T9] usb 5-1: config 0 descriptor??
[  317.520595][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  318.102112][T12322] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  318.290642][    T9] hid (null): usage index exceeded
[  318.305005][    T9] cypress 0003:04B4:07B1.000C: ignoring exceeding usage max
[  318.316085][    T9] cypress 0003:04B4:07B1.000C: ignoring exceeding usage max
[  318.322967][    T9] cypress 0003:04B4:07B1.000C: usage index exceeded
[  318.325543][    T9] cypress 0003:04B4:07B1.000C: item 0 4 2 2 parsing failed
[  318.328633][    T9] cypress 0003:04B4:07B1.000C: parse failed
[  318.333956][    T9] cypress 0003:04B4:07B1.000C: probe with driver cypress failed with error -22
[  318.516312][    T9] usb 5-1: USB disconnect, device number 13
[  318.748473][T12342] netlink: 'syz.2.2483': attribute type 1 has an invalid length.
[  318.763473][T12342] 8021q: adding VLAN 0 to HW filter on device bond2
[  318.777698][T12342] bond2: (slave dummy0): Enslaving as a backup interface with an up link
[  318.780495][ T9551] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  318.789122][T12342] netlink: 'syz.2.2483': attribute type 10 has an invalid length.
[  318.792226][T12342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2483'.
[  318.795219][T12342] dummy0: entered promiscuous mode
[  318.803674][T12342] bond2: (slave dummy0): Removing an active aggregator
[  318.814415][T12342] bond2: (slave dummy0): Releasing backup interface
[  318.932213][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2485'.
[  319.413190][T12364] loop4: detected capacity change from 0 to 256
[  319.916736][T12367] netlink: 'syz.5.2492': attribute type 6 has an invalid length.
[  320.109154][   T34] audit: type=1326 audit(1787570312.445:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12371 comm="syz.4.2493" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efda1f9e0d9 code=0x0
[  320.231486][T12375] loop4: detected capacity change from 0 to 512
[  320.266937][T12375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.280801][T12375] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.313005][T12375] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  320.442244][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  320.882322][T12399] loop4: detected capacity change from 0 to 164
[  320.923070][T12399] rock: directory entry would overflow storage
[  320.931515][T12399] rock: sig=0x5252, size=5, remaining=3
[  321.123969][T12406] loop4: detected capacity change from 0 to 1024
[  321.140103][T12406] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  321.179794][T12406] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  321.192377][T12406] jbd2_journal_init_inode: Cannot locate journal superblock
[  321.198279][T12406] EXT4-fs (loop4): Could not load journal inode
[  321.936067][T12433] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0
[  322.519805][  T804] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  322.679738][  T804] usb 5-1: Using ep0 maxpacket: 16
[  322.685661][  T804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.693176][  T804] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  322.712197][  T804] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  322.739757][  T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.742613][  T804] usb 5-1: Product: syz
[  322.743936][  T804] usb 5-1: Manufacturer: syz
[  322.745386][  T804] usb 5-1: SerialNumber: syz
[  322.758790][  T804] usb 5-1: config 0 descriptor??
[  322.774134][  T804] appledisplay 5-1:0.0: Could not find int-in endpoint
[  322.781222][  T804] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  322.962577][T12452] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  322.967588][T12452] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  322.974389][T12452] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  323.002868][  T804] usb 5-1: USB disconnect, device number 14
[  323.393741][T12460] fuse: Unknown parameter 'Kd'
[  323.778546][T12473] loop4: detected capacity change from 0 to 256
[  323.801965][T12473] FAT-fs (loop4): Directory bread(block 1285) failed
[  323.817422][T12473] FAT-fs (loop4): Directory bread(block 1286) failed
[  323.827634][T12473] FAT-fs (loop4): Directory bread(block 1287) failed
[  323.831945][T12473] FAT-fs (loop4): Directory bread(block 1288) failed
[  323.841565][T12473] FAT-fs (loop4): FAT read failed (blocknr 1281)
[  324.259793][   T33] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  324.336521][T12481] loop5: detected capacity change from 0 to 32768
[  324.481626][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  324.487808][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  324.492011][T12487] loop5: detected capacity change from 0 to 256
[  324.503051][   T33] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  324.509590][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.515194][   T33] usb 5-1: Product: syz
[  324.516670][   T33] usb 5-1: Manufacturer: syz
[  324.525280][   T33] usb 5-1: SerialNumber: syz
[  324.771976][   T33] kaweth 5-1:1.0: Firmware present in device.
[  324.942247][   T33] kaweth 5-1:1.0: Statistics collection: 0
[  324.946736][   T33] kaweth 5-1:1.0: Multicast filter limit: 0
[  324.948512][   T33] kaweth 5-1:1.0: MTU: 0
[  324.953049][   T33] kaweth 5-1:1.0: Read MAC address 00:00:00:00:00:00
[  324.981750][T12503] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  324.999944][T12503] /dev/nullb0: Can't open blockdev
[  325.089291][T12508] loop5: detected capacity change from 0 to 128
[  325.115486][T12508] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  325.137921][T12508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  325.453070][T12521] loop5: detected capacity change from 0 to 128
[  325.536336][T12523] binder: 12522:12523 ioctl c0306201 200000000080 returned -14
[  325.542422][T12523] binder: 12522:12523 ioctl c0306201 2000000003c0 returned -14
[  325.551641][   T33] kaweth 5-1:1.0: Error setting receive filter
[  325.555324][   T33] kaweth 5-1:1.0: probe with driver kaweth failed with error -5
[  325.585112][   T33] usb 5-1: USB disconnect, device number 15
[  325.598214][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2562'.
[  325.606229][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2562'.
[  325.805824][T12533] loop5: detected capacity change from 0 to 256
[  325.813092][T12533] exfat: Deprecated parameter 'namecase'
[  325.851634][T12533] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  326.559685][ T5700] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  326.795298][ T5700] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  326.803244][ T5700] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253
[  326.839121][ T5700] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  326.849084][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.862408][ T5700] usb 6-1: Product: syz
[  326.863843][ T5700] usb 6-1: Manufacturer: syz
[  326.889853][ T5700] usb 6-1: SerialNumber: syz
[  326.901697][ T5700] usb 6-1: config 0 descriptor??
[  326.923350][ T5700] gspca_main: sunplus-2.14.0 probing 055f:c630
[  326.956592][T12577] loop4: detected capacity change from 0 to 1024
[  326.965228][T12577] EXT4-fs: Ignoring removed i_version option
[  326.980770][T12577] EXT4-fs: Ignoring removed orlov option
[  326.990199][T12577] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  327.002966][T12577] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  327.007042][T12577] EXT4-fs (loop4): orphan cleanup on readonly fs
[  327.060918][T12577] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz.4.2587: Invalid inode table block 0 in block_group 0
[  327.069439][T12577] loop4: lost filesystem error report for type 5 error -117
[  327.080310][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  327.084779][    C0] EXT4-fs (loop4): initial error at time 1787570319: __ext4_get_inode_loc:4886
[  327.087607][    C0] EXT4-fs (loop4): last error at time 1787570319: __ext4_get_inode_loc:4886
[  327.093916][T12577] EXT4-fs (loop4): Remounting filesystem read-only
[  327.098341][T12577] Quota error (device loop4): write_blk: dquota write failed
[  327.101465][T12577] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  327.105073][T12577] EXT4-fs (loop4): 1 truncate cleaned up
[  327.116880][T12577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  327.137790][T10009] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.948169][    T9] usb 6-1: USB disconnect, device number 3
[  328.074826][ T5627] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.159346][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  328.164381][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  328.168717][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  328.181176][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  328.186091][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  328.410099][ T5627] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  328.518315][T12594] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.521937][T12594] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.524411][T12594] bridge_slave_0: entered allmulticast mode
[  328.527232][T12594] bridge_slave_0: entered promiscuous mode
[  328.535100][T12594] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.538154][T12594] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.543959][T12594] bridge_slave_1: entered allmulticast mode
[  328.547214][T12594] bridge_slave_1: entered promiscuous mode
[  328.621825][T12614] netlink: 'syz.2.2598': attribute type 2 has an invalid length.
[  328.624599][T12614] netlink: 'syz.2.2598': attribute type 2 has an invalid length.
[  328.664222][T12617] device-mapper: ioctl: device name cannot contain '/'
[  329.113961][ T5627] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.137434][T12594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.142882][T12594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.189170][T12594] team0: Port device team_slave_0 added
[  329.199981][T12594] team0: Port device team_slave_1 added
[  329.238828][ T5627] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.277546][T12594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.280760][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.288825][T12594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.302725][T12594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.305730][T12594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  329.315953][T12594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.482454][T12594] hsr_slave_0: entered promiscuous mode
[  329.491355][T12594] hsr_slave_1: entered promiscuous mode
[  329.512528][T12594] debugfs: 'hsr0' already exists in 'hsr'
[  329.522243][T12594] Cannot create hsr debugfs directory
[  329.949504][ T5627] bridge_slave_1: left allmulticast mode
[  329.955833][ T5627] bridge_slave_1: left promiscuous mode
[  329.961418][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.974422][ T5627] bridge_slave_0: left allmulticast mode
[  329.976433][ T5627] bridge_slave_0: left promiscuous mode
[  329.979018][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.245902][ T4984] Bluetooth: hci0: command tx timeout
[  330.304605][ T5627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.326087][ T5627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.332849][ T5627] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  330.337546][ T5627] bond0 (unregistering): Released all slaves
[  330.475308][ T5627] IPVS: stopping backup sync thread 12433 ...
[  330.835105][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'.
[  331.069017][ T5340] 8021q: adding VLAN 0 to HW filter on device eth9
[  331.186015][ T5627] hsr_slave_0: left promiscuous mode
[  331.192902][ T5627] hsr_slave_1: left promiscuous mode
[  331.197431][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  331.206728][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  331.215420][ T5627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  331.221351][ T5627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  331.277046][ T5627] veth1_macvtap: left promiscuous mode
[  331.278868][ T5627] veth0_macvtap: left promiscuous mode
[  331.287387][ T5627] veth1_vlan: left promiscuous mode
[  331.292827][ T5627] veth0_vlan: left promiscuous mode
[  331.779491][ T5627] team0 (unregistering): Port device team_slave_1 removed
[  331.799178][ T5627] team0 (unregistering): Port device team_slave_0 removed
[  332.099798][ T5340] 8021q: adding VLAN 0 to HW filter on device eth10
[  332.208113][T12679] syz_tun: entered allmulticast mode
[  332.214534][T12678] syz_tun: left allmulticast mode
[  332.311020][ T4984] Bluetooth: hci0: command tx timeout
[  332.405193][T12594] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  332.416515][T12594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  332.442172][T12594] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  332.448112][T12594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  332.455691][T12594] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  332.468905][T12594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  332.512398][T12594] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  332.527745][T12594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  332.801162][ T5340] 8021q: adding VLAN 0 to HW filter on device eth11
[  332.943543][T12594] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.000995][T12594] 8021q: adding VLAN 0 to HW filter on device team0
[  333.045997][ T4984] Bluetooth: hci2: unexpected event for opcode 0x0000
[  333.067753][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.070123][ T9642] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.116405][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.119331][ T9642] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.250325][ T5340] 8021q: adding VLAN 0 to HW filter on device eth12
[  333.413091][T12594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  333.438898][ T4984] Bluetooth: hci2: unexpected event for opcode 0x2040
[  333.537755][T12741] netlink: 'syz.5.2631': attribute type 10 has an invalid length.
[  333.552071][T12741] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.554825][T12741] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.590419][T12741] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.592821][T12741] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.595279][T12741] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.597548][T12741] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.613012][T12741] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  333.780301][T12594] veth0_vlan: entered promiscuous mode
[  333.837823][T12594] veth1_vlan: entered promiscuous mode
[  333.858732][T12753] loop5: detected capacity change from 0 to 512
[  333.930358][T12753] EXT4-fs: Ignoring removed mblk_io_submit option
[  333.932354][T12753] EXT4-fs: Ignoring removed nobh option
[  334.177381][T12753] ------------[ cut here ]------------
[  334.181033][T12753] EA inode 11 i_nlink=1026
[  334.181048][T12753] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x4cc/0x590, CPU#0: syz.5.2636/12753
[  334.185920][T12753] Modules linked in:
[  334.189043][T12753] CPU: 0 UID: 0 PID: 12753 Comm: syz.5.2636 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.193347][T12753] Tainted: [L]=SOFTLOCKUP
[  334.194820][T12753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.197946][T12753] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[  334.200370][T12753] Code: 08 4c 89 e7 e8 a5 7e 94 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 a5 0a 2f 09 44 89 e9 80 e1 07 80
[  334.206845][T12753] RSP: 0018:ffffc900058df120 EFLAGS: 00010246
[  334.208762][T12753] RAX: 0000000000000000 RBX: ffffffff905e2400 RCX: dffffc0000000000
[  334.211333][T12753] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff905e2400
[  334.213763][T12753] RBP: ffffc900058df218 R08: ffff8881176cb30f R09: 1ffff11022ed9661
[  334.216148][T12753] R10: dffffc0000000000 R11: ffffed1022ed9662 R12: 000000000000000b
[  334.218555][T12753] R13: ffff8881176cb168 R14: 0000000000000000 R15: 1ffff11022ed962d
[  334.221210][T12753] FS:  00007f5342c256c0(0000) GS:ffff88818d95d000(0000) knlGS:0000000000000000
[  334.223977][T12753] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  334.226097][T12753] CR2: 000055bea6963660 CR3: 000000011ad0a000 CR4: 00000000000006f0
[  334.228543][T12753] Call Trace:
[  334.230250][T12753]  <TASK>
[  334.231218][T12753]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[  334.233647][T12753]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[  334.235744][T12753]  ? ext4_xattr_inode_iget+0x3e7/0x600
[  334.237772][T12753]  ext4_xattr_set_entry+0xb19/0x1ed0
[  334.239877][T12753]  ext4_xattr_ibody_set+0x262/0x710
[  334.242008][T12753]  ext4_expand_extra_isize_ea+0x138c/0x1e70
[  334.244146][T12753]  __ext4_expand_extra_isize+0x30d/0x400
[  334.246170][T12753]  __ext4_mark_inode_dirty+0x455/0x700
[  334.247874][T12753]  ext4_evict_inode+0x976/0x10c0
[  334.249391][T12753]  ? __pfx_ext4_evict_inode+0x10/0x10
[  334.251384][T12753]  ? do_raw_spin_unlock+0x4d/0x210
[  334.253009][T12753]  ? __pfx_ext4_evict_inode+0x10/0x10
[  334.254575][T12753]  evict+0x624/0xb50
[  334.255782][T12753]  ? __pfx_evict+0x10/0x10
[  334.257150][T12753]  ? do_raw_spin_unlock+0x4d/0x210
[  334.258676][T12753]  ? _raw_spin_unlock+0x28/0x50
[  334.260438][T12753]  ? iput+0xb84/0xf00
[  334.261696][T12753]  ext4_orphan_cleanup+0xc7a/0x14c0
[  334.263276][T12753]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  334.265116][T12753]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  334.266828][T12753]  ? ext4_register_li_request+0x640/0x720
[  334.268571][T12753]  ? errseq_check_and_advance+0x66/0x120
[  334.270674][T12753]  ext4_fill_super+0x5cb4/0x65c0
[  334.272367][T12753]  ? __pfx_ext4_fill_super+0x10/0x10
[  334.274001][T12753]  ? snprintf+0xe8/0x140
[  334.275318][T12753]  ? __pfx_snprintf+0x10/0x10
[  334.276749][T12753]  ? set_blocksize+0x1c9/0x440
[  334.278182][T12753]  ? sb_set_blocksize+0x155/0x240
[  334.279778][T12753]  ? setup_bdev_super+0x4c1/0x5b0
[  334.281304][T12753]  get_tree_bdev_flags+0x430/0x4f0
[  334.282888][T12753]  ? __pfx_ext4_fill_super+0x10/0x10
[  334.284498][T12753]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  334.286201][T12753]  vfs_get_tree+0x92/0x2a0
[  334.287571][T12753]  do_new_mount+0x319/0xdc0
[  334.288930][T12753]  ? __pfx_do_new_mount+0x10/0x10
[  334.290574][T12753]  ? ns_capable+0x89/0xe0
[  334.291911][T12753]  ? path_mount+0x647/0x1040
[  334.293336][T12753]  ? user_path_at+0xd4/0x160
[  334.294836][T12753]  __se_sys_mount+0x31d/0x420
[  334.296435][T12753]  ? __pfx___se_sys_mount+0x10/0x10
[  334.298136][T12753]  ? __x64_sys_mount+0x20/0xc0
[  334.299930][T12753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.302104][T12753]  do_syscall_64+0x174/0x580
[  334.303723][T12753]  ? trace_irq_disable+0x3b/0x140
[  334.305444][T12753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.307291][T12753] RIP: 0033:0x7f5341d9f34a
[  334.308666][T12753] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.315063][T12753] RSP: 002b:00007f5342c24e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  334.317667][T12753] RAX: ffffffffffffffda RBX: 00007f5342c24ee0 RCX: 00007f5341d9f34a
[  334.320331][T12753] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f5342c24ea0
[  334.322939][T12753] RBP: 0000200000000180 R08: 00007f5342c24ee0 R09: 0000000000800718
[  334.325445][T12753] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000080
[  334.327975][T12753] R13: 00007f5342c24ea0 R14: 00000000000004a7 R15: 000000000000002c
[  334.330832][T12753]  </TASK>
[  334.331884][T12753] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  334.334330][T12753] CPU: 0 UID: 0 PID: 12753 Comm: syz.5.2636 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.338092][T12753] Tainted: [L]=SOFTLOCKUP
[  334.339440][T12753] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.342493][T12753] Call Trace:
[  334.343543][T12753]  <TASK>
[  334.344512][T12753]  vpanic+0x56c/0xa60
[  334.345840][T12753]  ? __pfx__printk+0x10/0x10
[  334.347362][T12753]  ? __pfx_vpanic+0x10/0x10
[  334.348911][T12753]  ? is_bpf_text_address+0x292/0x2b0
[  334.350840][T12753]  ? is_bpf_text_address+0x26/0x2b0
[  334.353099][T12753]  panic+0xc5/0xd0
[  334.354713][T12753]  ? __pfx_panic+0x10/0x10
[  334.356579][T12753]  __warn+0x315/0x4c0
[  334.358213][T12753]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[  334.360656][T12753]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[  334.363059][T12753]  __report_bug+0x276/0x570
[  334.364889][T12753]  ? ext4_xattr_inode_update_ref+0x4cc/0x590
[  334.366799][T12753]  ? __pfx___report_bug+0x10/0x10
[  334.368419][T12753]  ? __ext4_get_inode_loc+0x6b4/0xf40
[  334.370300][T12753]  ? set_normalized_timespec64+0xf0/0x1a0
[  334.372280][T12753]  ? __ext4_journal_get_write_access+0x84/0x590
[  334.374505][T12753]  report_bug_entry+0x19a/0x290
[  334.376151][T12753]  ? ext4_xattr_inode_update_ref+0x50c/0x590
[  334.378071][T12753]  ? ext4_xattr_inode_update_ref+0x511/0x590
[  334.380147][T12753]  handle_bug+0xce/0x200
[  334.381622][T12753]  exc_invalid_op+0x1a/0x50
[  334.383059][T12753]  asm_exc_invalid_op+0x1a/0x20
[  334.384635][T12753] RIP: 0010:ext4_xattr_inode_update_ref+0x50c/0x590
[  334.386822][T12753] Code: 08 4c 89 e7 e8 a5 7e 94 ff 4d 8b 24 24 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 75 73 41 8b 55 00 48 89 df 4c 89 e6 <67> 48 0f b9 3a e9 5f fe ff ff e8 a5 0a 2f 09 44 89 e9 80 e1 07 80
[  334.392759][T12753] RSP: 0018:ffffc900058df120 EFLAGS: 00010246
[  334.394833][T12753] RAX: 0000000000000000 RBX: ffffffff905e2400 RCX: dffffc0000000000
[  334.397517][T12753] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff905e2400
[  334.400216][T12753] RBP: ffffc900058df218 R08: ffff8881176cb30f R09: 1ffff11022ed9661
[  334.403055][T12753] R10: dffffc0000000000 R11: ffffed1022ed9662 R12: 000000000000000b
[  334.405750][T12753] R13: ffff8881176cb168 R14: 0000000000000000 R15: 1ffff11022ed962d
[  334.408225][T12753]  ? __pfx_inode_set_ctime_to_ts+0x10/0x10
[  334.410084][T12753]  ? __pfx_ext4_xattr_inode_update_ref+0x10/0x10
[  334.412041][T12753]  ? ext4_xattr_inode_iget+0x3e7/0x600
[  334.413918][T12753]  ext4_xattr_set_entry+0xb19/0x1ed0
[  334.415581][T12753]  ext4_xattr_ibody_set+0x262/0x710
[  334.417184][T12753]  ext4_expand_extra_isize_ea+0x138c/0x1e70
[  334.419039][T12753]  __ext4_expand_extra_isize+0x30d/0x400
[  334.420771][T12753]  __ext4_mark_inode_dirty+0x455/0x700
[  334.422481][T12753]  ext4_evict_inode+0x976/0x10c0
[  334.424008][T12753]  ? __pfx_ext4_evict_inode+0x10/0x10
[  334.425680][T12753]  ? do_raw_spin_unlock+0x4d/0x210
[  334.427279][T12753]  ? __pfx_ext4_evict_inode+0x10/0x10
[  334.428927][T12753]  evict+0x624/0xb50
[  334.430179][T12753]  ? __pfx_evict+0x10/0x10
[  334.431600][T12753]  ? do_raw_spin_unlock+0x4d/0x210
[  334.433224][T12753]  ? _raw_spin_unlock+0x28/0x50
[  334.434838][T12753]  ? iput+0xb84/0xf00
[  334.436150][T12753]  ext4_orphan_cleanup+0xc7a/0x14c0
[  334.438140][T12753]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  334.440091][T12753]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  334.441837][T12753]  ? ext4_register_li_request+0x640/0x720
[  334.443618][T12753]  ? errseq_check_and_advance+0x66/0x120
[  334.445412][T12753]  ext4_fill_super+0x5cb4/0x65c0
[  334.446980][T12753]  ? __pfx_ext4_fill_super+0x10/0x10
[  334.448861][T12753]  ? snprintf+0xe8/0x140
[  334.450565][T12753]  ? __pfx_snprintf+0x10/0x10
[  334.452443][T12753]  ? set_blocksize+0x1c9/0x440
[  334.454378][T12753]  ? sb_set_blocksize+0x155/0x240
[  334.456403][T12753]  ? setup_bdev_super+0x4c1/0x5b0
[  334.458416][T12753]  get_tree_bdev_flags+0x430/0x4f0
[  334.460476][T12753]  ? __pfx_ext4_fill_super+0x10/0x10
[  334.462556][T12753]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  334.464768][T12753]  vfs_get_tree+0x92/0x2a0
[  334.466551][T12753]  do_new_mount+0x319/0xdc0
[  334.468375][T12753]  ? __pfx_do_new_mount+0x10/0x10
[  334.470373][T12753]  ? ns_capable+0x89/0xe0
[  334.472083][T12753]  ? path_mount+0x647/0x1040
[  334.473961][T12753]  ? user_path_at+0xd4/0x160
[  334.475667][T12753]  __se_sys_mount+0x31d/0x420
[  334.477432][T12753]  ? __pfx___se_sys_mount+0x10/0x10
[  334.479018][T12753]  ? __x64_sys_mount+0x20/0xc0
[  334.480830][T12753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.483084][T12753]  do_syscall_64+0x174/0x580
[  334.484516][T12753]  ? trace_irq_disable+0x3b/0x140
[  334.486044][T12753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.487829][T12753] RIP: 0033:0x7f5341d9f34a
[  334.489189][T12753] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.496179][T12753] RSP: 002b:00007f5342c24e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  334.499061][T12753] RAX: ffffffffffffffda RBX: 00007f5342c24ee0 RCX: 00007f5341d9f34a
[  334.501457][T12753] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 00007f5342c24ea0
[  334.503836][T12753] RBP: 0000200000000180 R08: 00007f5342c24ee0 R09: 0000000000800718
[  334.506293][T12753] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000080
[  334.508686][T12753] R13: 00007f5342c24ea0 R14: 00000000000004a7 R15: 000000000000002c
[  334.511069][T12753]  </TASK>
[  334.512674][T12753] Kernel Offset: disabled
[  334.514003][T12753] Rebooting in 86400 seconds..
