last executing test programs:

3.612122769s ago: executing program 1 (id=879):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0xeb1, &(0x7f0000000f80)="$eJzs3U9sHFcZAPA3639J7MbrNlC3pUloCWkDOMHJodxSKQKpqqpeuKdK4yTCDREph1aJ4nIKEoeiqJciDkXNDSkckGiFhCIkJP70wJlTBRcQClKkXIgUG9l5b71+ybDrsT0b7/5+0rdv37zZ+b7xRs7MePZtAAZWY+Xx2LHpIoQPPr124jtXFn+zvGxfa439K49F7DVDCCNt/SLb3udxwb3bl04tt4tZW4TZlcc0Hl671XrteAhhIewPN0Mz7DvUvHN16NW56x9+dvDyhVfObtHuAwDAQLnx5/m/vfjPP3196u6NvcfDWGt5Oj5vxv54PO4/Eo/v03F/I6ztF23RbjRbbyhGI1tvKFtvOMszXJJvJNvOSMl6ox3yDbUte9h+AgAAwHaUzmuboWjMrOk3GjMz98/7l30+OVrMnD83P3exR4UCAAAAld25snLTrRBCCCGEEEIIIfo4liZ7fQUCAAAAGDRp3oHW/GC5hXxmgY1pba3ZXf5bLzce/nrYBHX/+5d/e+X/+D2/cQAAqK5fjybTfqXj6DSPQT6P4FD2uvUe/zey7Qyvs86yeQW3y3yDZXXmP9dHVVn9630fe6Ws/nw+zEdVWf35PJ2PqrL6x2quo6qy+nfUXEdVZfXvrLmOqsrq31VzHVWV1T9ecx1VldU/UXMdVZXV/1jNdVRVVv/umuuoqqz+7XJbbVn9zZrrqKqs/qma66iqrP7Ha66jqrL6n6i5jqrK6t9Tcx298mxs089hbzbefv6cn9Ntl3M8AAAAGHT/Nf+fEEIIIYQQQgjR93Gl1xcgAAAAgJ5LnwtIn3pfitL4UIfx4Q7jIx3GRzuMj3UYBwAAAEL47dW5p94vVj/nv9H58NK8UWn+pfXOY5TPR7je/Bud92yj+bfLvGUAAAAMluLbNxcPnfjo7am7N/Yebzv7XYznu2ke0OF4beCT2E/3BUxk/SKdQx9fm6dRsl5+feCxsu29vsEdBQAAgAGWzt+boWjMtJ13N0OjMTOzej4+HUaKuXPzp4/Efvp+lj9OjowtL/9mzXUDAAAA3Vs933/4+X/6Ht/pMFrMnD83P3fxfn+itXyk0X5dYHJ1edF+XaCZLZ8tWX409tP3d56d3LmyfObU9+ff3OydBwAAgAFx8Z13v/fG/PzpH3jiiSeetJ70+jcTAACw2a7/49pffnh04nf3P/+/Ov9d+vz//thvxrn9/hpXSPcJpM8BPPB5/ZNr80yWrXdh7XrNbL2hGGNZ3TvathPa5htMr5sqy9dcu53RknzjWb6JLF8+T8Fwtn7Ktztbns9PmNabzJbn8zAOZzmKLP9zAQAAAModfvutC4cvvvPuN8699caZ02dOnz96ZPZbsy/Nzh6bPbxyX//h9rv7AQAAgO1o9abfXlcCAAAAAAAAAAAAAAAAAAAAg6uOrxPr9T4CAADAoPvPlRDCghBCCCGEEEIIIfo5lpbyb5oHAAAA2Fr3bl861d4+YKHY1HytrTXvN4sxb2r/cODnB5YjrXbr5bXXS3ZtajUMurr//cu/vfJ//N7m5t+RnnT9+6+xdgPHq+X96k//9UJ7/qeHu8yf7//r1fIfzPIfDN3lX/ooy3+yWv4Xsvy7usz/wP5fqJb/xZh/OtXzfLf5177/Y7FN+7Gzy/yHsv1/M3SbP9v/ZpcJM1+L+QFgEDV6XcAWSUcJ6Th6PPbT/sbDzZDf/bDe4/9Gtp3hDVe+drvpOOjJ2E/HSxNZ3mS99Y9n23usYp257XJXSVn9m/U+brWy+kdqrqOqsvpHa66jqrL6x2quo6qy+nfUXEdVZfV3ex7aa2X1b5frymX1j9dcR1Vl9U/UXEdVZfWv9//xXimrf3fNdVRVVv9kzXVUVVZ/xctqtSurf6rmOqoqq//xmuuoqqz+J2quo6qy+vfUXEevPBPbsvPhdP45GcdSv5n1xx7ys+zXawsAAACw3fzb/H9CCCGEEEIIIUTfx9JSr69A0Etb+2lmAB5Vfv8PNu//YPP+DzbvP/9Puoe/yPrJUIfx4Q7jIx3GR7Px/N/rWIfxJ7LtLkVpfE+H8S90GN/dYfzJDuPTHcaf6jD+dIfxZzqMAwAAMBi+GFvnhwAAANC/Lv/yk5/8+uDJ21N3b+w9HkYfmHf+SOyPxb+tX439fN77ZCT+zf9Hsf+L2P4+tn/P1nf/CQAAAGy99D0x/v4PAAAA/St9T6nzfwAAAOhfU7F1/g8AAAD96/HYOv8HAACAPlbsePji2KbrAs/Fttt5/QCAR9+XYvtsbPfGdl9svxzbdBzwfGy/UlN9AMDm+dl3f/zS+8XqfP9Hs/F7cXlqH7Bw/0pB0Vg7k//O2O6K7YEu68m/D6Db/MnuLvNsVf7JDeYHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPpHY+Xx2LHpIoQPPr12YvLyiTPLy/a11ti/8ljEXjOEMNJ6XRpd7f8qrnjv9qVTy+1ibJdiW4TZUISiNR5eu9XKNB5CWAj7w83QDPsONe9cHXp17vqHnx28fOGVs1v4IwAAAIC+978AAAD//8YJKhE=")
truncate(&(0x7f0000000000)='./file1\x00', 0x100000001)

3.498284488s ago: executing program 1 (id=881):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept(r1, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)="148f550b27304394612add7546f1776900080000000000000e00e37a45bdbe4427efca97a29094dc6f03000000000000000e77162f02d001e16c4a187e8e79633753ff082a20aa99cf994b68c1e1ddb09d764a2c2826504ad132cf2ab68d9aa1ecbdc84afbf1b5cf030b17", 0x6b}], 0x1}}], 0x1, 0x4890)

3.48948534s ago: executing program 1 (id=883):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
write$binfmt_elf64(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff94020000000000004000000000000000e503000000000000000000002c8f3800010000000200000003000000970f000004000000000000000d00000000000000c801000000000000e2"], 0x178)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

3.389343755s ago: executing program 1 (id=884):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000008940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)

3.15238989s ago: executing program 2 (id=887):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000088945b406d04b6088eca0000000109021200017f00c0000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.031375031s ago: executing program 1 (id=888):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb64f69853362ac3407173ec", 0x5b}, {&(0x7f0000000000)="92", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.731230003s ago: executing program 1 (id=891):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39d}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

2.515452296s ago: executing program 32 (id=891):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x2, 0x39d}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

2.03774561s ago: executing program 0 (id=896):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0)

1.912427572s ago: executing program 0 (id=897):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x9d}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0)

1.721752844s ago: executing program 2 (id=898):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x1f, 0x0, 0x100000})

1.479049869s ago: executing program 0 (id=899):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x9001}, 0x8015)
sendmsg$sock(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x84)

1.37936052s ago: executing program 0 (id=900):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000, @local, 0x2}, 0x1c)

1.282695862s ago: executing program 0 (id=901):
timerfd_create(0x3, 0x800)
syz_usb_connect(0x2, 0x24, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x15, 0x8e, 0x54, 0x10, 0xbdb, 0x7db7, 0x8a0b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x40, 0x40, 0x4, [{{0x9, 0x4, 0xb2, 0x1, 0x0, 0x2, 0xd, 0x0, 0x7}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})

1.160190266s ago: executing program 2 (id=902):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}]})

912.595372ms ago: executing program 2 (id=903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

816.681344ms ago: executing program 2 (id=904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

88.291218ms ago: executing program 2 (id=905):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x20, 0xa8889b139fabfddc}, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 0 (id=906):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
fstatfs(0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0d00000008000000040000000200000040000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ad196bbc91672fca9b52d6336834e16f002289"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:19491' (ED25519) to the list of known hosts.
syzkaller login: [   56.344442][ T5826] cgroup: Unknown subsys name 'net'
[   56.490339][ T5826] cgroup: Unknown subsys name 'cpuset'
[   56.494578][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.891978][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.339028][ T5867] mmap: syz.0.18 (5867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   67.952379][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.955610][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.004456][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.008581][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.052749][ T5921] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.100887][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.103153][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   72.049396][ T5939] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.060715][ T5939] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.065659][ T5939] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   72.070429][ T5939] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   72.074467][ T5939] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   72.098476][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.103357][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.106529][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.118287][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.121271][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   72.151749][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.155205][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.164958][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   72.170463][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   72.178156][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   72.463131][ T5938] chnl_net:caif_netlink_parms(): no params data found
[   72.505040][ T5943] chnl_net:caif_netlink_parms(): no params data found
[   72.554451][ T5946] chnl_net:caif_netlink_parms(): no params data found
[   72.694527][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.698191][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.701234][ T5943] bridge_slave_0: entered allmulticast mode
[   72.705032][ T5943] bridge_slave_0: entered promiscuous mode
[   72.711038][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.713944][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.716855][ T5943] bridge_slave_1: entered allmulticast mode
[   72.721166][ T5943] bridge_slave_1: entered promiscuous mode
[   72.724756][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.728607][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.731659][ T5938] bridge_slave_0: entered allmulticast mode
[   72.735500][ T5938] bridge_slave_0: entered promiscuous mode
[   72.766718][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.769466][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.771778][ T5938] bridge_slave_1: entered allmulticast mode
[   72.774453][ T5938] bridge_slave_1: entered promiscuous mode
[   72.799723][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.805363][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.818369][ T5946] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.821303][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.824972][ T5946] bridge_slave_0: entered allmulticast mode
[   72.829739][ T5946] bridge_slave_0: entered promiscuous mode
[   72.834156][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.837034][ T5946] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.840561][ T5946] bridge_slave_1: entered allmulticast mode
[   72.844468][ T5946] bridge_slave_1: entered promiscuous mode
[   72.865647][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.891529][ T5943] team0: Port device team_slave_0 added
[   72.895747][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.903340][ T5943] team0: Port device team_slave_1 added
[   72.922866][ T5946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.958468][ T5946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.962351][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.964617][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.974481][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.981611][ T5938] team0: Port device team_slave_0 added
[   72.992192][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.995037][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.005814][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.019526][ T5938] team0: Port device team_slave_1 added
[   73.062125][ T5946] team0: Port device team_slave_0 added
[   73.064634][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.068980][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.079539][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.096255][ T5943] hsr_slave_0: entered promiscuous mode
[   73.100614][ T5943] hsr_slave_1: entered promiscuous mode
[   73.104112][ T5946] team0: Port device team_slave_1 added
[   73.106861][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.111503][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.122270][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.161705][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.164567][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.176524][ T5946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.203217][ T5946] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.206127][ T5946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.216938][ T5946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.294840][ T5938] hsr_slave_0: entered promiscuous mode
[   73.297674][ T5938] hsr_slave_1: entered promiscuous mode
[   73.300440][ T5938] debugfs: 'hsr0' already exists in 'hsr'
[   73.302810][ T5938] Cannot create hsr debugfs directory
[   73.309969][ T5946] hsr_slave_0: entered promiscuous mode
[   73.313047][ T5946] hsr_slave_1: entered promiscuous mode
[   73.315842][ T5946] debugfs: 'hsr0' already exists in 'hsr'
[   73.318813][ T5946] Cannot create hsr debugfs directory
[   73.550379][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.561796][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.572497][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.579062][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.632025][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.640669][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.653997][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.680013][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.702231][ T5946] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.708995][ T5946] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.719630][ T5946] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.729206][ T5946] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.813959][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.846719][ T5943] 8021q: adding VLAN 0 to HW filter on device team0
[   73.859800][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.870387][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.875962][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.878894][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.892948][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.895479][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.901183][ T5946] 8021q: adding VLAN 0 to HW filter on device team0
[   73.915533][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.918312][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.929049][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   73.938126][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.940764][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.962217][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.964546][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.980687][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.983268][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.041183][ T5946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.148303][ T5939] Bluetooth: hci1: command tx timeout
[   74.150014][   T55] Bluetooth: hci0: command tx timeout
[   74.198106][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.217606][   T55] Bluetooth: hci2: command tx timeout
[   74.244867][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.264880][ T5943] veth0_vlan: entered promiscuous mode
[   74.283143][ T5943] veth1_vlan: entered promiscuous mode
[   74.304578][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.335108][ T5943] veth0_macvtap: entered promiscuous mode
[   74.341972][ T5946] veth0_vlan: entered promiscuous mode
[   74.350518][ T5943] veth1_macvtap: entered promiscuous mode
[   74.364559][ T5946] veth1_vlan: entered promiscuous mode
[   74.369550][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.379346][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.384743][ T5938] veth0_vlan: entered promiscuous mode
[   74.393434][ T5966] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.399077][ T5966] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.412458][ T5966] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.415471][ T5966] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.419667][ T5938] veth1_vlan: entered promiscuous mode
[   74.454453][ T5946] veth0_macvtap: entered promiscuous mode
[   74.478559][ T5946] veth1_macvtap: entered promiscuous mode
[   74.480666][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.483282][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.496841][ T5938] veth0_macvtap: entered promiscuous mode
[   74.519200][ T5938] veth1_macvtap: entered promiscuous mode
[   74.523453][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.536715][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.536755][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.544761][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.556293][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.560419][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.572229][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.574643][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.579030][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.624785][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.628553][ T6003] sctp: [Deprecated]: syz.1.70 (pid 6003) Use of struct sctp_assoc_value in delayed_ack socket option.
[   74.628553][ T6003] Use struct sctp_sack_info instead
[   74.635819][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.660143][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.680653][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.691789][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.742506][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.747769][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.784509][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.788869][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.828849][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.833206][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.879488][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.883478][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.951007][ T6010] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure
[   74.955817][ T5967] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.055377][ T6013] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[   75.056209][  T790] IPVS: starting estimator thread 0...
[   75.135894][ T5967] usb 2-1: unable to get BOS descriptor or descriptor too short
[   75.147456][ T6017] IPVS: using max 44 ests per chain, 105600 per kthread
[   75.148185][ T5967] usb 2-1: config 250 has an invalid interface number: 222 but max is 1
[   75.154050][ T5967] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[   75.164432][ T5967] usb 2-1: config 250 has no interface number 1
[   75.167082][ T5967] usb 2-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[   75.174917][ T5967] usb 2-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[   75.181194][ T5967] usb 2-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[   75.185802][ T5967] usb 2-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[   75.192082][ T5967] usb 2-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[   75.197097][ T5967] usb 2-1: config 250 interface 222 has no altsetting 0
[   75.203523][ T5967] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[   75.207270][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.222248][ T5967] usb 2-1: Product: syz
[   75.223916][ T5967] usb 2-1: Manufacturer: syz
[   75.225790][ T5967] usb 2-1: SerialNumber: syz
[   75.254259][ T6005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   75.326079][ T6029] loop0: detected capacity change from 0 to 64
[   75.522898][ T5967] usb 2-1: USB disconnect, device number 2
[   75.531806][ T6041] netlink: 202368 bytes leftover after parsing attributes in process `syz.2.85'.
[   75.566211][ T6044] Zero length message leads to an empty skb
[   75.605694][ T6046] loop2: detected capacity change from 0 to 512
[   75.614318][ T6046] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   75.843340][ T6058] netlink: 'syz.0.94': attribute type 1 has an invalid length.
[   76.303253][   T55] Bluetooth: hci1: command tx timeout
[   76.305419][ T5939] Bluetooth: hci0: command tx timeout
[   76.307495][ T5939] Bluetooth: hci2: command tx timeout
[   76.482141][ T6083] input: syz1 as /devices/virtual/input/input5
[   76.543377][ T6087] loop1: detected capacity change from 0 to 512
[   76.600292][ T6091] tipc: Can't bind to reserved service type 1
[   76.605403][ T6087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.611508][ T6087] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.696648][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.860320][ T6096] bond1: entered allmulticast mode
[   76.863004][ T6096] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.066296][ T6111] netlink: 32 bytes leftover after parsing attributes in process `syz.2.116'.
[   77.073914][ T6111] netlink: 152 bytes leftover after parsing attributes in process `syz.2.116'.
[   77.311646][ T6123] loop1: detected capacity change from 0 to 1024
[   77.340084][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.358698][ T6123] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   77.370219][ T6123] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.122: missing EA_INODE flag
[   77.376256][ T6123] EXT4-fs (loop1): Remounting filesystem read-only
[   77.380379][ T6123] EXT4-fs warning (device loop1): ext4_xattr_inode_dec_ref_all:1221: inode #18: comm syz.1.122: ea_inode dec ref err=-30
[   77.385627][ T6123] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30)
[   77.387485][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.422469][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.537536][    T9] usb 3-1: Using ep0 maxpacket: 16
[   77.543622][    T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   77.546922][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.551867][    T9] usb 3-1: config 0 descriptor??
[   77.556415][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[   78.397432][   T55] Bluetooth: hci2: command tx timeout
[   78.402900][   T55] Bluetooth: hci0: command tx timeout
[   78.408638][ T5234] Bluetooth: hci1: command tx timeout
[   78.666914][    T9] gspca_sonixj: reg_w1 err -71
[   78.799060][    T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[   78.822368][    T9] usb 3-1: USB disconnect, device number 2
[   79.083401][ T6147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'.
[   79.200191][ T6155] nftables ruleset with unbound chain
[   79.512861][ T6170] veth0: entered promiscuous mode
[   79.547178][ T6173] loop2: detected capacity change from 0 to 128
[   79.591407][ T6173] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.621719][ T6173] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   79.704267][ T5946] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.818622][    T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   79.968215][    T9] usb 1-1: Using ep0 maxpacket: 8
[   79.971887][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[   79.975442][    T9] usb 1-1: config 5 has an invalid interface number: 215 but max is 0
[   79.979693][    T9] usb 1-1: config 5 has no interface number 0
[   79.981872][    T9] usb 1-1: config 5 interface 215 has no altsetting 0
[   79.986078][    T9] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba
[   79.990733][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.993453][    T9] usb 1-1: Product: syz
[   79.994928][    T9] usb 1-1: Manufacturer: syz
[   79.996563][    T9] usb 1-1: SerialNumber: syz
[   80.169593][ T6161] veth0: left promiscuous mode
[   80.221181][    T9] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected
[   80.264648][    T9] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0
[   80.285183][    T9] usb 1-1: USB disconnect, device number 2
[   80.295333][    T9] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0
[   80.303963][    T9] cypress_m8 1-1:5.215: device disconnected
[   80.321616][ T6182] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   80.324447][ T6182] macvtap1: entered promiscuous mode
[   80.348873][ T6182] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   80.458070][ T6139] Bluetooth: hci1: command tx timeout
[   80.459981][ T6139] Bluetooth: hci0: command tx timeout
[   80.461751][ T6139] Bluetooth: hci2: command tx timeout
[   80.492498][ T6188] loop1: detected capacity change from 0 to 2048
[   80.498093][ T5967] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   80.505079][ T6188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.516845][   T33] audit: type=1800 audit(1755105525.215:2): pid=6188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="file1" dev="loop1" ino=1415 res=0 errno=0
[   80.649459][ T5967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.652792][ T5967] usb 3-1: New USB device found, idVendor=056a, idProduct=00b2, bcdDevice= 0.00
[   80.663137][ T5967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.669071][ T5967] usb 3-1: config 0 descriptor??
[   81.195968][ T5967] wacom 0003:056A:00B2.0001: Unknown device_type for 'HID 056a:00b2'. Assuming pen.
[   81.252585][ T5967] wacom 0003:056A:00B2.0001: hidraw0: USB HID v0.00 Device [HID 056a:00b2] on usb-dummy_hcd.2-1/input0
[   81.337005][ T5967] input: Wacom Intuos3 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B2.0001/input/input6
[   81.490664][ T5967] usb 3-1: USB disconnect, device number 3
[   82.292356][ T6216] serio: Serial port ptm0
[   82.521569][ T6228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.148866][ T6240] loop0: detected capacity change from 0 to 512
[   83.153847][ T6240] =======================================================
[   83.153847][ T6240] WARNING: The mand mount option has been deprecated and
[   83.153847][ T6240]          and is ignored by this kernel. Remove the mand
[   83.153847][ T6240]          option from the mount to silence this warning.
[   83.153847][ T6240] =======================================================
[   83.183195][ T6240] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.187043][ T6240] EXT4-fs: Ignoring removed i_version option
[   83.223132][ T6240] EXT4-fs (loop0): 1 orphan inode deleted
[   83.226824][ T6240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.260582][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.609528][ T5967] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.777622][ T5967] usb 1-1: Using ep0 maxpacket: 32
[   83.909887][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   83.944556][ T5967] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   83.977793][ T5967] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   83.981696][ T5967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.024447][ T5967] usb 1-1: config 0 descriptor??
[   84.029892][ T6244] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   84.049743][ T5967] hub 1-1:0.0: USB hub found
[   84.254772][ T5967] hub 1-1:0.0: 1 port detected
[   84.462351][ T6264] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.833942][ T6268] loop1: detected capacity change from 0 to 4096
[   84.842754][ T6268] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   84.865115][ T6268] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   84.869285][ T6268] ntfs3(loop1): ino=19, mi_enum_attr
[   85.120122][ T6274] loop2: detected capacity change from 0 to 512
[   85.124888][ T6274] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   85.174276][ T6274] EXT4-fs (loop2): 1 orphan inode deleted
[   85.178543][ T6274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.183821][ T6274] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.193071][   T29] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   85.209304][   T29] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u9:1: Failed to release dquot type 1
[   85.232825][ T5946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.399484][ T6281] loop2: detected capacity change from 0 to 512
[   85.422277][ T6281] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.188: iget: bad extended attribute block 1
[   85.430300][ T6281] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.188: couldn't read orphan inode 15 (err -117)
[   85.436839][ T6281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.469386][ T5946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.587669][ T6001] usb 1-1: USB disconnect, device number 3
[   86.271400][ T6303] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   86.461490][   T10] cfg80211: failed to load regulatory.db
[   86.658091][ T6320] openvswitch: netlink: IP tunnel dst address not specified
[   87.018063][ T5967] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   87.187821][ T5967] usb 2-1: Using ep0 maxpacket: 16
[   87.233676][ T5967] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[   87.260110][ T5967] usb 2-1: config 0 has no interface number 0
[   87.274756][ T5967] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[   87.304244][ T5967] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[   87.316132][ T5967] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   87.325841][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.331226][ T6344] loop0: detected capacity change from 0 to 128
[   87.343412][ T5967] usb 2-1: Product: syz
[   87.348230][ T5967] usb 2-1: Manufacturer: syz
[   87.350226][ T5967] usb 2-1: SerialNumber: syz
[   87.377963][ T5967] usb 2-1: config 0 descriptor??
[   87.382459][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.385692][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.614073][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.619509][ T6331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.890837][ T6363] netlink: 276 bytes leftover after parsing attributes in process `syz.2.221'.
[   87.894676][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'.
[   87.899940][ T6363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.221'.
[   88.026673][ T5967] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[   88.027410][ T6000] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   88.033719][ T5967] asix 2-1:0.251: probe with driver asix failed with error -524
[   88.189410][ T6000] usb 1-1: config 0 has an invalid interface number: 156 but max is 0
[   88.192858][ T6000] usb 1-1: config 0 has no interface number 0
[   88.195500][ T6000] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   88.201880][ T6000] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   88.206005][ T6000] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[   88.210319][ T6000] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   88.214013][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.227224][ T6000] usb 1-1: config 0 descriptor??
[   88.238486][ T6000] gspca_main: spca561-2.14.0 probing abcd:cdee
[   88.247212][   T10] usb 2-1: USB disconnect, device number 3
[   88.260523][   T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.417771][   T47] usb 3-1: Using ep0 maxpacket: 16
[   88.422743][   T47] usb 3-1: config 8 has an invalid interface number: 206 but max is 0
[   88.426712][   T47] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   88.431189][   T47] usb 3-1: config 8 has no interface number 0
[   88.433716][   T47] usb 3-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   88.442252][   T47] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   88.446130][ T6000] spca561 1-1:0.156: probe with driver spca561 failed with error -22
[   88.448192][   T47] usb 3-1: config 8 interface 206 has no altsetting 0
[   88.453613][ T6000] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   88.453677][ T6000] usb 1-1: MIDIStreaming interface descriptor not found
[   88.470932][   T47] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[   88.474412][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.487633][   T47] usb 3-1: Product: syz
[   88.491906][   T47] usb 3-1: Manufacturer: syz
[   88.494743][   T47] usb 3-1: SerialNumber: syz
[   88.516882][ T6000] usb 1-1: USB disconnect, device number 4
[   88.718052][   T47] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected
[   88.722005][   T47] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[   88.724847][   T47] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[   88.731050][   T47] usb 3-1: USB disconnect, device number 4
[   88.736026][   T47] garmin_gps 3-1:8.206: device disconnected
[   89.080518][ T6377] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   89.348890][ T6383] loop0: detected capacity change from 0 to 256
[   89.363903][ T6383] exFAT-fs (loop0): error, invalid access to FAT bad cluster (entry 0x00000005)
[   89.369109][ T6383] exFAT-fs (loop0): Filesystem has been set read-only
[   89.372205][ T6383] exFAT-fs (loop0): failed to count the number of clusters in root
[   89.375527][ T6383] exFAT-fs (loop0): failed to recognize exfat type
[   89.421545][ T6385] loop0: detected capacity change from 0 to 512
[   89.446137][ T6385] EXT4-fs (loop0): 1 orphan inode deleted
[   89.452666][ T6385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.458601][   T53] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   89.463299][   T53] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u9:2: Failed to release dquot type 1
[   89.467819][ T6385] ext4 filesystem being mounted at /syzcgroup/cpu/syz0/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[   89.473499][   T53] EXT4-fs (loop0): Remounting filesystem read-only
[   89.478438][ T6385] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.600802][ T6398] loop0: detected capacity change from 0 to 512
[   89.616239][ T6398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   89.627217][ T6398] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.655061][ T6398] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   89.662845][ T6398] EXT4-fs: Cannot change journaled quota options when quota turned on
[   89.713965][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.407485][   T47] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   90.558117][   T47] usb 3-1: Using ep0 maxpacket: 32
[   90.564127][   T47] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   90.568904][   T47] usb 3-1: config 0 interface 0 has no altsetting 0
[   90.571931][   T47] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   90.576551][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.584131][   T47] usb 3-1: config 0 descriptor??
[   90.889885][ T6437] loop0: detected capacity change from 0 to 512
[   90.893520][ T6437] EXT4-fs: Ignoring removed oldalloc option
[   90.903416][ T6437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.250: Parent and EA inode have the same ino 15
[   90.911752][ T6437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.250: Parent and EA inode have the same ino 15
[   90.920386][ T6437] EXT4-fs (loop0): 1 orphan inode deleted
[   90.924190][ T6437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.958815][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.041734][ T6442] loop1: detected capacity change from 0 to 2048
[   91.052809][ T6371] udevd[6371]: incorrect nilfs2 checksum on /dev/loop1
[   91.071423][ T6442] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   91.085564][ T6371] udevd[6371]: incorrect nilfs2 checksum on /dev/loop1
[   91.103872][ T6446] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.166473][ T6449] capability: warning: `syz.0.254' uses 32-bit capabilities (legacy support in use)
[   91.276723][   T33] audit: type=1326 audit(1755105535.965:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.1.257" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x0
[   91.360436][ T6461] loop0: detected capacity change from 0 to 128
[   91.389106][   T47] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[   91.390829][ T6461] affs: No valid root block on device loop0
[   91.397756][   T47] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[   91.400932][   T47] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[   91.404114][   T47] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[   91.433333][   T47] corsair-cpro 0003:1B1C:0C10.0002: unknown main item tag 0x0
[   91.441362][   T47] corsair-cpro 0003:1B1C:0C10.0002: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[   91.670472][ T6478] loop0: detected capacity change from 0 to 512
[   91.682514][ T6478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   91.696105][ T6478] EXT4-fs (loop0): 1 truncate cleaned up
[   91.702470][ T6478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.770481][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.794439][ T6474] loop1: detected capacity change from 0 to 32768
[   91.801184][ T6474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.266 (6474)
[   91.836611][   T47] corsair-cpro 0003:1B1C:0C10.0002: probe with driver corsair-cpro failed with error -110
[   91.845810][ T6474] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.857389][   T47] usb 3-1: USB disconnect, device number 5
[   91.877730][ T6474] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   91.881466][ T6474] BTRFS info (device loop1): using free-space-tree
[   92.043308][ T5943] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.100489][ T6481] loop0: detected capacity change from 0 to 32768
[   92.118982][ T6481] (syz.0.269,6481,1):ocfs2_read_blocks:239 ERROR: status = -12
[   92.121493][ T6481] (syz.0.269,6481,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[   92.124151][ T6481] (syz.0.269,6481,1):ocfs2_read_dir_block:511 ERROR: status = -12
[   92.126722][ T6481] (syz.0.269,6481,1):ocfs2_read_blocks:239 ERROR: status = -12
[   92.151452][ T6481] (syz.0.269,6481,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[   92.155014][ T6481] (syz.0.269,6481,1):ocfs2_read_dir_block:511 ERROR: status = -12
[   92.157787][ T6481] (syz.0.269,6481,1):ocfs2_read_blocks:239 ERROR: status = -12
[   92.160266][ T6481] (syz.0.269,6481,1):ocfs2_read_virt_blocks:1029 ERROR: status = -12
[   92.162886][ T6481] (syz.0.269,6481,1):ocfs2_read_dir_block:511 ERROR: status = -12
[   92.165708][ T6481] (syz.0.269,6481,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   92.175453][ T6481] (syz.0.269,6481,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[   92.175470][ T6481] (syz.0.269,6481,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   92.189989][ T6481] (syz.0.269,6481,1):ocfs2_initialize_super:2198 ERROR: status = -22
[   92.204407][ T6481] (syz.0.269,6481,1):ocfs2_fill_super:1177 ERROR: status = -22
[   92.385702][ T6503] loop2: detected capacity change from 0 to 8192
[   92.794231][ T6529] loop0: detected capacity change from 0 to 128
[   92.805125][ T6529] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   92.811631][ T6529] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   92.845424][ T5938] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   92.881833][   T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   93.039155][   T10] usb 2-1: config 0 has no interfaces?
[   93.043001][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   93.046818][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   93.065353][   T10] usb 2-1: SerialNumber: syz
[   93.069897][   T10] usb 2-1: config 0 descriptor??
[   93.275876][ T6522] IPVS: length: 24 != 3277873272
[   93.280850][   T10] usb 2-1: USB disconnect, device number 4
[   94.619738][   T47] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   95.256389][ T6592] loop1: detected capacity change from 0 to 256
[   95.274425][ T6594] loop2: detected capacity change from 0 to 1024
[   95.316611][ T6594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.328967][   T47] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   95.332991][   T47] usb 1-1: config 1 interface 0 has no altsetting 0
[   95.341291][ T6594] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   95.345766][   T47] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.40
[   95.350735][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.353083][ T6594] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[   95.353848][   T47] usb 1-1: Product: syz
[   95.353860][   T47] usb 1-1: Manufacturer: syz
[   95.362328][ T6594] EXT4-fs (loop2): This should not happen!! Data will be lost
[   95.362328][ T6594] 
[   95.362986][   T47] usb 1-1: SerialNumber: syz
[   95.366990][ T6594] EXT4-fs (loop2): Total free blocks count 0
[   95.374058][ T6594] EXT4-fs (loop2): Free/Dirty block details
[   95.376557][ T6594] EXT4-fs (loop2): free_blocks=20480
[   95.379480][ T6594] EXT4-fs (loop2): dirty_blocks=96
[   95.381574][ T6594] EXT4-fs (loop2): Block reservation details
[   95.384540][ T6594] EXT4-fs (loop2): i_reserved_data_blocks=6
[   95.479761][ T4366] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   95.570523][ T6607] overlayfs: conflicting options: nfs_export=on,index=off
[   95.600270][   T47] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input9
[   95.613139][ T5279] bcm5974 1-1:1.0: could not read from device
[   95.627677][   T47] usb 1-1: USB disconnect, device number 5
[   95.782991][ T6617] loop1: detected capacity change from 0 to 1764
[   96.115164][ T6635] loop1: detected capacity change from 0 to 4096
[   96.527423][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   96.679876][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.684523][   T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   96.690248][   T10] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   96.694525][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.700353][   T10] usb 2-1: language id specifier not provided by device, defaulting to English
[   96.706331][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.712603][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.716117][   T10] usb 2-1: Product: syz
[   96.719857][   T10] usb 2-1: Manufacturer: ᨕ昉ﺴꖂ쯍넊꿊퐃ﯻ뵫ਖ਼汢鏎餗␫芯ﰤ齐ജၥ仵챹苵弨鞆찠꛷异ⵡ✩빏󔏪
[   96.725750][   T10] usb 2-1: SerialNumber: syz
[   96.953639][   T10] usb 2-1: 0:2 : does not exist
[   96.970877][   T10] usb 2-1: USB disconnect, device number 5
[   97.003307][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.545844][ T6669] loop1: detected capacity change from 0 to 512
[   97.559027][ T6669] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   97.562671][ T6669] EXT4-fs (loop1): invalid journal inode
[   97.564907][ T6669] EXT4-fs (loop1): can't get journal size
[   97.621698][ T6669] EXT4-fs (loop1): 1 truncate cleaned up
[   97.624392][ T6669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.640051][ T6669] netlink: 112 bytes leftover after parsing attributes in process `syz.1.340'.
[   97.882523][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.962169][ T6676] loop1: detected capacity change from 0 to 64
[   98.023823][ T6665] loop0: detected capacity change from 0 to 32768
[   98.033817][ T6665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.338 (6665)
[   98.060838][ T6665] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.067158][ T6678] loop1: detected capacity change from 0 to 128
[   98.071235][ T6665] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   98.074395][ T6665] BTRFS info (device loop0): using free-space-tree
[   98.086323][ T6678] FAT-fs (loop1): bogus number of FAT structure
[   98.089666][ T6678] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   98.093455][ T6678] FAT-fs (loop1): Can't find a valid FAT filesystem
[   98.206887][ T5938] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.883873][ T6709] loop0: detected capacity change from 0 to 1024
[   98.892176][ T6709] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   99.059298][ T6709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.157161][ T6709] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.348: missing EA_INODE flag
[   99.164549][ T6709] EXT4-fs (loop0): Remounting filesystem read-only
[   99.234444][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.086635][ T6721] netlink: 'syz.0.352': attribute type 1 has an invalid length.
[  100.731321][ T6757] loop0: detected capacity change from 0 to 8
[  100.765675][ T6757] SQUASHFS error: lzo decompression failed, data probably corrupt
[  100.769564][ T6757] SQUASHFS error: Failed to read block 0x91: -5
[  100.772395][ T6757] SQUASHFS error: Unable to read metadata cache entry [8f]
[  100.776290][ T6757] SQUASHFS error: Unable to read inode 0x11f
[  101.069404][ T6770] loop2: detected capacity change from 0 to 256
[  101.082220][   T33] audit: type=1800 audit(1755105545.785:4): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.375" name=93FDD4787ADAD4209069 dev="loop2" ino=1048617 res=0 errno=0
[  101.127565][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  101.236572][ T6778] loop1: detected capacity change from 0 to 512
[  101.281873][ T6778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.288313][   T47] usb 1-1: Using ep0 maxpacket: 8
[  101.294571][   T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.297160][ T6778] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  101.302104][   T47] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  101.317826][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.321328][   T47] usb 1-1: Product: syz
[  101.323169][   T47] usb 1-1: Manufacturer: syz
[  101.325236][   T47] usb 1-1: SerialNumber: syz
[  101.338244][   T47] usb 1-1: config 0 descriptor??
[  101.345848][   T47] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22
[  101.380450][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.460223][ T6789] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  101.555374][   T10] usb 1-1: USB disconnect, device number 6
[  101.894562][ T6800] loop1: detected capacity change from 0 to 512
[  101.923169][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.930587][ T6800] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.970643][ T5943] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.115425][ T6806] bond_slave_0: entered promiscuous mode
[  102.118369][ T6806] bond_slave_1: entered promiscuous mode
[  102.133225][ T6806] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  102.143405][ T6806] bond_slave_0: left promiscuous mode
[  102.145820][ T6806] bond_slave_1: left promiscuous mode
[  102.369869][ T6818] loop1: detected capacity change from 0 to 128
[  102.381642][ T6818] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.387013][ T6818] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  102.427102][ T5943] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  102.464272][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.557414][ T6001] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.619534][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.624194][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.628452][   T10] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  102.632334][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.637155][   T10] usb 1-1: config 0 descriptor??
[  102.679284][ T6829] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  102.679872][ T6828] IPVS: stopping master sync thread 6829 ...
[  102.709050][ T6001] usb 3-1: Using ep0 maxpacket: 32
[  102.713494][ T6001] usb 3-1: config 0 has an invalid interface number: 216 but max is 0
[  102.717267][ T6001] usb 3-1: config 0 has no interface number 0
[  102.731762][ T6001] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  102.735662][ T6001] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.741115][ T6001] usb 3-1: Product: syz
[  102.742989][ T6001] usb 3-1: Manufacturer: syz
[  102.745044][ T6001] usb 3-1: SerialNumber: syz
[  102.755470][ T6001] usb 3-1: config 0 descriptor??
[  102.975228][ T6001] usb 3-1: USB disconnect, device number 6
[  103.047526][   T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  103.054981][   T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  103.061270][   T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  103.064580][   T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  103.071009][   T10] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0
[  103.084207][   T10] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  103.178942][ T6845] loop1: detected capacity change from 0 to 32768
[  103.451697][   T10] playstation 0003:054C:0DF2.0003: Failed to retrieve feature with reportID 32: -71
[  103.462673][   T10] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense firmware info: -71
[  103.466734][   T10] playstation 0003:054C:0DF2.0003: Failed to get firmware info from DualSense
[  103.475308][   T10] playstation 0003:054C:0DF2.0003: Failed to create dualsense.
[  103.483057][   T10] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -71
[  103.500945][   T10] usb 1-1: USB disconnect, device number 7
[  103.898011][ T6871] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  103.910731][ T6869] loop1: detected capacity change from 0 to 32768
[  103.915675][ T6869] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.418 (6869)
[  103.930411][ T6869] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  103.935002][ T6869] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  103.938684][ T6869] BTRFS info (device loop1): using free-space-tree
[  103.993000][ T6869] BTRFS info (device loop1): rebuilding free space tree
[  104.120984][ T5943] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.151254][ T6894] loop0: detected capacity change from 0 to 128
[  104.256286][ T6902] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  104.259625][ T6902] overlayfs: missing 'lowerdir'
[  105.751290][ T6935] netlink: 'syz.1.439': attribute type 3 has an invalid length.
[  105.977519][ T5939] Bluetooth: hci2: command tx timeout
[  105.978737][ T6872] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  106.780671][ T6872] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  106.783039][ T6872] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  106.793300][ T6872] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  106.798215][ T6872] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  106.801049][ T6872] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  106.805087][ T6872] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  107.057512][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  107.077934][   T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  107.127439][ T6001] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  107.208309][   T10] usb 2-1: Using ep0 maxpacket: 32
[  107.214836][   T10] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  107.218316][   T10] usb 2-1: config 0 has no interface number 0
[  107.220981][   T10] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  107.225604][   T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  107.232074][   T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  107.236953][   T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  107.237447][   T47] usb 1-1: Using ep0 maxpacket: 32
[  107.241441][   T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  107.245918][   T47] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.254057][   T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  107.255319][   T47] usb 1-1: config 0 interface 0 has no altsetting 0
[  107.261265][   T47] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  107.265042][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.265050][   T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  107.274484][   T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  107.275850][   T47] usb 1-1: config 0 descriptor??
[  107.280016][   T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  107.285501][   T10] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  107.294195][   T10] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  107.297434][ T6001] usb 3-1: Using ep0 maxpacket: 32
[  107.298703][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.303133][ T6001] usb 3-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  107.303861][   T10] usb 2-1: Product: syz
[  107.303903][   T10] usb 2-1: Manufacturer: syz
[  107.303915][   T10] usb 2-1: SerialNumber: syz
[  107.306682][   T10] usb 2-1: config 0 descriptor??
[  107.316501][ T6001] usb 3-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  107.319278][ T6944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  107.322766][ T6001] usb 3-1: config 0 interface 0 has no altsetting 0
[  107.324903][ T6944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  107.328446][ T6001] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  107.333043][   T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[  107.334651][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.337723][   T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[  107.350296][   T10] scsi host6: microtekX6
[  107.353834][ T6001] usb 3-1: config 0 descriptor??
[  107.604919][   T10] usb 2-1: USB disconnect, device number 6
[  107.718623][   T47] uclogic 0003:5543:0781.0004: ignoring exceeding usage max
[  107.723397][   T47] uclogic 0003:5543:0781.0004: unbalanced collection at end of report description
[  107.729133][   T47] uclogic 0003:5543:0781.0004: parse failed
[  107.731843][   T47] uclogic 0003:5543:0781.0004: probe with driver uclogic failed with error -22
[  107.804241][ T6001] asus 0003:048D:CE50.0005: item fetching failed at offset 2/5
[  107.808800][ T6001] asus 0003:048D:CE50.0005: Asus hid parse failed: -22
[  107.811770][ T6001] asus 0003:048D:CE50.0005: probe with driver asus failed with error -22
[  107.941940][ T6001] usb 1-1: USB disconnect, device number 8
[  108.020761][   T10] usb 3-1: USB disconnect, device number 7
[  108.058121][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[  108.314996][ T6959] loop1: detected capacity change from 0 to 2048
[  108.324396][ T6959] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.500614][ T6963] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[  108.807639][   T10] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  108.859101][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  108.959446][   T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  108.963035][   T10] usb 1-1: config 179 has no interface number 0
[  108.976244][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  108.981503][ T6969] loop2: detected capacity change from 0 to 32768
[  108.984384][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  109.001288][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  109.030967][   T10] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8
[  109.047852][   T10] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  109.068230][   T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  109.074898][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.103626][ T6965] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  109.120266][   T10] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[  109.130022][ T6969] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  109.130036][ T6969]   allowing incompatible features above 0.0: (unknown version)
[  109.130040][ T6969]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  109.137919][   T10] xpad 1-1:179.65: probe with driver xpad failed with error -90
[  109.147996][ T6969] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  109.151415][ T6969] bcachefs (loop2): initializing new filesystem
[  109.162459][ T6969] bcachefs (loop2): going read-write
[  109.175199][ T6969] bcachefs (loop2): marking superblocks
[  109.203075][ T6969] bcachefs (loop2): initializing freespace
[  109.217082][ T6969] bcachefs (loop2): done initializing freespace
[  109.229545][ T6969] bcachefs (loop2): reading snapshots table
[  109.232221][ T6969] bcachefs (loop2): reading snapshots done
[  109.267035][ T6969] bcachefs (loop2): done starting filesystem
[  109.308092][ T6969] syz.2.454 (6969) used greatest stack depth: 15896 bytes left
[  109.321301][   T47] usb 1-1: USB disconnect, device number 9
[  109.349067][ T5946] bcachefs (loop2): shutting down
[  109.351508][ T5946] bcachefs (loop2): going read-only
[  109.354217][ T5946] bcachefs (loop2): finished waiting for writes to stop
[  109.361363][ T5946] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  109.402725][ T5946] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  109.409241][ T5946] bcachefs (loop2): clean shutdown complete, journal seq 4
[  109.413078][ T5946] bcachefs (loop2): marking filesystem clean
[  109.442212][ T5946] bcachefs (loop2): shutdown complete
[  110.147469][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[  110.267497][   T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  110.417585][   T47] usb 1-1: Using ep0 maxpacket: 16
[  110.422127][   T47] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  110.426277][   T47] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE
[  110.434553][   T47] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11
[  110.439759][   T47] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024
[  110.445358][   T47] usb 1-1: config 0 interface 0 has no altsetting 0
[  110.456086][   T47] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  110.460738][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.464049][   T47] usb 1-1: Product: syz
[  110.466052][   T47] usb 1-1: Manufacturer: syz
[  110.468293][   T47] usb 1-1: SerialNumber: syz
[  110.472746][   T47] usb 1-1: config 0 descriptor??
[  110.475643][ T7033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  110.685924][ T7046] loop2: detected capacity change from 0 to 1024
[  110.689497][ T7033] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  110.727029][ T7046] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  110.737676][ T7046] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.759956][ T7046] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.463: lblock 3 mapped to illegal pblock 3 (length 3)
[  110.767087][ T7046] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  110.771708][ T7046] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.771708][ T7046] 
[  110.789514][ T1026] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:4: lblock 8 mapped to illegal pblock 8 (length 8)
[  110.800399][ T1026] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  110.805453][ T1026] EXT4-fs (loop2): This should not happen!! Data will be lost
[  110.805453][ T1026] 
[  110.812920][ T5946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  110.900989][   T47] usb 1-1: USB disconnect, device number 10
[  110.938221][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  112.217514][ T5939] Bluetooth: hci1: command 0x0c1a tx timeout
[  112.456015][ T7087] loop0: detected capacity change from 0 to 4096
[  112.474588][ T7087] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  112.541121][ T7087] ntfs3(loop0): ino=1a, mi_enum_attr
[  112.543481][ T7087] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  112.549267][ T7087] ntfs3(loop0): ino=1a, mi_enum_attr
[  112.551594][ T7087] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  113.037492][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.469758][ T7126] loop2: detected capacity change from 0 to 128
[  114.567482][   T33] audit: type=1804 audit(1755105559.255:5): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.512" name="/newroot/116/file0/bus" dev="loop2" ino=1048619 res=1 errno=0
[  114.576282][   T33] audit: type=1800 audit(1755105559.265:6): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.512" name="bus" dev="loop2" ino=1048619 res=0 errno=0
[  114.603777][ T7126] Invalid ELF header magic: != ELF
[  114.927524][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  115.014226][ T7164] netlink: 'syz.0.525': attribute type 2 has an invalid length.
[  115.019873][ T7164] netlink: 'syz.0.525': attribute type 1 has an invalid length.
[  115.078494][    T9] usb 3-1: Using ep0 maxpacket: 8
[  115.083122][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.088544][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00
[  115.092922][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.100594][    T9] usb 3-1: config 0 descriptor??
[  115.515323][    T9] wacom 0003:056A:00B8.0006: item fetching failed at offset 10/11
[  115.519279][    T9] wacom 0003:056A:00B8.0006: parse failed
[  115.521857][    T9] wacom 0003:056A:00B8.0006: probe with driver wacom failed with error -22
[  115.716647][   T47] usb 3-1: USB disconnect, device number 8
[  116.978056][ T7226] loop2: detected capacity change from 0 to 256
[  117.659462][ T7239] loop2: detected capacity change from 0 to 8192
[  117.775469][ T7247] evm: overlay not supported
[  117.833687][ T7251] loop2: detected capacity change from 0 to 512
[  117.844576][ T7251] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent
[  117.928493][ T7253] cifs: Unknown parameter 'no'aN[Gzob,er;%j
[  117.928493][ T7253] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<;8+`#'
[  117.981674][ T7257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.567'.
[  118.044024][ T7261] warning: `syz.1.569' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  118.113667][ T7263] loop0: detected capacity change from 0 to 4096
[  118.138723][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  118.216297][ T1089] ntfs3(loop0): ino=5, mi_enum_attr
[  118.288945][   T47] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  118.292485][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.297183][   T47] usb 3-1: config 0 descriptor??
[  118.302231][   T47] cp210x 3-1:0.0: cp210x converter detected
[  118.998000][   T47] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  119.034509][   T47] usb 3-1: cp210x converter now attached to ttyUSB0
[  119.219424][ T7288] tmpfs: Bad value for 'mpol'
[  119.220977][   T47] usb 3-1: USB disconnect, device number 9
[  119.234458][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  119.330398][   T47] cp210x 3-1:0.0: device disconnected
[  119.362199][ T7292] loop0: detected capacity change from 0 to 128
[  119.366376][ T7292] EXT4-fs (loop0): Test dummy encryption mode enabled
[  119.377966][ T7292] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  119.390204][ T7292] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.469898][ T7292] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  119.521008][ T5938] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  119.609647][ T7307] loop0: detected capacity change from 0 to 128
[  119.721455][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.592'.
[  120.195726][ T7331] loop0: detected capacity change from 0 to 40427
[  120.201534][ T7331] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  120.204791][ T7331] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  120.213518][ T7331] F2FS-fs (loop0): invalid crc value
[  120.272668][ T7331] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.283042][ T7331] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  120.286149][ T7331] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  120.430260][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  120.852204][   T33] audit: type=1800 audit(1755105565.295:7): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.600" name="file1" dev="loop0" ino=10 res=0 errno=0
[  121.325280][   T33] audit: type=1326 audit(1755105566.025:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7343 comm="syz.1.604" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7fc00000
[  121.410272][    T9] usb 3-1: Using ep0 maxpacket: 32
[  121.414393][    T9] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  121.418115][    T9] usb 3-1: config 0 has no interface number 0
[  121.422210][    T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  121.425982][    T9] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  121.429485][    T9] usb 3-1: Product: syz
[  121.431338][    T9] usb 3-1: Manufacturer: syz
[  121.436198][    T9] usb 3-1: config 0 descriptor??
[  121.648450][    T9] usb 3-1: USB disconnect, device number 10
[  123.033269][ T5938] syz-executor: attempt to access beyond end of device
[  123.033269][ T5938] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  123.042606][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  123.042630][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.042637][ T5938] Call Trace:
[  123.042644][ T5938]  <TASK>
[  123.042651][ T5938]  dump_stack_lvl+0x189/0x250
[  123.042676][ T5938]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.042692][ T5938]  ? __pfx_queue_work_on+0x10/0x10
[  123.042706][ T5938]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.042721][ T5938]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.042744][ T5938]  f2fs_handle_critical_error+0x37c/0x540
[  123.042768][ T5938]  f2fs_write_end_io+0x886/0xb60
[  123.042832][ T5938]  __submit_merged_bio+0x27a/0x6a0
[  123.042847][ T5938]  ? up_write+0x1c4/0x420
[  123.042867][ T5938]  __submit_merged_write_cond+0x44c/0x530
[  123.042888][ T5938]  f2fs_sync_node_pages+0x1479/0x15e0
[  123.042919][ T5938]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  123.042956][ T5938]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  123.042978][ T5938]  ? up_write+0x1c4/0x420
[  123.042990][ T5938]  ? do_raw_spin_unlock+0x4d/0x240
[  123.043008][ T5938]  f2fs_write_checkpoint+0xe6f/0x1df0
[  123.043045][ T5938]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  123.043100][ T5938]  ? kill_f2fs_super+0x298/0x6c0
[  123.043123][ T5938]  kill_f2fs_super+0x2c3/0x6c0
[  123.043146][ T5938]  ? __pfx_kill_f2fs_super+0x10/0x10
[  123.043161][ T5938]  ? radix_tree_delete_item+0x2b6/0x400
[  123.043181][ T5938]  ? shrinker_free+0x2ce/0x3e0
[  123.043197][ T5938]  deactivate_locked_super+0xbc/0x130
[  123.043233][ T5938]  cleanup_mnt+0x425/0x4c0
[  123.043249][ T5938]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.043266][ T5938]  task_work_run+0x1d4/0x260
[  123.043286][ T5938]  ? __pfx_task_work_run+0x10/0x10
[  123.043300][ T5938]  ? __x64_sys_umount+0x122/0x160
[  123.043320][ T5938]  ? exit_to_user_mode_loop+0x40/0x110
[  123.043342][ T5938]  exit_to_user_mode_loop+0xec/0x110
[  123.043359][ T5938]  do_syscall_64+0x2bd/0x3b0
[  123.043373][ T5938]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.043385][ T5938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.043398][ T5938]  ? exc_page_fault+0x9f/0xf0
[  123.043412][ T5938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.043424][ T5938] RIP: 0033:0x7ff925b8ff17
[  123.043436][ T5938] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  123.043445][ T5938] RSP: 002b:00007ffd9d375f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  123.043460][ T5938] RAX: 0000000000000000 RBX: 00007ff925c11c05 RCX: 00007ff925b8ff17
[  123.043468][ T5938] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9d375fe0
[  123.043474][ T5938] RBP: 00007ffd9d375fe0 R08: 0000000000000000 R09: 0000000000000000
[  123.043481][ T5938] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9d377070
[  123.043489][ T5938] R13: 00007ff925c11c05 R14: 000000000001d9d7 R15: 00007ffd9d3770b0
[  123.043511][ T5938]  </TASK>
[  123.046665][ T5938] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  123.270954][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'.
[  123.374297][ T7383] netlink: 'syz.2.621': attribute type 2 has an invalid length.
[  123.377338][ T7383] netlink: 244 bytes leftover after parsing attributes in process `syz.2.621'.
[  123.777015][ T7403] loop0: detected capacity change from 0 to 8
[  123.790808][ T7403] SQUASHFS error: xz decompression failed, data probably corrupt
[  123.793662][ T7403] SQUASHFS error: Failed to read block 0x108: -5
[  123.796376][ T7403] SQUASHFS error: Unable to read metadata cache entry [106]
[  123.801085][ T7403] SQUASHFS error: Unable to read inode 0x11f
[  124.117362][   T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  124.316288][   T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.321006][   T47] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  124.323948][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.335434][   T47] usb 1-1: config 0 descriptor??
[  124.343856][   T47] pwc: Askey VC010 type 2 USB webcam detected.
[  124.350203][ T7411] CIFS: VFS: Malformed UNC in devname
[  124.719484][   T33] audit: type=1326 audit(1755105569.395:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7fc00000
[  124.870659][   T47] pwc: recv_control_msg error -32 req 02 val 2b00
[  124.876541][   T47] pwc: recv_control_msg error -32 req 02 val 2700
[  124.997404][  T791] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  125.084199][   T47] pwc: recv_control_msg error -71 req 04 val 1000
[  125.089879][   T47] pwc: recv_control_msg error -71 req 04 val 1300
[  125.092992][   T47] pwc: recv_control_msg error -71 req 04 val 1400
[  125.096071][   T47] pwc: recv_control_msg error -71 req 02 val 2000
[  125.099369][   T47] pwc: recv_control_msg error -71 req 02 val 2100
[  125.102546][   T47] pwc: recv_control_msg error -71 req 04 val 1500
[  125.105703][   T47] pwc: recv_control_msg error -71 req 02 val 2500
[  125.109113][   T47] pwc: recv_control_msg error -71 req 02 val 2400
[  125.112306][   T47] pwc: recv_control_msg error -71 req 02 val 2600
[  125.115433][   T47] pwc: recv_control_msg error -71 req 02 val 2900
[  125.118583][   T47] pwc: recv_control_msg error -71 req 02 val 2800
[  125.121828][   T47] pwc: recv_control_msg error -71 req 04 val 1100
[  125.124831][   T47] pwc: recv_control_msg error -71 req 04 val 1200
[  125.131242][   T47] pwc: Registered as video103.
[  125.135265][   T47] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  125.149017][   T47] usb 1-1: USB disconnect, device number 11
[  125.157670][  T791] usb 3-1: Using ep0 maxpacket: 8
[  125.166161][  T791] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  125.178290][  T791] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.182537][  T791] usb 3-1: config 0 has no interface number 0
[  125.185106][  T791] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  125.196696][   T33] audit: type=1326 audit(1755105569.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.634" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f284f18ebe9 code=0x7fc00000
[  125.221375][   T33] audit: type=1326 audit(1755105569.895:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7fc00000
[  125.230241][   T33] audit: type=1326 audit(1755105569.895:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7fc00000
[  125.239626][   T33] audit: type=1326 audit(1755105569.895:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7412 comm="syz.1.634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7fc00000
[  125.286139][  T791] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.301524][  T791] usb 3-1: config 0 interface 52 has no altsetting 0
[  125.308651][  T791] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  125.312580][  T791] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  125.316072][  T791] usb 3-1: Manufacturer: syz
[  125.323639][  T791] usb 3-1: config 0 descriptor??
[  125.328859][  T791] hub 3-1:0.52: bad descriptor, ignoring hub
[  125.331377][  T791] hub 3-1:0.52: probe with driver hub failed with error -5
[  125.544920][  T791] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input11
[  125.887659][    T9] usb 3-1: USB disconnect, device number 11
[  126.077742][ T7446] loop0: detected capacity change from 0 to 65536
[  126.097032][ T7446] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  126.134689][ T7446] XFS (loop0): Ending clean mount
[  126.162257][ T7446] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.166752][ T7446] XFS (loop0): Unmount and run xfs_repair
[  126.169383][ T7446] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.172654][ T7446] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.176389][ T7446] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.180540][ T7446] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.184280][ T7446] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.188258][ T7446] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.192054][ T7446] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.195880][ T7446] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.199881][ T7446] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.215593][ T7446] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.229232][ T7446] XFS (loop0): page discard on page ffffea000490fc00, inode 0x26, pos 1024.
[  126.233856][ T7446] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.238574][ T7446] XFS (loop0): Unmount and run xfs_repair
[  126.241127][ T7446] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.246539][ T7446] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.250707][ T7446] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.254530][ T7446] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.258511][ T7446] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.262310][ T7446] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.266147][ T7446] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.270046][ T7446] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.273893][ T7446] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.277820][ T7446] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.282250][ T7446] XFS (loop0): page discard on page ffffea000490fd00, inode 0x26, pos 4096.
[  126.286518][ T7446] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.291651][ T7446] XFS (loop0): Unmount and run xfs_repair
[  126.294063][ T7446] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.297151][ T7446] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.300998][ T7446] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.312804][ T7446] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.316637][ T7446] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.321183][ T7446] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.324852][ T7446] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.328791][ T7446] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.332691][ T7446] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.336565][ T7446] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.341209][ T7446] XFS (loop0): page discard on page ffffea000452c900, inode 0x26, pos 8192.
[  126.345209][ T7446] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.349649][ T7446] XFS (loop0): Unmount and run xfs_repair
[  126.352079][ T7446] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.355192][ T7446] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.362327][ T7446] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.366011][ T7446] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.370476][ T7446] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.373413][ T7446] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.376401][ T7446] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.379514][ T7446] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.382302][ T7446] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.385172][ T7446] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.388529][ T7446] XFS (loop0): page discard on page ffffea0004900e00, inode 0x26, pos 16384.
[  126.392717][ T6001] loop0: writeback error on inode 38, offset 0, sector 22
[  126.420046][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.428864][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.430909][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.433527][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.436536][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.440650][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.443616][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.446596][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.454625][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.470480][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.488210][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.491411][ T7104] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.494952][ T7104] XFS (loop0): page discard on page ffffea00048b3000, inode 0x29, pos 0.
[  126.505246][ T7470] loop2: detected capacity change from 0 to 4096
[  126.508515][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.509796][ T7470] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  126.519031][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.537593][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.542998][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.544277][ T7470] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  126.546410][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.554737][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.558824][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.562374][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.565544][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.571522][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.574905][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.578305][ T7104] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.578342][ T1026] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  126.581531][ T7104] XFS (loop0): page discard on page ffffea0004907200, inode 0x26, pos 32768.
[  126.589456][ T5946] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  126.590464][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.592083][ T5946] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  126.596319][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.596331][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.604435][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.607376][ T5946] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  126.607932][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.610484][ T1089] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  126.612944][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.629542][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.632475][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.635451][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.641735][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.644870][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.648602][ T7104] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.653028][ T7104] XFS (loop0): page discard on page ffffea00048f9a00, inode 0x29, pos 32768.
[  126.657022][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.665791][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.668875][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.671755][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.678482][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.681566][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.684975][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.690602][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.694617][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.708851][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.712673][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.716267][ T7104] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.720941][ T7104] XFS (loop0): page discard on page ffffea00048d7d00, inode 0x29, pos 49152.
[  126.725592][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.730269][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.732619][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.735854][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[  126.740751][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.744285][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.748864][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.753043][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.764188][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.767085][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.778119][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.781418][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.784784][ T7104] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.789815][ T7104] XFS (loop0): page discard on page ffffea000490fc80, inode 0x29, pos 57344.
[  126.793389][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.813946][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.816102][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.826635][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.832921][ T6001] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  126.833529][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.847387][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.852237][ T6001] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  126.853891][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.868720][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.872643][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.878422][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.881258][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.884071][ T7104] XFS (loop0): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  126.888388][ T7104] XFS (loop0): page discard on page ffffea000490fcc0, inode 0x29, pos 61440.
[  126.891902][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.895613][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.897560][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.900248][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.903256][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.906069][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.909484][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.912557][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.915413][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.919835][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.928900][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.937747][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.941948][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.944397][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  126.949071][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  126.952870][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  126.957073][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  126.961059][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  126.965089][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  126.969896][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  126.974008][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.978437][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  126.988145][ T7104] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  126.997422][ T7104] XFS (loop0): Unmount and run xfs_repair
[  126.999804][ T7104] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  127.002893][ T7104] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  127.017415][ T7104] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  127.021438][ T7104] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  127.025200][ T7104] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  127.037029][ T7104] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  127.040701][ T7104] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  127.044710][ T7104] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  127.051177][ T7104] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  127.063460][ T7483] hid-generic 0000:0000:0000.0007: pid 7483 passed too short report
[  127.064753][ T5938] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  127.082563][ T5938] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  127.379223][ T7497] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  128.060982][ T7511] loop0: detected capacity change from 0 to 256
[  128.067961][ T7511] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  128.709713][ T7522] process 'syz.1.675' launched './file0' with NULL argv: empty string added
[  128.851449][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[  129.109439][ T7542] vlan2: entered allmulticast mode
[  129.111483][ T7542] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  129.318893][ T7548] 8021q: adding VLAN 0 to HW filter on device bond1
[  129.363170][ T7551] netlink: 'syz.2.688': attribute type 3 has an invalid length.
[  131.247396][ T6001] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  131.401512][ T6001] usb 1-1: unable to get BOS descriptor or descriptor too short
[  131.405025][ T6001] usb 1-1: not running at top speed; connect to a high speed hub
[  131.417056][ T6001] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.424471][ T6001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.434728][ T6001] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.443398][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.446568][ T6001] usb 1-1: Product: syz
[  131.450236][ T6001] usb 1-1: Manufacturer: syz
[  131.452115][ T6001] usb 1-1: SerialNumber: syz
[  131.512586][ T7614] loop2: detected capacity change from 0 to 32768
[  131.643660][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.721'.
[  131.675533][ T6001] usb 1-1: 0:2 : does not exist
[  131.695446][ T6001] usb 1-1: USB disconnect, device number 12
[  131.744818][ T6371] udevd[6371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  131.801788][   T33] audit: type=1326 audit(1755105576.505:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.1.725" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7ffc0000
[  131.811719][   T33] audit: type=1326 audit(1755105576.505:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.1.725" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7ffc0000
[  131.820903][   T33] audit: type=1326 audit(1755105576.515:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.1.725" exe="/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f284f18ebe9 code=0x7ffc0000
[  131.829328][   T33] audit: type=1326 audit(1755105576.515:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.1.725" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7ffc0000
[  131.849893][   T33] audit: type=1326 audit(1755105576.515:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7632 comm="syz.1.725" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284f18ebe9 code=0x7ffc0000
[  132.648504][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.653433][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.848084][  T791] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  133.034344][  T791] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  133.043816][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.050529][  T791] usb 3-1: Product: syz
[  133.054401][  T791] usb 3-1: Manufacturer: syz
[  133.057253][  T791] usb 3-1: SerialNumber: syz
[  133.063627][  T791] usb 3-1: config 0 descriptor??
[  133.095020][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  133.098291][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'.
[  133.283904][  T791] hso 3-1:0.0: Failed to find BULK IN ep
[  133.375325][ T7692] loop0: detected capacity change from 0 to 256
[  133.380479][ T7692] MINIX-fs: mounting file system with errors, running fsck is recommended
[  134.364604][ T7760] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  134.780396][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  134.927443][    T9] usb 1-1: Using ep0 maxpacket: 32
[  134.931859][    T9] usb 1-1: config 0 has an invalid interface number: 61 but max is 1
[  134.935325][    T9] usb 1-1: config 0 has no interface number 1
[  134.942806][    T9] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  134.946626][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.951839][    T9] usb 1-1: Product: syz
[  134.953587][    T9] usb 1-1: Manufacturer: syz
[  134.955537][    T9] usb 1-1: SerialNumber: syz
[  134.962148][    T9] usb 1-1: config 0 descriptor??
[  135.068887][    T9] viperboard 1-1:0.61: version 0.00 found at bus 001 address 013
[  135.078915][    T9] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  135.082044][    T9] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  135.090033][    T9] viperboard 1-1:0.0: version 0.00 found at bus 001 address 013
[  135.101433][    T9] viperboard-i2c viperboard-i2c.6.auto: error -EIO: failure setting i2c_bus_freq to 100
[  135.105428][    T9] viperboard-i2c viperboard-i2c.6.auto: probe with driver viperboard-i2c failed with error -5
[  135.185415][    T9] usb 1-1: USB disconnect, device number 13
[  135.493565][  T791] usb 3-1: USB disconnect, device number 12
[  135.517543][ T7772] netlink: 96 bytes leftover after parsing attributes in process `syz.2.789'.
[  135.546098][ T7774] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  135.604092][ T5939] Bluetooth: hci2: unexpected event for opcode 0x2062
[  135.907931][ T5939] Bluetooth: hci0: unexpected event for opcode 0x203d
[  136.352235][ T7814] loop0: detected capacity change from 0 to 2048
[  136.376502][ T7814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.385955][ T7814] EXT4-fs (loop0): shut down requested (2)
[  136.411816][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.425211][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'.
[  136.429458][ T7823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.466832][ T7823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.325402][ T7835] loop2: detected capacity change from 0 to 32768
[  137.325845][ T7841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.820'.
[  137.659289][ T5939] Bluetooth: hci2: command 0x0c1a tx timeout
[  138.065783][ T7853] netlink: 'syz.1.827': attribute type 12 has an invalid length.
[  138.069053][ T7853] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.827'.
[  138.129354][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'.
[  138.167509][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  138.317561][   T10] usb 1-1: Using ep0 maxpacket: 16
[  138.326725][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.333962][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  138.347533][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  138.351613][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  138.366156][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.372886][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  138.387807][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  138.391181][   T10] usb 1-1: Manufacturer: syz
[  138.395105][   T10] usb 1-1: config 0 descriptor??
[  138.677789][   T10] rc_core: IR keymap rc-hauppauge not found
[  138.680241][   T10] Registered IR keymap rc-empty
[  138.685129][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.708518][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.730852][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  138.747412][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  138.755764][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.777507][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.798165][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.817661][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.837571][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.857496][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.877552][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.897484][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.917425][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.941036][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  138.959231][   T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  138.967942][   T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  139.065691][ T7895] loop2: detected capacity change from 0 to 32768
[  139.075203][  T791] usb 1-1: USB disconnect, device number 14
[  139.116640][ T7895] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  139.123501][ T7895] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.155860][ T7895] XFS (loop2): Ending clean mount
[  139.165403][ T7895] XFS (loop2): Quotacheck needed: Please wait.
[  139.194218][ T7895] XFS (loop2): Quotacheck: Done.
[  139.222089][ T5946] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.496592][ T7922] usb usb7: usbfs: process 7922 (syz.2.854) did not claim interface 0 before use
[  139.501289][ T7922] usb usb7: usbfs: process 7922 (syz.2.854) did not claim interface 0 before use
[  140.289227][ T5939] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  140.293661][ T5939] Bluetooth: hci2: Injecting HCI hardware error event
[  140.301203][ T5939] Bluetooth: hci2: hardware error 0x00
[  140.514526][ T6139] Bluetooth: hci2: unexpected event for opcode 0x2016
[  140.687391][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[  140.723788][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  140.727210][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  140.736168][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  140.744723][ T7948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'.
[  141.146768][ T7961] loop0: detected capacity change from 0 to 1024
[  141.166631][ T7961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.194749][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.579429][ T7977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.877'.
[  141.677052][ T7983] loop2: detected capacity change from 0 to 512
[  141.712408][ T7983] EXT4-fs (loop2): orphan cleanup on readonly fs
[  141.721299][ T7983] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.880: corrupted in-inode xattr: overlapping e_value 
[  141.729094][ T7983] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.880: couldn't read orphan inode 15 (err -117)
[  141.742346][ T7983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  141.767562][ T5946] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.047642][ T7997] block nbd0: server does not support multiple connections per device.
[  142.054779][ T7997] block nbd0: shutting down sockets
[  142.348029][ T6001] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  142.387536][ T5939] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  142.520961][ T6001] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  142.524763][ T6001] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.532588][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.557263][ T6001] pwc: Logitech/Cisco VT Camera webcam detected.
[  142.573735][ T8003] loop0: detected capacity change from 0 to 32768
[  142.609261][ T8003] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.656530][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.662089][ T8003] XFS (loop0): Ending clean mount
[  142.680863][ T8003] XFS (loop0): Quotacheck needed: Please wait.
[  142.726115][ T8003] XFS (loop0): Quotacheck: Done.
[  142.751199][ T5938] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  142.772104][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.895247][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.962245][ T6001] pwc: send_video_command error -71
[  142.974422][ T6001] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  142.976980][ T6001] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71
[  142.986636][ T6001] usb 3-1: USB disconnect, device number 13
[  143.119147][   T13] bridge_slave_1: left allmulticast mode
[  143.121218][   T13] bridge_slave_1: left promiscuous mode
[  143.125105][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.162262][   T13] bridge_slave_0: left allmulticast mode
[  143.164729][   T13] bridge_slave_0: left promiscuous mode
[  143.167244][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.204082][ T6139] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.215771][ T6139] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.221303][ T6139] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.226082][ T6139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.233744][ T6139] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  143.363843][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'.
[  143.642969][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.649788][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.653509][   T13] bond0 (unregistering): Released all slaves
[  143.734790][ T8033] loop2: detected capacity change from 0 to 32768
[  143.763381][ T8033] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.898 (8033)
[  143.818707][ T8033] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  143.834400][ T8033] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  143.856703][ T8033] BTRFS info (device loop2): using free-space-tree
[  144.139143][ T5946] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  144.161335][ T8021] chnl_net:caif_netlink_parms(): no params data found
[  144.257703][   T47] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  144.426015][   T47] usb 1-1: not running at top speed; connect to a high speed hub
[  144.433902][   T13] hsr_slave_0: left promiscuous mode
[  144.440703][   T13] hsr_slave_1: left promiscuous mode
[  144.443394][   T47] usb 1-1: config 2 has an invalid interface number: 178 but max is 0
[  144.444003][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  144.450451][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  144.455521][   T47] usb 1-1: config 2 has no interface number 0
[  144.460320][   T47] usb 1-1: config 2 interface 178 has no altsetting 0
[  144.470860][   T47] usb 1-1: New USB device found, idVendor=0bdb, idProduct=7db7, bcdDevice=8a.0b
[  144.473584][   T13] veth1_macvtap: left promiscuous mode
[  144.474748][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.474765][   T47] usb 1-1: Product: syz
[  144.474777][   T47] usb 1-1: Manufacturer: syz
[  144.474787][   T47] usb 1-1: SerialNumber: syz
[  144.489360][   T13] veth0_macvtap: left promiscuous mode
[  144.492935][   T13] veth1_vlan: left promiscuous mode
[  144.496632][   T13] veth0_vlan: left promiscuous mode
[  144.723355][   T47] cdc_mbim 1-1:2.178: probe with driver cdc_mbim failed with error -71
[  144.728636][   T47] usb 1-1: USB disconnect, device number 15
[  144.826302][   T13] team0 (unregistering): Port device team_slave_1 removed
[  144.852492][   T13] team0 (unregistering): Port device team_slave_0 removed
[  145.172755][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.176091][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.179895][ T8021] bridge_slave_0: entered allmulticast mode
[  145.183225][ T8021] bridge_slave_0: entered promiscuous mode
[  145.189168][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.191610][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.194091][ T8021] bridge_slave_1: entered allmulticast mode
[  145.221343][ T8021] bridge_slave_1: entered promiscuous mode
[  145.258744][ T6139] Bluetooth: hci1: command tx timeout
[  145.351829][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.383125][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.398069][   T47] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  145.477222][ T8021] team0: Port device team_slave_0 added
[  145.515505][ T8021] team0: Port device team_slave_1 added
[  145.557427][   T47] usb 3-1: Using ep0 maxpacket: 32
[  145.566650][   T47] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  145.574495][   T47] usb 3-1: config 4 has no interface number 0
[  145.582450][   T47] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.587241][   T47] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.598973][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  145.602925][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.654587][   T47] hub 3-1:4.128: USB hub found
[  145.710745][   T13] ------------[ cut here ]------------
[  145.710776][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.713165][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.716334][   T13] WARNING: CPU: 0 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  145.727587][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.731094][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.731865][   T13] Modules linked in:
[  145.741835][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  145.747079][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.751521][   T13] Workqueue: netns cleanup_net
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  145.753817][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  145.754322][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.756266][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  145.756279][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  145.756299][   T13] RAX: ffffffff8a2135bf RBX: ffff888121f1a440 RCX: ffff88801c688000
[  145.756309][   T13] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c688000
[  145.756319][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  145.756329][   T13] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  145.793906][   T13] R13: 1ffff92000020f40 R14: ffff888121f1b8c0 R15: dffffc0000000000
[  145.797490][   T13] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  145.801073][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.801444][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.801459][   T13] CR2: 000055faa33e0a50 CR3: 0000000034352000 CR4: 00000000000006f0
[  145.801496][   T13] Call Trace:
[  145.814196][   T13]  <TASK>
[  145.815524][   T13]  xfrm_net_exit+0x2d/0x70
[  145.817696][   T13]  ops_undo_list+0x49a/0x990
[  145.819695][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  145.821971][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  145.824248][   T13]  cleanup_net+0x4c5/0x800
[  145.826274][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  145.828691][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.830990][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  145.833386][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  145.835901][   T13]  process_scheduled_works+0xae1/0x17b0
[  145.838463][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.841108][   T13]  worker_thread+0x8a0/0xda0
[  145.843325][   T13]  kthread+0x711/0x8a0
[  145.845244][   T13]  ? __pfx_worker_thread+0x10/0x10
[  145.847652][   T13]  ? __pfx_kthread+0x10/0x10
[  145.849768][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.852105][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.854330][   T13]  ? __pfx_kthread+0x10/0x10
[  145.856316][   T13]  ret_from_fork+0x3fc/0x770
[  145.858552][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  145.860988][   T13]  ? __switch_to_asm+0x39/0x70
[  145.863102][   T13]  ? __switch_to_asm+0x33/0x70
[  145.865170][   T13]  ? __pfx_kthread+0x10/0x10
[  145.867117][   T13]  ret_from_fork_asm+0x1a/0x30
[  145.869307][   T13]  </TASK>
[  145.871157][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  145.874209][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  145.879262][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.883499][   T13] Workqueue: netns cleanup_net
[  145.885459][   T13] Call Trace:
[  145.886870][   T13]  <TASK>
[  145.888113][   T13]  dump_stack_lvl+0x99/0x250
[  145.890093][   T13]  ? __asan_memcpy+0x40/0x70
[  145.892090][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.894317][   T13]  ? __pfx__printk+0x10/0x10
[  145.896387][   T13]  vpanic+0x281/0x750
[  145.898104][   T13]  ? __pfx__printk+0x10/0x10
[  145.900064][   T13]  ? __pfx_vpanic+0x10/0x10
[  145.902030][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  145.904194][   T13]  panic+0xb9/0xc0
[  145.905740][   T13]  ? __pfx_panic+0x10/0x10
[  145.907618][   T13]  __warn+0x31b/0x4b0
[  145.909339][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  145.911388][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  145.913418][   T13]  report_bug+0x2be/0x4f0
[  145.915203][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  145.917233][   T13]  ? xfrm_state_fini+0x270/0x2f0
[  145.919399][   T13]  ? xfrm_state_fini+0x272/0x2f0
[  145.921547][   T13]  handle_bug+0x84/0x160
[  145.923403][   T13]  exc_invalid_op+0x1a/0x50
[  145.925261][   T13]  asm_exc_invalid_op+0x1a/0x20
[  145.927254][   T13] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  145.929559][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 a8 e0 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 56 9e e2 f7 e8 f1 75 9e f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e3 75 9e f7 90 0f 0b 90 e9 60 fe ff ff
[  145.937631][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  145.940061][   T13] RAX: ffffffff8a2135bf RBX: ffff888121f1a440 RCX: ffff88801c688000
[  145.943241][   T13] RDX: 0000000000000000 RSI: ffffffff8dba33cb RDI: ffff88801c688000
[  145.946426][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  145.949713][   T13] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffffffff8f62d2e0
[  145.953099][   T13] R13: 1ffff92000020f40 R14: ffff888121f1b8c0 R15: dffffc0000000000
[  145.956328][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  145.958427][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  145.960511][   T13]  xfrm_net_exit+0x2d/0x70
[  145.962359][   T13]  ops_undo_list+0x49a/0x990
[  145.964344][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  145.966591][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  145.968835][   T13]  cleanup_net+0x4c5/0x800
[  145.970777][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  145.972898][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.975138][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  145.977576][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  145.979988][   T13]  process_scheduled_works+0xae1/0x17b0
[  145.982356][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.984906][   T13]  worker_thread+0x8a0/0xda0
[  145.986944][   T13]  kthread+0x711/0x8a0
[  145.988723][   T13]  ? __pfx_worker_thread+0x10/0x10
[  145.990941][   T13]  ? __pfx_kthread+0x10/0x10
[  145.992927][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.995077][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.997241][   T13]  ? __pfx_kthread+0x10/0x10
[  145.999248][   T13]  ret_from_fork+0x3fc/0x770
[  146.001258][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  146.003417][   T13]  ? __switch_to_asm+0x39/0x70
[  146.005466][   T13]  ? __switch_to_asm+0x33/0x70
[  146.007519][   T13]  ? __pfx_kthread+0x10/0x10
[  146.009522][   T13]  ret_from_fork_asm+0x1a/0x30
[  146.011636][   T13]  </TASK>
[  146.013839][   T13] Kernel Offset: disabled
[  146.015719][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:19:50  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a023e5 RBX=ffffffff81a023a4 RCX=ffff88801c688000 RDX=0000000000000000
RSI=ffffffff8dba33cb RDI=ffffffff8be32600 RBP=ffffc90000107510 RSP=ffffc90000107400
R8 =0000000000000000 R9 =ffffffff81a023a4 R10=dffffc0000000000 R11=fffffbfff1c25c19
R12=dffffc0000000000 R13=1ffff92000020e84 R14=0000000000000200 R15=0000000000000012
RIP=ffffffff81a023da RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055faa33e0a50 CR3=0000000034352000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8174859b ffffffff8168893f
XMM02=ffffffff8174859b ffffffff8174859b XMM03=ffffffff8168893f ffffffff816888ad
XMM04=ffffffff82440046 ffffffff8243ffbc XMM05=ffffffff8243fedb ffffffff823c7aef
XMM06=ffffffff823c79dd ffffffff823c6e8c XMM07=ffffffff823c6e04 ffffffff823c6b42
XMM08=0000000000000000 00007ff925c12ee7 XMM09=0000000000000000 00007ff925c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003d8e750
R8 =ffff8880209b0237 R9 =1ffff11004136046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af191a R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555565cae500 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000008000 CR3=0000000036078000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0030766461746162
XMM02=00000000000003ff 00007ffd74aac320 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ff00000000000000 XMM05=0000000000000000 00007f8babe12e53
XMM06=0000000000000000 00007f8babe12e4d XMM07=0000000000000000 00007f8babe12e61
XMM08=0000000000000000 00007f8babe12ee7 XMM09=0000000000000000 00007f8babe12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
