last executing test programs:

2m27.211022824s ago: executing program 0 (id=215):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x87, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xcc39, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB=' !$'], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m25.564655518s ago: executing program 0 (id=232):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x30}}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x240, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x10001, 0x1000})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

2m25.388182548s ago: executing program 0 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0xb00, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x7ffffffe}]}}}]}, 0x3c}}, 0x2000000)

2m25.271924733s ago: executing program 0 (id=237):
setns(0xc9, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01fc74f64900000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0)

2m25.197965745s ago: executing program 0 (id=240):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)

2m25.197490082s ago: executing program 0 (id=241):
mkdir(&(0x7f0000000300)='./bus\x00', 0x63)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

2m17.790328051s ago: executing program 2 (id=317):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect$nfc_raw(r0, &(0x7f0000000140)={0x27, 0x0, 0x0, 0x7}, 0x10)

2m17.701104363s ago: executing program 2 (id=318):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006")

2m17.700819403s ago: executing program 2 (id=319):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x3)
ptrace(0x10, r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea48, 0x800000e, 0x1, 0x63, 0x0, 0x7f, 0xc, 0x4, 0x9, 0x1, 0x4, 0x8001080, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x40000005, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0xa, 0x6, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0xffffffff, 0x23], [0x8, 0x401, 0x9, 0x9, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0xd8, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0xfffffff8, 0x9, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x0, 0x9, 0xa, 0x5, 0xfffffeff, 0x9, 0x800, 0x8a9, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffe7ff7, 0x20000003, 0x24c, 0x1ff, 0x2a0, 0x8, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0xc, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x7ffffff7, 0x7ffe, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x1, 0x5, 0x4, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0x8, 0x1, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0xc, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x9, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xf, 0x21, 0x200, 0xa, 0x6, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xfffffffd, 0x3, 0x10001, 0x8000, 0x10, 0x1002, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x9, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x40, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f00000002c0)={0x0})

2m17.56975705s ago: executing program 2 (id=320):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000010, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x85, 0x7a5, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
write(r0, &(0x7f00000000c0)='2', 0xa800)

2m17.470606156s ago: executing program 2 (id=321):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001000000ec0600313e"], 0x48}}, 0x0)

2m17.080890945s ago: executing program 2 (id=325):
r0 = socket(0x15, 0x80005, 0x0)
sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x7, 0x2}, 0x80, 0x0}, 0x4000000)

2m16.99138651s ago: executing program 32 (id=325):
r0 = socket(0x15, 0x80005, 0x0)
sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x3, @mcast2, 0x7, 0x2}, 0x80, 0x0}, 0x4000000)

2m10.091141053s ago: executing program 33 (id=241):
mkdir(&(0x7f0000000300)='./bus\x00', 0x63)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)

2m8.541929872s ago: executing program 1 (id=370):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x12c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0xab, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0xd8, 0x7, [@m_csum={0x80, 0x4, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "fd94c06764f37d74e02e47d2112b5242809e2419a3cf7f21e0a41fd7d83b6df9e9c285b3a976c4ebcd91e46a33997be265aa1e90d10cac810d688759dede90afba97f4b1c43b3b365eb86d85fb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x54, 0x14, 0x0, 0x0, {{0x8}, {0x4}, {0x2a, 0x6, "59b69513e97e708c0dc836f724775dbb59b2f21e013426759c817a1bd718849baa0b9d47756c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2m8.318786908s ago: executing program 1 (id=371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
umount2(&(0x7f0000000040)='.\x00', 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0)

2m8.160301792s ago: executing program 1 (id=372):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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")
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000000c0))
open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100)

2m7.745921982s ago: executing program 1 (id=376):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0)

2m7.35938817s ago: executing program 1 (id=380):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000340)={0x5, {{0x2, 0x800, @multicast2}}, {{0x2, 0x3ff, @local}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

2m6.837003469s ago: executing program 1 (id=382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

2m6.659811946s ago: executing program 34 (id=382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

2m1.032651964s ago: executing program 4 (id=359):
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000006c0)=[{0x3, '\x00', @st={0x4, [{0x0, @svalue=0x1793}, {0x0, @uvalue=0x7}, {0x3, @svalue=0x7f}, {0x1, @svalue=0x568e7c1f}]}, 0x200000}, {0x30, '\x00', @st={0x4, [{0x0, @svalue=0x2}, {0x1, @svalue=0x4}, {0x0, @svalue=0x1}, {0x3, @svalue=0x2}]}, 0x33}, {0x1b, '\x00', @data=0x80000000, 0x9b10}, {0x1c, '\x00', @buffer={"ead7dffb18d982c631d10a62b0ee1278281d6a7d0fd55adc4ed01cc438021276", 0x20}, 0x2}]})

2m0.886845306s ago: executing program 4 (id=405):
r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
chdir(&(0x7f00000000c0)='./sys\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0)

2m0.809237893s ago: executing program 4 (id=406):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYRESDEC=r0], 0x1, 0x153e, &(0x7f00000034c0)="$eJzs3AuYTtX6APD3XWvtMSS+JrkMa6138yWXRZLkkiSXJEmSJLeEJMmRhMQQkjQkIbkMSQwhuUxMGvf7/ZKQJE2S5JZbsv7PxDxOp3pO5386Oc+Z9/c8+5n1fnuvtd+93++y9v5m5tuuQ2s2rlWtIRHBvwUv/kgAgFgAGAgAuQEgAIByceXiMtZnl5jw7+2E/bkeTL7SGbArieuftXH9szauf9bG9c/auP5ZG9c/a+P6Z21cf8aysk3TClzDS9Zd+P5/Vsaf//9D0kuN/XJNqeu6AcT80S5c/6yN6/8/K/gjG3H9/3f8oYL/A65/VhV7pRNg/wX49Z8VZPvdNVz/rI3rz1hWdqXvP/9/lj8zd4j8l52DI9kvHtxffC4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLH/pDP+MgUAme0rnRdjjDHGGGOMMcb+PD7blc6AMcYYY4wxxhhj/3kIAiQoCCAGskEsZIccIADgasgFuSEC10AcXAt54DrIC/kgPxSAeCgIhUCDAQsEIRSGIhCF66Eo3ADFoDiUgJLgoBSUhhuhDNwEZeFmKAe3QHm4FSpARagEleE2qAK3Q1W4A6rBnVAdakBNqAV3QW24G+rAPVAX7oV6cB/Uh/uhATwADeFBaAQPQWN4GJrAI9AUmkFzaAEt/1/9n4ee8AL0gt6QAH2gL7wI/aA/DICXYCC8DIPgFRgMr0IiDIGh8BoMg9dhOLwBI2AkjII3YTS8BWNgLIyD8ZAEE2AivA2T4B2YDO/CFJgKyTANpsN7MANmwix4H2bDBzAH5sI8mA8p8CEsgIWQCh/BIvgY0mAxLIGlsAyWwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDvgEdsKnsAt2wx74DPbC5/9i/9P/0L8bAgIKFKhQYQzGYCzGYg7MgTkxJ+bCXBjBCMZhHObBPJgX82J+zI/xGI+FsBAaNEhIWBgLYxSjWBSLYjEshiWwBDp0WBpLYxm8CctiWSyH5bA8lscKWBErYmWsjFWwClbFqlgNq2F1rI41sSbehXdhH6yDdbAu1sV6WC/z9hQ2xIbYCBthY2yMTbAJNsWm2BybY0tsia2wFbbG1tgW22I7bIftsT12wA7YETtiJ+yEnbEzdsEu2BW7Yjfsjt3Tn88G+AK+gL2xuuiDfbEv9sPEbAPwJXwJX8ZB+Aq+gq9iIg7Bofgavoav43A8hSNwJI7CUVhFvIVjcCySGI9JmIQTcSJOwkmYkei7OBWTcRpOx+k4A2fiTHwfZ+MH+AHOxbk4H1MwBRfgQkzFVFyEpzENF+MSXIrLcDkuw5W4ClfiGlyLa3A9rseNuBE342bciltxO27HT1AB4Ke4G3djIu7FvbgP9+F+3I8H8ACmYzoexIN4CA/hYTyMR/AIHsVjeByP4Uk8iafwNJ7BM3gOz+F5fDb+60afFF+dCCKDEkrEiBgRK2JFDpFD5BQ5RS6RS0RERMSJOJFH5BF5RV6RX+QX8SJeFBKFhBFGkAhjAEBERVQUFUVFMVFMlBAlhBNOlBalRRlRRpQVZUU5cYsoL24VFURF0cZVFpVFFdHWVRV3iGqimqguaoiaopaoJWqL2qKOqCPqirqinqgn6ov7RQPRBwfggyKjMo3FEGwihmJT0UzIS+9grcRwbC3aiLbicTESR2B70cp1EE+JjmIMdhJ/E2PxGdFFjMeu4jnRTXQXPcTzoqdo7XqJ3mIy9hF9xVTsJ/qLAeIlMQNriPdxdvaa4lWRKIaIoeI1MR9fF8PFG2KEGClGiTfFaPGWGCPGinFivEgSE8RE8baYJN4Rk8W7YoqYKpLFNDFdvCdmiJlilnhfzBYfiDlirpgn5osU8aFYIBaKVPGRWCQ+FmlisVgiloplYrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFp2KX2C32iM/EXvG52Ce+EPvFl+KA+Eqki6/FQfGNOCS+FYfFd+KI+F4cFcfEcXFCnBQ/iFPitDgjzopz4kdxXvwkLggvQKIUUkolAxkjs8lYmV3mkFfJnDK4dHavkXHyWplHXifzynwyvywg42VBWUhqaaSVJENZWBaRUXm9LCpvkMVkcVlClpROlpKl5Y2yjLxJlpU3y3LyFlle3ioryIqykqwsb5NV5O0SIhf3UV3WkDVlLXmXTIC7ZR15j6wr75X15H2yvrxfNpAPyIbyQdlIPiQby4dlE/mIbCqbyeayhWwpH5Wt5GOytWwj28rHZTv5hGwvn5Qd5FOyo/SXniLPyC7yWdlVPie7ye6yh/xJXpBe9pK9JfQB2Ve+KPvJ/nJALADIl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crJ8V06RU2WynCYHyIE/jzRLyn/a/+3f6D/4571vlJvkZrlFbpXb5Ha5Q34id8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMl2my4PyoDwkD8nD8rA8Io/Io/KYPCtPyJPyB3lKnpan5Vl5Tp6T5y+dA1CohJJKqUDFqGwqVmVXOdRVKqe6WuVSuVVEXaPi1LUqj7pO5VX5VH5VQMWrgqqQ0sooq0iFqrAqoqLqerz0hFElVEnlVClVWt34r/RXRdUNqpgq/ov+mfkl/E5+LVVL1Uq1Uq1Va9VWtVXtVDvVXrVXHVQH1VF1VJ1UJ9VZdVZdVBfVVXVV3VQ31UP1UD1VT9VL9VIJKkH1VS+qfqq/GqBeUgPVy2qQGqQGq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqipqiklWymq6mqxlqhpqlZqnZaraao+aoeWqeSlEpaoFaoFJVqlqkFqk0tVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV2lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqDSVbo6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6qU6qU+qUOqPOqHPqnDqvzqsL6kLGtC8QgQhUoIKYICaIDWKDHEGOIGeQM8gV5AoiQSSIC+KCPMF1Qd4gX5A/KBDEBwWDQoEOTGADcano0eD6oGhwQ1AsKB6UCEoGLigVlA5uDMoENwVlg5uDcsEtQfng1qBCUDGoFFQObguqBLcHVYM7gmrBnUH1oEZQM6iV+ZYD9wR1g3uDesF9Qf3g/qBB8EDQMHgwaBQ8FDQOHg6aBI8ETYNmQfOgRdDyXxr/rqB2cHdQJ/i98b0/le8x10v31gm6j+6rX9T9dH89QL+kB+qX9SD9ih6sX9WJeogeql/Tw/Trerh+Q4/QI/Uo/aYerd/SY/RYPU6P10l6gp6o39aT9Dt6sn5XT9FTdbKepqfr9/QMPVPP0u/r2foDPUfP1fP0fJ2iP9QL9EKdqj/Si/THOk0v1kv0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/Qneqf+VO/Su/Ue/Zneqz/X+/QXer/+Uh/QX+l0/bU+qL/Rh/S3+rD+Th/R3+uj+pg+rk/ok/oHfUqf1mf0WX1O/6jP65/0Be0zJvcZH+9GGWViTIyJNbEmh8lhcpqcJpfJZSImYuJMnMlj8pi8Jq/Jb/KbeBNvCplCJgMZMoVNYRM1UVPUFDXFTDFTwpQwzjhT2pQ2ZUwZU9aUNeVMOVPelDcVTAVTyVQyt5nbzO3mdnOHucPcae40NUwNU8vUMrVNbVPH1DF1TV1Tz9Qz9U1908A0MA1NQ9PINDKNTWPTxDQxTU1T09w0Ny1NS9PKtDKtTWvT1rQ17Uw70960Nx1MB9PRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyCSbB9DV9TT/TzwwwA8xAM9AMMoPMYDPYJJpEM9QMNcPMMDPcDDcjzEgzKmOiat4yY8xYM86MN0kmyUw0E80kM8lMNpPNFDPFJJtkM91MNzPMDDPLzDKzzWwzx8wx88w8k2JSzAKzwKSaVLPILDJpJs0sMUvMMrPMrDArzCqzyqwxa8w6WGc2mA1mk9lktpgtZpvZZnaYHWan2Wl2mV1mj9lj9pq9Zp/ZZ/ab/eaAOWDSTbo5aA6aQ+aQOWwOmyPmiDlqjprj5rg5aU6aU+aUOWPOmHMm36XPS29ibXabw15lc9qrbS6b2/5jnN8WsPG2oC1ktc1r8/0iNtbaYra4LWFLWmdL2dL2xl/FFWxFW8lWtrfZKvZ2W/VXcW17t61j77F17b22lr3rF3E9e5+tbx+2DRABbDPbyLawje3Dtol9xDa1zWxz28K2s0/Y9vZJ28E+ZTvap38VL7AL7Sq72q6xa+0uu9uesWftIfutPWd/tL1sbzvQvmwH2VfsYPuqTbRDfhWPsm/a0fYtO8aOtePs+F/FU+xUm2yn2en2PTvDzvxVnGI/tLNtqp1j59p5dv7PcUZOqfYju8h+bNNsAEvsUrvMLrcr7MrMXH1uu95usBvtTvup3WK32m12u92RORG2u+0e+5ndaz+3B+03dr/90h6wh226/frnOOP4Dtvv7BH7vT1qj9nj9oQ9aX9Qmb0zjv2E/clesN4CIQFJUhRQDGWjWMpOOegqyklXUy7KTRG6huLoWspD11Feykf5qQDFU0EqRJoMWSIKqTAVoShdT5nplaCS5KgUlaYbqQzdRGXpZipHt1B5upUqUEWqRJXpNqpCt1NVuoOq0Z1UnWpQTapFd1Ftupvq0D1Ul+6lenQf1af7qQE9QA3pQWpED1Fjepia0CPUlJpRc2pBLelRakWPUWtqQ23pcWpHT1B7epI60FPUkZ6mTvQ36kzPUBd6lrrSc9SNulMPep560gvUi3pTAvWhvvQi9aP+NIBeooH0Mg2iV2gwvUqJNISG0ms0jF6n4fQGjaCRNIrepNH0Fo2hsTSOxlMSTaCJ9DZNondoMr1LU2gqJdM0mk7v0QyaSbPofZpNH9AcmkvzaD6l0Ie0gBZSKn1Ei+hjSqPFtISW0jJaTitoJa2i1bSG1tI6Wk8baCNtos20hbbSNtpOO+gT2kmf0i7aTXvoM9pLn9M++oL205d0gL6idPqaDtI3dIi+pcP0ne9N39NROkbH6QSdpB/oFJ2mM3SWztGPdJ5+ogvkCUIMRShDFQZhTJgtjA2zhznCq8Kc4dVhrjB3GAmvCePCa8M84XVh3jBfmD8sEMaHBcNCoQ5NaEMKw7BwWCSMhteHRcMbwmJh8bBEWDJ0YamwdHhjWCa8KSwb3hyWC28Jy4e3hhXCiuHD91YObwurhLeHVcM7wmrhnWH1sEZYM6wV3hXWDu8O64T3hHXDe8Oy4X1h/fD+sEH4QNgwfDBsFD4UNg4fDpuEj4RNw2Zh87BF2DJ8NGwVPha2DtuEbcPHw3bhE2H78MmwQ/hU2DF8+uf19y38/fUJYZ+wb/hi+GLo/T1yXnR+NCX6YXRBdGE0NfpRdFH042hadHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH10Q3Rj1Pta2cChE0465QIX47K5WJfd5XBXuZzuapfL5XYRd42Lc9e6PO46l9flc/ldARfvCrpCTjvjrCMXusKuiIu6611Rd4Mr5oq7Eq6kc66UK+1auJaupWvlHnOtXRvX1j3uHndPuCfck+5J95Tr6J52ndzfXGf3jOvinnXPuudcN9fd9XDPu55uQq6Lr8kE19f1df1cPzfADXAD3UA3yA1yg91gl+gS3VA31A1zw9xwN9yNcCPcKDfKjXaj3Rg3xo1z41ySS3IT3UQ3yU1yk91kN8VNccku2U13090MN8NVmXlxL3PcHDfPzXMpLsUtcBlzxlS3yC1yaS7NLXFL3DK3zK1wK9wqt8qtcWvcOrfObXAb3Ca3yW1xW9w2t83tcDvcTrfT7fK5Lw7q9rp9bp/b7/a7A+4rl+6+dgfdN+6Q+9Yddt+5I+57d9Qdc8fdCXfS/eBOudPujDvrzrkf3Xn3k7vgvEuKTIhMjLwdmRR5JzI58m5kSmRqJDkyLTI98l5kRmRmZFbk/cjsyAeROZG5kXmR+ZGUyIeRBZGFkdTIR5FFkY8jaZHFkSWRpZFlkeUR7wtuCX1hX8RH/fW+qL/BF/PFfQlf0jtfypf2N/oy/iZf1t/sy/lbfHl/q6/gK/pK/hHf1DfzzX0L39I/6lv5x3xr38a39Y/7dv4J394/6Tv4p3xH/7Tv5P/mO/tnfBf/rO/qn/PdfHffwz/ve/oXfC/f2yf4Pr6vf9H38/39AP+SH+hf9oP8K36wf9Un+iF+qH/ND/Ov++H+DT/Cj/SjYt70ozMvkWG8T/IT/ET/tp/k3/GT/bt+ip/qk/00P92/52f4mX6Wf9/P9h/4OX6un+fn+xT/oV/gF/pU/5Ff5D/2aX5x5gTer/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wn/id/lO/y+/2e/xnfq//3O/zX/j9/kt/wH/l0/3X/qD/xh/y3/rD/jt/xH/vj/pj/rg/4U/6H/wpf9qf8Wf9Of+jP+9/8hf4b9YYY4wxxv6QCZeb4pdrLt7O7/MbfcTfbdwXAK7eWiD979dnzCjX5b3Y7i/i20UA4KneXR/MXKpXT0hIuLRtmoSgyFyAzG+CMsTA5XgxtIUnoAO0gTK/mX9/0f0c/ZPxo7cA5Pi7PrFwOV4MeOn+xxcAmPAb4z/6+KgF5cMzcRfHzvxC+hfjzwUoVuRyn+xwOV4MbX8evw2U/Z3887X6J/ln/zIJoPXf9ckJl+PL56c0PAZPQ4dfbMkYY4wxxhhjjF3UX1TqnHn9mfnrV791fR6vLvfJuATOjP/Z9TljjDHGGGOMMcauvGe693jy0Q4d2nT+1xtV/1+9/nCjCfynRubGbza8B8h8RAHAvzkgQEZD/pVHsfkv2VfipZfOP65adtYH8N9Ryj+jcYXfmBhjjDHGGGN/usuT/l8+rq5UQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWBb0V/w7sSt9jIwxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8BAAD//1YR9lo=")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x4020, &(0x7f00000001c0)={[{@max={'max', 0x3d, 0x1}}]})
read$FUSE(r1, &(0x7f00000024c0)={0x2020}, 0x939)

2m0.715566858s ago: executing program 4 (id=407):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x44, 0x25, 0x5, 0x0, 0x0, {0x3}, [@generic="300001800c0001006e66736400000000140002003132372e302e302e31000000000000000c000300ffffff7f00000000"]}, 0x44}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, 0x25, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

2m0.35921449s ago: executing program 4 (id=408):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, &(0x7f0000001f00))

2m0.19468054s ago: executing program 35 (id=408):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_mreq(r0, 0x29, 0x7, 0x0, &(0x7f0000001f00))

2.506162447s ago: executing program 5 (id=1629):
prctl$PR_MCE_KILL(0x21, 0x1, 0x3fe12361270d6ea4)

2.426127214s ago: executing program 5 (id=1630):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
ioperm(0x1000, 0x1000, 0x8000000000000001)

2.425838549s ago: executing program 5 (id=1631):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x66f3e000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0)

2.322828895s ago: executing program 5 (id=1632):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1b)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001880)='\'', 0x1}], 0x1)

2.322647592s ago: executing program 5 (id=1633):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x32)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0)
open(&(0x7f00000000c0)='./dev/ttyUSB0\x00', 0x4000, 0x106)

1.154270017s ago: executing program 6 (id=1642):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28)

1.025522112s ago: executing program 6 (id=1646):
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000480)={[{@rodir}, {@numtail}, {@rodir}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@utf8no}, {@fat=@fmask={'fmask', 0x3d, 0x7ff}}, {@fat=@flush}, {@shortname_winnt}]}, 0x81, 0x2d5, &(0x7f0000000b80)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)

760.557563ms ago: executing program 6 (id=1648):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000180)="a49f20db93580dd600de0bc4", 0xc)

706.898903ms ago: executing program 6 (id=1649):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x86, 0x680, &(0x7f0000000340)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)

619.285002ms ago: executing program 6 (id=1650):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005200010000000000930000001c000000080001"], 0x1c}}, 0x0)

557.203663ms ago: executing program 3 (id=1651):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1)
fchown(r0, 0xee00, 0xee01)

507.780818ms ago: executing program 6 (id=1652):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='1\n', 0x2)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280), 0x0)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x2, 0x0)
write(r2, &(0x7f0000000300)='1\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0)
write(r3, &(0x7f0000000380)='8\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/hid.usb0/report_desc\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)="05010906a101050719e029e71500250175019508810295017508810195057501050819012905910295017503910195067508150025650507190029658100", 0x3e)
close(r4)
symlinkat(&(0x7f0000000440)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='dummy_udc.0\n', 0xc)
close(r5)
nanosleep(&(0x7f0000000540)={0x1}, 0x0)
r6 = syz_open_dev$hidraw(&(0x7f0000000580), 0x0, 0x2)
write$hidraw(r6, &(0x7f00000005c0)='12345678', 0x8)

468.405238ms ago: executing program 5 (id=1653):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x1}]}}}, 0x8)
nanosleep(0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

377.554546ms ago: executing program 3 (id=1654):
r0 = io_uring_setup(0x4d3f, &(0x7f0000000200)={0x0, 0x297a, 0x40, 0x80003, 0x7})
io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000004e80)=[{0x0, 0x0, 0x0}, {0x0, 0x1, 0x0}], 0x2)

281.27408ms ago: executing program 3 (id=1655):
futex_waitv(&(0x7f0000000e00)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000000ec0)={0x77359400}, 0x2)

281.090706ms ago: executing program 3 (id=1656):
madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)

56.33588ms ago: executing program 3 (id=1657):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r0], 0x30}, 0x4004000)

0s ago: executing program 3 (id=1658):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a80)={<r1=>0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x0, 0x88}, 0x90)

kernel console output (not intermixed with test programs):

_pfx___x64_sys_poll+0x10/0x10
[  158.591627][ T8213]  do_syscall_64+0x166/0x520
[  158.591639][ T8213]  ? trace_irq_disable+0x3b/0x140
[  158.591648][ T8213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.591659][ T8213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.591668][ T8213] RIP: 0033:0x7f362499e159
[  158.591679][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.591687][ T8213] RSP: 002b:00007f362581c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  158.591698][ T8213] RAX: ffffffffffffffda RBX: 00007f3624c25fa0 RCX: 00007f362499e159
[  158.591704][ T8213] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00002000000005c0
[  158.591711][ T8213] RBP: 00007f3624a3506b R08: 0000000000000000 R09: 0000000000000000
[  158.591721][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.591729][ T8213] R13: 00007f3624c26038 R14: 00007f3624c25fa0 R15: 00007ffe72badf38
[  158.591753][ T8213]  </TASK>
[  158.640697][ T8213] syz.3.914: vmalloc error: size 4096, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  158.640769][ T8213] CPU: 0 UID: 0 PID: 8213 Comm: syz.3.914 Not tainted syzkaller #0 PREEMPT(full) 
[  158.640787][ T8213] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.640797][ T8213] Call Trace:
[  158.640804][ T8213]  <TASK>
[  158.640811][ T8213]  dump_stack_lvl+0xe8/0x150
[  158.640838][ T8213]  warn_alloc+0x24d/0x270
[  158.640855][ T8213]  ? lockdep_hardirqs_on+0x7b/0x110
[  158.640867][ T8213]  ? __pfx_warn_alloc+0x10/0x10
[  158.640879][ T8213]  ? kfree+0x1c5/0x650
[  158.640892][ T8213]  ? __get_vm_area_node+0x219/0x2f0
[  158.640906][ T8213]  __vmalloc_node_range_noprof+0x376/0x1560
[  158.640931][ T8213]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  158.640943][ T8213]  ? __kasan_kmalloc+0x93/0xb0
[  158.640953][ T8213]  ? __kmalloc_cache_noprof+0x321/0x600
[  158.640967][ T8213]  vmalloc_user_noprof+0xad/0xe0
[  158.640978][ T8213]  ? vb2_vmalloc_alloc+0xef/0x360
[  158.640988][ T8213]  vb2_vmalloc_alloc+0xef/0x360
[  158.640996][ T8213]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  158.641006][ T8213]  __vb2_queue_alloc+0xa0b/0x1660
[  158.641029][ T8213]  vb2_core_reqbufs+0xc3f/0x1470
[  158.641048][ T8213]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  158.641063][ T8213]  ? __kmalloc_cache_noprof+0x14d/0x600
[  158.641074][ T8213]  ? __vb2_init_fileio+0x1e2/0x1040
[  158.641083][ T8213]  ? __vb2_init_fileio+0x1e2/0x1040
[  158.641094][ T8213]  __vb2_init_fileio+0x310/0x1040
[  158.641129][ T8213]  vb2_core_poll+0x4e2/0x830
[  158.641140][ T8213]  vb2_fop_poll+0x196/0x310
[  158.641151][ T8213]  ? __pfx_vb2_fop_poll+0x10/0x10
[  158.641161][ T8213]  v4l2_poll+0x147/0x2c0
[  158.641169][ T8213]  ? __pfx_v4l2_poll+0x10/0x10
[  158.641178][ T8213]  do_sys_poll+0x990/0x1110
[  158.641197][ T8213]  ? __pfx_do_sys_poll+0x10/0x10
[  158.641206][ T8213]  ? futex_unqueue+0x22/0x240
[  158.641222][ T8213]  ? futex_unqueue+0x22/0x240
[  158.641233][ T8213]  ? __pfx___pollwait+0x10/0x10
[  158.641243][ T8213]  ? __pfx_pollwake+0x10/0x10
[  158.641275][ T8213]  ? __pfx_futex_wait+0x10/0x10
[  158.641290][ T8213]  ? ktime_get_ts64+0xa9/0x410
[  158.641310][ T8213]  ? __pfx_timespec64_add_safe+0x10/0x10
[  158.641325][ T8213]  __x64_sys_poll+0x190/0x360
[  158.641335][ T8213]  ? __pfx___x64_sys_poll+0x10/0x10
[  158.641349][ T8213]  do_syscall_64+0x166/0x520
[  158.641358][ T8213]  ? trace_irq_disable+0x3b/0x140
[  158.641366][ T8213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.641376][ T8213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.641385][ T8213] RIP: 0033:0x7f362499e159
[  158.641395][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  158.641403][ T8213] RSP: 002b:00007f362581c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  158.641412][ T8213] RAX: ffffffffffffffda RBX: 00007f3624c25fa0 RCX: 00007f362499e159
[  158.641419][ T8213] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 00002000000005c0
[  158.641424][ T8213] RBP: 00007f3624a3506b R08: 0000000000000000 R09: 0000000000000000
[  158.641430][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.641436][ T8213] R13: 00007f3624c26038 R14: 00007f3624c25fa0 R15: 00007ffe72badf38
[  158.641450][ T8213]  </TASK>
[  158.658357][ T8213] Mem-Info:
[  158.658367][ T8213] active_anon:15069 inactive_anon:0 isolated_anon:0
[  158.658367][ T8213]  active_file:1 inactive_file:58901 isolated_file:0
[  158.658367][ T8213]  unevictable:1000 dirty:193 writeback:0
[  158.658367][ T8213]  slab_reclaimable:10778 slab_unreclaimable:86743
[  158.658367][ T8213]  mapped:19202 shmem:8599 pagetables:1317
[  158.658367][ T8213]  sec_pagetables:0 bounce:0
[  158.658367][ T8213]  kernel_misc_reclaimable:0
[  158.658367][ T8213]  free:1103781 free_pcp:21674 free_cma:0
[  158.658393][ T8213] Node 0 active_anon:35216kB inactive_anon:0kB active_file:4kB inactive_file:45120kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:50888kB dirty:112kB writeback:0kB shmem:20396kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3360kB pagetables:2588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  158.658418][ T8213] Node 1 active_anon:25060kB inactive_anon:0kB active_file:0kB inactive_file:190484kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:25920kB dirty:660kB writeback:0kB shmem:14000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9920kB pagetables:2680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  158.658443][ T8213] Node 0 DMA free:15360kB boost:0kB min:240kB low:300kB high:360kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  158.658470][ T8213] lowmem_reserve[]: 0 1581 2111 2111 2111
[  158.658486][ T8213] Node 0 DMA32 free:1539496kB boost:0kB min:24948kB low:31184kB high:37420kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:2080636kB managed:1619652kB mlocked:0kB bounce:0kB free_pcp:18508kB local_pcp:10468kB free_cma:0kB
[  158.658514][ T8213] lowmem_reserve[]: 0 0 529 529 529
[  158.658537][ T8213] Node 0 Normal free:41596kB boost:0kB min:8512kB low:10640kB high:12768kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35208kB inactive_anon:0kB active_file:4kB inactive_file:45120kB unevictable:2000kB writepending:112kB zspages:0kB present:1572868kB managed:542452kB mlocked:0kB bounce:0kB free_pcp:9824kB local_pcp:9816kB free_cma:0kB
[  158.658661][ T8213] lowmem_reserve[]: 0 0 0 0 0
[  158.658690][ T8213] Node 1 Normal free:2818672kB boost:0kB min:56408kB low:70508kB high:84608kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25060kB inactive_anon:0kB active_file:0kB inactive_file:190484kB unevictable:2000kB writepending:660kB zspages:0kB present:3670012kB managed:3594688kB mlocked:0kB bounce:0kB free_pcp:58364kB local_pcp:27700kB free_cma:0kB
[  158.658732][ T8213] lowmem_reserve[]: 0 0 0 0 0
[  158.658758][ T8213] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  158.658839][ T8213] Node 0 DMA32: 6*4kB (M) 8*8kB (UM) 7*16kB (UM) 13*32kB (UM) 11*64kB (UM) 7*128kB (UM) 13*256kB (UM) 10*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 371*4096kB (UM) = 1539496kB
[  158.658909][ T8213] Node 0 Normal: 309*4kB (UE) 427*8kB (UME) 173*16kB (UME) 38*32kB (UM) 1*64kB (U) 31*128kB (UM) 37*256kB (UM) 16*512kB (UM) 11*1024kB (UM) 0*2048kB 0*4096kB = 41596kB
[  158.658975][ T8213] Node 1 Normal: 4*4kB (E) 654*8kB (UME) 577*16kB (UME) 459*32kB (UME) 268*64kB (UME) 79*128kB (UME) 46*256kB (UME) 12*512kB (UME) 2*1024kB (ME) 3*2048kB (UM) 668*4096kB (UM) = 2818672kB
[  158.678238][ T8213] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  158.678247][ T8213] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  158.678254][ T8213] 67802 total pagecache pages
[  158.678259][ T8213] 0 pages in swap cache
[  158.678262][ T8213] Free swap  = 124996kB
[  158.678265][ T8213] Total swap = 124996kB
[  158.678270][ T8213] 1834877 pages RAM
[  158.678273][ T8213] 0 pages HighMem/MovableOnly
[  158.678276][ T8213] 391839 pages reserved
[  158.678279][ T8213] 0 pages cma reserved
[  158.777892][ T8203] loop5: detected capacity change from 0 to 32768
[  158.822628][ T8203] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  158.885767][ T8203] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  158.896419][ T8203] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[  158.925755][ T8203] XFS (loop5): Ending clean mount
[  158.999864][ T5028] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  159.019278][ T8203] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x19d/0x1560, inode 0x1803 dinode
[  159.019309][ T8203] XFS (loop5): Unmount and run xfs_repair
[  159.019315][ T8203] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  159.019323][ T8203] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  159.019330][ T8203] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  159.019337][ T8203] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  159.019343][ T8203] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  159.019349][ T8203] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  159.019355][ T8203] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  159.019361][ T8203] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  159.019367][ T8203] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  159.155050][ T5028] usb 7-1: unable to get BOS descriptor or descriptor too short
[  159.155143][ T5028] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  159.156256][ T5028] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.156276][ T5028] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  159.156308][ T5028] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  159.156364][ T5028] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  159.156393][ T5028] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  159.156414][ T5028] usb 7-1: config 1 interface 1 has no altsetting 0
[  159.162640][ T5028] usb 7-1: string descriptor 0 read error: -22
[  159.162710][ T5028] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.566838][ T5028] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[  159.566891][ T5028] usb 7-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  159.567305][ T5028] usb 7-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  159.589579][ T6720] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.911931][   T34] audit: type=1400 audit(1790000104.601:39): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="%#{//(@\)//&@}" pid=8238 comm="syz.5.922"
[  160.003258][ T8245] profile_transition: unconfined exec no attachment
[  160.003721][ T8245] apparmor_bprm_creds_for_exec: label build failed
[  160.038226][ T8246] profile_transition: unconfined exec no attachment
[  160.040621][ T8246] apparmor_bprm_creds_for_exec: label build failed
[  160.060095][ T5028] usb 7-1: 2:0: failed to get current value for ch 1 (-71)
[  160.104707][ T8249] profile_transition: unconfined exec no attachment
[  160.104778][ T8249] apparmor_bprm_creds_for_exec: label build failed
[  160.123433][ T5028] usb 7-1: USB disconnect, device number 14
[  160.138590][ T8251] profile_transition: unconfined exec no attachment
[  160.138664][ T8251] apparmor_bprm_creds_for_exec: label build failed
[  160.189068][ T8252] profile_transition: unconfined exec no attachment
[  160.189129][ T8252] apparmor_bprm_creds_for_exec: label build failed
[  160.232135][ T8253] profile_transition: unconfined exec no attachment
[  160.232220][ T8253] apparmor_bprm_creds_for_exec: label build failed
[  160.270024][ T8257] profile_transition: unconfined exec no attachment
[  160.270080][ T8257] apparmor_bprm_creds_for_exec: label build failed
[  160.299399][ T8258] profile_transition: unconfined exec no attachment
[  160.300820][ T8258] apparmor_bprm_creds_for_exec: label build failed
[  160.341325][ T8261] profile_transition: unconfined exec no attachment
[  160.342594][ T8261] apparmor_bprm_creds_for_exec: label build failed
[  160.397319][ T8265] profile_transition: unconfined exec no attachment
[  160.397401][ T8265] apparmor_bprm_creds_for_exec: label build failed
[  160.586208][ T8278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.934'.
[  160.688206][ T8288] loop6: detected capacity change from 0 to 1024
[  160.688784][ T8288] EXT4-fs: Ignoring removed bh option
[  160.689226][ T8288] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  160.689263][ T8288] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  160.691130][ T8288] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #3: comm syz.6.939: blocks 1-2 from inode overlap system zone
[  160.691147][ T8288] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  160.691272][ T8288] EXT4-fs (loop6): Remounting filesystem read-only
[  160.691339][ T8288] EXT4-fs (loop6): failed to initialize system zone (-117)
[  160.691373][ T8288] EXT4-fs (loop6): mount failed
[  161.049477][ T5028] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  161.210745][ T5028] usb 6-1: Using ep0 maxpacket: 8
[  161.211548][ T5028] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  161.214505][ T5028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.235900][ T5028] usb 6-1: config 0 descriptor??
[  161.244202][ T5028] usb 6-1: probing VID:PID(0424:012C)   
[  161.261853][ T5028] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs
[  161.263483][ T5028] vub300 6-1:0.0: probe with driver vub300 failed with error -22
[  161.480186][ T5028] usb 6-1: USB disconnect, device number 11
[  161.567730][ T8313] loop3: detected capacity change from 0 to 32768
[  161.575760][ T8313] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.602625][ T8313] XFS (loop3): Ending clean mount
[  161.609832][ T8313] XFS (loop3): Quotacheck needed: Please wait.
[  161.668885][ T8313] XFS (loop3): Quotacheck: Done.
[  161.701397][ T6513] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.215887][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'.
[  162.256568][ T5655] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  162.321123][ T8345] loop6: detected capacity change from 0 to 2048
[  162.357603][ T8345]  loop6: p2 < > p3 < p5 > p4
[  162.357671][ T8345] loop6: partition table partially beyond EOD, truncated
[  162.370588][ T8345] loop6: p2 start 4278190080 is beyond EOD, truncated
[  162.397853][ T8345] loop6: p4 size 8192 extends beyond EOD, truncated
[  162.400925][ T5655] usb 6-1: Using ep0 maxpacket: 16
[  162.405808][ T5655] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  162.413933][ T5655] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.413992][ T5655] usb 6-1: config 0 interface 0 has no altsetting 0
[  162.414026][ T5655] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.428352][ T5655] usb 6-1: config 0 descriptor??
[  162.441042][ T8345] loop6: p5 size 8192 extends beyond EOD, truncated
[  162.501506][ T8345] netlink: 'syz.6.962': attribute type 4 has an invalid length.
[  162.536434][ T8345] netlink: 'syz.6.962': attribute type 4 has an invalid length.
[  162.862060][ T5655] mcp2221 0003:04D8:00DD.000A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  162.939493][ T8358] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  163.143659][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  163.143659][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  163.143722][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  163.224788][ T5708] usb 6-1: USB disconnect, device number 12
[  163.544737][ T8381] fuse: Bad value for 'fd'
[  163.636488][ T8385] tipc: Cannot configure node identity twice
[  163.644340][ T8385] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  163.648533][ T8385] tipc: Resetting bearer <eth:syz_tun>
[  163.688297][ T8385] tipc: Disabling bearer <eth:syz_tun>
[  163.788427][ T8389] netlink: 'syz.5.982': attribute type 11 has an invalid length.
[  164.088576][ T5656] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  164.240376][ T5656] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  164.241736][ T5656] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  164.241767][ T5656] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  164.244516][ T5656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  164.244538][ T5656] usb 6-1: SerialNumber: syz
[  164.275490][ T5656] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  164.286393][ T5656] usb-storage 6-1:1.0: USB Mass Storage device detected
[  164.303783][ T5656] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  164.305739][ T5656] scsi host6: usb-storage 6-1:1.0
[  164.472675][ T5656] usb 6-1: USB disconnect, device number 13
[  164.476384][ T4238] rpcbind: server 127.0.0.1 not responding, timed out
[  165.207457][   T34] audit: type=1326 audit(1790000110.165:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8406 comm="syz.6.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7fc00000
[  165.274155][   T34] audit: type=1326 audit(1790000110.238:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8406 comm="syz.6.988" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f999299e159 code=0x7fc00000
[  165.289400][   T34] audit: type=1326 audit(1790000110.259:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8406 comm="syz.6.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7fc00000
[  165.451656][ T8420] netlink: 165 bytes leftover after parsing attributes in process `syz.6.994'.
[  165.498458][   T33] hid_parser_main: 4007 callbacks suppressed
[  165.502183][   T33] hid-generic 0006:79D90A04:10000.000B: unknown main item tag 0x0
[  165.515717][   T33] hid-generic 0006:79D90A04:10000.000B: hidraw0: VIRTUAL HID v7f.ff Device [syz0] on syz1
[  165.619790][ T8429] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  165.836922][ T8432] loop6: detected capacity change from 0 to 32768
[  165.873715][ T8432] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  165.891148][ T8432] XFS (loop6): Ending clean mount
[  166.025297][ T6892] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  166.253279][ T8462] evm: overlay not supported
[  166.348283][ T8464] loop6: detected capacity change from 0 to 512
[  166.391215][ T8467] profile_transition: 1 callbacks suppressed
[  166.393997][ T8467] profile_transition: unconfined exec no attachment
[  166.394039][ T8467] apparmor_bprm_creds_for_exec: 1 callbacks suppressed
[  166.394261][ T8467] apparmor_bprm_creds_for_exec: label build failed
[  166.512927][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1015'.
[  166.518552][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1015'.
[  166.623250][ T8486] loop3: detected capacity change from 0 to 512
[  166.630495][ T8486] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  166.647533][ T8486] EXT4-fs (loop3): 1 truncate cleaned up
[  166.650553][ T8486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.662939][ T8483] loop5: detected capacity change from 0 to 8192
[  166.820838][ T8493] netlink: 'syz.6.1022': attribute type 2 has an invalid length.
[  166.820902][ T8493] netlink: 'syz.6.1022': attribute type 2 has an invalid length.
[  166.954009][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1025'.
[  167.025340][ T6513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.070553][ T8503] xt_addrtype: ipv6 does not support BROADCAST matching
[  167.106093][ T8505] loop5: detected capacity change from 0 to 128
[  167.253268][ T8511] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.1031'.
[  167.416142][   T34] audit: type=1326 audit(1790000112.485:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7639e159 code=0x7ffc0000
[  167.427365][   T34] audit: type=1326 audit(1790000112.495:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7639e159 code=0x7ffc0000
[  167.436146][   T34] audit: type=1326 audit(1790000112.506:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7639e159 code=0x7ffc0000
[  167.436213][   T34] audit: type=1326 audit(1790000112.506:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7639e159 code=0x7ffc0000
[  167.444816][   T34] audit: type=1326 audit(1790000112.516:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4d7639e159 code=0x7ffc0000
[  167.444863][   T34] audit: type=1326 audit(1790000112.516:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4d7639dec2 code=0x7ffc0000
[  167.444919][   T34] audit: type=1326 audit(1790000112.516:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8518 comm="syz.5.1035" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4d7635e98e code=0x7ffc0000
[  167.472462][ T8519] loop5: detected capacity change from 0 to 2048
[  167.507644][ T8519] UDF-fs: error (device loop5): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  167.512619][ T8519] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  167.515956][ T8519] UDF-fs: Scanning with blocksize 512 failed
[  167.550171][ T8519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.943456][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  167.943456][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  167.943600][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  168.095306][ T8539] loop6: detected capacity change from 0 to 1024
[  168.198034][ T8541] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1045'.
[  168.259846][   T25] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  168.389025][ T8543] loop6: detected capacity change from 0 to 32768
[  168.404786][ T8543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1046 (8543)
[  168.414300][   T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  168.420930][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.420972][   T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.421005][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  168.421044][   T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.447203][   T25] usb 6-1: config 0 descriptor??
[  168.455761][ T8543] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.455846][ T8543] BTRFS info (device loop6): using sha256 checksum algorithm
[  168.476028][ T8555] profile_transition: unconfined exec no attachment
[  168.476172][ T8555] apparmor_bprm_creds_for_exec: label build failed
[  168.526020][ T8543] BTRFS info (device loop6): enabling ssd optimizations
[  168.526070][ T8543] BTRFS info (device loop6): turning on async discard
[  168.526359][ T8543] BTRFS info (device loop6): enabling free space tree
[  168.575453][ T8543] BTRFS info (device loop6): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  168.619842][ T5656] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  168.647644][ T6892] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.706432][ T8562] profile_transition: unconfined exec no attachment
[  168.706492][ T8562] apparmor_bprm_creds_for_exec: label build failed
[  168.786995][ T5656] usb 4-1: unable to get BOS descriptor or descriptor too short
[  168.790252][ T5656] usb 4-1: not running at top speed; connect to a high speed hub
[  168.790336][ T5656] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1
[  168.799946][ T5656] usb 4-1: config 160 has an invalid interface number: 168 but max is 0
[  168.799971][ T5656] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  168.799987][ T5656] usb 4-1: config 160 has no interface number 0
[  168.800020][ T5656] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84
[  168.800040][ T5656] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 65077, setting to 64
[  168.800061][ T5656] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0x23, changing to 0x3
[  168.800081][ T5656] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x3 has invalid maxpacket 2046, setting to 64
[  168.800100][ T5656] usb 4-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  168.800118][ T5656] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 920, setting to 64
[  168.800138][ T5656] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89
[  168.800157][ T5656] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  168.800175][ T5656] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid wMaxPacketSize 0
[  168.800191][ T5656] usb 4-1: config 160 interface 168 altsetting 8 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  168.800211][ T5656] usb 4-1: config 160 interface 168 has no altsetting 0
[  168.821990][ T5656] usb 4-1: string descriptor 0 read error: -22
[  168.822094][ T5656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.826578][ T8545] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  168.826720][ T8545] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  168.826914][ T8545] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  168.828369][ T5656] io_edgeport 4-1:160.168: EPiC device converter detected
[  168.828688][ T5656] usb 4-1:   detected
[  168.898837][   T25] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[  168.915175][   T25] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  169.091532][ T5656] usb 4-1: edge_startup - Error -90 submitting control urb
[  169.091861][ T5656] io_edgeport 4-1:160.168: probe with driver io_edgeport failed with error -90
[  169.150954][   T33] usb 6-1: USB disconnect, device number 14
[  169.287343][ T5656] usb 4-1: USB disconnect, device number 9
[  169.888411][ T8579] loop5: detected capacity change from 0 to 256
[  169.889393][ T8579] vfat: Unknown parameter ''
[  171.122226][ T8599] loop5: detected capacity change from 0 to 40427
[  171.126205][ T8599] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  171.128391][ T8599] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  171.131845][ T8599] F2FS-fs (loop5): invalid crc value
[  171.187154][ T8599] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  171.200262][ T8599] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  171.204002][ T8599] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  171.212009][   T34] kauditd_printk_skb: 19 callbacks suppressed
[  171.212065][   T34] audit: type=1800 audit(1790000116.474:69): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.1063" name="file1" dev="loop5" ino=10 res=0 errno=0
[  171.247130][ T6720] syz-executor: attempt to access beyond end of device
[  171.247130][ T6720] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  171.254496][ T6720] CPU: 0 UID: 0 PID: 6720 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  171.254538][ T6720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.254549][ T6720] Call Trace:
[  171.254557][ T6720]  <TASK>
[  171.254565][ T6720]  dump_stack_lvl+0xe8/0x150
[  171.254627][ T6720]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  171.254655][ T6720]  f2fs_write_end_io+0x1215/0x16f0
[  171.254676][ T6720]  ? blkg_put+0x22/0x240
[  171.254709][ T6720]  __submit_merged_bio+0x258/0x6a0
[  171.254726][ T6720]  ? rcu_is_watching+0x16/0xb0
[  171.254747][ T6720]  __submit_merged_write_cond+0x3c9/0x4e0
[  171.254776][ T6720]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  171.254816][ T6720]  f2fs_write_data_pages+0x2a27/0x36f0
[  171.254859][ T6720]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  171.254876][ T6720]  ? is_bpf_text_address+0x26/0x2b0
[  171.254903][ T6720]  ? arch_stack_walk+0xfb/0x150
[  171.254942][ T6720]  ? add_lock_to_list+0xc7/0x100
[  171.254962][ T6720]  ? lockdep_unlock+0x5c/0xd0
[  171.254982][ T6720]  ? __lock_acquire+0x13e8/0x2cf0
[  171.255016][ T6720]  ? do_raw_spin_lock+0x12b/0x2f0
[  171.255043][ T6720]  ? do_raw_spin_unlock+0x4d/0x200
[  171.255063][ T6720]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  171.255081][ T6720]  do_writepages+0x338/0x560
[  171.255111][ T6720]  ? do_raw_spin_unlock+0x4d/0x200
[  171.255134][ T6720]  filemap_fdatawrite+0x1e9/0x2f0
[  171.255153][ T6720]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  171.255200][ T6720]  ? do_raw_spin_unlock+0x4d/0x200
[  171.255223][ T6720]  f2fs_sync_dirty_inodes+0x30e/0x830
[  171.255253][ T6720]  f2fs_write_checkpoint+0xa3d/0x2710
[  171.255295][ T6720]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  171.255352][ T6720]  kill_f2fs_super+0x2dd/0x700
[  171.255376][ T6720]  ? __pfx_kill_f2fs_super+0x10/0x10
[  171.255401][ T6720]  ? call_rcu+0x64d/0x8b0
[  171.255432][ T6720]  ? lockdep_hardirqs_on+0x7b/0x110
[  171.255461][ T6720]  deactivate_locked_super+0xbc/0x110
[  171.255482][ T6720]  cleanup_mnt+0x3d3/0x460
[  171.255507][ T6720]  task_work_run+0x1d9/0x270
[  171.255526][ T6720]  ? __pfx_task_work_run+0x10/0x10
[  171.255550][ T6720]  exit_to_user_mode_loop+0x204/0x770
[  171.255567][ T6720]  ? rcu_is_watching+0x16/0xb0
[  171.255587][ T6720]  do_syscall_64+0x328/0x520
[  171.255638][ T6720]  ? trace_irq_disable+0x3b/0x140
[  171.255652][ T6720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.255672][ T6720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.255689][ T6720] RIP: 0033:0x7f4d7639f397
[  171.255705][ T6720] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  171.255719][ T6720] RSP: 002b:00007ffdcf71bc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  171.255737][ T6720] RAX: 0000000000000000 RBX: 00007f4d764344bb RCX: 00007f4d7639f397
[  171.255749][ T6720] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcf71bd50
[  171.255757][ T6720] RBP: 00007ffdcf71bd50 R08: 00007ffdcf71cd50 R09: 00000000ffffffff
[  171.255768][ T6720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdcf71cde0
[  171.255777][ T6720] R13: 00007f4d764344bb R14: 000000000002a5c0 R15: 00007ffdcf71ce20
[  171.255801][ T6720]  </TASK>
[  171.267769][ T6720] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  171.630040][ T8607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'.
[  171.666825][ T8607] netlink: 'syz.3.1066': attribute type 10 has an invalid length.
[  171.670449][ T8607] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1066'.
[  171.754163][   T55] Bluetooth: hci0: command 0x2016 tx timeout
[  171.794227][   T55] Bluetooth: hci0: unexpected event for opcode 0x204e
[  172.109170][ T8627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1076'.
[  172.746620][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  172.746620][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  172.746672][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  172.878221][   T33] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  173.021386][   T33] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  173.025725][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  173.029617][   T33] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  173.035945][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.038947][   T33] usb 4-1: Product: syz
[  173.042006][   T33] usb 4-1: Manufacturer: syz
[  173.043874][   T33] usb 4-1: SerialNumber: syz
[  173.116084][ T5708] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  173.244122][   T33] usb 4-1: Limiting number of CPorts to U8_MAX
[  173.259193][ T5708] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  173.265075][ T5708] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.265157][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.284074][ T5708] usb 6-1: config 0 descriptor??
[  173.289111][ T5708] pwc: Askey VC010 type 2 USB webcam detected.
[  173.471372][ T8654] loop6: detected capacity change from 0 to 32768
[  173.489745][ T8654] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  173.518247][ T8654] XFS (loop6): Ending clean mount
[  173.545657][ T6892] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  173.684815][ T5708] pwc: recv_control_msg error -32 req 02 val 2b00
[  173.834731][   T33] usb 4-1: failed to send ARPC request 1: -71
[  173.834945][   T33] usb 4-1: failed to execute ARPC: -71
[  173.834955][   T33] usb 4-1: failed to set connected state for cport 0: -71
[  173.834963][   T33] greybus greybus1: 0/0:0: failed to set connected state: -71
[  173.839292][   T33] usb 4-1: failed to send ARPC request 3: -71
[  173.842840][   T33] usb 4-1: failed to execute ARPC: -71
[  173.842980][   T33] usb 4-1: failed to clear cport 0: -71
[  173.842990][   T33] greybus greybus1: 0/0:0: failed to clear host cport: -71
[  173.872709][   T33] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71
[  173.877779][   T33] usb 4-1: USB disconnect, device number 10
[  174.082525][ T5708] pwc: recv_control_msg error -71 req 04 val 1000
[  174.087862][ T5708] pwc: recv_control_msg error -71 req 04 val 1300
[  174.090565][ T5708] pwc: recv_control_msg error -71 req 04 val 1400
[  174.094076][ T5708] pwc: recv_control_msg error -71 req 02 val 2000
[  174.097782][ T5708] pwc: recv_control_msg error -71 req 02 val 2100
[  174.101180][ T5708] pwc: recv_control_msg error -71 req 04 val 1500
[  174.104634][ T5708] pwc: recv_control_msg error -71 req 02 val 2500
[  174.114011][ T5708] pwc: recv_control_msg error -71 req 02 val 2400
[  174.116520][ T5708] pwc: recv_control_msg error -71 req 02 val 2600
[  174.118816][ T5708] pwc: recv_control_msg error -71 req 02 val 2900
[  174.121840][ T5708] pwc: recv_control_msg error -71 req 02 val 2800
[  174.124679][ T5708] pwc: recv_control_msg error -71 req 04 val 1100
[  174.127710][ T5708] pwc: recv_control_msg error -71 req 04 val 1200
[  174.160807][ T5708] pwc: Registered as video103.
[  174.166176][ T5708] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14
[  174.176243][ T8678] profile_transition: unconfined exec no attachment
[  174.176300][ T8678] apparmor_bprm_creds_for_exec: label build failed
[  174.189948][ T5708] usb 6-1: USB disconnect, device number 15
[  174.387235][ T8681] loop3: detected capacity change from 0 to 1024
[  175.002558][ T5708] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  175.147604][ T5708] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  175.152779][ T5708] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.159123][ T5708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  175.159186][ T5708] usb 6-1: Product: syz
[  175.159221][ T5708] usb 6-1: Manufacturer: syz
[  175.287186][ T5708] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected
[  175.293636][ T8687] loop3: detected capacity change from 0 to 131072
[  175.297141][ T8687] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  175.297164][ T8687] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  175.299739][ T8687] F2FS-fs (loop3): invalid crc value
[  175.313049][ T5708] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  175.318782][ T5708] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[  175.376874][ T8687] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.383099][ T8687] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  175.383155][ T8687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  175.490628][   T25] usb 6-1: USB disconnect, device number 16
[  175.492099][   T25] garmin_gps 6-1:1.0: device disconnected
[  175.716894][   T55] Bluetooth: hci0: command 0x2016 tx timeout
[  175.753184][ T8698] syz_tun: Device is already in use.
[  175.754700][ T8698] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  175.988424][ T8704] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1105'.
[  175.988468][ T8704] netlink: 'syz.6.1105': attribute type 2 has an invalid length.
[  175.988506][ T8704] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1105'.
[  176.037982][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1106'.
[  176.072815][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1107'.
[  176.088047][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1107'.
[  176.865358][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1110'.
[  177.093759][ T8730] profile_transition: unconfined exec no attachment
[  177.093823][ T8730] apparmor_bprm_creds_for_exec: label build failed
[  177.338627][ T8740] loop5: detected capacity change from 0 to 256
[  177.450239][ T5708] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  177.504380][ T8742] FAULT_INJECTION: forcing a failure.
[  177.504380][ T8742] name failslab, interval 1, probability 0, space 0, times 0
[  177.514454][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.3.1122 Not tainted syzkaller #0 PREEMPT(full) 
[  177.514497][ T8742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  177.514509][ T8742] Call Trace:
[  177.514518][ T8742]  <TASK>
[  177.514526][ T8742]  dump_stack_lvl+0xe8/0x150
[  177.514554][ T8742]  should_fail_ex+0x410/0x560
[  177.514579][ T8742]  should_failslab+0xa8/0x100
[  177.514598][ T8742]  __kmalloc_noprof+0xfe/0x720
[  177.514618][ T8742]  ? stack_trace_save+0xa9/0x100
[  177.514641][ T8742]  ? snd_pcm_hw_refine+0xa18/0x17d0
[  177.514661][ T8742]  ? snd_pcm_hw_refine+0xa18/0x17d0
[  177.514685][ T8742]  snd_pcm_hw_refine+0xa18/0x17d0
[  177.514708][ T8742]  ? kasan_save_track+0x3e/0x80
[  177.514723][ T8742]  ? snd_pcm_oss_change_params_locked+0x1e5e/0x3c80
[  177.514749][ T8742]  ? task_work_run+0x1d9/0x270
[  177.514785][ T8742]  ? do_syscall_64+0x328/0x520
[  177.514804][ T8742]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  177.514849][ T8742]  ? rcu_is_watching+0x16/0xb0
[  177.514869][ T8742]  ? __kasan_kmalloc+0x93/0xb0
[  177.514884][ T8742]  snd_pcm_hw_param_last+0x3a8/0xb50
[  177.514906][ T8742]  snd_pcm_hw_param_near+0x331/0x4d0
[  177.514932][ T8742]  snd_pcm_oss_change_params_locked+0x1e5e/0x3c80
[  177.514973][ T8742]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  177.515003][ T8742]  ? __pfx_ima_file_free+0x10/0x10
[  177.515025][ T8742]  ? __asan_memset+0x22/0x50
[  177.515056][ T8742]  snd_pcm_oss_sync+0x57d/0xdf0
[  177.515077][ T8742]  snd_pcm_oss_release+0xff/0x250
[  177.515136][ T8742]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  177.515157][ T8742]  __fput+0x418/0xa50
[  177.515188][ T8742]  task_work_run+0x1d9/0x270
[  177.515208][ T8742]  ? __pfx_task_work_run+0x10/0x10
[  177.515223][ T8742]  ? ksys_write+0x242/0x270
[  177.515250][ T8742]  exit_to_user_mode_loop+0x204/0x770
[  177.515263][ T8742]  ? rcu_is_watching+0x16/0xb0
[  177.515283][ T8742]  do_syscall_64+0x328/0x520
[  177.515298][ T8742]  ? trace_irq_disable+0x3b/0x140
[  177.515312][ T8742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.515332][ T8742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.515348][ T8742] RIP: 0033:0x7f362499e159
[  177.515364][ T8742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.515378][ T8742] RSP: 002b:00007f362581c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  177.515395][ T8742] RAX: ffffffffffffffea RBX: 00007f3624c25fa0 RCX: 00007f362499e159
[  177.515407][ T8742] RDX: 00000000000a6f81 RSI: 0000200000000480 RDI: ffffffffffffff9c
[  177.515418][ T8742] RBP: 00007f3624a3506b R08: 0000000000000000 R09: 0000000000000000
[  177.515429][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  177.515439][ T8742] R13: 00007f3624c26038 R14: 00007f3624c25fa0 R15: 00007ffe72badf38
[  177.515463][ T8742]  </TASK>
[  177.546394][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  177.546394][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  177.546414][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  177.654631][ T5708] usb 7-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  177.659218][ T5708] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.659277][ T5708] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.661069][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.838574][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1127'.
[  178.022679][  T171] IPVS: starting estimator thread 0...
[  178.081755][ T5708] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x6
[  178.085832][ T5708] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0
[  178.090947][ T5708] hid-picolcd 0003:04D8:C002.000D: unknown main item tag 0x0
[  178.107914][ T8764] IPVS: using max 62 ests per chain, 148800 per kthread
[  178.164501][ T5708] hid-picolcd 0003:04D8:C002.000D: unsupported KEY_STATE report
[  178.165094][ T5708] hid-picolcd 0003:04D8:C002.000D: probe with driver hid-picolcd failed with error -22
[  178.270152][ T5708] usb 7-1: USB disconnect, device number 15
[  178.391688][ T8778] loop3: detected capacity change from 0 to 256
[  178.410358][ T8778] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  178.908762][ T8793] program syz.6.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.973072][ T8795] aa_policy_admin_capable: cap_mac_admin? 1
[  178.973281][ T8795] aa_policy_admin_capable: policy locked? 0
[  178.973477][ T8795] unpack_pdb: unpacking tags
[  178.973670][ T8795] unpack_pdb: done unpacking tags
[  178.973703][ T8795] unpack_pdb: unpacking tags
[  178.973711][ T8795] unpack_pdb: done unpacking tags
[  178.989578][   T34] audit: type=1400 audit(1790000124.631:70): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=8794 comm="syz.6.1146"
[  179.128888][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1148'.
[  179.129000][ T8801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1148'.
[  179.287626][ T8807] syzkaller1: entered promiscuous mode
[  179.287692][ T8807] syzkaller1: entered allmulticast mode
[  179.422006][ T5028] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  179.569137][ T5028] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00
[  179.570882][ T5028] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  179.570923][ T5028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.789778][ T5028] qmi_wwan 7-1:1.0: cdc-wdm0: USB WDM device
[  179.830806][ T5028] wwan wwan0: port wwan0qmi0 attached
[  179.964691][ T5708] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  180.107603][ T5708] usb 6-1: Using ep0 maxpacket: 16
[  180.108638][ T5708] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00
[  180.110600][ T5708] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  180.110706][ T5708] usb 6-1: config 0 has no interface number 0
[  180.110740][ T5708] usb 6-1: config 0 interface 1 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.110761][ T5708] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  180.110783][ T5708] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  180.110802][ T5708] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  180.110914][ T5708] usb 6-1: config 0 interface 1 has no altsetting 0
[  180.110943][ T5708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.121233][ T5708] usb 6-1: config 0 descriptor??
[  180.123587][ T8820] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  180.141554][ T5708] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count
[  180.575190][ T5028] qmi_wwan 7-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.6-1, WWAN/QMI device, 12:be:90:7a:dc:7e
[  180.586561][ T5028] usb 7-1: USB disconnect, device number 16
[  180.599114][ T5028] qmi_wwan 7-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.6-1, WWAN/QMI device
[  180.686724][ T5028] wwan wwan0: port wwan0qmi0 disconnected
[  180.914253][ T5708] elan 0003:04F3:074D.000E: Get report error for parm 6: -32
[  180.916801][ T5708] elan 0003:04F3:074D.000E: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.5-1/input1
[  180.916869][ T5708] elan 0003:04F3:074D.000E: Input device is not registered
[  180.947973][ T5708] elan 0003:04F3:074D.000E: probe with driver elan failed with error -119
[  180.952196][ T5708] usb 6-1: USB disconnect, device number 17
[  181.428393][ T8842] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1166'.
[  181.723483][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1168'.
[  182.104873][ T8850] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  182.180452][ T8852] netlink: 'syz.6.1171': attribute type 1 has an invalid length.
[  182.207375][ T8852] 8021q: adding VLAN 0 to HW filter on device bond2
[  182.346141][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  182.346141][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  182.346214][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  182.619446][ T8852] veth3: entered allmulticast mode
[  182.644420][ T8852] bond2: (slave veth3): Enslaving as an active interface with a down link
[  182.661608][ T8854] bond2: (slave veth0_to_bond): making interface the new active one
[  182.666581][ T8854] veth0_to_bond: entered promiscuous mode
[  182.670134][ T8854] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  182.784610][ T8862] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  183.125312][ T8872] ubi10: attaching mtd0
[  183.136252][ T8872] ubi10 error: ubi_attach_mtd_dev: bad VID header (33022) or data offsets (33086)
[  183.520036][ T8886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1185'.
[  183.560076][ T8882] loop6: detected capacity change from 0 to 32768
[  183.571012][ T8882] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1183 (8882)
[  183.601231][ T8882] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  183.601300][ T8882] BTRFS info (device loop6): using sha256 checksum algorithm
[  183.640139][ T8901] profile_transition: unconfined exec no attachment
[  183.641858][ T8901] apparmor_bprm_creds_for_exec: label build failed
[  183.695195][ T8882] BTRFS info (device loop6): enabling ssd optimizations
[  183.695246][ T8882] BTRFS info (device loop6): turning on async discard
[  183.695279][ T8882] BTRFS info (device loop6): enabling free space tree
[  183.695303][ T8882] BTRFS info (device loop6): enabling auto defrag
[  183.695328][ T8882] BTRFS info (device loop6): max_inline set to 4096
[  183.761446][ T6892] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  183.781719][ T8910] profile_transition: unconfined exec no attachment
[  183.781779][ T8910] apparmor_bprm_creds_for_exec: label build failed
[  183.818437][ T8911] profile_transition: unconfined exec no attachment
[  183.818483][ T8911] apparmor_bprm_creds_for_exec: label build failed
[  183.877644][ T8913] profile_transition: unconfined exec no attachment
[  183.877689][ T8913] apparmor_bprm_creds_for_exec: label build failed
[  184.002077][ T8917] loop6: detected capacity change from 0 to 512
[  184.059397][ T8919] sg_write: data in/out 270400/136 bytes for SCSI command 0x0-- guessing data in;
[  184.059397][ T8919]    program syz.5.1192 not setting count and/or reply_len properly
[  184.083545][ T8917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.083665][ T8917] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.173289][ T6892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.273825][ T8933] loop6: detected capacity change from 0 to 256
[  184.442961][ T8939] loop5: detected capacity change from 0 to 1024
[  184.640009][ T5656] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  184.703812][ T8955] xt_policy: output policy not valid in PREROUTING and INPUT
[  184.749257][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'.
[  184.749324][ T8957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1209'.
[  184.785977][ T5656] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  184.787573][ T5656] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  184.787590][ T5656] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  184.789436][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.789450][ T5656] usb 7-1: Product: syz
[  184.789456][ T5656] usb 7-1: Manufacturer: syz
[  184.789463][ T5656] usb 7-1: SerialNumber: syz
[  184.793955][ T5656] usb 7-1: config 0 descriptor??
[  184.795307][ T8937] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  184.795432][ T8937] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  184.830396][ T8959] batman_adv: batadv0: Adding interface: macvtap1
[  184.833252][ T8959] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.844806][ T8959] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  184.889614][ T5028] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  184.994233][ T8937] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  184.995031][ T8937] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  185.032319][ T5028] usb 4-1: Using ep0 maxpacket: 16
[  185.036334][ T5028] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  185.043224][ T5028] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  185.043369][ T5028] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  185.067237][ T5028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.067303][ T5028] usb 4-1: Product: syz
[  185.068410][ T5028] usb 4-1: Manufacturer: syz
[  185.068425][ T5028] usb 4-1: SerialNumber: syz
[  185.072824][ T5028] usb 4-1: config 0 descriptor??
[  185.085647][ T5028] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  185.085792][ T5028] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  185.657635][ T5028] em28xx 4-1:0.0: chip ID is em2828X
[  185.773056][ T5656] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  185.779093][ T5656] dm9601 7-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, ae:c0:5b:ae:b4:63
[  185.782240][ T5656] usb 7-1: USB disconnect, device number 17
[  185.783419][ T5656] dm9601 7-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[  185.850060][ T5028] usb 4-1: USB disconnect, device number 11
[  185.856614][ T5028] em28xx 4-1:0.0: Disconnecting em28xx
[  185.886895][ T5028] em28xx: Freeing device
[  186.590742][ T5028] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  186.737342][ T5028] usb 7-1: Using ep0 maxpacket: 8
[  186.737960][ T5028] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  186.740139][ T5028] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.740174][ T5028] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.746043][ T5028] usb 7-1: config 0 descriptor??
[  186.981547][ T5028] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  187.149415][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  187.149415][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  187.149479][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  187.286237][ T5028] usb 7-1: USB disconnect, device number 18
[  187.642407][ T5656] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  187.785211][ T5656] usb 4-1: Using ep0 maxpacket: 8
[  187.787890][ T5656] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24
[  187.797150][ T5656] usb 4-1: config 0 has an invalid interface number: 125 but max is 0
[  187.797197][ T5656] usb 4-1: config 0 has no interface number 0
[  187.797244][ T5656] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.800260][ T5656] usb 4-1: config 0 descriptor??
[  187.811443][ T5656] gspca_main: spca501-2.14.0 probing 0497:c001
[  188.096954][ T9034] loop6: detected capacity change from 0 to 32768
[  188.121001][ T9034] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.140609][ T9034] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x142/0x210, xfs_agf block 0x1 
[  188.144983][ T9034] XFS (loop6): Unmount and run xfs_repair
[  188.148788][ T9034] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  188.151945][ T9034] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 20 00  XAGF.......... .
[  188.156362][ T9034] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01  ................
[  188.156440][ T9034] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06  ................
[  188.156475][ T9034] 00000030: 00 00 00 06 00 00 13 e3 00 00 13 e0 00 00 00 00  ................
[  188.156509][ T9034] 00000040: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  188.156784][ T9034] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01  ................
[  188.156820][ T9034] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.156854][ T9034] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  188.157176][ T9034] XFS (loop6): metadata I/O error in "xfs_read_agf+0x272/0x5c0" at daddr 0x1 len 1 error 74
[  188.157361][ T9034] loop6: lost filesystem error report for type 5 error -117
[  188.157400][ T9034] XFS (loop6): Error -117 reserving per-AG metadata reserve pool.
[  188.201149][ T9034] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1eb/0x230 (fs/xfs/xfs_fsops.c:561).  Shutting down filesystem.
[  188.201276][ T9034] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  188.201324][ T9034] loop6: lost filesystem error report for type 5 error -108
[  188.204487][ T5656] gspca_spca501: reg write: error -71
[  188.204502][ T5656] spca501 4-1:0.125: Reg write failed for 0x02,0xa048,0x00
[  188.204568][ T5656] spca501 4-1:0.125: probe with driver spca501 failed with error -22
[  188.210980][ T5656] usb 4-1: USB disconnect, device number 12
[  188.501621][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1243'.
[  188.501750][ T9044] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  188.666362][ T9052] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1246'.
[  188.895504][ T9068] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1254'.
[  188.900246][ T9068] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  188.953020][ T9072] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  189.107940][ T9081] loop5: detected capacity change from 0 to 512
[  189.186165][ T9082] loop6: detected capacity change from 0 to 4096
[  189.187177][ T9082] EXT4-fs: Ignoring removed nobh option
[  189.187281][ T9082] EXT4-fs: Ignoring removed bh option
[  189.193818][ T9082] EXT4-fs (loop6): Test dummy encryption mode enabled
[  189.307107][ T9082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.314047][ T9089] FAULT_INJECTION: forcing a failure.
[  189.314047][ T9089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.314118][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.5.1262 Not tainted syzkaller #0 PREEMPT(full) 
[  189.314155][ T9089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.314194][ T9089] Call Trace:
[  189.314202][ T9089]  <TASK>
[  189.314210][ T9089]  dump_stack_lvl+0xe8/0x150
[  189.314239][ T9089]  should_fail_ex+0x410/0x560
[  189.314263][ T9089]  _copy_from_iter+0x1d3/0x1660
[  189.314282][ T9089]  ? sctp_chunkify+0x5a/0x260
[  189.314308][ T9089]  ? sctp_addto_chunk+0xf8/0x220
[  189.314330][ T9089]  ? __asan_memcpy+0x40/0x70
[  189.314350][ T9089]  ? __pfx__copy_from_iter+0x10/0x10
[  189.314369][ T9089]  ? __asan_memcpy+0x40/0x70
[  189.314389][ T9089]  ? sctp_make_datafrag_empty+0x184/0x240
[  189.314411][ T9089]  ? __kasan_kmalloc+0x93/0xb0
[  189.314427][ T9089]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[  189.314448][ T9089]  ? skb_put+0x112/0x210
[  189.314470][ T9089]  sctp_user_addto_chunk+0x7c/0x230
[  189.314489][ T9089]  sctp_datamsg_from_user+0x754/0xef0
[  189.314524][ T9089]  sctp_sendmsg_to_asoc+0x13cf/0x1880
[  189.314547][ T9089]  ? __schedule+0x17ea/0x5820
[  189.314577][ T9089]  ? do_raw_spin_lock+0x12b/0x2f0
[  189.314596][ T9089]  ? lock_sock_nested+0x6a/0x100
[  189.314614][ T9089]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  189.314634][ T9089]  ? sctp_sendmsg+0xbb8/0x2d00
[  189.314651][ T9089]  ? sctp_sendmsg_check_sflags+0x18a/0x330
[  189.314672][ T9089]  sctp_sendmsg+0x1bb5/0x2d00
[  189.314686][ T9089]  ? __lock_acquire+0x683/0x2cf0
[  189.314710][ T9089]  ? __pfx_sctp_sendmsg+0x10/0x10
[  189.314731][ T9089]  ? aa_sk_perm+0x6e0/0x910
[  189.314771][ T9089]  ? sock_rps_record_flow+0x19/0x350
[  189.314797][ T9089]  ? inet_sendmsg+0x298/0x320
[  189.314820][ T9089]  ? __pfx_inet_sendmsg+0x10/0x10
[  189.314842][ T9089]  sock_sendmsg_nosec+0x10e/0x180
[  189.314860][ T9089]  __sys_sendto+0x408/0x5a0
[  189.314883][ T9089]  ? __pfx___sys_sendto+0x10/0x10
[  189.314919][ T9089]  ? rcu_is_watching+0x16/0xb0
[  189.314942][ T9089]  __x64_sys_sendto+0xde/0x100
[  189.314964][ T9089]  do_syscall_64+0x166/0x520
[  189.314979][ T9089]  ? trace_irq_disable+0x3b/0x140
[  189.314994][ T9089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.315013][ T9089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.315028][ T9089] RIP: 0033:0x7f4d7639e159
[  189.315044][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.315058][ T9089] RSP: 002b:00007f4d771f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  189.315076][ T9089] RAX: ffffffffffffffda RBX: 00007f4d76625fa0 RCX: 00007f4d7639e159
[  189.315088][ T9089] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004
[  189.315098][ T9089] RBP: 00007f4d7643506b R08: 0000000000000000 R09: 0000000000000000
[  189.315108][ T9089] R10: 0000000000000802 R11: 0000000000000246 R12: 0000000000000000
[  189.315118][ T9089] R13: 00007f4d76626038 R14: 00007f4d76625fa0 R15: 00007ffdcf71ca28
[  189.315141][ T9089]  </TASK>
[  189.409319][ T9082] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  189.567068][ T6892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.591847][ T9101] loop3: detected capacity change from 0 to 512
[  189.607419][ T9101] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.1269: bad orphan inode 15
[  189.607458][ T9101] loop3: lost filesystem error report for type 5 error -117
[  189.607812][ T9101] ext4_test_bit(bit=14, block=5) = 0
[  189.608649][ T9101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.659078][ T6513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.689254][ T9105] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  189.712485][ T9108] loop3: detected capacity change from 0 to 512
[  189.883644][ T9118] syzkaller0: entered promiscuous mode
[  189.883717][ T9118] syzkaller0: entered allmulticast mode
[  189.975337][ T9122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1277'.
[  189.979819][ T9122] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1277'.
[  190.112294][ T9129] profile_transition: unconfined exec no attachment
[  190.112350][ T9129] apparmor_bprm_creds_for_exec: label build failed
[  190.261914][ T5656] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  190.323604][ T9138] profile_transition: unconfined exec no attachment
[  190.323665][ T9138] apparmor_bprm_creds_for_exec: label build failed
[  190.344845][ T9139] profile_transition: unconfined exec no attachment
[  190.344901][ T9139] apparmor_bprm_creds_for_exec: label build failed
[  190.409716][ T5656] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  190.416115][ T5656] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  190.416182][ T5656] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.416229][ T5656] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  190.416286][ T5656] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.418766][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  190.418789][ T5656] usb 7-1: Product: syz
[  190.418801][ T5656] usb 7-1: Manufacturer: syz
[  190.423567][ T5656] cdc_wdm 7-1:1.0: skipping garbage
[  190.423583][ T5656] cdc_wdm 7-1:1.0: skipping garbage
[  190.457447][ T5656] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  190.457517][ T5656] cdc_wdm 7-1:1.0: Unknown control protocol
[  190.542219][ T9145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1286'.
[  190.627847][ T5656] usb 7-1: USB disconnect, device number 19
[  190.675886][ T9154] FAULT_INJECTION: forcing a failure.
[  190.675886][ T9154] name failslab, interval 1, probability 0, space 0, times 0
[  190.675942][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.3.1290 Not tainted syzkaller #0 PREEMPT(full) 
[  190.675964][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  190.675975][ T9154] Call Trace:
[  190.675982][ T9154]  <TASK>
[  190.675989][ T9154]  dump_stack_lvl+0xe8/0x150
[  190.676018][ T9154]  should_fail_ex+0x410/0x560
[  190.676044][ T9154]  should_failslab+0xa8/0x100
[  190.676095][ T9154]  __kmalloc_noprof+0xfe/0x720
[  190.676119][ T9154]  ? raw_queue_event+0x84/0x300
[  190.676139][ T9154]  ? raw_queue_event+0x84/0x300
[  190.676165][ T9154]  raw_queue_event+0x84/0x300
[  190.676189][ T9154]  gadget_bind+0x481/0x610
[  190.676215][ T9154]  ? __pfx_gadget_bind+0x10/0x10
[  190.676235][ T9154]  gadget_bind_driver+0x2ca/0x9e0
[  190.676260][ T9154]  ? __pfx_gadget_bind_driver+0x10/0x10
[  190.676277][ T9154]  really_probe+0x254/0xae0
[  190.676302][ T9154]  __driver_probe_device+0x1e8/0x360
[  190.676324][ T9154]  driver_probe_device+0x4f/0x240
[  190.676348][ T9154]  __driver_attach+0x339/0x600
[  190.676370][ T9154]  bus_for_each_dev+0x23b/0x2c0
[  190.676385][ T9154]  ? __pfx___driver_attach+0x10/0x10
[  190.676404][ T9154]  ? __pfx_bus_for_each_dev+0x10/0x10
[  190.676421][ T9154]  ? do_raw_spin_unlock+0x4d/0x200
[  190.676444][ T9154]  bus_add_driver+0x345/0x670
[  190.676466][ T9154]  driver_register+0x23a/0x320
[  190.676489][ T9154]  usb_gadget_register_driver_owner+0xf9/0x270
[  190.676510][ T9154]  raw_ioctl+0x1541/0x41c0
[  190.676534][ T9154]  ? tomoyo_path_number_perm+0x219/0x5f0
[  190.676557][ T9154]  ? do_vfs_ioctl+0x116f/0x1530
[  190.676590][ T9154]  ? __pfx_raw_ioctl+0x10/0x10
[  190.676619][ T9154]  ? hook_file_ioctl+0x1f2/0x600
[  190.676653][ T9154]  ? __fget_files+0x2a/0x420
[  190.676674][ T9154]  ? __fget_files+0x2a/0x420
[  190.676691][ T9154]  ? __fget_files+0x3a2/0x420
[  190.676708][ T9154]  ? __fget_files+0x2a/0x420
[  190.676728][ T9154]  ? bpf_lsm_file_ioctl+0x9/0x20
[  190.676748][ T9154]  ? __pfx_raw_ioctl+0x10/0x10
[  190.676767][ T9154]  __se_sys_ioctl+0xfc/0x170
[  190.676791][ T9154]  do_syscall_64+0x166/0x520
[  190.676807][ T9154]  ? trace_irq_disable+0x3b/0x140
[  190.676822][ T9154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.676842][ T9154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.676858][ T9154] RIP: 0033:0x7f362499ddeb
[  190.676873][ T9154] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  190.676888][ T9154] RSP: 002b:00007f3625819f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  190.676906][ T9154] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f362499ddeb
[  190.676919][ T9154] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004
[  190.676929][ T9154] RBP: 00007f362581afd0 R08: 0000000000000000 R09: 00000000ffffffff
[  190.676940][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.676949][ T9154] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000
[  190.676969][ T9154]  </TASK>
[  190.677044][ T9154] raw-gadget.0 gadget.3: failed to queue connect event
[  190.677110][ T9154] udc dummy_udc.3: failed to start USB Raw Gadget: -12
[  190.677145][ T9154] raw-gadget.0 gadget.3: probe with driver raw-gadget.0 failed with error -12
[  190.677822][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.684696][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.052609][ T5656] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  191.196793][ T5656] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  191.200372][ T5656] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  191.200387][ T5656] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.200396][ T5656] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  191.200415][ T5656] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.201969][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  191.201989][ T5656] usb 7-1: Product: syz
[  191.202000][ T5656] usb 7-1: Manufacturer: syz
[  191.216793][ T5656] cdc_wdm 7-1:1.0: skipping garbage
[  191.216805][ T5656] cdc_wdm 7-1:1.0: skipping garbage
[  191.234119][ T5656] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  191.234170][ T5656] cdc_wdm 7-1:1.0: Unknown control protocol
[  191.422113][ T1378] ieee802154 phy0 wpan0: encryption failed: -22
[  191.422197][ T1378] ieee802154 phy1 wpan1: encryption failed: -22
[  191.959014][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  191.959014][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  191.959077][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  191.996986][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  191.997154][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  191.998861][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  191.998897][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  192.001170][ T5656] usb 7-1: USB disconnect, device number 20
[  192.001529][    C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71
[  192.001547][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes
[  192.001560][    C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  192.378182][ T9174] loop5: detected capacity change from 0 to 128
[  192.383657][ T9174] EXT4-fs: Ignoring removed i_version option
[  192.393494][ T9174] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  192.393751][ T9174] ext4 filesystem being mounted at /312/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  192.427198][ T9174] EXT4-fs (loop5): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.432413][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1299'.
[  192.448866][ T6720] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.473717][ T9179] 9p: Bad value for 'rfdno'
[  192.889616][ T5028] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  192.928684][ T9185] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1302'.
[  193.043487][ T5028] usb 6-1: Using ep0 maxpacket: 8
[  193.044083][ T5028] usb 6-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00
[  193.045053][ T5028] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.045069][ T5028] usb 6-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.045081][ T5028] usb 6-1: config 0 interface 0 has no altsetting 0
[  193.045096][ T5028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.046423][ T5028] usb 6-1: config 0 descriptor??
[  193.072352][ T9191] : renamed from vlan0 (while UP)
[  193.330064][   T13] veth0_to_bond: left promiscuous mode
[  193.437726][ T5028] elecom 0003:056E:00FD.000F: item 0 4 0 11 parsing failed
[  193.438208][ T5028] elecom 0003:056E:00FD.000F: probe with driver elecom failed with error -22
[  193.454593][ T9206] program syz.3.1312 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.581620][ T9211] loop3: detected capacity change from 0 to 256
[  193.583270][ T9211] exfat: Deprecated parameter 'utf8'
[  193.613237][ T9211] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  193.637553][ T5656] usb 6-1: USB disconnect, device number 18
[  193.771253][ T9216] profile_transition: unconfined exec no attachment
[  193.771327][ T9216] apparmor_bprm_creds_for_exec: label build failed
[  193.804156][ T9217] profile_transition: unconfined exec no attachment
[  193.804254][ T9217] apparmor_bprm_creds_for_exec: label build failed
[  193.827794][ T9219] profile_transition: unconfined exec no attachment
[  193.827893][ T9219] apparmor_bprm_creds_for_exec: label build failed
[  193.852100][ T9220] profile_transition: unconfined exec no attachment
[  193.852195][ T9220] apparmor_bprm_creds_for_exec: label build failed
[  193.885777][ T9221] profile_transition: unconfined exec no attachment
[  193.885892][ T9221] apparmor_bprm_creds_for_exec: label build failed
[  193.918412][ T9222] profile_transition: unconfined exec no attachment
[  193.918472][ T9222] apparmor_bprm_creds_for_exec: label build failed
[  193.946389][ T9224] profile_transition: unconfined exec no attachment
[  193.946448][ T9224] apparmor_bprm_creds_for_exec: label build failed
[  194.149735][ T9233] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1317'.
[  194.191431][ T9233] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1317'.
[  194.308996][ T9239] loop3: detected capacity change from 0 to 1024
[  194.351174][ T9239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.397347][ T6513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.445910][ T9248] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1323'.
[  194.457233][ T9248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  194.597225][ T5656] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  194.760664][ T9252] loop6: detected capacity change from 0 to 32768
[  194.770417][ T9252] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1325 (9252)
[  194.772968][ T5656] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  194.775679][ T5656] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7
[  194.775765][ T5656] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  194.779579][ T5656] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.779625][ T5656] usb 6-1: Product: syz
[  194.779667][ T5656] usb 6-1: Manufacturer: syz
[  194.779699][ T5656] usb 6-1: SerialNumber: syz
[  195.029531][ T5656] usb 6-1: disable ehci-hcd to run US-144
[  195.035824][ T5656] usb 6-1: disable ehci-hcd to run US-144
[  195.042377][ T5656] usb 6-1: USB disconnect, device number 19
[  195.126008][ T5739] udevd[5739]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.274123][ T9252] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.274189][ T9252] BTRFS info (device loop6): using sha256 checksum algorithm
[  195.309663][ T9273] profile_transition: 5 callbacks suppressed
[  195.314113][ T9273] profile_transition: unconfined exec no attachment
[  195.314161][ T9273] apparmor_bprm_creds_for_exec: 5 callbacks suppressed
[  195.314236][ T9273] apparmor_bprm_creds_for_exec: label build failed
[  195.345365][ T9252] BTRFS info (device loop6): rebuilding free space tree
[  195.395801][ T9252] BTRFS info (device loop6): disabling free space tree
[  195.395893][ T9252] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  195.395905][ T9252] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  195.414487][ T9252] BTRFS info (device loop6): enabling ssd optimizations
[  195.414542][ T9252] BTRFS info (device loop6): turning on async discard
[  195.414578][ T9252] BTRFS info (device loop6): force clearing of disk cache
[  195.414587][ T9252] BTRFS info (device loop6): enabling auto defrag
[  195.414595][ T9252] BTRFS info (device loop6): max_inline set to 4096
[  195.635525][ T6892] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.848380][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1335'.
[  195.857639][ T9289] loop6: detected capacity change from 0 to 128
[  195.885338][ T9289] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.889514][ T9289] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  196.107513][ T6892] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.294825][ T9299] loop3: detected capacity change from 0 to 128
[  196.443536][ T9302] usb usb7: check_ctrlrecip: process 9302 (syz.6.1336) requesting ep 01 but needs 81
[  196.443709][ T9302] usb usb7: usbfs: process 9302 (syz.6.1336) did not claim interface 0 before use
[  196.450216][ T9302] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1336'.
[  196.749533][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  196.749533][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  196.754006][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  196.860371][ T9307] ip6gre1: entered promiscuous mode
[  196.868590][ T9307] ip6gre1: entered allmulticast mode
[  197.136435][ T9320] netlink: 'syz.6.1348': attribute type 1 has an invalid length.
[  197.178475][ T9320] 8021q: adding VLAN 0 to HW filter on device bond3
[  197.270621][ T9320] bond3: (slave geneve2): making interface the new active one
[  197.274803][ T9320] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  197.381911][ T9330] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  197.671843][ T9336] loop3: detected capacity change from 0 to 32768
[  197.688200][ T9336] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  197.708942][ T9336] xt_connbytes: Forcing CT accounting to be enabled
[  197.929329][ T9342] profile_transition: unconfined exec no attachment
[  197.929433][ T9342] apparmor_bprm_creds_for_exec: label build failed
[  198.299385][ T9344] hsr_slave_0: left promiscuous mode
[  198.306536][ T9336] syz.3.1355 (9336) used greatest stack depth: 19688 bytes left
[  198.310332][ T9344] hsr_slave_1: left promiscuous mode
[  198.342992][ T9349] profile_transition: unconfined exec no attachment
[  198.343242][ T9349] apparmor_bprm_creds_for_exec: label build failed
[  198.444524][ T9348] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5)
[  198.444568][ T9348] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  198.458657][ T9348] vhci_hcd vhci_hcd.0: Device attached
[  198.473357][ T9350] vhci_hcd: connection closed
[  198.475735][ T5653] vhci_hcd vhci_hcd.5: stop threads
[  198.476859][ T5653] vhci_hcd vhci_hcd.5: release socket
[  198.476889][ T5653] vhci_hcd vhci_hcd.5: disconnect device
[  198.619874][ T6513] ocfs2: Unmounting device (7,3) on (node local)
[  198.767798][ T9359] loop6: detected capacity change from 0 to 256
[  198.772291][ T9359] exfat: Deprecated parameter 'utf8'
[  198.786598][ T9359] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  198.918717][ T9365] loop3: detected capacity change from 0 to 16
[  198.924185][ T9365] erofs (device loop3): mounted with root inode @ nid 36.
[  198.999297][ T9368] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  199.031819][ T9365] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  199.042532][ T9365] erofs (device loop3): read error -117 @ 0 of nid 89
[  199.053692][   T34] audit: type=1800 audit(1790000145.701:71): pid=9365 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.1365" name="file2" dev="overlay" ino=89 res=0 errno=0
[  199.059765][ T9370] FAULT_INJECTION: forcing a failure.
[  199.059765][ T9370] name failslab, interval 1, probability 0, space 0, times 0
[  199.059792][ T9370] CPU: 0 UID: 0 PID: 9370 Comm: syz.5.1366 Not tainted syzkaller #0 PREEMPT(full) 
[  199.059809][ T9370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.059819][ T9370] Call Trace:
[  199.059824][ T9370]  <TASK>
[  199.059832][ T9370]  dump_stack_lvl+0xe8/0x150
[  199.059858][ T9370]  should_fail_ex+0x410/0x560
[  199.059908][ T9370]  ? __alloc_skb+0x1db/0x7a0
[  199.059927][ T9370]  should_failslab+0xa8/0x100
[  199.059946][ T9370]  ? __alloc_skb+0x1db/0x7a0
[  199.059963][ T9370]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  199.059984][ T9370]  ? __alloc_skb+0x18d/0x7a0
[  199.060003][ T9370]  ? __alloc_skb+0x1db/0x7a0
[  199.060025][ T9370]  __alloc_skb+0x1db/0x7a0
[  199.060047][ T9370]  netlink_sendmsg+0x5d4/0xb40
[  199.060077][ T9370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.060102][ T9370]  ? aa_sock_msg_perm+0xf6/0x1c0
[  199.060128][ T9370]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.060150][ T9370]  sock_sendmsg_nosec+0x13a/0x180
[  199.060170][ T9370]  ____sys_sendmsg+0x54e/0x850
[  199.060193][ T9370]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.060220][ T9370]  ? import_iovec+0x73/0xa0
[  199.060242][ T9370]  ___sys_sendmsg+0x2a5/0x360
[  199.060261][ T9370]  ? __lock_acquire+0x683/0x2cf0
[  199.060280][ T9370]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.060303][ T9370]  ? futex_wait+0x2a2/0x390
[  199.060340][ T9370]  ? __fget_files+0x2a/0x420
[  199.060357][ T9370]  ? __fget_files+0x3a2/0x420
[  199.060424][ T9370]  __x64_sys_sendmsg+0x1b1/0x290
[  199.060449][ T9370]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.060486][ T9370]  do_syscall_64+0x166/0x520
[  199.060502][ T9370]  ? trace_irq_disable+0x3b/0x140
[  199.060516][ T9370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.060536][ T9370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.060551][ T9370] RIP: 0033:0x7f4d7639e159
[  199.060566][ T9370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.060581][ T9370] RSP: 002b:00007f4d771f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.060600][ T9370] RAX: ffffffffffffffda RBX: 00007f4d76625fa0 RCX: 00007f4d7639e159
[  199.060613][ T9370] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005
[  199.060622][ T9370] RBP: 00007f4d7643506b R08: 0000000000000000 R09: 0000000000000000
[  199.060634][ T9370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  199.060643][ T9370] R13: 00007f4d76626038 R14: 00007f4d76625fa0 R15: 00007ffdcf71ca28
[  199.060666][ T9370]  </TASK>
[  199.295910][ T9378] loop5: detected capacity change from 0 to 512
[  199.318300][ T9378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.325611][ T9378] ext4 filesystem being mounted at /328/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.409149][ T6720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.645235][ T5656] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  199.704690][ T9394] loop6: detected capacity change from 0 to 128
[  199.723879][ T9394] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  199.723983][ T9394] hpfs: filesystem error: improperly stopped
[  199.724037][ T9394] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  199.724090][ T9394] hpfs: You really don't want any checks? You are crazy...
[  199.724122][ T9394] hpfs: Code page index out of array
[  199.724149][ T9394] hpfs: code page support is disabled
[  199.744835][ T9394] hpfs: hpfs_map_4sectors(): unaligned read
[  199.744955][ T9394] hpfs: hpfs_map_4sectors(): unaligned read
[  199.751878][ T9394] hpfs: filesystem error: unable to find root dir
[  199.757395][ T9394] hpfs: Unknown parameter ''
[  199.761986][ T9394] hpfs: hpfs_map_4sectors(): unaligned read
[  199.816092][ T5656] usb 4-1: Using ep0 maxpacket: 16
[  199.819038][ T5656] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  199.825520][   T34] audit: type=1326 audit(1790000146.509:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.834254][ T5656] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  199.838562][   T34] audit: type=1326 audit(1790000146.530:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.850215][   T34] audit: type=1326 audit(1790000146.540:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.850284][   T34] audit: type=1326 audit(1790000146.540:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.850480][   T34] audit: type=1326 audit(1790000146.540:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.880419][ T5656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.880460][ T5656] usb 4-1: Product: syz
[  199.880491][ T5656] usb 4-1: Manufacturer: syz
[  199.880513][ T5656] usb 4-1: SerialNumber: syz
[  199.889043][   T34] audit: type=1326 audit(1790000146.572:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.889099][   T34] audit: type=1326 audit(1790000146.572:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.903932][   T34] audit: type=1326 audit(1790000146.593:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.913337][   T34] audit: type=1326 audit(1790000146.603:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=9392 comm="syz.6.1376" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999299e159 code=0x7ffc0000
[  199.928254][ T5656] r8152-cfgselector 4-1: Unknown version 0x0000
[  199.930666][ T5656] r8152-cfgselector 4-1: config 0 descriptor??
[  200.213982][ T9387] loop5: detected capacity change from 0 to 131072
[  200.214921][ T9387] xfs: Deprecated parameter 'ikeep'
[  200.214938][ T9387] XFS: ikeep mount option is deprecated.
[  200.265014][ T9387] XFS (loop5): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  200.287625][ T9387] XFS (loop5): Starting recovery (logdev: internal)
[  200.312411][ T9387] XFS (loop5): Ending recovery (logdev: internal)
[  200.326795][ T5656] r8152-cfgselector 4-1: USB disconnect, device number 13
[  200.333023][ T9404] profile_transition: unconfined exec no attachment
[  200.333066][ T9404] apparmor_bprm_creds_for_exec: label build failed
[  200.460714][ T6720] XFS (loop5): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  200.727730][ T9410] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1380'.
[  201.012724][ T9416] loop6: detected capacity change from 0 to 1024
[  201.023672][ T9416] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.023748][ T9416] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.023819][ T9416] EXT4-fs: Ignoring removed i_version option
[  201.056847][ T9416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  201.056991][ T9416] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.067855][ T9416] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.1383: lblock 0 mapped to illegal pblock 0 (length 6)
[  201.068433][ T9416] EXT4-fs (loop6): Remounting filesystem read-only
[  201.104466][ T6892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  201.398593][ T9443] loop6: detected capacity change from 0 to 64
[  201.407879][   T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  201.550095][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  201.550095][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  201.550147][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  201.565373][   T25] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  201.573239][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.573287][   T25] usb 4-1: Product: syz
[  201.573318][   T25] usb 4-1: Manufacturer: syz
[  201.573326][   T25] usb 4-1: SerialNumber: syz
[  201.587096][   T25] usb 4-1: UAS is ignored for this device, using usb-storage instead
[  201.587338][   T25] usb 4-1: UAS is ignored for this device, using usb-storage instead
[  201.589225][   T25] usb-storage 4-1:1.0: USB Mass Storage device detected
[  201.607114][   T25] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[  201.607528][ T5676] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  201.610513][   T25] scsi host6: usb-storage 4-1:1.0
[  201.760656][ T5676] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  201.761737][ T5676] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  201.761762][ T5676] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.762740][ T5676] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  201.762751][ T5676] usb 6-1: Manufacturer: syz
[  201.773899][ T5676] usb 6-1: config 0 descriptor??
[  201.777820][ T9461] profile_transition: unconfined exec no attachment
[  201.778025][ T9461] apparmor_bprm_creds_for_exec: label build failed
[  201.796881][ T5708] usb 4-1: USB disconnect, device number 14
[  201.826137][ T5676] rc_core: IR keymap rc-hauppauge not found
[  201.828796][ T5676] Registered IR keymap rc-empty
[  201.833160][ T5676] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  201.839546][ T5676] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input16
[  201.987947][   T25] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  202.159431][   T25] usb 7-1: Using ep0 maxpacket: 32
[  202.166491][   T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  202.171378][ T9462] rc rc0: two consecutive events of type space
[  202.175320][   T25] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  202.178762][   T25] usb 7-1: config 0 has no interface number 0
[  202.178926][   T25] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  202.178972][   T25] usb 7-1: config 0 interface 85 has no altsetting 0
[  202.191251][   T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.194788][   T25] usb 7-1: Product: syz
[  202.196797][   T25] usb 7-1: Manufacturer: syz
[  202.199174][   T25] usb 7-1: SerialNumber: syz
[  202.205291][   T25] usb 7-1: config 0 descriptor??
[  202.363188][ T5708] usb 6-1: USB disconnect, device number 20
[  202.613183][   T25] appletouch 7-1:0.85: Geyser mode initialized.
[  202.622057][   T25] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input17
[  202.823259][   T25] usb 7-1: USB disconnect, device number 21
[  202.910152][   T25] appletouch 7-1:0.85: input: appletouch disconnected
[  202.950267][ T9481] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  203.028819][ T9485] loop5: detected capacity change from 0 to 1024
[  203.037929][ T9485] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  203.051576][ T9485] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  203.056986][ T9485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.098703][ T9485] EXT4-fs warning (device loop5): empty_inline_dir:1785: bad inline directory (dir #12) - no `..'
[  203.137235][ T6720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.209241][ T9493] loop5: detected capacity change from 0 to 512
[  203.216225][ T9493] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  203.216298][ T9493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  203.216497][ T9493] EXT4-fs (loop5): orphan cleanup on readonly fs
[  203.226892][ T9493] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.1412: iget: bad i_size value: 12154761577498
[  203.226961][ T9493] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  203.232398][ T9493] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1412: couldn't read orphan inode 13 (err -117)
[  203.232459][ T9493] loop5: lost filesystem error report for type 5 error -117
[  203.236221][    C1] EXT4-fs (loop5): error count since last fsck: 2
[  203.236241][    C1] EXT4-fs (loop5): initial error at time 1790000150: ext4_orphan_get:1403: inode 13
[  203.236266][    C1] EXT4-fs (loop5): last error at time 1790000150: ext4_orphan_get:1408
[  203.239402][ T9496] syz.3.1413 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  203.263591][ T9493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  203.279880][ T9493] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.1412: dx entry: limit 65535 != root limit 120
[  203.279944][ T9493] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1412: Corrupt directory, running e2fsck is recommended
[  203.341891][ T6720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.440063][ T9509] comedi comedi1: pc212e: a I/O base address must be specified
[  203.553564][ T9514] loop6: detected capacity change from 0 to 4096
[  203.557619][ T9514] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  203.572273][ T9514] ntfs3(loop6): try to read out of volume at offset 0x103000
[  203.575336][ T9514] ntfs3(loop6): Failed to load $Volume (-5).
[  204.119165][ T5605] Bluetooth: Wrong link type (-22)
[  204.951237][ T5708] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  205.100327][ T5708] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  205.101383][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.101399][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.101409][ T5708] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  205.101429][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.102953][ T5708] usb 7-1: config 0 descriptor??
[  205.249164][ T9547] netlink: 'syz.5.1436': attribute type 6 has an invalid length.
[  205.251710][ T9547] IPv6: NLM_F_CREATE should be specified when creating new route
[  205.472114][ T9561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1443'.
[  205.558985][ T9564] xt_TCPMSS: Only works on TCP SYN packets
[  205.964294][ T9563] loop5: detected capacity change from 0 to 32768
[  206.027024][ T9563] XFS (loop5): Metadata CRC error detected at xfs_sb_read_verify+0x35c/0x4c0, xfs_sb_quiet block 0x0 
[  206.027200][ T9563] XFS (loop5): Unmount and run xfs_repair
[  206.027266][ T9563] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  206.027291][ T9563] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  206.027315][ T9563] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  206.027419][ T9563] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  206.027427][ T9563] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40  ....... ......$@
[  206.027433][ T9563] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[  206.027439][ T9563] 00000050: 00 00 00 02 00 00 20 00 00 00 00 07 00 00 00 00  ...... .........
[  206.027445][ T9563] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  206.027451][ T9563] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  206.354066][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  206.354066][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  206.354316][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  206.933935][ T5708] usbhid 7-1:0.0: can't add hid device: -71
[  206.934055][ T5708] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  206.937652][ T5708] usb 7-1: USB disconnect, device number 22
[  207.454288][ T9596] loop5: detected capacity change from 0 to 131072
[  207.468262][ T9596] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  207.468307][ T9596] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  207.476869][ T9596] F2FS-fs (loop5): invalid crc value
[  207.516913][ T9596] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  207.527797][ T9596] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  207.527838][ T9596] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  207.565395][ T9596] F2FS-fs (loop5): inaccessible inode: 1, run fsck to repair
[  207.690236][ T9597] loop3: detected capacity change from 0 to 256
[  207.692930][ T9597] exfat: Deprecated parameter 'namecase'
[  207.718993][ T9597] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  207.762028][ T9597] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd31fc67a, utbl_chksum : 0xe619d30d)
[  208.340712][ T9623] loop3: detected capacity change from 0 to 512
[  208.341296][ T9623] EXT4-fs: Ignoring removed bh option
[  208.349097][ T9623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c128, mo2=0002]
[  208.349272][ T9623] System zones: 1-12
[  208.366130][ T9623] EXT4-fs (loop3): 1 truncate cleaned up
[  208.367006][ T9623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.388842][ T6513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.457130][ T9630] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1467'.
[  208.470349][ T9633] loop3: detected capacity change from 0 to 128
[  208.478140][ T9633] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.480005][ T9633] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  208.491600][ T9633] fscrypt (loop3, inode 12): Unsupported encryption flags (0x6b)
[  208.506955][ T6513] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.864164][ T9651] profile_transition: unconfined exec no attachment
[  208.864678][ T9651] apparmor_bprm_creds_for_exec: label build failed
[  208.984310][ T9654] tunl0: Caught tx_queue_len zero misconfig
[  209.399496][ T5656] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  209.547841][ T5656] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  209.555598][ T5656] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  209.559187][ T5656] usb 4-1: Product: syz
[  209.561886][ T5656] usb 4-1: Manufacturer: syz
[  209.564165][ T5656] usb 4-1: SerialNumber: syz
[  209.575353][ T5656] usb 4-1: config 0 descriptor??
[  209.631763][ T5656] usb 4-1: selecting invalid altsetting 1
[  209.647421][ T5656] comedi comedi5: could not switch to alternate setting 1
[  209.652310][ T5656] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  209.792965][ T5676] usb 4-1: USB disconnect, device number 15
[  210.277594][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1493'.
[  210.281792][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1493'.
[  210.302358][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1493'.
[  210.314832][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1493'.
[  210.400706][ T9691] profile_transition: unconfined exec no attachment
[  210.401017][ T9691] apparmor_bprm_creds_for_exec: label build failed
[  210.510875][ T9701] netlink: 'syz.3.1499': attribute type 32 has an invalid length.
[  210.513843][ T9701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'.
[  210.574617][ T9701] bond1: Setting coupled_control to off (0)
[  210.694372][ T5656] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  210.731377][ T9708] netlink: 'syz.3.1502': attribute type 1 has an invalid length.
[  210.766742][ T9708] 8021q: adding VLAN 0 to HW filter on device bond2
[  210.838391][ T5656] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  210.843712][ T5656] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.853211][ T5656] usb 6-1: config 0 descriptor??
[  210.882526][ T5656] gspca_main: cpia1-2.14.0 probing 0813:0001
[  211.007876][ T9695] loop6: detected capacity change from 0 to 131072
[  211.009435][ T9695] F2FS-fs (loop6): invalid crc value
[  211.085352][ T9695] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  211.093971][ T9695] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  211.151912][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  211.151912][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  211.151987][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  211.280664][ T9722] loop3: detected capacity change from 0 to 2048
[  211.295588][ T5656] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  211.363647][ T9722] lo: Caught tx_queue_len zero misconfig
[  211.680516][ T5656] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  211.863345][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'.
[  211.880319][ T5676] usb 6-1: USB disconnect, device number 21
[  211.976857][ T9742] profile_transition: unconfined exec no attachment
[  211.976902][ T9742] apparmor_bprm_creds_for_exec: label build failed
[  211.992853][ T9743] profile_transition: unconfined exec no attachment
[  211.992887][ T9743] apparmor_bprm_creds_for_exec: label build failed
[  212.035132][ T9741] loop6: detected capacity change from 0 to 512
[  212.038330][ T9741] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.040675][ T9741] ext4: Unknown parameter 'fsuuid'
[  212.206246][ T9753] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1519'.
[  212.206314][ T9753] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  212.292633][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1523'.
[  212.543915][ T9776] loop5: detected capacity change from 0 to 1024
[  212.582276][ T9776] hfsplus: catalog record size mismatch (type 2, got 88, expected 248)
[  212.635963][ T9778] loop5: detected capacity change from 0 to 512
[  212.647681][ T5676] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  212.651180][ T9778] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.1530: Unrecognised inode hash code 255
[  212.655926][ T9778] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1530: Corrupt directory, running e2fsck is recommended
[  212.687950][ T9778] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  212.691585][ T9778] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1530: corrupted in-inode xattr: invalid ea_ino
[  212.697379][ T9778] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  212.697907][ T9778] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1530: couldn't read orphan inode 15 (err -117)
[  212.702020][ T9778] loop5: lost filesystem error report for type 5 error -117
[  212.707423][    C0] EXT4-fs (loop5): error count since last fsck: 2
[  212.707446][    C0] EXT4-fs (loop5): initial error at time 1790000160: ext4_iget_extra_inode:5210: inode 15
[  212.707471][    C0] EXT4-fs (loop5): last error at time 1790000160: ext4_orphan_get:1408
[  212.715915][ T9778] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  212.743755][ T9778] EXT4-fs (loop5): shut down requested (2)
[  212.774831][ T6720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.809551][ T5676] usb 7-1: Using ep0 maxpacket: 16
[  212.812378][ T5676] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89
[  212.813557][ T5676] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  212.813577][ T5676] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  212.816456][ T5676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  212.816477][ T5676] usb 7-1: SerialNumber: syz
[  212.836724][ T5676] usb 7-1: 0:2 : does not exist
[  212.904420][   T55] Bluetooth: hci0: command 0x2016 tx timeout
[  213.239799][ T9794] profile_transition: unconfined exec no attachment
[  213.239906][ T9794] apparmor_bprm_creds_for_exec: label build failed
[  213.241748][ T9794] Invalid argument reading file caps for ./file0
[  213.368135][ T9800] input: syz0 as /devices/virtual/input/input18
[  213.442563][ T5676] usb 7-1: 5:0: cannot get min/max values for control 3 (id 5)
[  213.503796][ T9804] loop3: detected capacity change from 0 to 128
[  213.530042][ T5676] usb 7-1: USB disconnect, device number 23
[  213.559926][ T9806] netlink: 'syz.3.1543': attribute type 3 has an invalid length.
[  213.563336][ T9806] netlink: 'syz.3.1543': attribute type 27 has an invalid length.
[  213.630300][ T9808] netlink: 'syz.3.1544': attribute type 4 has an invalid length.
[  214.067804][ T9816] loop5: detected capacity change from 0 to 1024
[  214.068620][ T9816] hfsplus: Unknown parameter '0xffffffffffffffff'
[  214.172812][ T9823] loop6: detected capacity change from 0 to 512
[  214.233044][ T9823] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.234824][ T9823] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  214.261156][ T9823] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.1550: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  214.282915][ T6892] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.398073][ T9836] loop6: detected capacity change from 0 to 64
[  214.646012][ T9842] loop5: detected capacity change from 0 to 512
[  214.839819][ T9857] profile_transition: unconfined exec no attachment
[  214.839869][ T9857] apparmor_bprm_creds_for_exec: label build failed
[  214.883633][ T9861] profile_transition: unconfined exec no attachment
[  214.883685][ T9861] apparmor_bprm_creds_for_exec: label build failed
[  214.911957][ T9865] profile_transition: unconfined exec no attachment
[  214.912001][ T9865] apparmor_bprm_creds_for_exec: label build failed
[  214.943326][ T9868] profile_transition: unconfined exec no attachment
[  214.943613][ T9868] apparmor_bprm_creds_for_exec: label build failed
[  214.958501][ T9869] profile_transition: unconfined exec no attachment
[  214.958533][ T9869] apparmor_bprm_creds_for_exec: label build failed
[  214.976410][ T9870] profile_transition: unconfined exec no attachment
[  214.976437][ T9870] apparmor_bprm_creds_for_exec: label build failed
[  214.997767][ T9872] profile_transition: unconfined exec no attachment
[  214.997796][ T9872] apparmor_bprm_creds_for_exec: label build failed
[  215.016617][ T9873] profile_transition: unconfined exec no attachment
[  215.016652][ T9873] apparmor_bprm_creds_for_exec: label build failed
[  215.162629][ T9877] profile_transition: unconfined exec no attachment
[  215.162789][ T9877] apparmor_bprm_creds_for_exec: label build failed
[  215.195943][ T9877] profile_transition: unconfined exec no attachment
[  215.196003][ T9877] apparmor_bprm_creds_for_exec: label build failed
[  215.467287][ T9884] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  215.476066][ T9884] CIFS: Attempting to mount //127.0.0.1/share
[  215.481984][ T9884] CIFS: VFS: Error connecting to socket. Aborting operation.
[  215.485787][ T9884] CIFS: VFS: cifs_mount failed w/return code = -101
[  216.042714][ T5708] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  216.079926][ T9893] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.1574: iget: bad i_size value: 38620345925642
[  216.085347][ T9893] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  216.085962][ T9893] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1574: couldn't read orphan inode 15 (err -117)
[  216.094451][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  216.094471][    C0] EXT4-fs (loop5): initial error at time 1790000163: ext4_orphan_get:1403: inode 15
[  216.094495][    C0] EXT4-fs (loop5): last error at time 1790000163: ext4_orphan_get:1403: inode 15
[  216.106420][ T9893] loop5: lost filesystem error report for type 5 error -117
[  216.109694][ T9893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.165748][ T6720] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.205756][ T5708] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  216.215175][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.224209][ T5708] usb 4-1: config 0 descriptor??
[  216.284833][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  216.284833][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  216.284950][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  216.467645][ T5708] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  216.789755][ T5708] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  216.792144][ T5708] [drm] Initialized udl on minor 2
[  217.056125][ T5656] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  217.153634][ T9889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.164404][ T9889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.171858][ T5708] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  217.186209][ T5708] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  217.190397][ T5708] usb 4-1: USB disconnect, device number 16
[  217.215513][ T5656] usb 7-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  217.228136][ T5656] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.230746][ T5656] usb 7-1: Product: syz
[  217.232213][ T5656] usb 7-1: Manufacturer: syz
[  217.233745][ T5656] usb 7-1: SerialNumber: syz
[  217.237243][ T5656] usb 7-1: config 0 descriptor??
[  217.240740][ T5656] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  218.262740][ T9924] set_capacity_and_notify: 1 callbacks suppressed
[  218.262807][ T9924] loop3: detected capacity change from 0 to 40427
[  218.264212][ T9924] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  218.264249][ T9924] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  218.265053][ T9924] F2FS-fs (loop3): invalid crc value
[  218.311796][ T9924] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  218.346729][ T9924] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  218.349325][ T9924] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  218.503581][ T6513] syz-executor: attempt to access beyond end of device
[  218.503581][ T6513] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  218.517674][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  218.517718][ T6513] Tainted: [L]=SOFTLOCKUP
[  218.517722][ T6513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.517729][ T6513] Call Trace:
[  218.517733][ T6513]  <TASK>
[  218.517737][ T6513]  dump_stack_lvl+0xe8/0x150
[  218.517755][ T6513]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  218.517773][ T6513]  f2fs_write_end_io+0x1215/0x16f0
[  218.517785][ T6513]  ? blkg_put+0x22/0x240
[  218.517805][ T6513]  __submit_merged_bio+0x258/0x6a0
[  218.517814][ T6513]  ? rcu_is_watching+0x16/0xb0
[  218.517827][ T6513]  f2fs_submit_merged_write+0x27d/0x380
[  218.517843][ T6513]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  218.517884][ T6513]  f2fs_sync_node_pages+0x1055/0x1210
[  218.517908][ T6513]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  218.517940][ T6513]  f2fs_write_checkpoint+0xf91/0x2710
[  218.517966][ T6513]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  218.518000][ T6513]  kill_f2fs_super+0x2dd/0x700
[  218.518020][ T6513]  ? __pfx_kill_f2fs_super+0x10/0x10
[  218.518036][ T6513]  ? call_rcu+0x64d/0x8b0
[  218.518045][ T6513]  ? lockdep_hardirqs_on+0x7b/0x110
[  218.518061][ T6513]  deactivate_locked_super+0xbc/0x110
[  218.518074][ T6513]  cleanup_mnt+0x3d3/0x460
[  218.518087][ T6513]  task_work_run+0x1d9/0x270
[  218.518098][ T6513]  ? __pfx_task_work_run+0x10/0x10
[  218.518112][ T6513]  exit_to_user_mode_loop+0x204/0x770
[  218.518121][ T6513]  ? rcu_is_watching+0x16/0xb0
[  218.518132][ T6513]  do_syscall_64+0x328/0x520
[  218.518141][ T6513]  ? trace_irq_disable+0x3b/0x140
[  218.518149][ T6513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.518160][ T6513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.518168][ T6513] RIP: 0033:0x7f362499f397
[  218.518178][ T6513] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  218.518186][ T6513] RSP: 002b:00007ffe72bad1a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  218.518197][ T6513] RAX: 0000000000000000 RBX: 00007f3624a344bb RCX: 00007f362499f397
[  218.518206][ T6513] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe72bad260
[  218.518214][ T6513] RBP: 00007ffe72bad260 R08: 00007ffe72bae260 R09: 00000000ffffffff
[  218.518223][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe72bae2f0
[  218.518230][ T6513] R13: 00007f3624a344bb R14: 00000000000364db R15: 00007ffe72bae330
[  218.518248][ T6513]  </TASK>
[  218.656394][ T6513] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  218.971247][ T5656] gspca_sunplus: reg_w_riv err -71
[  218.971328][ T5656] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  218.975296][ T5656] usb 7-1: USB disconnect, device number 24
[  219.699250][ T9932] team0 (unregistering): Port device team_slave_0 removed
[  219.761141][ T9932] team0 (unregistering): Port device team_slave_1 removed
[  220.209482][ T9950] loop3: detected capacity change from 0 to 1024
[  220.220128][ T9950] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  220.260085][ T9950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.355130][ T6513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.671531][ T9976] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  221.676461][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  221.676461][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  221.682925][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  221.895834][ T9980] netlink: 'syz.3.1608': attribute type 8 has an invalid length.
[  221.935805][ T9980] bridge0: entered allmulticast mode
[  222.410366][ T9993] netlink: 'syz.3.1614': attribute type 11 has an invalid length.
[  222.410436][ T9993] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1614'.
[  222.534576][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1617'.
[  222.591710][T10000] profile_transition: 1 callbacks suppressed
[  222.594260][T10000] profile_transition: unconfined exec no attachment
[  222.594317][T10000] apparmor_bprm_creds_for_exec: 1 callbacks suppressed
[  222.599860][T10000] apparmor_bprm_creds_for_exec: label build failed
[  222.633890][T10001] profile_transition: unconfined exec no attachment
[  222.633983][T10001] apparmor_bprm_creds_for_exec: label build failed
[  222.660451][ T9999] xt_hashlimit: max too large, truncated to 1048576
[  222.827458][T10007] loop3: detected capacity change from 0 to 256
[  222.828303][T10007] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  223.148968][T10009] loop5: detected capacity change from 0 to 32768
[  223.176002][T10009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1622 (10009)
[  223.191107][T10009] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.194595][T10009] BTRFS info (device loop5): using crc32c checksum algorithm
[  223.207787][T10016] profile_transition: unconfined exec no attachment
[  223.207849][T10016] apparmor_bprm_creds_for_exec: label build failed
[  223.343419][T10009] BTRFS info (device loop5): enabling ssd optimizations
[  223.347670][T10009] BTRFS info (device loop5): turning on flush-on-commit
[  223.364028][T10009] BTRFS info (device loop5): enabling free space tree
[  223.364108][T10009] BTRFS info (device loop5): enabling auto defrag
[  223.364147][T10009] BTRFS info (device loop5): use lzo compression, level 1
[  223.364187][T10009] BTRFS info (device loop5): max_inline set to 4096
[  223.565841][ T5708] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  223.566307][ T6720] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  223.741907][T10035] profile_transition: unconfined exec no attachment
[  223.743383][T10035] apparmor_bprm_creds_for_exec: label build failed
[  224.797320][T10057] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  224.797409][T10057] overlayfs: failed to set xattr on upper
[  224.797448][T10057] overlayfs: ...falling back to index=off.
[  224.799105][T10057] overlayfs: ...falling back to uuid=null.
[  225.339726][   T25] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  225.513285][   T25] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  225.514868][   T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.514889][   T25] usb 6-1: config 0 interface 0 has no altsetting 0
[  225.516701][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.516714][   T25] usb 6-1: Product: syz
[  225.516720][   T25] usb 6-1: Manufacturer: syz
[  225.516727][   T25] usb 6-1: SerialNumber: syz
[  225.522993][   T25] usb 6-1: config 0 descriptor??
[  225.536335][   T25] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected
[  225.536620][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87
[  225.536662][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7
[  225.537525][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[  225.537617][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[  225.537654][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[  225.537690][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85
[  225.537725][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5
[  225.539890][   T25] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  225.542566][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83
[  225.542613][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 3
[  225.542775][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[  225.542957][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86
[  225.543015][   T25] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[  225.546145][   T25] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  225.774601][T10072] loop6: detected capacity change from 0 to 256
[  226.018635][ T5676] usb 6-1: USB disconnect, device number 22
[  226.024957][T10080] Bluetooth: hci0: invalid len left 17, exp >= 132
[  226.027308][ T5676] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  226.037128][ T5676] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  226.037827][ T5676] keyspan 6-1:0.0: device disconnected
[  226.101795][T10084] loop6: detected capacity change from 0 to 256
[  226.125205][T10082] loop3: detected capacity change from 0 to 4096
[  226.142710][T10082] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  226.169676][T10082] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  226.173526][T10082] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  226.277722][T10086] loop3: detected capacity change from 0 to 16
[  226.296965][T10086] erofs (device loop3): mounted with root inode @ nid 36.
[  226.312756][T10086] syz.3.1647: attempt to access beyond end of device
[  226.312756][T10086] loop3: rw=8912896, sector=36, nr_sectors = 1 limit=16
[  226.355870][T10090] loop6: detected capacity change from 0 to 1024
[  226.362910][T10090] hfsplus: request for non-existent node 128 in B*Tree
[  226.362958][T10090] hfsplus: request for non-existent node 128 in B*Tree
[  226.370827][T10090] hfsplus: xattr search failed
[  226.380490][T10086] syz.3.1647: attempt to access beyond end of device
[  226.380490][T10086] loop3: rw=8912896, sector=131156, nr_sectors = 1 limit=16
[  226.386759][T10086] syz.3.1647: attempt to access beyond end of device
[  226.386759][T10086] loop3: rw=8912896, sector=36, nr_sectors = 1 limit=16
[  226.398697][T10086] syz.3.1647: attempt to access beyond end of device
[  226.398697][T10086] loop3: rw=8912896, sector=131157, nr_sectors = 1 limit=16
[  226.404915][T10086] syz.3.1647: attempt to access beyond end of device
[  226.404915][T10086] loop3: rw=8912896, sector=41, nr_sectors = 1 limit=16
[  226.410784][T10086] syz.3.1647: attempt to access beyond end of device
[  226.410784][T10086] loop3: rw=8912896, sector=65623, nr_sectors = 1 limit=16
[  226.418005][T10086] syz.3.1647: attempt to access beyond end of device
[  226.418005][T10086] loop3: rw=8912896, sector=46, nr_sectors = 1 limit=16
[  226.423971][T10086] syz.3.1647: attempt to access beyond end of device
[  226.423971][T10086] loop3: rw=8912896, sector=131168, nr_sectors = 1 limit=16
[  226.429738][T10086] syz.3.1647: attempt to access beyond end of device
[  226.429738][T10086] loop3: rw=8912896, sector=86, nr_sectors = 1 limit=16
[  226.455868][T10086] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  226.461498][T10091] erofs (device loop3): failed to readdir of logical block 0 of nid 36
[  226.542854][T10095] loop3: detected capacity change from 0 to 512
[  226.560910][T10095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.566289][T10095] ext4 filesystem being mounted at /518/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  226.659302][ T6513] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.687583][   T34] kauditd_printk_skb: 344 callbacks suppressed
[  226.687666][   T34] audit: type=1800 audit(1790000173.183:425): pid=10100 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.6.1652" name="UDC" dev="configfs" ino=23831 res=0 errno=0
[  227.002725][ T5708] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  227.047143][ T6499] bio_check_eod: 51 callbacks suppressed
[  227.047570][ T6499] kmmpd-loop2: attempt to access beyond end of device
[  227.047570][ T6499] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64
[  227.047617][ T6499] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  227.173716][ T5708] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  227.178429][ T5708] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.182775][ T5708] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  227.187893][ T5708] usb 1-1: Dual-Role OTG device on HNP port
[  227.190833][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.205338][    C0] ------------[ cut here ]------------
[  227.205373][    C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  227.205406][    C0] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#0: syz.5.1653/10102
[  227.214610][    C0] Modules linked in:
[  227.216288][    C0] CPU: 0 UID: 0 PID: 10102 Comm: syz.5.1653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.220640][    C0] Tainted: [L]=SOFTLOCKUP
[  227.222440][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.226443][    C0] RIP: 0010:usb_ep_enable+0x1bc/0x480
[  227.228707][    C0] Code: 3a 05 77 fa 49 83 3f 00 48 c7 c0 c0 01 d3 8c 49 c7 c0 e0 01 d3 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 f0 8d 70 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 60 52 07 fa 65 8b
[  227.236682][    C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010086
[  227.239249][    C0] RAX: ffffffff8cd301c0 RBX: ffff88816be680e0 RCX: ffffffff8cd31fe0
[  227.242479][    C0] RDX: 0000000000000081 RSI: ffffffff8e708df0 RDI: ffffffff9087f3f0
[  227.245685][    C0] RBP: dffffc0000000000 R08: ffffffff8cd301e0 R09: 0000000000000002
[  227.248818][    C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cd31fe0
[  227.251954][    C0] R13: 0000000000000081 R14: ffffffff9087f3f0 R15: ffff88816be680f8
[  227.255140][    C0] FS:  0000555589895500(0000) GS:ffff88818d6e6000(0000) knlGS:0000000000000000
[  227.258754][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  227.261485][    C0] CR2: 00007f36257faff8 CR3: 000000011b90a000 CR4: 00000000000006f0
[  227.264781][    C0] Call Trace:
[  227.266234][    C0]  <IRQ>
[  227.267453][    C0]  hidg_set_alt+0x12a/0xa60
[  227.269307][    C0]  ? usb_gadget_set_state+0x12c/0x2d0
[  227.271539][    C0]  set_config+0x749/0x1160
[  227.273415][    C0]  composite_setup+0x1de7/0x3480
[  227.275383][    C0]  configfs_composite_setup+0xc7/0x100
[  227.277535][    C0]  dummy_timer+0x2f43/0x4cf0
[  227.279499][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  227.281765][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  227.283779][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  227.286225][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  227.288254][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  227.290415][    C0]  hrtimer_run_softirq+0x1e3/0x2e0
[  227.292572][    C0]  handle_softirqs+0x226/0x860
[  227.294564][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  227.296568][    C0]  __irq_exit_rcu+0xcb/0x220
[  227.298470][    C0]  irq_exit_rcu+0x9/0x30
[  227.300283][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  227.302557][    C0]  </IRQ>
[  227.303754][    C0]  <TASK>
[  227.304967][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  227.307363][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  227.309589][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 87 85 4e 0a e8 c2 f6 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 08 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  227.317232][    C0] RSP: 0018:ffffc900036ff300 EFLAGS: 00000206
[  227.319675][    C0] RAX: 00000000000004cf RBX: ffff88812103c8e0 RCX: 8000000000000001
[  227.322896][    C0] RDX: 0000000000000007 RSI: ffffffff8e472e42 RDI: ffffffff8c6d6d80
[  227.326120][    C0] RBP: ffffc900036ff350 R08: ffffffff907a0c7f R09: 1ffffffff20f418f
[  227.329382][    C0] R10: dffffc0000000000 R11: fffffbfff20f4190 R12: ffff88816cffda00
[  227.332775][    C0] R13: ffff88816cffda00 R14: dffffc0000000000 R15: 1ffff1102420791c
[  227.336146][    C0]  __schedule+0x17dc/0x5820
[  227.338105][    C0]  ? rcu_is_watching+0x16/0xb0
[  227.340131][    C0]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  227.342587][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  227.344672][    C0]  ? __pfx___schedule+0x10/0x10
[  227.346671][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  227.348829][    C0]  preempt_schedule_common+0x7f/0xd0
[  227.350980][    C0]  preempt_schedule_thunk+0x16/0x40
[  227.353065][    C0]  _raw_spin_unlock+0x41/0x50
[  227.355090][    C0]  __zap_vma_range+0x4082/0x4f20
[  227.357229][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  227.359414][    C0]  ? mas_find+0xab1/0xcf0
[  227.361145][    C0]  ? unmap_vmas+0x1b9/0x550
[  227.363055][    C0]  unmap_vmas+0x390/0x550
[  227.364766][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  227.366788][    C0]  exit_mmap+0x293/0x9f0
[  227.368517][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  227.370419][    C0]  ? __pfx_exit_aio+0x10/0x10
[  227.372328][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  227.374432][    C0]  __mmput+0x118/0x420
[  227.376155][    C0]  exit_mm+0x221/0x2d0
[  227.377900][    C0]  do_exit+0x6cd/0x2360
[  227.379677][    C0]  ? try_to_wake_up+0x8b6/0x14d0
[  227.381768][    C0]  ? __pfx_do_exit+0x10/0x10
[  227.383743][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  227.385980][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  227.388143][    C0]  do_group_exit+0x22d/0x2f0
[  227.389997][    C0]  __x64_sys_exit_group+0x3f/0x40
[  227.392021][    C0]  x64_sys_call+0x18c6/0x18d0
[  227.393879][    C0]  do_syscall_64+0x166/0x520
[  227.395733][    C0]  ? trace_irq_disable+0x3b/0x140
[  227.397705][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.400189][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.402551][    C0] RIP: 0033:0x7f4d7639e159
[  227.404386][    C0] Code: Unable to access opcode bytes at 0x7f4d7639e12f.
[  227.407180][    C0] RSP: 002b:00007ffdcf71cd68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  227.410483][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d7639e159
[  227.413554][    C0] RDX: 00007f4d755f9000 RSI: 0000000000000000 RDI: 0000000000000000
[  227.416751][    C0] RBP: 00007ffdcf71cdcc R08: 0000000000000000 R09: 00000000000927c0
[  227.419876][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001a6
[  227.423053][    C0] R13: 00000000000927c0 R14: 0000000000038214 R15: 00007ffdcf71ce20
[  227.426390][    C0]  </TASK>
[  227.427743][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  227.430721][    C0] CPU: 0 UID: 0 PID: 10102 Comm: syz.5.1653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  227.435149][    C0] Tainted: [L]=SOFTLOCKUP
[  227.436946][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  227.441000][    C0] Call Trace:
[  227.442419][    C0]  <IRQ>
[  227.443647][    C0]  vpanic+0x56d/0xa60
[  227.445348][    C0]  ? __pfx__printk+0x10/0x10
[  227.447296][    C0]  ? __pfx_vpanic+0x10/0x10
[  227.449179][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  227.451367][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  227.453513][    C0]  panic+0xc5/0xd0
[  227.455057][    C0]  ? __pfx_panic+0x10/0x10
[  227.456888][    C0]  __warn+0x315/0x4c0
[  227.458510][    C0]  ? usb_ep_enable+0x148/0x480
[  227.460530][    C0]  ? usb_ep_enable+0x148/0x480
[  227.462539][    C0]  __report_bug+0x276/0x570
[  227.464489][    C0]  ? usb_ep_enable+0x148/0x480
[  227.466545][    C0]  ? __pfx___report_bug+0x10/0x10
[  227.468557][    C0]  ? do_raw_spin_unlock+0x4d/0x200
[  227.470696][    C0]  report_bug_entry+0x19b/0x290
[  227.472859][    C0]  ? usb_ep_enable+0x1bc/0x480
[  227.475074][    C0]  ? usb_ep_enable+0x1c1/0x480
[  227.477553][    C0]  handle_bug+0xce/0x200
[  227.479859][    C0]  exc_invalid_op+0x1a/0x50
[  227.481710][    C0]  asm_exc_invalid_op+0x1a/0x20
[  227.483709][    C0] RIP: 0010:usb_ep_enable+0x1bc/0x480
[  227.485950][    C0] Code: 3a 05 77 fa 49 83 3f 00 48 c7 c0 c0 01 d3 8c 49 c7 c0 e0 01 d3 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 f0 8d 70 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 60 52 07 fa 65 8b
[  227.493848][    C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010086
[  227.496440][    C0] RAX: ffffffff8cd301c0 RBX: ffff88816be680e0 RCX: ffffffff8cd31fe0
[  227.499692][    C0] RDX: 0000000000000081 RSI: ffffffff8e708df0 RDI: ffffffff9087f3f0
[  227.502920][    C0] RBP: dffffc0000000000 R08: ffffffff8cd301e0 R09: 0000000000000002
[  227.506134][    C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cd31fe0
[  227.509386][    C0] R13: 0000000000000081 R14: ffffffff9087f3f0 R15: ffff88816be680f8
[  227.512630][    C0]  hidg_set_alt+0x12a/0xa60
[  227.514528][    C0]  ? usb_gadget_set_state+0x12c/0x2d0
[  227.516726][    C0]  set_config+0x749/0x1160
[  227.518556][    C0]  composite_setup+0x1de7/0x3480
[  227.520456][    C0]  configfs_composite_setup+0xc7/0x100
[  227.522839][    C0]  dummy_timer+0x2f43/0x4cf0
[  227.524735][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  227.526884][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  227.528933][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  227.531464][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  227.533571][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  227.535775][    C0]  hrtimer_run_softirq+0x1e3/0x2e0
[  227.537937][    C0]  handle_softirqs+0x226/0x860
[  227.539989][    C0]  ? __irq_exit_rcu+0xcb/0x220
[  227.541963][    C0]  __irq_exit_rcu+0xcb/0x220
[  227.544032][    C0]  irq_exit_rcu+0x9/0x30
[  227.545862][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  227.548181][    C0]  </IRQ>
[  227.549388][    C0]  <TASK>
[  227.550633][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  227.553172][    C0] RIP: 0010:finish_task_switch+0x413/0xc60
[  227.555614][    C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 87 85 4e 0a e8 c2 f6 39 00 fb 4c 8b 65 c8 <49> 8d bc 24 08 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  227.563550][    C0] RSP: 0018:ffffc900036ff300 EFLAGS: 00000206
[  227.566096][    C0] RAX: 00000000000004cf RBX: ffff88812103c8e0 RCX: 8000000000000001
[  227.569407][    C0] RDX: 0000000000000007 RSI: ffffffff8e472e42 RDI: ffffffff8c6d6d80
[  227.572696][    C0] RBP: ffffc900036ff350 R08: ffffffff907a0c7f R09: 1ffffffff20f418f
[  227.575936][    C0] R10: dffffc0000000000 R11: fffffbfff20f4190 R12: ffff88816cffda00
[  227.579255][    C0] R13: ffff88816cffda00 R14: dffffc0000000000 R15: 1ffff1102420791c
[  227.582590][    C0]  __schedule+0x17dc/0x5820
[  227.584434][    C0]  ? rcu_is_watching+0x16/0xb0
[  227.586462][    C0]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  227.588979][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  227.591098][    C0]  ? __pfx___schedule+0x10/0x10
[  227.593087][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  227.595394][    C0]  preempt_schedule_common+0x7f/0xd0
[  227.597601][    C0]  preempt_schedule_thunk+0x16/0x40
[  227.599803][    C0]  _raw_spin_unlock+0x41/0x50
[  227.601828][    C0]  __zap_vma_range+0x4082/0x4f20
[  227.603929][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[  227.606117][    C0]  ? mas_find+0xab1/0xcf0
[  227.607911][    C0]  ? unmap_vmas+0x1b9/0x550
[  227.609834][    C0]  unmap_vmas+0x390/0x550
[  227.611691][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  227.613936][    C0]  exit_mmap+0x293/0x9f0
[  227.615888][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  227.618031][    C0]  ? __pfx_exit_aio+0x10/0x10
[  227.620040][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[  227.622227][    C0]  __mmput+0x118/0x420
[  227.623899][    C0]  exit_mm+0x221/0x2d0
[  227.625665][    C0]  do_exit+0x6cd/0x2360
[  227.627358][    C0]  ? try_to_wake_up+0x8b6/0x14d0
[  227.629338][    C0]  ? __pfx_do_exit+0x10/0x10
[  227.631259][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  227.633517][    C0]  ? preempt_schedule_thunk+0x16/0x40
[  227.635702][    C0]  do_group_exit+0x22d/0x2f0
[  227.637606][    C0]  __x64_sys_exit_group+0x3f/0x40
[  227.639593][    C0]  x64_sys_call+0x18c6/0x18d0
[  227.641536][    C0]  do_syscall_64+0x166/0x520
[  227.643434][    C0]  ? trace_irq_disable+0x3b/0x140
[  227.645499][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.647958][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.650458][    C0] RIP: 0033:0x7f4d7639e159
[  227.652314][    C0] Code: Unable to access opcode bytes at 0x7f4d7639e12f.
[  227.655109][    C0] RSP: 002b:00007ffdcf71cd68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  227.658459][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d7639e159
[  227.661768][    C0] RDX: 00007f4d755f9000 RSI: 0000000000000000 RDI: 0000000000000000
[  227.664934][    C0] RBP: 00007ffdcf71cdcc R08: 0000000000000000 R09: 00000000000927c0
[  227.668160][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001a6
[  227.671343][    C0] R13: 00000000000927c0 R14: 0000000000038214 R15: 00007ffdcf71ce20
[  227.674551][    C0]  </TASK>
[  227.676580][    C0] Kernel Offset: disabled
[  227.678392][    C0] Rebooting in 86400 seconds..
