last executing test programs:

3.584243787s ago: executing program 1 (id=4092):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0xee00)
keyctl$chown(0x4, r0, 0x0, 0x0)

3.432333752s ago: executing program 1 (id=4094):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000480)={[{}, {@umask={'umask', 0x3d, 0x8}}, {@nls={'nls', 0x3d, 'iso8859-3'}}, {@gid}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@nodecompose}, {@nobarrier}]}, 0xfe, 0x5f2, &(0x7f0000001cc0)="$eJzs3UFvHGcZB/D/bGLHDlK6SZOmICSscgA1IrG9kQkSElAKslCFKnHp1Uo2tZVNGtlb5PYAAXFuv0I5mDMHTihIOXDmKxj1iODum9HMztibZOt4k+C1w+8nzb7PzDvzzjOPZkczY1kb4P/W8geZejSbLF95b7Oc397q9La3OnebOMmZJK1kJklRLv5Lki+TBxlM+XrTMdQ+pfh8+ebqw88uD+Zm6qlavzhouxEjjVi2l0t7kGvVvoDHxlt84fH2j3AuyYW6hYnbbfxzZPcY30sA4KRpJadGLW8nZ+ub9fI5YHBXPLjHPtEeTDoBAAAAOAKv7WQnmzk36TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJCkGv/9f1FOriedSNL//P10vSx2faI8mnQAAAAAAAAAAvATf2slONnOumd8tqr/5v1XNXKw+v5aPs5Fu1nM1m1lJP/2sZyFJe2ig6c2Vfn994RBbLo7ccvFojhcAAAAAAAAAXlG/z/L+3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA4KJJTg6aaLjZxO63TSWaSTJfrPUgeNvFJ9mjSCQAAAMAReG0nO9nMuWZ+t6ie+d+onvtn8nHupZ+19NNLN7eqdwGDp/7W9lant73VuVtOT4/7k/+MlUY1YgbvHkbveb5a49LeFsv5eX6VK5nL+1nPWn6dlfTTzVzeraKVFGnXby/aTZ6j8/3xY3PvPyvXN6tMZnM7a1VuV3MzH6WXW2lVx1Cts91EI/f4u7I6xY9qh6zRrbotj+gXdXs8tKuKTO1VZL6ufVmD8wfXfszz5Mk9LaS19w7q4sF7GqfmZ5rgbN2WtX73ONd8anHo7Hvj4Eok84v/vr/au3dn9fbGleNzSM/pyXOiM1SJy2NXYnd397dHfggvyXRdjcFVdLyr5VvVtueyll/mo9xKNzcynxtZyvV0spQfZGmorpcO8V1rjXd9+/Z362Aqyc/q9ngo63p+qK7DV7p21Te8pJXWYMVceHlXpMbpb9RBebK+c+yuSOefuDY358vrB1fij7vl50bv3p311ZX7h9zfd+q2rMBPn68Sp8ff5DDK8+XC3vCPnx1l3+sj+xaqvot7fa2n+i7t9T3rmzpd38M9PdJi1Xd5ZF+n6ntzqG/UXQ4Ax97Zt89Oz/5r9h+zX8z+YXZ19r2Zd87cOPPN6Uz9/fRfT/259afWD4u380V+s//8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPL+NTz69s9LrddcFgskHM0kOu3Lzu0+TzvkVDSZ8YQL+5671796/tvHJp99bu7vyYffD7r3rC0uL16/PL33/xrXba73u/OBz0mkCAC/R/k3/pDMBAAAAAAAAAAAAAAC+ylH8O/GkjxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHi1LX+QqUcpsjB/db6c397q9MqpiffXnElSlMHfknyZPMhgSntouOKr9lN8vnxz9eFnl/fHmmnWLw7a7nAey6X1RE4vOt7iC4+3f4RzSS7ULUzcfwMAAP//Lxn9aA==")
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000004c0)="c7ba5eb00caa9ab4ac5a6bdbe0fa681c5a9f2e2141d04da32a70ea6c51d0f6d914d781885d52f42dbd61e081c8994c78a3c68f62caeeb9a96118761d8ddde84bac6ce8fb384e66171b0e2f358dcdf6de00cec324f74a1ad2f98aa11518474437d913d19ea7c17e1820d7b2d7160d56afc7b0f190acfa3c8c3824e085aba99c0d018283ebf045a17b4b74a33aea654ec322e274e226ce1c1c6c5ed48b5c56eda8b76d55106f41ebce3580763bef22214a7527c5f47cde06ee2b5f1463e9c716e9001aeafaebe4cb2a59d7c9dee42cf8ef4e988b88e0cd240326020a820f1d113fc2ecc3e471cb97f3008c604ceb55b19ba3ba7fee9e8a6eea574d8d43c7e08e36")
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0)

3.157702339s ago: executing program 1 (id=4098):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, 0x0)

2.867994966s ago: executing program 2 (id=4103):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@usrjquota}, {@nobh}, {@acl}]}, 0x2, 0x462, &(0x7f0000001f80)="$eJzs281vFGUYAPBnpt0WBGxF/OBDraKx8aOl4AcHD2o08YCJiR702LSFIAs1tCZCiIIxeDLGxLvx6L/gSS/GeDLxqndDQgwXwNOa2Z2hu8vu0i67XWR/v2Tgfeej7/PszLv7zry7AQytqeyfJGJ7RPwZERO1auMOU7X/rl05t3D9yrmFJCqVd/9JqvtdvXJuodi1OG5bXplOI9Ivktjbot2VM2dPzJfLS6fz+uzqyY9mV86cff74yfljS8eWTh08fPiFQ3Mvv3TwxZ7kmcV0dc+ny/t2v/XBN28f+Spblxb5N+XRI1OdNj5VqfS4ucHaUVdORgcYCBsyEhHZ6SpV+/9EjMTayZuINz8faHBAX1Uqlcq29pvPV4C7WBKNdV0ehkXxQZ/d/xZL8yDg1f4NPwbu8mu1G6As72v5UtsyWn0+EPm90Y4+tT8VEe+f//e7bIn+PIcAAGjwUzb+ea7V+C+NB+v2uzefG5qMiPsiYmdE3B8RuyLigYjqvg9FxMMbbL95kuTm8U96qavE1ikb/72Sz201jv+K0V9MjuS1HdX8S8nR4+WlA/lrMh2l8aw+16GNn9/44+t22+rHf9mStV+MBfM4Lo2ONx6zOL86fzs517t8IWLPaKv8kxszAUlE7I6IPV22cfyZH/a123br/DvowTxT5fuIp2vn/3w05V9IOs9Pzm6J8tKB2eKquNlvv198p1377fMfv/3k1iE7//e0vP5v5D+Z1M/XrmQBX9xQGxf/+rLtPU231/9Y8l61PJav+2R+dfX0XMRYcqQWdP36g2vHFvVi/yz/6f2t+//OWHsl9kZEdhE/EhGPRsRjeeyPR8QTEbG/Q/6/vv7kh93n319Z/osbOv9rhbFoXtO6MHLilx8bGp28Kf/rnc9/qVqaztes5/1vPXHlVzMAAADc9dKI2B5JOnOjnKYzM7Xvy++KSMvLK6vPHl3++NRi7TcCkxFp8aRrou556Fx+W1+rX4iI2lcLiu2H8ufG345srdZnFpbLi4NOHobctjb9P/P3yKCjA/rO77VgeOn/MLxu1f8/26Q4gM3n8x+GV4v+v3UQcQCbbbzl578xPwyHpv5v2g+GSFP/3zKoOIDN1/3zv7GexgFsPs//YSitbI1b/0i+Y6H4S10eftcWonRHhNG3QqR3RBh3bKH0P+8Xg3tPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KX/AgAA//9yX963")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000100)={@desc={0x1, 0x0, @auto="1e9a7dbc5d9b3fee"}})

2.662407711s ago: executing program 1 (id=4106):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x251, 0xbc, 0x8e, 0xaf, 0x10, 0x1199, 0x907b, 0xb23c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x83, 0x7f, 0x50, 0x8, "", [{{0x9, 0x4, 0xa, 0x4, 0x0, 0x70, 0x56, 0x97, 0x7}}, {{0x9, 0x4, 0x3, 0x1, 0x0, 0xff, 0x2a, 0x33, 0x81}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)
ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0)

2.082368346s ago: executing program 2 (id=4110):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mincore(&(0x7f0000219000/0x4000)=nil, 0x4000, 0x0)

1.747835465s ago: executing program 2 (id=4116):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x80, @loopback, 0xe6e0, 0x2004}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)

1.579638559s ago: executing program 2 (id=4120):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f00000008c0)=ANY=[@ANYBLOB='fmask=00000000000000000000016,dmask=00000000000000000000020,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d6d616363656c74adc23e3c1cbd69632c696f636861727365743d63703836392c6e616d65636173653d312c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,namecase=1,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$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")
open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x198)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00')

1.1993101s ago: executing program 3 (id=4127):
setuid(0xee01)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4)

1.192314549s ago: executing program 4 (id=4128):
syz_read_part_table(0x5e2, &(0x7f0000000000)="$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")
r0 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)

1.056542323s ago: executing program 3 (id=4130):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r0, &(0x7f0000000080), 0x12)
bind$x25(r0, &(0x7f00000000c0), 0x12)

1.005384004s ago: executing program 2 (id=4131):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)

954.385055ms ago: executing program 0 (id=4132):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}})

871.691197ms ago: executing program 3 (id=4133):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0xf, 0xfffffffffffffffd, 0x5, 0x8ba28})

833.319198ms ago: executing program 4 (id=4134):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffff12}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000010)

807.26209ms ago: executing program 0 (id=4135):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000180)={[{@orlov}, {@resgid={'resgid', 0x3d, 0xee00}}, {@oldalloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0x0, 0x473, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xc5)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000200)={0x2080025, 0xa5a, 0x5, 0x679, 0x3ffffffc})

652.607214ms ago: executing program 0 (id=4136):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x804)

523.760457ms ago: executing program 4 (id=4137):
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f)

469.687598ms ago: executing program 0 (id=4138):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x20, 0x12, 0xa01, 0x70bd28, 0x25dfdbfd, {0x80, 0x0, 0x300}, [@typed={0x9, 0xf5, 0x0, 0x0, @binary="585878a177"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0)

395.14498ms ago: executing program 4 (id=4139):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo\x00')
fchdir(r0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)

359.074341ms ago: executing program 3 (id=4140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000120000008500000082000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)

350.328021ms ago: executing program 2 (id=4141):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

313.902442ms ago: executing program 1 (id=4142):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002dc0), 0x101400, 0x0)
ioctl$TIOCPKT(r0, 0x5420, 0xffffffffffffffff)

291.028533ms ago: executing program 0 (id=4143):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
sendmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000000)=@isdn={0x22, 0xfd, 0x6, 0x8, 0x9e}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000000)

234.780644ms ago: executing program 4 (id=4144):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109)
sendfile(r0, r0, 0x0, 0xb)

211.941765ms ago: executing program 3 (id=4145):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0xc0, 0x7, 0x3})

160.136546ms ago: executing program 0 (id=4146):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe3}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x2, 0x6, 0xc, 0x1, 0x80000001}], 0x1, 0x28, 0x0, 0x2}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}})

135.236467ms ago: executing program 1 (id=4147):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000001c0), 0xd, 0x5df, &(0x7f0000000600)="$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")
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lstat(&(0x7f0000008840)='./file0/file1\x00', 0x0)

24.04323ms ago: executing program 3 (id=4148):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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")
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
creat(&(0x7f00000007c0)='./bus\x00', 0x182)

0s ago: executing program 4 (id=4149):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x10, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000240)="2a73ed35", 0x4}], 0x1}}], 0x40000ca, 0x200040c4)

kernel console output (not intermixed with test programs):

 drop_caches: 0
[  146.226666][ T7673] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  146.397515][ T4227] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  146.647753][ T4227] usb 4-1: Using ep0 maxpacket: 8
[  146.648486][ T7689] loop2: detected capacity change from 0 to 4096
[  146.710166][ T5530] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  146.767642][ T4227] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  146.786215][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.799232][ T7689] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  146.845301][ T4227] usb 4-1: config 0 has no interface number 0
[  146.852193][ T4227] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  146.886780][ T4227] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  146.936502][ T4227] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  146.965560][ T4227] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  146.976605][ T4227] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  146.997832][ T5530] usb 1-1: Using ep0 maxpacket: 32
[  147.138033][ T5530] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.148460][ T4227] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  147.167944][ T5530] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  147.181358][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.181387][ T4227] usb 4-1: Product: syz
[  147.181404][ T4227] usb 4-1: Manufacturer: syz
[  147.181420][ T4227] usb 4-1: SerialNumber: syz
[  147.205278][ T4227] usb 4-1: config 0 descriptor??
[  147.248067][ T7669] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  147.417758][ T5530] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  147.445663][ T5530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.475849][ T7669] udc-core: couldn't find an available UDC or it's busy
[  147.477870][ T5530] usb 1-1: Product: syz
[  147.487046][ T5530] usb 1-1: Manufacturer: syz
[  147.515988][ T7669] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  147.519560][ T5530] usb 1-1: SerialNumber: syz
[  147.568476][ T4227] usb 4-1: NFC: intf ffff888062a59000 id ffffffff8cb63280
[  147.569430][ T5530] usb 1-1: config 0 descriptor??
[  147.591986][ T7736] loop2: detected capacity change from 0 to 512
[  147.600133][ T7739] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  147.616126][ T4227] nfcmrvl 4-1:0.122: NFC: registered with nci successfully
[  147.654838][ T7736] EXT4-fs (loop2): old and new quota format mixing
[  147.671612][ T5530] qmi_wwan 1-1:0.0: bogus CDC Union: master=1, slave=0
[  147.683478][ T5530] qmi_wwan: probe of 1-1:0.0 failed with error -22
[  147.688154][ T4227] usb 4-1: USB disconnect, device number 11
[  147.739365][ T4227] usb 4-1: NFC: intf ffff888062a59000
[  147.865244][ T4271] usb 1-1: USB disconnect, device number 8
[  147.995492][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'.
[  148.167570][ T5530] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  148.437568][ T5530] usb 2-1: Using ep0 maxpacket: 8
[  148.567908][ T5530] usb 2-1: config 243 has an invalid interface number: 78 but max is 0
[  148.586848][ T5530] usb 2-1: config 243 has no interface number 0
[  148.637219][ T5530] usb 2-1: config 243 interface 78 has no altsetting 0
[  148.670555][ T7797] netlink: 'syz.3.1638': attribute type 21 has an invalid length.
[  148.720737][ T7797] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1638'.
[  148.867730][ T5530] usb 2-1: New USB device found, idVendor=2639, idProduct=0011, bcdDevice=69.b0
[  148.891276][ T5530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.908987][ T5530] usb 2-1: Product: syz
[  148.917686][ T5530] usb 2-1: Manufacturer: syz
[  148.942003][ T5530] usb 2-1: SerialNumber: syz
[  149.247564][ T4230] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  149.321017][ T5530] usb 2-1: USB disconnect, device number 9
[  149.617740][ T4230] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  149.627513][ T4230] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  149.643788][ T4230] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  149.657562][ T4230] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  149.747620][ T4230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  149.757077][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  149.765609][ T4230] usb 4-1: SerialNumber: syz
[  149.818566][ T4230] cdc_acm 4-1:1.0: invalid descriptor buffer length
[  149.825322][ T4230] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  149.864548][ T4230] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  149.897544][ T4230] cdc_acm: probe of 4-1:1.0 failed with error -22
[  150.055202][ T4271] usb 4-1: USB disconnect, device number 12
[  150.055454][ T7851] netlink: 'syz.1.1665': attribute type 11 has an invalid length.
[  150.080043][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1666'.
[  150.092806][ T7851] netlink: 448 bytes leftover after parsing attributes in process `syz.1.1665'.
[  150.215708][ T7858] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  150.487141][ T7871] loop1: detected capacity change from 0 to 256
[  150.563694][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1677'.
[  150.566876][ T7871] exfat: Deprecated parameter 'utf8'
[  150.607517][ T7871] exfat: Deprecated parameter 'utf8'
[  150.653656][ T7871] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  150.674468][ T7880] netlink: 'syz.0.1679': attribute type 11 has an invalid length.
[  150.702281][ T7880] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1679'.
[  150.752851][ T7871] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  150.964557][ T7890] device bond1 entered promiscuous mode
[  151.003676][ T7890] 8021q: adding VLAN 0 to HW filter on device bond1
[  151.238016][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'.
[  151.534910][ T7924] loop1: detected capacity change from 0 to 24
[  151.609587][ T7924] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  151.677001][ T7924] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  151.811551][ T7924] VFS: Lookup of 'file0' in romfs loop1 would have caused loop
[  151.969947][ T7946] program syz.0.1711 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.107262][ T7951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1713'.
[  152.551221][ T7976] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1727'.
[  152.934583][ T8002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'.
[  153.068382][ T8012] loop2: detected capacity change from 0 to 256
[  153.069283][ T8012] exfat: Deprecated parameter 'utf8'
[  153.069304][ T8012] exfat: Deprecated parameter 'utf8'
[  153.167933][ T8012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d)
[  153.219198][ T8012] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  153.553633][ T8035] tmpfs: Bad value for 'mpol'
[  153.649940][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'.
[  153.921353][    C1] sd 0:0:1:0: tag#7944 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  153.931320][    C1] sd 0:0:1:0: tag#7944 CDB: Mode Sense(10)
[  153.937156][    C1] sd 0:0:1:0: tag#7944 CDB[00]: 5a 88 f4 74 3a 27 ba 79 f3 26 e7 a4 89 c9 13 2e
[  153.946441][    C1] sd 0:0:1:0: tag#7944 CDB[10]: bd 0d 92 db 40 a2 20 7d 0f ed a1 f0 60 0c 33 30
[  153.955541][    C1] sd 0:0:1:0: tag#7944 CDB[20]: 8b 52 18
[  154.025097][ T8057] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  154.315626][ T8082] loop2: detected capacity change from 0 to 24
[  154.380989][ T8082] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  154.431823][ T8082] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  154.489392][ T8082] VFS: Lookup of 'file0' in romfs loop2 would have caused loop
[  154.627691][ T4227] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  154.639064][ T8098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'.
[  154.867663][ T4227] usb 2-1: Using ep0 maxpacket: 32
[  154.894008][ T8111] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  154.987691][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.007785][ T8117] tmpfs: Bad value for 'mpol'
[  155.026134][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  155.227861][ T4227] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  155.237023][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.287884][ T4227] usb 2-1: Product: syz
[  155.292116][ T4227] usb 2-1: Manufacturer: syz
[  155.327995][ T4227] usb 2-1: SerialNumber: syz
[  155.368295][ T4227] usb 2-1: config 0 descriptor??
[  155.386767][ T8140] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  155.432574][ T4227] qmi_wwan 2-1:0.0: bogus CDC Union: master=1, slave=0
[  155.451807][ T4227] qmi_wwan: probe of 2-1:0.0 failed with error -22
[  155.516093][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'.
[  155.600662][ T8152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'.
[  155.656312][ T8155] loop4: detected capacity change from 0 to 256
[  155.689619][ T1331] usb 2-1: USB disconnect, device number 10
[  156.115052][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'.
[  156.140356][ T4227] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  156.240948][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'.
[  156.443840][ T8195] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  156.478193][ T8194] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1833'.
[  156.505200][ T8194] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1833'.
[  156.523528][ T8197] loop2: detected capacity change from 0 to 64
[  156.667783][ T4227] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  156.703121][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  156.731710][ T4227] usb 1-1: Product: syz
[  156.735938][ T4227] usb 1-1: SerialNumber: syz
[  156.772092][ T4227] usb 1-1: config 0 descriptor??
[  156.854540][ T8207] loop2: detected capacity change from 0 to 512
[  156.920786][ T8207] EXT4-fs (loop2): Test dummy encryption mode enabled
[  156.934404][ T8207] EXT4-fs (loop2): Test dummy encryption mode enabled
[  156.942526][ T8211] loop1: detected capacity change from 0 to 64
[  156.942898][ T8207] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  157.067754][ T4227] ldusb 1-1:0.0: Interrupt in endpoint not found
[  157.074183][ T8207] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,nogrpid. Quota mode: none.
[  157.086284][ T4227] usb 1-1: USB disconnect, device number 9
[  157.160694][ T8215] loop4: detected capacity change from 0 to 256
[  157.191177][ T4419] attempt to access beyond end of device
[  157.191177][ T4419] loop1: rw=1, want=16777218, limit=64
[  157.208681][ T8215] exfat: Deprecated parameter 'utf8'
[  157.214087][ T8215] exfat: Deprecated parameter 'namecase'
[  157.259225][ T4419] Buffer I/O error on dev loop1, logical block 8388608, lost async page write
[  157.302449][ T8215] exfat: Deprecated parameter 'namecase'
[  157.390053][ T8215] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  157.468291][ T8207] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  157.558858][ T8207] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.1838: Directory hole found for htree leaf block 0
[  157.597283][ T8207] EXT4-fs (loop2): Remounting filesystem read-only
[  158.110877][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1856'.
[  158.167656][ T8247] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1856'.
[  158.752929][ T8283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1873'.
[  158.852118][ T8283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1873'.
[  159.110108][ T8301] xt_TCPMSS: Only works on TCP SYN packets
[  159.255875][ T8251] loop2: detected capacity change from 0 to 32768
[  159.452804][ T8321] loop1: detected capacity change from 0 to 512
[  159.636671][ T8321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.657857][ T8321] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.795090][ T8337] loop4: detected capacity change from 0 to 2048
[  159.856453][ T8340] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8340]
[  159.894190][ T8337] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  159.968031][ T8344] gre0: Master is either lo or non-ether device
[  160.026509][ T8347] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.174763][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'.
[  160.231040][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'.
[  160.698862][ T8382] IPv6: sit1: Disabled Multicast RS
[  161.234417][ T8410] loop2: detected capacity change from 0 to 512
[  161.312026][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1938'.
[  161.410776][ T8410] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  161.473125][ T8410] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.577624][ T5530] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  161.957839][ T5530] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  161.978270][ T5530] usb 1-1: config 0 has no interface number 0
[  162.016814][ T5530] usb 1-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  162.067283][ T8451] loop1: detected capacity change from 0 to 512
[  162.093614][ T8448] loop2: detected capacity change from 0 to 2048
[  162.116051][ T8451] EXT4-fs (loop1): Test dummy encryption mode enabled
[  162.134355][ T8451] EXT4-fs (loop1): Test dummy encryption mode enabled
[  162.145438][ T8451] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.177388][ T8451] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,nogrpid. Quota mode: none.
[  162.232378][ T8448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.257794][ T5530] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  162.287886][ T5530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.305280][ T5530] usb 1-1: Product: syz
[  162.319829][ T5530] usb 1-1: Manufacturer: syz
[  162.324573][ T5530] usb 1-1: SerialNumber: syz
[  162.332353][ T5530] usb 1-1: config 0 descriptor??
[  162.399912][ T5530] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  162.409384][ T8460] kAFS: unable to lookup cell 'Þ({^ú@'
[  162.423569][ T5530] radio-si470x: probe of 1-1:0.35 failed with error -5
[  162.491953][ T8451] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.1952: Directory hole found for htree leaf block 0
[  162.542887][ T8451] EXT4-fs (loop1): Remounting filesystem read-only
[  162.608081][ T5530] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  162.730698][ T8469] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4197] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8469]
[  162.810042][ T5530] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71)
[  162.847343][ T5530] radio-raremono 1-1:0.35: V4L2 device registered as radio48
[  162.925729][ T5530] usb 1-1: USB disconnect, device number 10
[  162.948418][ T5530] radio-raremono 1-1:0.35: Thanko's Raremono disconnected
[  163.207816][ T4227] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  163.457622][ T4227] usb 5-1: Using ep0 maxpacket: 32
[  163.577873][ T4227] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  163.596011][ T4230] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  163.615190][ T4227] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  163.668792][ T4227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  163.707819][ T4227] usb 5-1: config 1 has no interface number 0
[  163.734534][ T4227] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  163.744665][ T8509] netlink: 'syz.0.1978': attribute type 3 has an invalid length.
[  163.744689][ T8509] netlink: 'syz.0.1978': attribute type 1 has an invalid length.
[  163.823006][ T4227] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  163.855394][ T4227] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  163.887493][ T4230] usb 3-1: Using ep0 maxpacket: 8
[  163.923188][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.020962][ T4227] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  164.047800][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short
[  164.099608][ T8519] kAFS: unable to lookup cell 'Þ({^ú@'
[  164.148533][ T4230] usb 3-1: config 127 has an invalid interface number: 1 but max is 0
[  164.197518][ T4230] usb 3-1: config 127 has no interface number 0
[  164.203854][ T4230] usb 3-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[  164.228326][ T4227] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  164.236660][ T4227] snd_usb_pod 5-1:1.1: invalid control EP
[  164.266452][ T4230] usb 3-1: config 127 interface 1 has no altsetting 0
[  164.273479][ T4227] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  164.281082][ T8527] overlayfs: unrecognized mount option "\{\" or missing value
[  164.296319][ T4227] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  164.341471][ T4227] snd_usb_pod: probe of 5-1:1.1 failed with error -22
[  164.467765][ T4230] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[  164.476864][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.507982][ T5530] usb 5-1: USB disconnect, device number 11
[  164.527581][ T4230] usb 3-1: Product: syz
[  164.555591][ T4230] usb 3-1: Manufacturer: syz
[  164.577527][ T4230] usb 3-1: SerialNumber: syz
[  164.627947][ T8495] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  164.949167][ T4230] redrat3 3-1:127.1: Couldn't find all endpoints
[  164.985322][ T4230] usb 3-1: USB disconnect, device number 10
[  165.170464][ T8563] netlink: 'syz.4.2006': attribute type 3 has an invalid length.
[  165.197558][ T8563] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2006'.
[  165.390064][ T8573] netlink: 'syz.3.2012': attribute type 2 has an invalid length.
[  165.438601][ T8573] netlink: 'syz.3.2012': attribute type 8 has an invalid length.
[  165.527375][ T8573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2012'.
[  165.818216][ T8595] netlink: 'syz.1.2021': attribute type 3 has an invalid length.
[  165.993768][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2028'.
[  166.185939][ T8617] CIFS mount error: No usable UNC path provided in device string!
[  166.185939][ T8617] 
[  166.214086][ T8620] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2034'.
[  166.249040][ T8617] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  166.271995][ T8620] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2034'.
[  166.417620][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  166.427060][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.427209][ T8627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  166.502078][ T8631] loop2: detected capacity change from 0 to 2048
[  166.703732][ T8631] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  166.877649][ T8648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2043'.
[  167.259183][ T8665] CIFS mount error: No usable UNC path provided in device string!
[  167.259183][ T8665] 
[  167.330219][ T8665] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  167.489498][ T8676] netlink: 'syz.4.2058': attribute type 29 has an invalid length.
[  167.626242][ T8680] netlink: 'syz.2.2061': attribute type 2 has an invalid length.
[  167.709212][ T8680] netlink: 'syz.2.2061': attribute type 8 has an invalid length.
[  167.772365][ T8680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2061'.
[  168.292249][ T8718] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  168.399805][ T8721] autofs4:pid:8721:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d)
[  168.540528][ T4271] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  168.557593][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2086'.
[  168.566655][ T8728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2086'.
[  168.595223][ T5530] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  168.865465][ T4271] usb 2-1: Using ep0 maxpacket: 32
[  168.877434][ T5530] usb 4-1: Using ep0 maxpacket: 8
[  168.912863][ T8743] ax25_connect(): syz.4.2093 uses autobind, please contact jreuter@yaina.de
[  169.020369][ T5530] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  169.028934][ T4271] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  169.037311][ T4271] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  169.057017][ T5530] usb 4-1: config 0 has no interface number 0
[  169.073656][ T5530] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  169.087110][ T1108] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  169.095478][ T4271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  169.117480][ T5530] usb 4-1: config 0 interface 200 has no altsetting 0
[  169.135534][ T4271] usb 2-1: config 1 has no interface number 0
[  169.155770][ T4271] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  169.186079][ T4271] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  169.215710][ T4271] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  169.259153][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.317800][ T5530] usb 4-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9
[  169.337305][ T5530] usb 4-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3
[  169.349240][ T4271] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  169.365822][ T5530] usb 4-1: Product: syz
[  169.370435][ T5530] usb 4-1: Manufacturer: syz
[  169.375064][ T5530] usb 4-1: SerialNumber: syz
[  169.402006][ T5530] usb 4-1: config 0 descriptor??
[  169.517810][ T1108] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  169.537450][ T1108] usb 1-1: config 0 has no interface number 0
[  169.543584][ T1108] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 106, changing to 10
[  169.577441][ T1108] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1569, setting to 1024
[  169.589703][ T4271] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  169.597867][ T5529] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  169.617647][ T4271] snd_usb_pod 2-1:1.1: invalid control EP
[  169.623425][ T4271] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  169.647507][ T4271] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  169.653278][ T8716] udc-core: couldn't find an available UDC or it's busy
[  169.655012][ T4271] snd_usb_pod: probe of 2-1:1.1 failed with error -22
[  169.672141][ T8716] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  169.780626][ T5530] usbhid 4-1:0.200: couldn't find an input interrupt endpoint
[  169.807498][ T5530] usb 4-1: USB disconnect, device number 13
[  169.837702][ T1108] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  169.846794][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.866610][ T1331] usb 2-1: USB disconnect, device number 11
[  169.877467][ T1108] usb 1-1: Product: syz
[  169.881678][ T1108] usb 1-1: Manufacturer: syz
[  169.897471][ T1108] usb 1-1: SerialNumber: syz
[  169.904088][ T5529] usb 5-1: Using ep0 maxpacket: 8
[  169.928440][ T1108] usb 1-1: config 0 descriptor??
[  169.957872][ T8738] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  169.982054][ T1108] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  170.107592][ T5529] usb 5-1: unable to get BOS descriptor or descriptor too short
[  170.186117][ T1331] usb 1-1: USB disconnect, device number 11
[  170.197608][ T5529] usb 5-1: config 127 has an invalid interface number: 1 but max is 0
[  170.205832][ T5529] usb 5-1: config 127 has no interface number 0
[  170.207324][ T1331] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  170.227472][ T5529] usb 5-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[  170.257455][ T5529] usb 5-1: config 127 interface 1 has no altsetting 0
[  170.437808][ T5529] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[  170.462784][ T5529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.501273][ T5529] usb 5-1: Product: syz
[  170.517465][ T5529] usb 5-1: Manufacturer: syz
[  170.528557][ T5529] usb 5-1: SerialNumber: syz
[  170.567886][ T8757] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  170.823032][ T8786] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  170.863721][ T5529] redrat3 5-1:127.1: Couldn't find all endpoints
[  170.901756][ T5529] usb 5-1: USB disconnect, device number 12
[  171.078072][ T1108] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  171.176692][ T8792] loop1: detected capacity change from 0 to 4096
[  171.363603][ T1108] usb 1-1: Using ep0 maxpacket: 8
[  171.574307][ T1108] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[  171.592447][ T1108] usb 1-1: config 0 has no interface number 0
[  171.601078][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'.
[  171.608983][ T1108] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  171.620678][ T8810] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2125'.
[  171.689728][ T1108] usb 1-1: config 0 interface 200 has no altsetting 0
[  171.716747][ T8813] ax25_connect(): syz.3.2127 uses autobind, please contact jreuter@yaina.de
[  171.947809][ T1108] usb 1-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9
[  171.986907][ T1108] usb 1-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3
[  172.004785][ T8829] sctp: [Deprecated]: syz.3.2134 (pid 8829) Use of int in max_burst socket option deprecated.
[  172.004785][ T8829] Use struct sctp_assoc_value instead
[  172.037446][ T1108] usb 1-1: Product: syz
[  172.051926][ T1108] usb 1-1: Manufacturer: syz
[  172.056587][ T1108] usb 1-1: SerialNumber: syz
[  172.108545][ T1108] usb 1-1: config 0 descriptor??
[  172.302562][ T8839] netlink: 'syz.4.2139': attribute type 25 has an invalid length.
[  172.317595][ T8839] netlink: 'syz.4.2139': attribute type 3 has an invalid length.
[  172.373132][ T8784] udc-core: couldn't find an available UDC or it's busy
[  172.406284][ T8784] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  172.549066][ T1108] usbhid 1-1:0.200: couldn't find an input interrupt endpoint
[  172.597283][ T1108] usb 1-1: USB disconnect, device number 12
[  173.083232][ T8823] loop1: detected capacity change from 0 to 32768
[  173.092929][ T8869] netlink: 'syz.0.2154': attribute type 25 has an invalid length.
[  173.145943][ T8869] netlink: 'syz.0.2154': attribute type 3 has an invalid length.
[  173.198934][ T8823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  173.227539][ T8823] BTRFS info (device loop1): force clearing of disk cache
[  173.280967][ T8823] BTRFS info (device loop1): force zlib compression, level 3
[  173.307493][ T8823] BTRFS info (device loop1): disabling free space tree
[  173.333843][ T8823] BTRFS info (device loop1): max_inline at 0
[  173.350515][ T8823] BTRFS info (device loop1): enabling free space tree
[  173.381766][ T8823] BTRFS info (device loop1): using free space tree
[  173.453402][ T8823] BTRFS info (device loop1): has skinny extents
[  173.987669][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'.
[  174.071162][ T8823] BTRFS info (device loop1): enabling ssd optimizations
[  174.430305][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2175'.
[  174.506195][ T8930] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2175'.
[  174.607138][ T4180] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4180)
[  174.619045][ T8859] loop2: detected capacity change from 0 to 32768
[  175.057817][ T5529] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  175.330812][ T5529] usb 4-1: Using ep0 maxpacket: 32
[  175.457857][ T5529] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  175.493644][ T5529] usb 4-1: config 0 has no interface number 0
[  175.728396][ T5529] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  175.748007][ T5529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.756066][ T5529] usb 4-1: Product: syz
[  175.777013][ T5529] usb 4-1: Manufacturer: syz
[  175.787671][ T5529] usb 4-1: SerialNumber: syz
[  175.813812][ T5529] usb 4-1: config 0 descriptor??
[  175.847722][ T1331] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  175.879599][ T5529] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  175.921803][ T5529] usb 4-1: selecting invalid altsetting 1
[  175.950576][ T5529] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  176.001864][ T5529] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  176.043047][ T5529] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  176.077759][ T5529] usb 4-1: media controller created
[  176.084830][ T8937] loop1: detected capacity change from 0 to 40427
[  176.097584][ T1331] usb 5-1: Using ep0 maxpacket: 8
[  176.120444][ T5529] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.135845][ T8937] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  176.177795][ T8937] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  176.216512][ T8937] F2FS-fs (loop1): invalid crc value
[  176.222529][ T1331] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  176.237840][ T1331] usb 5-1: config 179 has no interface number 0
[  176.254406][ T1331] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  176.276921][ T1331] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  176.294354][ T1331] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  176.306199][ T1331] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  176.322684][ T8937] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  176.365600][ T1331] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  176.409499][ T1331] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  176.447998][ T1331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.507795][ T8945] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  176.545630][ T8937] F2FS-fs (loop1): recover fsync data on readonly fs
[  176.572581][ T5529] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  176.592095][ T8937] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30
[  176.627059][ T8937] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.722162][ T5529] usb 4-1: USB disconnect, device number 14
[  176.953197][ T4227] usb 5-1: USB disconnect, device number 13
[  176.967507][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  176.976344][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  177.395379][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2213'.
[  178.486091][ T9052] vivid-008: =================  START STATUS  =================
[  178.537565][ T9052] vivid-008: Generate PTS: true
[  178.543192][ T9052] vivid-008: Generate SCR: true
[  178.565970][ T9052] tpg source WxH: 640x360 (Y'CbCr)
[  178.596786][ T9052] tpg field: 1
[  178.604045][ T9052] tpg crop: 640x360@0x0
[  178.617596][ T9052] tpg compose: 640x360@0x0
[  178.622222][ T9052] tpg colorspace: 8
[  178.641337][ T9052] tpg transfer function: 0/0
[  178.668978][ T9052] tpg Y'CbCr encoding: 0/0
[  178.687586][ T9052] tpg quantization: 0/0
[  178.718358][ T9052] tpg RGB range: 0/2
[  178.722482][ T9052] vivid-008: ==================  END STATUS  ==================
[  179.250925][ T9098] netlink: 'syz.1.2255': attribute type 1 has an invalid length.
[  179.363481][ T9104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  180.051499][ T9147] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.2277'.
[  180.439136][ T9147] syz.4.2277 (9147) used greatest stack depth: 17200 bytes left
[  180.867581][ T9182] vivid-008: =================  START STATUS  =================
[  180.937631][ T9182] vivid-008: Generate PTS: true
[  180.980661][ T9182] vivid-008: Generate SCR: true
[  181.010695][ T9182] tpg source WxH: 640x360 (Y'CbCr)
[  181.043925][ T9182] tpg field: 1
[  181.087484][ T9182] tpg crop: 640x360@0x0
[  181.107634][ T9182] tpg compose: 640x360@0x0
[  181.130128][ T9182] tpg colorspace: 8
[  181.154401][ T9182] tpg transfer function: 0/0
[  181.178542][ T9182] tpg Y'CbCr encoding: 0/0
[  181.183121][ T9182] tpg quantization: 0/0
[  181.247707][ T9182] tpg RGB range: 0/2
[  181.267888][ T9182] vivid-008: ==================  END STATUS  ==================
[  181.359780][ T9143] loop1: detected capacity change from 0 to 32768
[  181.928253][ T1331] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  182.167798][ T1331] usb 3-1: Using ep0 maxpacket: 32
[  182.287746][ T1331] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  182.296742][ T1331] usb 3-1: config 0 has no interface number 0
[  182.414060][ T9220] loop1: detected capacity change from 0 to 4096
[  182.474532][ T9220] __ntfs_warning: 4 callbacks suppressed
[  182.474549][ T9220] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  182.497779][ T1331] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  182.537614][ T1331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.568213][ T1331] usb 3-1: Product: syz
[  182.572436][ T1331] usb 3-1: Manufacturer: syz
[  182.627637][ T1331] usb 3-1: SerialNumber: syz
[  182.639122][ T1331] usb 3-1: config 0 descriptor??
[  182.683356][ T9220] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  182.699496][ T1331] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  182.729334][ T1331] usb 3-1: selecting invalid altsetting 1
[  182.769660][ T1331] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  182.781328][ T9220] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  182.830645][ T1331] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  182.830700][ T9220] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  182.886438][ T1331] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  182.954551][ T1331] usb 3-1: media controller created
[  182.977482][ T9220] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  182.986386][ T9220] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  183.014846][ T1331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  183.063313][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  183.085463][ T9220] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  183.107497][ T9220] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  183.168051][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  183.222527][ T9220] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  183.243144][ T9236] device geneve2 left promiscuous mode
[  183.255408][ T9220] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  183.379170][ T9220] ntfs: volume version 3.1.
[  183.394919][ T9224] loop4: detected capacity change from 0 to 32768
[  183.402038][ T1331] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  183.528522][ T1331] usb 3-1: USB disconnect, device number 11
[  183.583974][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  184.534827][ T9283] tmpfs: Bad value for 'mpol'
[  184.846426][ T9297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2352'.
[  184.880703][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'.
[  184.926928][ T9297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2352'.
[  184.957154][ T9297] netlink: 'syz.1.2352': attribute type 8 has an invalid length.
[  185.027606][   T21] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  185.267750][   T21] usb 5-1: Using ep0 maxpacket: 32
[  185.387752][   T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  185.401472][   T21] usb 5-1: config 0 has no interface number 0
[  185.591238][ T9321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2363'.
[  185.600635][   T21] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  185.624094][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.657508][   T21] usb 5-1: Product: syz
[  185.677484][   T21] usb 5-1: Manufacturer: syz
[  185.697464][   T21] usb 5-1: SerialNumber: syz
[  185.725253][   T21] usb 5-1: config 0 descriptor??
[  185.766346][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2366'.
[  185.779550][   T21] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  185.796047][   T21] usb 5-1: selecting invalid altsetting 1
[  185.812168][   T21] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  185.844646][   T21] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  185.890228][   T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  185.915521][   T21] usb 5-1: media controller created
[  185.970532][   T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  186.159667][ T9335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2369'.
[  186.169958][ T1331] Bluetooth: hci1: command 0x0406 tx timeout
[  186.176076][ T1331] Bluetooth: hci0: command 0x0406 tx timeout
[  186.230997][ T1331] Bluetooth: hci2: command 0x0406 tx timeout
[  186.245988][ T1331] Bluetooth: hci3: command 0x0406 tx timeout
[  186.297568][   T21] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  186.418477][   T21] usb 5-1: USB disconnect, device number 14
[  186.421208][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  186.473561][ T9343] tmpfs: Bad value for 'mpol'
[  186.506265][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  186.558521][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  186.672025][ T9341] device bridge1 left promiscuous mode
[  186.736106][ T9353] loop1: detected capacity change from 0 to 256
[  186.945711][ T9353] FAT-fs (loop1): Directory bread(block 64) failed
[  186.964112][ T9353] FAT-fs (loop1): Directory bread(block 65) failed
[  187.017649][ T9353] FAT-fs (loop1): Directory bread(block 66) failed
[  187.024328][ T9353] FAT-fs (loop1): Directory bread(block 67) failed
[  187.040040][ T9363] device veth1_to_team entered promiscuous mode
[  187.075173][ T9362] device veth1_to_team left promiscuous mode
[  187.091399][ T9353] FAT-fs (loop1): Directory bread(block 68) failed
[  187.153274][ T9353] FAT-fs (loop1): Directory bread(block 69) failed
[  187.177666][ T9353] FAT-fs (loop1): Directory bread(block 70) failed
[  187.184341][ T9353] FAT-fs (loop1): Directory bread(block 71) failed
[  187.300203][ T9353] FAT-fs (loop1): Directory bread(block 72) failed
[  187.306818][ T9353] FAT-fs (loop1): Directory bread(block 73) failed
[  187.317526][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2391'.
[  187.553276][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2395'.
[  187.569151][ T5522] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  187.807874][ T9393] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2398'.
[  187.887344][ T5522] usb 3-1: Using ep0 maxpacket: 8
[  188.142326][ T5522] usb 3-1: unable to get BOS descriptor or descriptor too short
[  188.257821][ T5522] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  188.400920][ T9421] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2413'.
[  188.494988][ T5522] usb 3-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  188.527459][ T5522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.537333][ T9426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.558089][ T5522] usb 3-1: Product: syz
[  188.562318][ T5522] usb 3-1: Manufacturer: syz
[  188.609269][ T5522] usb 3-1: SerialNumber: syz
[  189.213269][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  189.239225][ T5522] usb 3-1: USB disconnect, device number 12
[  189.323978][ T9461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.385984][ T9448] loop1: detected capacity change from 0 to 32768
[  190.540557][ T9514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2458'.
[  190.636379][ T9448] XFS (loop1): Mounting V5 Filesystem
[  190.747691][ T9526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2460'.
[  190.773992][ T9448] XFS (loop1): Ending clean mount
[  191.051318][ T4198] XFS (loop1): Unmounting Filesystem
[  192.100326][ T9574] netlink: 'syz.1.2483': attribute type 1 has an invalid length.
[  192.149719][ T9578] sctp: [Deprecated]: syz.0.2486 (pid 9578) Use of int in maxseg socket option.
[  192.149719][ T9578] Use struct sctp_assoc_value instead
[  192.276614][ T9582] loop4: detected capacity change from 0 to 1024
[  192.387597][ T9582] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  192.457821][ T9582] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  192.489575][ T9582] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  192.647244][ T9582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  192.722683][ T9582] System zones: 0-1, 3-36
[  192.731083][ T9596] loop2: detected capacity change from 0 to 4096
[  192.791121][ T9582] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback.
[  192.816263][ T9610] netlink: 'syz.0.2500': attribute type 1 has an invalid length.
[  192.844764][ T9596] EXT4-fs (loop2): Test dummy encryption mode enabled
[  192.847647][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2499'.
[  192.873393][ T9596] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback.
[  193.547486][ T4230] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  193.622551][ T9639] netlink: 'syz.0.2514': attribute type 21 has an invalid length.
[  193.728499][ T9639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2514'.
[  193.792532][ T4230] usb 5-1: Using ep0 maxpacket: 8
[  193.911799][ T9648] loop1: detected capacity change from 0 to 1024
[  193.957694][ T4230] usb 5-1: unable to get BOS descriptor or descriptor too short
[  194.038013][ T4230] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  194.107789][ T9648] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  194.140838][ T9648] EXT4-fs (loop1): orphan cleanup on readonly fs
[  194.264277][ T9648] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2520: bg 0: block 10: padding at end of block bitmap is not set
[  194.278905][ T4230] usb 5-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  194.315525][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.334372][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  194.340733][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  194.377805][ T4230] usb 5-1: Product: syz
[  194.382057][ T4230] usb 5-1: Manufacturer: syz
[  194.386670][ T4230] usb 5-1: SerialNumber: syz
[  194.417674][ T9648] __quota_error: 9 callbacks suppressed
[  194.417692][ T9648] Quota error (device loop1): write_blk: dquota write failed
[  194.523161][ T9648] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  194.604474][ T9648] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  194.647883][ T9648] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2520: Failed to acquire dquot type 0
[  194.745738][ T9648] Quota error (device loop1): write_blk: dquota write failed
[  194.793897][ T9648] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  194.837590][ T9648] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  194.888030][ T4230] usb 5-1: USB disconnect, device number 15
[  194.895511][ T9648] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2520: Failed to acquire dquot type 0
[  194.987986][ T9648] EXT4-fs error (device loop1): ext4_free_blocks:6231: comm syz.1.2520: Freeing blocks not in datazone - block = 0, count = 4096
[  195.098395][ T9648] Quota error (device loop1): write_blk: dquota write failed
[  195.134531][ T9648] Quota error (device loop1): find_free_dqentry: Can't remove block (3) from entry free list
[  195.183124][ T9648] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[  195.220045][ T9704] futex_wake_op: syz.2.2543 tries to shift op by 144; fix this program
[  195.223610][ T9648] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.2520: Failed to acquire dquot type 0
[  195.246351][ T9704] futex_wake_op: syz.2.2543 tries to shift op by 144; fix this program
[  195.332155][ T9648] EXT4-fs (loop1): 1 orphan inode deleted
[  195.380447][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.397488][ T9648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  195.696048][ T9648] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.2520: iget: bad extended attribute block 6
[  196.095299][ T9728] loop4: detected capacity change from 0 to 4096
[  196.166894][ T9742] loop2: detected capacity change from 0 to 1024
[  196.307749][ T9728] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  196.341497][ T9742] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  196.371589][ T9728] ntfs: volume version 3.1.
[  196.396472][ T9742] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  196.407611][ T1331] Bluetooth: hci4: command 0x0406 tx timeout
[  196.434840][ T9742] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.547211][ T9742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  196.567788][ T9742] System zones: 0-1, 3-36
[  196.628199][ T9742] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback.
[  197.130827][ T9787] loop1: detected capacity change from 0 to 8
[  197.173290][ T9787] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  197.347511][ T9787] cramfs: unsupported filesystem features
[  197.609394][ T9803] loop1: detected capacity change from 0 to 1024
[  197.667225][ T9805] netlink: 'syz.2.2603': attribute type 1 has an invalid length.
[  197.677284][ T9803] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  197.697750][ T5522] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  197.725901][ T9803] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  197.743722][ T9805] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2603'.
[  197.775034][ T9805] netlink: 'syz.2.2603': attribute type 1 has an invalid length.
[  197.776501][ T9803] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  197.896646][ T9803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[  197.916619][ T9803] System zones: 0-1, 3-36
[  197.945141][ T9803] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,jqfmt=vfsold,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noquota,,errors=continue. Quota mode: writeback.
[  198.199651][ T9816] netlink: 'syz.4.2595': attribute type 5 has an invalid length.
[  198.329297][ T5522] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  198.364720][ T5522] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  198.402004][ T5522] usb 1-1: Product: syz
[  198.422404][ T5522] usb 1-1: Manufacturer: syz
[  198.437639][ T5522] usb 1-1: SerialNumber: syz
[  198.458649][ T9825] loop2: detected capacity change from 0 to 8
[  198.506154][ T9825] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  198.521838][ T5522] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  198.567058][ T9825] cramfs: unsupported filesystem features
[  198.639441][ T9832] netlink: 'syz.4.2605': attribute type 1 has an invalid length.
[  198.690873][ T9832] netlink: 'syz.4.2605': attribute type 2 has an invalid length.
[  198.933605][ T5522] vp7045: USB control message 'in' went wrong.
[  198.946751][ T5522] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  199.007071][ T5522] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  199.060771][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'.
[  199.072717][ T5522] usb 1-1: USB disconnect, device number 13
[  199.100427][ T9846] loop4: detected capacity change from 0 to 1764
[  199.367249][ T9857] netlink: 'syz.2.2618': attribute type 49 has an invalid length.
[  200.266422][ T9898] netlink: 'syz.2.2637': attribute type 1 has an invalid length.
[  200.317508][ T9898] netlink: 'syz.2.2637': attribute type 2 has an invalid length.
[  200.367545][ T2289] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  200.396112][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2640'.
[  200.567816][ T9912] netlink: 'syz.0.2644': attribute type 5 has an invalid length.
[  200.607491][ T2289] usb 2-1: Using ep0 maxpacket: 16
[  200.729084][ T2289] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.780755][ T2289] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  200.826229][ T9924] netlink: 'syz.4.2649': attribute type 49 has an invalid length.
[  200.957912][ T2289] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  200.980363][ T2289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.039400][ T2289] usb 2-1: Product: syz
[  201.041606][ T9933] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  201.043629][ T2289] usb 2-1: Manufacturer: syz
[  201.093805][ T2289] usb 2-1: SerialNumber: syz
[  201.437735][ T2289] usb 2-1: 0:2 : does not exist
[  201.473464][ T2289] usb 2-1: USB disconnect, device number 12
[  201.497742][ T4230] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  201.748953][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.867702][ T4230] usb 5-1: config 0 has an invalid interface number: 199 but max is 1
[  201.941453][ T4230] usb 5-1: config 0 has no interface number 1
[  201.968450][ T4230] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  202.028061][ T4230] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  202.147889][ T4230] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  202.167128][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  202.207924][ T4230] usb 5-1: SerialNumber: syz
[  202.225670][ T4230] usb 5-1: config 0 descriptor??
[  202.527729][ T4230] usb 5-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  202.544913][ T4230] usb 5-1: No valid video chain found.
[  202.609224][ T4230] usb 5-1: USB disconnect, device number 16
[  203.107833][T10008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2690'.
[  203.438538][T10022] loop1: detected capacity change from 0 to 512
[  203.707727][T10022] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.2697: iget: bad i_size value: 38620345925642
[  203.796433][T10022] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.2697: couldn't read orphan inode 15 (err -117)
[  203.882639][T10022] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  204.591343][T10083] CIFS mount error: No usable UNC path provided in device string!
[  204.591343][T10083] 
[  204.619912][T10084] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2727'.
[  204.680139][T10083] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  204.722379][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  204.722396][   T26] audit: type=1400 audit(1786500405.984:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10088 comm="syz.4.2730"
[  205.067204][T10111] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  205.250886][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2744'.
[  205.407864][ T5529] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  205.520050][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2751'.
[  205.578001][T10133] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  205.612716][T10137] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2752'.
[  205.771991][T10140] x_tables: unsorted underflow at hook 4
[  205.797697][ T5529] usb 3-1: not running at top speed; connect to a high speed hub
[  205.817128][T10144] overlayfs: conflicting options: nfs_export=on,index=off
[  205.831940][ T4271] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  205.913956][ T5529] usb 3-1: config 88 has an invalid interface number: 11 but max is 0
[  205.932661][ T5529] usb 3-1: config 88 has no interface number 0
[  205.967455][ T5529] usb 3-1: config 88 interface 11 has no altsetting 0
[  206.147610][ T4271] usb 4-1: Using ep0 maxpacket: 16
[  206.188136][ T5529] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  206.207705][ T5529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.215800][ T5529] usb 3-1: Product: syz
[  206.257446][ T5529] usb 3-1: Manufacturer: syz
[  206.272426][ T5529] usb 3-1: SerialNumber: syz
[  206.300189][ T4271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.330399][ T4271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.410354][T10162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'.
[  206.565730][   T26] audit: type=1400 audit(1786500407.824:10): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10167 comm="syz.0.2778"
[  206.598043][ T4271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  206.624551][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.632950][T10172] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  206.653348][ T4271] usb 4-1: Product: syz
[  206.669926][ T4271] usb 4-1: Manufacturer: syz
[  206.683514][ T5529] usb 3-1: USB disconnect, device number 13
[  206.699718][ T4271] usb 4-1: SerialNumber: syz
[  207.047715][ T4271] usb 4-1: 0:2 : does not exist
[  207.086293][ T4271] usb 4-1: USB disconnect, device number 15
[  207.208995][T10192] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2780'.
[  207.421740][ T4647] udevd[4647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  207.745580][T10221] netlink: 'syz.1.2795': attribute type 1 has an invalid length.
[  207.847782][T10225] netlink: 'syz.0.2806': attribute type 1 has an invalid length.
[  207.877755][T10227] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2796'.
[  207.940477][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'.
[  207.957621][ T4230] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  207.958118][ T5529] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  207.985823][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.131370][T10235] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  208.327607][ T4230] usb 5-1: config 7 descriptor has 1 excess byte, ignoring
[  208.334996][ T4230] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2
[  208.487791][ T5529] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  208.524073][ T5529] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  208.547848][ T4230] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  208.556945][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.623171][ T4230] usb 5-1: Product: syz
[  208.628664][ T4230] usb 5-1: Manufacturer: syz
[  208.633294][ T4230] usb 5-1: SerialNumber: syz
[  208.704866][ T4230] rndis_wlan 5-1:7.0: skipping garbage
[  208.710663][ T4230] usb 5-1: bad CDC descriptors
[  208.717916][ T5529] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  208.731767][ T4230] rndis_host 5-1:7.0: skipping garbage
[  208.737228][ T5529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.737276][ T4230] usb 5-1: bad CDC descriptors
[  208.757361][ T5529] usb 4-1: Product: syz
[  208.761269][ T4230] option 5-1:7.0: GSM modem (1-port) converter detected
[  208.761991][ T5529] usb 4-1: Manufacturer: syz
[  208.783612][ T5529] usb 4-1: SerialNumber: syz
[  208.937563][ T4230] usb 5-1: USB disconnect, device number 17
[  208.954831][ T4230] option 5-1:7.0: device disconnected
[  209.277714][ T5529] usb 4-1: 0:1 : does not exist
[  209.299641][ T5529] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x300, type = 0
[  209.327460][ T5529] usb 4-1: unit 0 not found!
[  209.351116][ T5529] usb 4-1: USB disconnect, device number 16
[  209.599738][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  209.645654][T10262] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2810'.
[  210.436608][T10305] netlink: 1052 bytes leftover after parsing attributes in process `syz.0.2842'.
[  211.307528][ T2289] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  211.677894][ T2289] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.723948][ T2289] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.947586][ T2289] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.962493][ T2289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.998682][ T2289] usb 5-1: Product: syz
[  212.013333][ T2289] usb 5-1: Manufacturer: syz
[  212.028490][ T2289] usb 5-1: SerialNumber: syz
[  212.088847][ T2289] cdc_ncm 5-1:1.0: skipping garbage
[  212.094185][ T2289] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  212.127285][ T2289] cdc_ncm 5-1:1.0: bind() failure
[  212.156266][ T2289] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  212.172313][ T2289] cdc_ncm 5-1:1.1: bind() failure
[  212.323461][ T1331] usb 5-1: USB disconnect, device number 18
[  212.377653][ T2289] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  212.487644][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  212.730583][ T4230] usb 3-1: Using ep0 maxpacket: 32
[  212.748245][ T2289] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  212.779953][ T2289] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  212.803314][ T2289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.857883][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.871980][ T2289] gspca_main: stv0680-2.14.0 probing 041e:4007
[  212.926740][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.948770][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  212.972804][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.007948][ T4230] usb 3-1: config 0 descriptor??
[  213.058858][ T4230] hub 3-1:0.0: USB hub found
[  213.277613][ T4230] hub 3-1:0.0: 2 ports detected
[  213.497871][ T4230] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  213.507068][ T4230] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  213.517511][ T4271] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  213.537729][ T5529] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  213.637680][ T4230] usbhid 3-1:0.0: can't add hid device: -71
[  213.644921][ T4230] usbhid: probe of 3-1:0.0 failed with error -71
[  213.698270][ T4230] usb 3-1: USB disconnect, device number 14
[  213.927722][ T4271] usb 4-1: config 7 descriptor has 1 excess byte, ignoring
[  213.934992][ T4271] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2
[  213.967637][ T2289] stv0680 2-1:4.0: STV(e): camera ping failed!!
[  213.978263][ T5529] usb 5-1: unable to get BOS descriptor or descriptor too short
[  214.057787][ T5529] usb 5-1: config 0 has an invalid interface number: 86 but max is 0
[  214.065980][ T5529] usb 5-1: config 0 has no interface number 0
[  214.087880][ T5529] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8
[  214.119617][ T5529] usb 5-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32
[  214.167442][ T5529] usb 5-1: config 0 interface 86 has no altsetting 0
[  214.187639][ T4271] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  214.187880][ T2289] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  214.196765][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.196794][ T4271] usb 4-1: Product: syz
[  214.196809][ T4271] usb 4-1: Manufacturer: syz
[  214.247705][ T2289] stv0680 2-1:4.0: last error: 0,  command = 0x0
[  214.288639][ T2289] usb 2-1: USB disconnect, device number 13
[  214.315341][ T4271] usb 4-1: SerialNumber: syz
[  214.408004][ T5529] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e
[  214.426546][ T5529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.441319][ T4271] rndis_wlan 4-1:7.0: skipping garbage
[  214.446880][ T4271] usb 4-1: bad CDC descriptors
[  214.469456][ T5529] usb 5-1: Product: syz
[  214.473678][ T5529] usb 5-1: Manufacturer: syz
[  214.485364][ T4271] rndis_host 4-1:7.0: skipping garbage
[  214.497904][ T4271] usb 4-1: bad CDC descriptors
[  214.503750][ T4271] option 4-1:7.0: GSM modem (1-port) converter detected
[  214.511261][ T5529] usb 5-1: SerialNumber: syz
[  214.531943][ T5529] usb 5-1: config 0 descriptor??
[  214.562359][T10405] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  214.582082][T10405] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  214.702473][ T6935] usb 4-1: USB disconnect, device number 17
[  214.719724][ T6935] option 4-1:7.0: device disconnected
[  214.887834][ T5522] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  214.916997][ T5529] omninet 5-1:0.86: ZyXEL - omni.net usb converter detected
[  214.938346][ T5529] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  214.979031][ T5529] usb 5-1: USB disconnect, device number 19
[  215.023419][ T5529] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  215.043532][ T5529] omninet 5-1:0.86: device disconnected
[  215.116673][T10444] IPv6: NLM_F_CREATE should be specified when creating new route
[  215.277864][ T5522] usb 1-1: not running at top speed; connect to a high speed hub
[  215.393262][ T5522] usb 1-1: config 88 has an invalid interface number: 11 but max is 0
[  215.411818][ T5522] usb 1-1: config 88 has no interface number 0
[  215.449409][ T5522] usb 1-1: config 88 interface 11 has no altsetting 0
[  215.668213][ T5522] usb 1-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  215.687646][ T5522] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.727632][ T5522] usb 1-1: Product: syz
[  215.742052][ T5522] usb 1-1: Manufacturer: syz
[  215.746754][ T5522] usb 1-1: SerialNumber: syz
[  215.812325][T10478] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  215.930258][T10480] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  216.009335][T10480] exFAT-fs (nullb0): invalid boot record signature
[  216.044400][T10480] exFAT-fs (nullb0): failed to read boot sector
[  216.066805][T10480] exFAT-fs (nullb0): failed to recognize exfat type
[  216.143961][ T5522] usb 1-1: USB disconnect, device number 14
[  216.256380][T10486] loop1: detected capacity change from 0 to 4096
[  216.319522][T10496] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2925'.
[  216.386940][T10498] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  216.567234][T10501] loop4: detected capacity change from 0 to 256
[  217.137774][ T2289] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  217.377613][ T2289] usb 5-1: Using ep0 maxpacket: 16
[  217.473630][T10537] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  217.497855][ T2289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.512069][T10541] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2948'.
[  217.534882][ T2289] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  217.567776][ T2289] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00
[  217.607787][ T2289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.656129][ T2289] usb 5-1: config 0 descriptor??
[  217.723613][ T2289] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  217.916693][T10555] loop1: detected capacity change from 0 to 16
[  217.951944][ T4227] usb 5-1: USB disconnect, device number 20
[  217.956001][T10558] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  218.010213][T10555] erofs: (device loop1): mounted with root inode @ nid 36.
[  218.337672][ T4271] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  218.449989][T10571] loop1: detected capacity change from 0 to 256
[  218.607679][ T4271] usb 1-1: Using ep0 maxpacket: 16
[  218.729332][T10581] device gretap1 entered promiscuous mode
[  218.748175][ T4271] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  218.756445][ T4271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  218.807430][ T4271] usb 1-1: config 0 has no interface number 0
[  219.007892][ T4271] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  219.017045][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.077322][ T4271] usb 1-1: Product: syz
[  219.097434][ T4271] usb 1-1: Manufacturer: syz
[  219.102099][ T4271] usb 1-1: SerialNumber: syz
[  219.140551][ T4271] usb 1-1: config 0 descriptor??
[  219.428042][ T4271] usb 1-1: Found UVC 0.00 device syz (046d:08d3)
[  219.434513][ T4271] usb 1-1: No valid video chain found.
[  219.669729][ T4271] usb 1-1: USB disconnect, device number 15
[  219.733422][T10627] loop2: detected capacity change from 0 to 4096
[  219.875721][T10638] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2994'.
[  219.917646][T10642] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.973718][T10641] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2996'.
[  220.318921][T10652] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3012'.
[  220.422606][T10657] device gretap1 entered promiscuous mode
[  220.581777][  T264] block nbd4: Attempted send on invalid socket
[  220.588070][  T264] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  220.617886][T10664] VFS: unable to read V7 FS superblock on device nbd4.
[  220.658025][T10664] VFS: could not find a valid V7 on nbd4.
[  220.707580][ T4227] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  221.108386][ T4227] usb 3-1: unable to get BOS descriptor or descriptor too short
[  221.142164][T10682] netlink: 'syz.3.3017': attribute type 21 has an invalid length.
[  221.147633][ T4227] usb 3-1: not running at top speed; connect to a high speed hub
[  221.158266][T10682] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3017'.
[  221.161939][ T4271] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  221.180204][T10682] netlink: 'syz.3.3017': attribute type 5 has an invalid length.
[  221.190675][T10682] netlink: 'syz.3.3017': attribute type 6 has an invalid length.
[  221.199511][T10682] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3017'.
[  221.267746][ T4227] usb 3-1: config index 0 descriptor too short (expected 28771, got 10)
[  221.276155][ T4227] usb 3-1: config 114 has too many interfaces: 95, using maximum allowed: 32
[  221.331407][ T4227] usb 3-1: config 114 descriptor has 1 excess byte, ignoring
[  221.372853][T10692] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3022'.
[  221.382793][ T4227] usb 3-1: config 114 has 0 interfaces, different from the descriptor's value: 95
[  221.457594][ T4271] usb 1-1: Using ep0 maxpacket: 32
[  221.597805][ T4227] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[  221.605016][ T4271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.606911][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.606935][ T4227] usb 3-1: Product: syz
[  221.638595][ T4271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.693340][ T4271] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  221.708127][ T4227] usb 3-1: Manufacturer: syz
[  221.733062][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.737770][ T4227] usb 3-1: SerialNumber: syz
[  221.785089][ T4271] usb 1-1: config 0 descriptor??
[  221.826404][T10706] loop4: detected capacity change from 0 to 1024
[  221.876062][ T4271] hub 1-1:0.0: USB hub found
[  221.925293][T10706] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,nolazytime,resgid=0x0000000000000000,noload,jqfmt=vfsold,barrier=0x0000000000000007,barrier=0x00,errors=continue. Quota mode: none.
[  222.055795][ T4227] usb 3-1: USB disconnect, device number 15
[  222.091814][ T4271] hub 1-1:0.0: 2 ports detected
[  222.293103][ T4271] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  222.309787][ T4271] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  222.467694][ T4271] usbhid 1-1:0.0: can't add hid device: -71
[  222.481094][ T4271] usbhid: probe of 1-1:0.0 failed with error -71
[  222.558806][ T4271] usb 1-1: USB disconnect, device number 16
[  222.617020][T10728] nvme nvme0: rdma connection establishment failed (-104)
[  223.119411][  T151] block nbd1: Attempted send on invalid socket
[  223.125650][  T151] blk_update_request: I/O error, dev nbd1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  223.142237][T10755] VFS: unable to read V7 FS superblock on device nbd1.
[  223.152474][T10755] VFS: could not find a valid V7 on nbd1.
[  223.632080][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3068'.
[  223.857776][ T2289] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  224.117486][ T2289] usb 3-1: Using ep0 maxpacket: 16
[  224.183290][T10823] xt_CT: You must specify a L4 protocol and not use inversions on it
[  224.220046][T10822] device wireguard0 entered promiscuous mode
[  224.239335][ T2289] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  224.256565][ T2289] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  224.277512][ T2289] usb 3-1: config 0 has no interface number 0
[  224.418899][T10826] nvme nvme0: rdma connection establishment failed (-104)
[  224.437722][ T2289] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  224.507565][ T2289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.546372][ T2289] usb 3-1: Product: syz
[  224.598846][ T2289] usb 3-1: Manufacturer: syz
[  224.603508][ T2289] usb 3-1: SerialNumber: syz
[  224.668777][ T2289] usb 3-1: config 0 descriptor??
[  224.838645][T10848] loop1: detected capacity change from 0 to 1024
[  224.947766][ T2289] usb 3-1: Found UVC 0.00 device syz (046d:08d3)
[  224.954179][ T2289] usb 3-1: No valid video chain found.
[  225.053165][T10848] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,norecovery,min_batch_time=0x0000000010000005,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,nolazytime,resgid=0x0000000000000000,noload,jqfmt=vfsold,barrier=0x0000000000000007,barrier=0x00,errors=continue. Quota mode: none.
[  225.200127][ T4271] usb 3-1: USB disconnect, device number 16
[  225.391152][T10864] nvme nvme0: rdma connection establishment failed (-104)
[  225.910056][T10893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3117'.
[  226.033502][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'.
[  226.344561][T10917] loop4: detected capacity change from 0 to 512
[  226.412920][T10917] EXT4-fs (loop4): Ignoring removed oldalloc option
[  226.419806][T10916] device wireguard0 entered promiscuous mode
[  226.558251][T10917] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback.
[  227.468207][T10978] xt_l2tp: v2 doesn't support IP mode
[  227.514089][T10980] mip6: mip6_destopt_init_state: spi is not 0: 1114112
[  227.642033][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'.
[  227.885577][T11004] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3171'.
[  227.938294][T11004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  228.043130][T11012] blktrace: Concurrent blktraces are not allowed on sg0
[  228.328101][T11025] mip6: mip6_destopt_init_state: spi is not 0: 1114112
[  229.327673][ T4230] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  229.623700][T11085] loop2: detected capacity change from 0 to 512
[  229.729099][T11085] EXT4-fs (loop2): Ignoring removed oldalloc option
[  229.739085][ T4230] usb 2-1: unable to get BOS descriptor or descriptor too short
[  229.779375][ T4230] usb 2-1: not running at top speed; connect to a high speed hub
[  229.885379][T11094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  229.887667][ T4230] usb 2-1: config index 0 descriptor too short (expected 28771, got 10)
[  229.915092][ T4230] usb 2-1: config 114 has too many interfaces: 95, using maximum allowed: 32
[  229.924438][ T4230] usb 2-1: config 114 descriptor has 1 excess byte, ignoring
[  229.933331][ T4230] usb 2-1: config 114 has 0 interfaces, different from the descriptor's value: 95
[  229.940471][T11085] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback.
[  230.097771][ T4230] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0323, bcdDevice=a7.8f
[  230.106980][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.146311][T11108] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3218'.
[  230.155548][ T4230] usb 2-1: Product: syz
[  230.177509][ T4230] usb 2-1: Manufacturer: syz
[  230.182209][ T4230] usb 2-1: SerialNumber: syz
[  230.188693][T11108] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  230.301165][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'.
[  230.519776][ T4230] usb 2-1: USB disconnect, device number 14
[  230.995204][T11146] capability: warning: `syz.4.3237' uses 32-bit capabilities (legacy support in use)
[  231.278621][T11157] netlink: 'syz.4.3243': attribute type 1 has an invalid length.
[  231.299484][T11157] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3243'.
[  231.326999][T11149] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  231.922925][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3257'.
[  232.089657][T11199] netlink: 'syz.4.3264': attribute type 49 has an invalid length.
[  232.147680][ T1331] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  232.491175][T11219] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.516891][ T1331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.566879][ T1331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  232.607805][ T1331] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  232.690181][T11226] netlink: 'syz.0.3276': attribute type 21 has an invalid length.
[  232.708058][T11226] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3276'.
[  232.827745][ T1331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.857227][ T1331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.900608][ T1331] usb 2-1: Product: syz
[  232.904836][ T1331] usb 2-1: Manufacturer: syz
[  232.942995][ T1331] usb 2-1: SerialNumber: syz
[  233.018651][ T1331] cdc_ncm 2-1:1.0: skipping garbage
[  233.034204][ T1331] usb 2-1: selecting invalid altsetting 1
[  233.127817][ T4227] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  233.388627][T11258] syz.4.3291 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  233.447832][ T1331] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  233.454597][T11261] xt_hashlimit: overflow, rate too high: 0
[  233.467849][ T1331] cdc_ncm 2-1:1.0: bind() failure
[  233.507643][ T4227] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  233.516196][ T1331] usb 2-1: USB disconnect, device number 15
[  233.536207][ T4227] usb 4-1: config 0 has no interface number 0
[  233.556490][ T4227] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  233.607614][ T4227] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  233.808467][ T4227] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  233.837529][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.866421][ T4227] usb 4-1: Product: syz
[  233.882457][ T4227] usb 4-1: Manufacturer: syz
[  233.905767][ T4227] usb 4-1: SerialNumber: syz
[  233.931666][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3300'.
[  233.942030][ T4227] usb 4-1: config 0 descriptor??
[  233.974924][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3300'.
[  233.986911][ T4227] yurex 4-1:0.50: Could not submitting URB
[  233.997624][ T4227] yurex: probe of 4-1:0.50 failed with error -5
[  234.208067][T11286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3305'.
[  234.258121][ T4227] usb 4-1: USB disconnect, device number 18
[  234.792647][T11269] loop2: detected capacity change from 0 to 32768
[  234.861602][T11269] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.3296 (11269)
[  234.938845][T11269] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  234.984486][T11269] BTRFS info (device loop2): using free space tree
[  235.028153][T11269] BTRFS info (device loop2): has skinny extents
[  235.071699][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3323'.
[  235.477572][T11269] BTRFS info (device loop2): enabling ssd optimizations
[  235.856882][T11369] CIFS: VFS: Malformed UNC in devname
[  236.483366][T11395] netlink: 'syz.0.3348': attribute type 21 has an invalid length.
[  236.573539][T11395] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3348'.
[  236.646389][T11395] netlink: 'syz.0.3348': attribute type 4 has an invalid length.
[  236.683582][T11395] netlink: 'syz.0.3348': attribute type 3 has an invalid length.
[  236.711341][T11395] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3348'.
[  236.770806][T11409] loop4: detected capacity change from 0 to 64
[  236.879425][T11413] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  237.037530][ T4227] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  237.277509][ T4227] usb 4-1: Using ep0 maxpacket: 8
[  237.398304][ T4227] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.459684][T11434] SET target dimension over the limit!
[  237.587718][ T4227] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  237.620955][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.659680][ T4227] usb 4-1: Product: syz
[  237.663994][ T4227] usb 4-1: Manufacturer: syz
[  237.690082][ T4227] usb 4-1: SerialNumber: syz
[  237.721445][ T4227] usb 4-1: config 0 descriptor??
[  237.788639][ T4227] usb 4-1: bad CDC descriptors
[  237.794043][ T4227] usb 4-1: unsupported MDLM descriptors
[  237.814226][ T4227] cdc_acm 4-1:0.0: Zero length descriptor references
[  237.825613][ T4271] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  237.837539][ T4227] cdc_acm: probe of 4-1:0.0 failed with error -22
[  238.027471][ T5527] usb 4-1: USB disconnect, device number 19
[  238.048904][T11418] loop1: detected capacity change from 0 to 32768
[  238.117520][ T4271] usb 3-1: Using ep0 maxpacket: 8
[  238.133396][T11418] ea_get: extended attribute size too large: 2617245744 > INT_MAX
[  238.143005][ T4227] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  238.237737][ T4271] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.258652][ T4271] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  238.286749][ T4271] usb 3-1: config 1 interface 0 has no altsetting 0
[  238.507663][ T4227] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  238.527187][ T4227] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  238.585401][ T4227] usb 5-1: config 0 interface 0 has no altsetting 0
[  238.587616][ T4271] usb 3-1: string descriptor 0 read error: -22
[  238.629107][ T4271] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[  238.690011][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[  238.710860][T11471] x_tables: unsorted underflow at hook 2
[  238.777814][ T4227] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  238.789817][T11473] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[  238.800639][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  238.810462][ T4271] usb 3-1: 0:2 : does not exist
[  238.839898][ T4227] usb 5-1: Product: syz
[  238.844121][ T4227] usb 5-1: Manufacturer: syz
[  238.856912][ T4271] usb-storage 3-1:1.1: USB Mass Storage device detected
[  238.857867][T11473] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  238.890726][ T4227] usb 5-1: SerialNumber: syz
[  238.905108][ T4227] usb 5-1: config 0 descriptor??
[  238.938400][ T4227] hub 5-1:0.0: bad descriptor, ignoring hub
[  238.938430][ T4227] hub: probe of 5-1:0.0 failed with error -5
[  238.941164][ T4227] usb 5-1: selecting invalid altsetting 0
[  239.042897][T11483] netlink: 'syz.3.3391': attribute type 3 has an invalid length.
[  239.042923][T11483] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3391'.
[  239.247677][ T4271] us122l: couldn't allocate write buffer
[  239.253964][ T4271] snd-usb-us122l: probe of 3-1:1.1 failed with error -22
[  239.311519][ T4271] usb 3-1: USB disconnect, device number 17
[  239.486629][ T4227] usb 5-1: USB disconnect, device number 21
[  239.919583][T11507] netlink: 'syz.1.3403': attribute type 1 has an invalid length.
[  240.044875][T11507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3403'.
[  240.486686][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3419'.
[  240.630548][T11537] loop2: detected capacity change from 0 to 4096
[  240.662377][T11537] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  240.794666][T11537] ntfs: volume version 3.1.
[  241.998131][T11606] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  242.083510][T11617] netlink: 'syz.0.3457': attribute type 1 has an invalid length.
[  242.096559][T11616] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  242.127003][T11617] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3457'.
[  242.136888][T11616] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  242.590005][T11638] loop4: detected capacity change from 0 to 1764
[  243.361138][T11682] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3489'.
[  243.414062][T11680] nvme_fabrics: missing parameter 'nqn=%s'
[  243.794328][T11706] loop1: detected capacity change from 0 to 1024
[  243.803297][T11707] netlink: 'syz.4.3501': attribute type 5 has an invalid length.
[  243.807620][ T4271] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  244.118416][ T4271] usb 4-1: Using ep0 maxpacket: 16
[  244.434412][ T4271] usb 4-1: unable to get BOS descriptor or descriptor too short
[  244.527783][T11728] binfmt_misc: register: failed to install interpreter file ./file1
[  244.553642][ T4271] usb 4-1: config 25 has an invalid interface number: 91 but max is 0
[  244.587425][ T4271] usb 4-1: config 25 has no interface number 0
[  244.613951][ T4271] usb 4-1: config 25 interface 91 altsetting 7 bulk endpoint 0xE has invalid maxpacket 64
[  244.667431][ T4271] usb 4-1: config 25 interface 91 altsetting 7 bulk endpoint 0xD has invalid maxpacket 16
[  244.737433][ T4271] usb 4-1: config 25 interface 91 has no altsetting 0
[  244.968799][ T4271] usb 4-1: New USB device found, idVendor=0421, idProduct=00ab, bcdDevice=ee.96
[  245.007431][ T4271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.015546][ T4271] usb 4-1: Product: syz
[  245.047431][ T4271] usb 4-1: Manufacturer: syz
[  245.052128][ T4271] usb 4-1: SerialNumber: syz
[  245.118195][T11690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  245.125343][T11690] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  245.488828][ T4271] usb 4-1: bad CDC descriptors
[  245.494962][ T4271] usb 4-1: bad CDC descriptors
[  245.581500][ T4271] usb 4-1: USB disconnect, device number 20
[  245.601345][T11675] loop2: detected capacity change from 0 to 65536
[  245.851106][T11675] XFS (loop2): Mounting V5 Filesystem
[  245.980222][T11675] XFS (loop2): Ending clean mount
[  246.058034][T11675] XFS (loop2): Quotacheck needed: Please wait.
[  246.278540][T11675] XFS (loop2): Quotacheck: Done.
[  246.401149][ T4191] XFS (loop2): Unmounting Filesystem
[  246.748726][T11818] syz.0.3548: vmalloc error: size 70368744177852, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  246.850007][T11818] CPU: 1 PID: 11818 Comm: syz.0.3548 Not tainted syzkaller #0
[  246.857539][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  246.867639][T11818] Call Trace:
[  246.870945][T11818]  <TASK>
[  246.873890][T11818]  dump_stack_lvl+0x188/0x250
[  246.878613][T11818]  ? rcu_lock_release+0x5/0x20
[  246.883415][T11818]  ? show_regs_print_info+0x20/0x20
[  246.888651][T11818]  ? load_image+0x410/0x410
[  246.893201][T11818]  warn_alloc+0x245/0x320
[  246.897650][T11818]  ? zone_watermark_ok_safe+0x250/0x250
[  246.903308][T11818]  ? __mutex_lock_common+0x435/0x2400
[  246.908723][T11818]  ? tomoyo_path_number_perm+0x5f7/0x6b0
[  246.914397][T11818]  __vmalloc_node_range+0x2b1/0x8b0
[  246.919639][T11818]  ? dvb_dvr_do_ioctl+0x12a/0x220
[  246.924685][T11818]  vmalloc+0x75/0x80
[  246.928611][T11818]  ? dvb_dvr_do_ioctl+0x12a/0x220
[  246.933664][T11818]  dvb_dvr_do_ioctl+0x12a/0x220
[  246.938556][T11818]  dvb_usercopy+0x191/0x2b0
[  246.943315][T11818]  ? dvb_dvr_release+0x3d0/0x3d0
[  246.948279][T11818]  ? dvb_generic_ioctl+0xb0/0xb0
[  246.953274][T11818]  ? dvb_dvr_poll+0x230/0x230
[  246.957984][T11818]  dvb_dvr_ioctl+0x25/0x30
[  246.962429][T11818]  __se_sys_ioctl+0xfa/0x170
[  246.967044][T11818]  do_syscall_64+0x4c/0xa0
[  246.971480][T11818]  ? clear_bhb_loop+0x30/0x80
[  246.976186][T11818]  ? clear_bhb_loop+0x30/0x80
[  246.980889][T11818]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  246.986806][T11818] RIP: 0033:0x7ff218dc60d9
[  246.991329][T11818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.010972][T11818] RSP: 002b:00007ff21701e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.019596][T11818] RAX: ffffffffffffffda RBX: 00007ff21904dfa0 RCX: 00007ff218dc60d9
[  247.027611][T11818] RDX: 00004000000000bc RSI: 0000000000006f2d RDI: 0000000000000003
[  247.035622][T11818] RBP: 00007ff218e5d024 R08: 0000000000000000 R09: 0000000000000000
[  247.043629][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.051638][T11818] R13: 00007ff21904e038 R14: 00007ff21904dfa0 R15: 00007ffc48e49328
[  247.059660][T11818]  </TASK>
[  247.095377][   T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  247.264858][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3555'.
[  247.347792][T11818] Mem-Info:
[  247.351073][T11818] active_anon:791 inactive_anon:11151 isolated_anon:0
[  247.351073][T11818]  active_file:4933 inactive_file:36681 isolated_file:0
[  247.351073][T11818]  unevictable:768 dirty:312 writeback:0
[  247.351073][T11818]  slab_reclaimable:20765 slab_unreclaimable:98370
[  247.351073][T11818]  mapped:30268 shmem:7250 pagetables:681 bounce:0
[  247.351073][T11818]  kernel_misc_reclaimable:0
[  247.351073][T11818]  free:1378618 free_pcp:10613 free_cma:0
[  247.393968][ T4271] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  247.522751][T11818] Node 0 active_anon:1932kB inactive_anon:31792kB active_file:19528kB inactive_file:146724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121072kB dirty:1248kB writeback:0kB shmem:13320kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:2624kB all_unreclaimable? no
[  247.557311][   T13] usb 2-1: config 0 has an invalid interface number: 178 but max is 2
[  247.585859][   T13] usb 2-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config
[  247.631178][   T13] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  247.667724][   T13] usb 2-1: config 0 has no interface number 0
[  247.685411][   T13] usb 2-1: too many endpoints for config 0 interface 178 altsetting 200: 174, using maximum allowed: 30
[  247.697234][ T4271] usb 5-1: Using ep0 maxpacket: 32
[  247.747545][   T13] usb 2-1: config 0 interface 178 altsetting 200 has 0 endpoint descriptors, different from the interface descriptor's value: 174
[  247.801853][   T13] usb 2-1: config 0 interface 178 has no altsetting 0
[  247.825246][   T13] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  247.835200][ T4271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.861169][T11845] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3560'.
[  247.867617][ T4271] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.870396][T11818] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  247.897427][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.911972][T11845] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3560'.
[  247.926951][ T4271] usb 5-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40
[  247.928419][T11845] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3560'.
[  247.948150][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'.
[  247.957666][T11818] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  247.959584][   T13] usb 2-1: config 0 descriptor??
[  247.989311][T11818] lowmem_reserve[]: 0 2539 2540 2540 2540
[  247.996720][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.002375][T11818] Node 0 DMA32 free:1599100kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1812kB inactive_anon:27008kB active_file:19528kB inactive_file:146724kB unevictable:1536kB writepending:1248kB present:3129332kB managed:2606516kB mlocked:0kB bounce:0kB free_pcp:42360kB local_pcp:21188kB free_cma:0kB
[  248.015579][ T4271] usb 5-1: config 0 descriptor??
[  248.095624][T11818] lowmem_reserve[]: 0 0 0 0 0
[  248.106401][T11818] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  248.156065][T11847] loop2: detected capacity change from 0 to 1024
[  248.188465][ T4271] hub 5-1:0.0: USB hub found
[  248.232410][T11818] lowmem_reserve[]: 0 0 0 0 0
[  248.257412][T11818] Node 1 Normal free:3919436kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:0kB free_cma:0kB
[  248.299859][T11818] lowmem_reserve[]: 0 0 0 0 0
[  248.304654][T11818] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  248.385189][ T4271] hub 5-1:0.0: 1 port detected
[  248.391379][T11818] Node 0 DMA32: 1985*4kB (UME) 622*8kB (UME) 149*16kB (UME) 117*32kB (UME) 21*64kB (UE) 5*128kB (UM) 2*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (ME) 383*4096kB (UM) = 1598500kB
[  248.418753][T11851] x_tables: duplicate underflow at hook 2
[  248.426954][   T13] usb 2-1: string descriptor 0 read error: -71
[  248.465317][   T13] usb 2-1: USB disconnect, device number 16
[  248.504280][T11818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  248.556653][T11818] Node 1 Normal: 197*4kB (UME) 35*8kB (UME) 24*16kB (UE) 203*32kB (UE) 91*64kB (UE) 23*128kB (UE) 13*256kB (UM) 4*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 950*4096kB (M) = 3919436kB
[  248.597691][ T4271] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  248.617173][ T4271] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  248.627833][T11818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  248.666162][T11818] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  248.687533][T11818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  248.742088][T11818] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  248.747560][ T4271] usb 5-1: USB disconnect, device number 22
[  248.787210][T11818] 44910 total pagecache pages
[  248.810535][T11818] 29 pages in swap cache
[  248.825154][T11818] Swap cache stats: add 68, delete 39, find 0/0
[  248.866815][T11818] Free swap  = 124472kB
[  248.877588][T11818] Total swap = 124996kB
[  248.907535][T11818] 2097051 pages RAM
[  248.911405][T11818] 0 pages HighMem/MovableOnly
[  248.916107][T11818] 411499 pages reserved
[  248.941049][T11818] 0 pages cma reserved
[  249.518794][T11886] netlink: 'syz.2.3578': attribute type 3 has an invalid length.
[  249.526596][T11886] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3578'.
[  249.574389][T11888] x_tables: unsorted underflow at hook 3
[  250.017537][ T4230] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  250.387715][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.413755][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  250.587763][ T4230] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  250.596904][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  250.657492][ T4230] usb 5-1: SerialNumber: syz
[  250.721708][ T4230] usb 5-1: 0:2 : does not exist
[  250.854135][T11934] loop2: detected capacity change from 0 to 64
[  251.000907][ T4227] usb 5-1: USB disconnect, device number 23
[  251.133027][T11934] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  251.921037][T11978] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  252.178892][T11991] netlink: 'syz.0.3632': attribute type 5 has an invalid length.
[  252.483287][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3640'.
[  253.027241][T12030] ipt_CLUSTERIP: bad local_nodes[1] 0
[  253.640650][T12061] overlayfs: missing 'lowerdir'
[  253.833205][T12074] No such timeout policy "syz1"
[  254.021156][T12081] tmpfs: Bad value for 'mpol'
[  254.232265][T12094] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3682'.
[  254.745713][T12123] netlink: 'syz.1.3696': attribute type 3 has an invalid length.
[  255.389820][T12159] netlink: 'syz.4.3711': attribute type 1 has an invalid length.
[  255.412611][T12155] xt_hashlimit: max too large, truncated to 1048576
[  255.619886][T12167] x_tables: unsorted entry at hook 3
[  255.750513][T12175] netlink: 'syz.4.3721': attribute type 21 has an invalid length.
[  255.770189][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.776576][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  255.797493][T12175] IPv6: NLM_F_CREATE should be specified when creating new route
[  255.897902][T12175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.905203][T12175] IPv6: NLM_F_CREATE should be set when creating new route
[  255.912661][T12175] IPv6: NLM_F_CREATE should be set when creating new route
[  255.920058][T12175] IPv6: NLM_F_CREATE should be set when creating new route
[  255.955570][T12183] program syz.2.3724 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  256.188142][T12192] netlink: 'syz.0.3729': attribute type 11 has an invalid length.
[  256.549118][T12211] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3738'.
[  256.707673][ T4230] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  256.944157][T12230] loop4: detected capacity change from 0 to 64
[  256.950737][ T4230] usb 1-1: Using ep0 maxpacket: 8
[  257.067727][ T4230] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.111210][ T4230] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.127237][T12230] Bad inode number on dev loop4: 6 is out of range
[  257.156501][ T4230] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  257.192134][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0
[  257.234798][ T4230] usb 1-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 3.00
[  257.264656][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.282359][T12241] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3752'.
[  257.309225][ T4230] usb 1-1: config 0 descriptor??
[  257.363505][T12241] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  257.374323][ T4230] usbhid 1-1:0.0: can't add hid device: -22
[  257.390888][ T4230] usbhid: probe of 1-1:0.0 failed with error -22
[  257.608036][ T4230] usb 1-1: USB disconnect, device number 17
[  257.802451][T12261] sctp: [Deprecated]: syz.4.3762 (pid 12261) Use of int in max_burst socket option.
[  257.802451][T12261] Use struct sctp_assoc_value instead
[  258.165278][T12274] IPv6: Can't replace route, no match found
[  258.276653][T12276] loop1: detected capacity change from 0 to 1024
[  258.983369][T12295] cgroup: Unknown subsys name 'noxattr'
[  259.249062][T12302] netlink: 'syz.3.3783': attribute type 13 has an invalid length.
[  259.394699][T12270] loop4: detected capacity change from 0 to 32768
[  259.843689][T12324] bridge0: port 1(bridge_slave_0) entered forwarding state
[  259.903533][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.940559][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  260.026989][T12326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  260.220964][T12334] device macsec0 entered promiscuous mode
[  261.421057][T12388] SET target dimension over the limit!
[  261.967648][T12418] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  262.320542][T12435] loop1: detected capacity change from 0 to 256
[  262.512621][   T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  262.550522][T12446] dlm: no local IP address has been set
[  262.581427][T12446] dlm: cannot start dlm midcomms -107
[  262.705183][T12450] tc_dump_action: action bad kind
[  262.809244][   T13] usb 1-1: Using ep0 maxpacket: 32
[  262.981508][   T13] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  263.011617][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.059227][   T13] usb 1-1: config 0 descriptor??
[  263.146587][   T13] gspca_main: sq930x-2.14.0 probing 041e:403c
[  263.387555][T12482] openvswitch: netlink: Key type 2481 is out of range max 29
[  263.550571][   T13] gspca_sq930x: ucbus_write failed -71
[  263.556147][   T13] sq930x: probe of 1-1:0.0 failed with error -71
[  263.607155][   T13] usb 1-1: USB disconnect, device number 18
[  263.758678][T12499] loop4: detected capacity change from 0 to 256
[  263.858221][T12499] exfat: Deprecated parameter 'utf8'
[  263.863716][T12499] exfat: Deprecated parameter 'namecase'
[  263.897495][T12499] exfat: Deprecated parameter 'namecase'
[  263.952309][T12499] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  264.002333][T12508] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  264.023881][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3885'.
[  264.910707][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  264.964865][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.007500][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.051186][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.095355][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.157486][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.187874][T12541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.240654][T12541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.567949][T12565] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  265.597688][ T4230] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  265.720723][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  265.771888][T12572] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by ""[12572]
[  265.837697][ T4230] usb 2-1: Using ep0 maxpacket: 32
[  265.957707][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  265.997608][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  266.067936][T12580] netlink: 'syz.4.3920': attribute type 3 has an invalid length.
[  266.110836][T12580] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3920'.
[  266.207759][ T4230] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  266.237269][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.247892][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[  266.251716][ T4230] usb 2-1: Product: syz
[  266.296193][ T4230] usb 2-1: Manufacturer: syz
[  266.314795][ T4230] usb 2-1: SerialNumber: syz
[  266.359405][ T4230] usb 2-1: config 0 descriptor??
[  266.377752][T12556] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  266.618899][ T4230] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16
[  266.741724][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  266.902365][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  266.910667][ T2289] usb 2-1: USB disconnect, device number 17
[  266.924703][T12605] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  267.149746][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3937'.
[  267.697687][ T2289] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  267.718265][T12633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'.
[  268.057692][ T2289] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  268.066663][ T2289] usb 4-1: config 220 has an invalid interface number: 218 but max is 183
[  268.147599][ T2289] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[  268.156883][ T2289] usb 4-1: config 220 has no interface number 0
[  268.225082][ T2289] usb 4-1: too many endpoints for config 220 interface 218 altsetting 195: 181, using maximum allowed: 30
[  268.277432][ T2289] usb 4-1: config 220 interface 218 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 181
[  268.347795][ T2289] usb 4-1: config 220 interface 218 has no altsetting 0
[  268.354826][ T2289] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  268.442951][ T2289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.618063][T12677] loop4: detected capacity change from 0 to 64
[  268.728512][T12677] attempt to access beyond end of device
[  268.728512][T12677] loop4: rw=0, want=3586, limit=64
[  268.767573][ T2289] usb 4-1: string descriptor 0 read error: -71
[  268.777685][T12677] Buffer I/O error on dev loop4, logical block 1792, async page read
[  268.787889][ T2289] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  268.796612][T12677] attempt to access beyond end of device
[  268.796612][T12677] loop4: rw=0, want=113154, limit=64
[  268.826606][ T2289] gspca_sn9c2028: read1 error -71
[  268.862933][T12677] Buffer I/O error on dev loop4, logical block 56576, async page read
[  268.878240][ T2289] gspca_sn9c2028: read1 error -71
[  268.907535][ T2289] gspca_sn9c2028: read1 error -71
[  268.912675][ T2289] sn9c2028: probe of 4-1:220.218 failed with error -71
[  268.968639][ T2289] usb 4-1: USB disconnect, device number 21
[  269.406054][T12712] device gtp0 entered promiscuous mode
[  269.706903][T12729] x_tables: unsorted underflow at hook 2
[  269.928176][ T5529] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  270.095498][T12743] loop2: detected capacity change from 0 to 512
[  270.165870][T12743] EXT4-fs (loop2): Test dummy encryption mode enabled
[  270.197543][ T5529] usb 4-1: Using ep0 maxpacket: 8
[  270.238581][T12743] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4000: invalid indirect mapped block 4294967295 (level 1)
[  270.285429][T12743] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4000: invalid indirect mapped block 4294967295 (level 1)
[  270.308792][T12743] EXT4-fs (loop2): 2 truncates cleaned up
[  270.314867][T12743] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,test_dummy_encryption=v1,discard,errors=continue,grpid,,errors=continue. Quota mode: writeback.
[  270.357565][ T5529] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  270.376158][ T5529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  270.396741][ T5529] usb 4-1: config 0 has no interface number 0
[  270.468878][T12743] EXT4-fs error (device loop2): ext4_get_parent:1906: inode #11: comm syz.2.4000: bad parent inode number: 3
[  270.607646][ T5529] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  270.634868][ T5529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.663414][ T5529] usb 4-1: Product: syz
[  270.678452][ T5529] usb 4-1: Manufacturer: syz
[  270.678479][ T5529] usb 4-1: SerialNumber: syz
[  270.684645][ T5529] usb 4-1: config 0 descriptor??
[  270.895476][T12771] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  270.914561][T12772] netlink: 'syz.2.4012': attribute type 3 has an invalid length.
[  270.937907][ T5527] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  270.946947][ T5529] usb 4-1: USB disconnect, device number 22
[  270.970025][T12771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  270.976935][T12772] netlink: 'syz.2.4012': attribute type 1 has an invalid length.
[  270.995570][T12771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  270.996978][T12772] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.4012'.
[  271.137540][ T4230] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  271.342393][ T5527] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[  271.376374][ T5527] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[  271.397626][ T4230] usb 1-1: Using ep0 maxpacket: 16
[  271.427410][ T5527] usb 5-1: config 0 interface 0 has no altsetting 0
[  271.447427][ T5527] usb 5-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.00
[  271.487088][ T5527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.527659][ T4230] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  271.546822][ T4230] usb 1-1: config 1 has an invalid descriptor of length 15, skipping remainder of the config
[  271.565843][ T5527] usb 5-1: config 0 descriptor??
[  271.606295][ T4230] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  271.627328][ T4230] usb 1-1: config 1 has no interface number 1
[  271.637648][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  271.671286][ T4230] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x89 has an invalid bInterval 201, changing to 7
[  271.814062][ T5529] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  271.867657][ T4230] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  271.897681][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.914735][ T4230] usb 1-1: Product: syz
[  271.927786][ T4230] usb 1-1: Manufacturer: syz
[  271.937732][ T4230] usb 1-1: SerialNumber: syz
[  272.058411][ T5527] hid (null): nested delimiters
[  272.066577][ T5527] logitech-hidpp-device 0003:046D:C343.0001: collection stack underflow
[  272.103911][ T5527] logitech-hidpp-device 0003:046D:C343.0001: item 0 2 0 12 parsing failed
[  272.148065][ T5527] logitech-hidpp-device 0003:046D:C343.0001: hidpp_probe:parse failed
[  272.180766][ T5527] logitech-hidpp-device: probe of 0003:046D:C343.0001 failed with error -22
[  272.250775][ T5529] usb 3-1: config index 0 descriptor too short (expected 2075, got 27)
[  272.274694][ T5529] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  272.287681][ T4230] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  272.297690][ T4230] usb 1-1: found format II with max.bitrate = 0, frame size=0
[  272.305214][ T4230] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  272.308941][ T5529] usb 3-1: config 0 has no interface number 0
[  272.336429][ T5529] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid maxpacket 12408, setting to 64
[  272.344558][T12782] loop1: detected capacity change from 0 to 32768
[  272.379994][ T5529] usb 3-1: config 0 interface 200 has no altsetting 0
[  272.390957][ T5527] usb 5-1: USB disconnect, device number 24
[  272.409394][ T4230] usb 1-1: USB disconnect, device number 19
[  272.557675][ T5529] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  272.574084][ T5529] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.592596][ T5529] usb 3-1: Product: syz
[  272.596815][ T5529] usb 3-1: Manufacturer: syz
[  272.617687][ T5529] usb 3-1: SerialNumber: syz
[  272.636414][ T5529] usb 3-1: config 0 descriptor??
[  272.650630][T12782] XFS (loop1): Mounting V5 Filesystem
[  272.826662][T12782] XFS (loop1): Ending clean mount
[  272.992798][ T5529] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input18
[  273.007032][T12803] loop4: detected capacity change from 0 to 764
[  273.038003][T12805] IPv6: Can't replace route, no match found
[  273.055138][ T4198] XFS (loop1): Unmounting Filesystem
[  273.064675][ T5529] usb 3-1: USB disconnect, device number 18
[  273.716030][T12822] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4034'.
[  274.281590][T12851] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  274.317520][T12851] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  274.344615][T12851] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  274.379224][T12851] comedi comedi3: 8255: I/O port conflict (0xfff,4)
[  274.417765][T12851] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  274.429405][T12855] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4049'.
[  274.452505][T12851] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  274.473358][T12851] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  274.494164][T12859] 9pnet_rdma: rdma_create_trans (12859): problem binding to privport: 13
[  274.514930][T12851] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  274.545179][T12851] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  274.560883][T12851] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  274.587610][T12851] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  274.613779][T12851] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  275.061106][T12886] loop4: detected capacity change from 0 to 256
[  275.112617][T12891] loop1: detected capacity change from 0 to 1024
[  275.238285][T12899] openvswitch: netlink: Actions may not be safe on all matching packets
[  275.261340][T12891] EXT4-fs (loop1): Ignoring removed bh option
[  275.331983][T12891] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  275.388261][T12891] EXT4-fs (loop1): Online resizing not supported with bigalloc
[  276.169402][T12930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4083'.
[  276.355402][   T13] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  276.697479][   T13] usb 1-1: Using ep0 maxpacket: 16
[  276.766433][T12952] loop4: detected capacity change from 0 to 2048
[  276.811787][T12954] loop1: detected capacity change from 0 to 1024
[  276.855802][   T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[  276.886643][T12954] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  276.947008][T12957] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.107750][   T13] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  277.116902][   T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.131726][T12963] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  277.167732][   T13] usb 1-1: Product: syz
[  277.171955][   T13] usb 1-1: Manufacturer: syz
[  277.214957][   T13] usb 1-1: SerialNumber: syz
[  277.254543][T12970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4101'.
[  277.279176][   T13] usb 1-1: config 0 descriptor??
[  277.317903][T12926] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  277.325200][T12972] loop4: detected capacity change from 0 to 64
[  277.388674][   T13] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  277.425598][T12974] loop2: detected capacity change from 0 to 512
[  277.564017][T12974] EXT4-fs (loop2): Ignoring removed nobh option
[  277.572769][T12980] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4105'.
[  277.587491][T12974] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  277.622995][    C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[  277.629200][    C0] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71)
[  277.636709][ T4271] usb 1-1: USB disconnect, device number 20
[  277.657017][ T4271] mcba_usb 1-1:0.0 can0: device disconnected
[  277.671083][T12974] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  277.787589][   T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  277.915843][T12974] EXT4-fs (loop2): 1 truncate cleaned up
[  277.929414][T12974] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nobh,acl,,errors=continue. Quota mode: none.
[  278.072022][   T13] usb 2-1: Using ep0 maxpacket: 16
[  278.260697][   T13] usb 2-1: unable to get BOS descriptor or descriptor too short
[  278.326769][T12997] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  278.387689][   T13] usb 2-1: config 131 has an invalid interface number: 10 but max is 1
[  278.408698][   T13] usb 2-1: config 131 has an invalid interface number: 3 but max is 1
[  278.449969][   T13] usb 2-1: config 131 has no interface number 0
[  278.456293][   T13] usb 2-1: config 131 has no interface number 1
[  278.523524][   T13] usb 2-1: config 131 interface 10 has no altsetting 0
[  278.551064][   T13] usb 2-1: config 131 interface 3 has no altsetting 0
[  278.684245][T13013] loop2: detected capacity change from 0 to 256
[  278.727476][T13013] exfat: Deprecated parameter 'namecase'
[  278.767853][   T13] usb 2-1: New USB device found, idVendor=1199, idProduct=907b, bcdDevice=b2.3c
[  278.785951][T13013] exfat: Deprecated parameter 'namecase'
[  278.797404][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.816208][T13013] exfat: Deprecated parameter 'namecase'
[  278.835240][   T13] usb 2-1: Product: syz
[  278.844701][   T13] usb 2-1: Manufacturer: syz
[  278.877428][   T13] usb 2-1: SerialNumber: syz
[  278.892742][T13013] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  279.142314][T13028] loop4: detected capacity change from 0 to 2048
[  279.257879][T13028]  loop4: p3 < >
[  279.298515][T13034] loop2: detected capacity change from 0 to 512
[  279.311624][ T3559]  loop4: p3 < >
[  279.392314][   T13] usb 2-1: selecting invalid altsetting 0
[  279.408503][   T13] usb 2-1: Could not set interface, error -22
[  279.443543][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  279.449173][   T13] usb 2-1: USB disconnect, device number 18
[  279.518338][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4134'.
[  279.573214][T13034] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  279.639663][T13034] ext4 filesystem being mounted at /774/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.700602][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  280.220420][T13070] loop1: detected capacity change from 0 to 1024
[  280.245006][T13060] 
[  280.247388][T13060] ======================================================
[  280.254421][T13060] WARNING: possible circular locking dependency detected
[  280.261454][T13060] syzkaller #0 Not tainted
[  280.265976][T13060] ------------------------------------------------------
[  280.273012][T13060] syz.2.4141/13060 is trying to acquire lock:
[  280.279097][T13060] ffff888065a85028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  280.290182][T13060] 
[  280.290182][T13060] but task is already holding lock:
[  280.297563][T13060] ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560
[  280.307270][T13060] 
[  280.307270][T13060] which lock already depends on the new lock.
[  280.307270][T13060] 
[  280.317693][T13060] 
[  280.317693][T13060] the existing dependency chain (in reverse order) is:
[  280.326729][T13060] 
[  280.326729][T13060] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  280.334764][T13060]        __mutex_lock_common+0x1e5/0x2400
[  280.340520][T13060]        mutex_lock_nested+0x17/0x20
[  280.345837][T13060]        rfkill_register+0x2f/0x970
[  280.351067][T13060]        hci_register_dev+0x459/0x980
[  280.356465][T13060]        vhci_create_device+0x32e/0x5c0
[  280.362041][T13060]        vhci_write+0x389/0x440
[  280.366923][T13060]        vfs_write+0x748/0xd70
[  280.371711][T13060]        ksys_write+0x153/0x260
[  280.376639][T13060]        do_syscall_64+0x4c/0xa0
[  280.381615][T13060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  280.388061][T13060] 
[  280.388061][T13060] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  280.396006][T13060]        __mutex_lock_common+0x1e5/0x2400
[  280.401763][T13060]        mutex_lock_nested+0x17/0x20
[  280.407083][T13060]        vhci_send_frame+0x88/0x100
[  280.412318][T13060]        hci_send_frame+0x1a9/0x2e0
[  280.417541][T13060]        hci_tx_work+0x9b5/0x16d0
[  280.422597][T13060]        process_one_work+0x867/0xff0
[  280.428000][T13060]        worker_thread+0xad7/0x12a0
[  280.433225][T13060]        kthread+0x42e/0x520
[  280.437911][T13060]        ret_from_fork+0x1f/0x30
[  280.442858][T13060] 
[  280.442858][T13060] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  280.452071][T13060]        __flush_work+0x116/0x210
[  280.457107][T13060]        hci_dev_do_open+0xc77/0x12a0
[  280.462484][T13060]        hci_power_on+0x1a7/0x5f0
[  280.467505][T13060]        process_one_work+0x867/0xff0
[  280.472875][T13060]        worker_thread+0xad7/0x12a0
[  280.478070][T13060]        kthread+0x42e/0x520
[  280.482664][T13060]        ret_from_fork+0x1f/0x30
[  280.487600][T13060] 
[  280.487600][T13060] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  280.495259][T13060]        __mutex_lock_common+0x1e5/0x2400
[  280.500999][T13060]        mutex_lock_nested+0x17/0x20
[  280.506305][T13060]        bg_scan_update+0x44/0x3b0
[  280.511418][T13060]        process_one_work+0x867/0xff0
[  280.516789][T13060]        worker_thread+0xad7/0x12a0
[  280.521983][T13060]        kthread+0x42e/0x520
[  280.526569][T13060]        ret_from_fork+0x1f/0x30
[  280.531590][T13060] 
[  280.531590][T13060] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  280.541403][T13060]        __lock_acquire+0x2c66/0x7b50
[  280.546774][T13060]        lock_acquire+0x19e/0x400
[  280.551880][T13060]        __flush_work+0x116/0x210
[  280.557005][T13060]        __cancel_work_timer+0x3f4/0x560
[  280.562723][T13060]        hci_request_cancel_all+0xcc/0x300
[  280.568527][T13060]        hci_dev_do_close+0x4e/0x1020
[  280.573893][T13060]        hci_rfkill_set_block+0x101/0x180
[  280.579609][T13060]        rfkill_set_block+0x1c1/0x3c0
[  280.584984][T13060]        rfkill_fop_write+0x453/0x560
[  280.590363][T13060]        vfs_write+0x304/0xd70
[  280.595126][T13060]        ksys_write+0x153/0x260
[  280.599971][T13060]        do_syscall_64+0x4c/0xa0
[  280.604904][T13060]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  280.611314][T13060] 
[  280.611314][T13060] other info that might help us debug this:
[  280.611314][T13060] 
[  280.621533][T13060] Chain exists of:
[  280.621533][T13060]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  280.621533][T13060] 
[  280.637454][T13060]  Possible unsafe locking scenario:
[  280.637454][T13060] 
[  280.644921][T13060]        CPU0                    CPU1
[  280.650282][T13060]        ----                    ----
[  280.655641][T13060]   lock(rfkill_global_mutex);
[  280.660402][T13060]                                lock(&data->open_mutex);
[  280.667508][T13060]                                lock(rfkill_global_mutex);
[  280.674788][T13060]   lock((work_completion)(&hdev->bg_scan_update));
[  280.681370][T13060] 
[  280.681370][T13060]  *** DEADLOCK ***
[  280.681370][T13060] 
[  280.689597][T13060] 1 lock held by syz.2.4141/13060:
[  280.694706][T13060]  #0: ffffffff8d6d5ea8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560
[  280.704813][T13060] 
[  280.704813][T13060] stack backtrace:
[  280.710695][T13060] CPU: 0 PID: 13060 Comm: syz.2.4141 Not tainted syzkaller #0
[  280.718168][T13060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.728307][T13060] Call Trace:
[  280.732042][T13060]  <TASK>
[  280.734978][T13060]  dump_stack_lvl+0x188/0x250
[  280.739664][T13060]  ? load_image+0x410/0x410
[  280.744169][T13060]  ? show_regs_print_info+0x20/0x20
[  280.749370][T13060]  ? print_circular_bug+0x12b/0x1a0
[  280.754568][T13060]  check_noncircular+0x296/0x330
[  280.759516][T13060]  ? look_up_lock_class+0x71/0x110
[  280.764636][T13060]  ? add_chain_block+0x9b0/0x9b0
[  280.769571][T13060]  ? lockdep_lock+0xf1/0x1f0
[  280.774165][T13060]  ? __lock_acquire+0x1305/0x7b50
[  280.779192][T13060]  ? mark_lock+0x94/0x320
[  280.783519][T13060]  ? _find_first_zero_bit+0xd1/0xf0
[  280.788890][T13060]  __lock_acquire+0x2c66/0x7b50
[  280.793745][T13060]  ? verify_lock_unused+0x140/0x140
[  280.798945][T13060]  ? verify_lock_unused+0x140/0x140
[  280.804157][T13060]  lock_acquire+0x19e/0x400
[  280.808666][T13060]  ? __flush_work+0xfa/0x210
[  280.813258][T13060]  ? __lock_acquire+0x7b50/0x7b50
[  280.818635][T13060]  ? read_lock_is_recursive+0x10/0x10
[  280.824016][T13060]  ? start_flush_work+0x784/0x830
[  280.829056][T13060]  __flush_work+0x116/0x210
[  280.833559][T13060]  ? __flush_work+0xfa/0x210
[  280.838146][T13060]  ? flush_work+0x20/0x20
[  280.842486][T13060]  ? try_to_grab_pending+0xfb/0x820
[  280.847684][T13060]  ? mark_lock+0x94/0x320
[  280.852012][T13060]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  280.857994][T13060]  ? lock_chain_count+0x20/0x20
[  280.862844][T13060]  ? mark_lock+0x94/0x320
[  280.867174][T13060]  ? __cancel_work_timer+0x36a/0x560
[  280.872467][T13060]  __cancel_work_timer+0x3f4/0x560
[  280.877573][T13060]  ? cancel_work_sync+0x20/0x20
[  280.882418][T13060]  ? __cancel_work+0x1f9/0x2e0
[  280.887176][T13060]  ? lockdep_hardirqs_on+0x94/0x140
[  280.892375][T13060]  ? __cancel_work+0x27b/0x2e0
[  280.897135][T13060]  ? cancel_work+0x20/0x20
[  280.901554][T13060]  hci_request_cancel_all+0xcc/0x300
[  280.906844][T13060]  hci_dev_do_close+0x4e/0x1020
[  280.911700][T13060]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  280.917593][T13060]  ? _raw_spin_unlock+0x40/0x40
[  280.922453][T13060]  hci_rfkill_set_block+0x101/0x180
[  280.927684][T13060]  ? rcu_lock_release+0x20/0x20
[  280.932535][T13060]  rfkill_set_block+0x1c1/0x3c0
[  280.937390][T13060]  rfkill_fop_write+0x453/0x560
[  280.942242][T13060]  ? rfkill_fop_read+0x560/0x560
[  280.947178][T13060]  ? common_file_perm+0x100/0x1c0
[  280.952291][T13060]  ? fsnotify_perm+0x5d/0x560
[  280.956966][T13060]  ? security_file_permission+0x75/0xa0
[  280.962513][T13060]  ? rfkill_fop_read+0x560/0x560
[  280.967449][T13060]  vfs_write+0x304/0xd70
[  280.971691][T13060]  ? file_end_write+0x250/0x250
[  280.976540][T13060]  ? __fget_files+0x402/0x470
[  280.981217][T13060]  ? __fdget_pos+0x1e2/0x370
[  280.985815][T13060]  ? ksys_write+0x70/0x260
[  280.990228][T13060]  ksys_write+0x153/0x260
[  280.994555][T13060]  ? __ia32_sys_read+0x80/0x80
[  280.999322][T13060]  ? lockdep_hardirqs_on+0x94/0x140
[  281.004536][T13060]  do_syscall_64+0x4c/0xa0
[  281.008952][T13060]  ? clear_bhb_loop+0x30/0x80
[  281.013639][T13060]  ? clear_bhb_loop+0x30/0x80
[  281.018330][T13060]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  281.024220][T13060] RIP: 0033:0x7fd36a3dd0d9
[  281.028638][T13060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.048239][T13060] RSP: 002b:00007fd368635028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  281.056652][T13060] RAX: ffffffffffffffda RBX: 00007fd36a664fa0 RCX: 00007fd36a3dd0d9
[  281.064627][T13060] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  281.072596][T13060] RBP: 00007fd36a474024 R08: 0000000000000000 R09: 0000000000000000
[  281.080565][T13060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.088532][T13060] R13: 00007fd36a665038 R14: 00007fd36a664fa0 R15: 00007ffd43291408
[  281.096507][T13060]  </TASK>
[  281.678100][T13070] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  281.726228][T13070] fscrypt (loop1, inode 14): Error -61 getting encryption context