last executing test programs:

2m51.655466984s ago: executing program 2 (id=1079):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
r1 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000002})
write$P9_RSTATu(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a80000000000000000000000008000000000000000000081030000000000000000000000000003e8001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000b0ff70673effeb09b5351f5bde05"], 0x21e)

2m51.457492523s ago: executing program 2 (id=1082):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000040)={r1, @in6={{0xa, 0x4e25, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x74}}}, &(0x7f0000000280)=0x84)

2m51.187090197s ago: executing program 2 (id=1087):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4], 0x3, [0x4, 0x2, 0x6, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3dc, 0x5], [0x0, 0x4, 0x0, 0xfffe, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6]}}}}]}, 0x88}}, 0x0)

2m50.91681072s ago: executing program 2 (id=1092):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$eJzslc+q00AUxr+ZxKT3Ij6AGxde8LowbXJB3Fy4d+PKheCfiwvBYtNSTa20XdiCaJ/AvTsXPoaiWxf6BlIF0U3dqOuRyUwmQ0mrMS0Knh90+k3m5MyZM5MzIAjiv+Xjhx8z8X3/cw3AcezA18+/OLkNt+zf174+fH3p4tGTm8/f+LNgq8inEL8/vwvg1aGDd+ZdIWynO/r/KrjR18BxVusjMARa3wLHda1jMNzQ+o6l+9I+CNrdJA5u95OWFA3ZhLKJ2t2EuYvxzacMLSs+Zo0Px5O7zSSJBxsUv8rf/JBj38SHmj1+ASrahpW/EByh1ntguGJs/Sw3KiXW+k+6+fqdlev3UHHZnwDkT9oFNrzqFJnw5FTLbbKFFgwBbF17H52o7ifb87KvO0iFU/p1rtIiT8XmP4AKAu7aHAq/4CT4q85PdfH2pRZ8pfGLA7V/JtRHql9u0oMlQ15JPzrzpj6JZwxnrPqpSsnT9Kqpj3r368Px5Fy31+zEnfheFO2db2wDiOppIVLtsvLnA1tpfdrO/RfeSRKPeXjQHI0GoWpNP1JtUcXlcDGfcuyexjHZl9XUW/D7zdIs/cmvgz1WvV27XConBEEQ/wCnwNKanNblTOjbxAwIEV3+y3ESBEEQBEEQBEEQBPHn/AwAAP//W8NQxQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

2m50.702395991s ago: executing program 2 (id=1096):
setrlimit(0x0, &(0x7f00000000c0)={0x20, 0x6})
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

2m50.211673806s ago: executing program 2 (id=1102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0)

2m49.810096665s ago: executing program 32 (id=1102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, 0x0)

26.401220756s ago: executing program 4 (id=2462):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc)

26.32654179s ago: executing program 4 (id=2463):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f00000006c0)={{0x2, 0x5000, 0xe, 0xff, 0x6, 0x5, 0x10, 0x9, 0x8, 0x2, 0x3, 0xfd}, {0x30000, 0x6000, 0x0, 0x4c, 0xc, 0x10, 0x7, 0x1, 0x0, 0xc, 0x1, 0xdb}, {0x3000, 0x25000, 0x9, 0x6, 0xc6, 0x5, 0x8, 0x5, 0x9, 0xd, 0x9b, 0x4}, {0x73000, 0x200000, 0xf, 0xf, 0xa, 0x40, 0xd, 0xa4, 0xef, 0x8, 0xe, 0x10}, {0xeeee0000, 0xe000, 0x3, 0xff, 0x22, 0xd5, 0x0, 0x2, 0x2, 0x0, 0x2, 0xa}, {0xffff2000, 0x4, 0x10, 0xca, 0xd, 0x2f, 0x80, 0x9, 0x2, 0x9, 0x98, 0xf9}, {0xe000, 0x70000, 0x10, 0x76, 0x4, 0x40, 0x2, 0x2, 0x13, 0x6, 0x2, 0x8}, {0xf000, 0x50000, 0x1, 0xff, 0x7, 0x9, 0x2, 0x9, 0xb2, 0xa4, 0x7, 0x1}, {0x26000, 0x5}, {0x50000, 0x3}, 0x0, 0x0, 0x58000, 0x200000, 0x3, 0x4c01, 0x70000, 0x0, [0x0, 0x4, 0x3]})

25.51579956s ago: executing program 4 (id=2466):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto(r0, &(0x7f0000000400)="b4", 0x1, 0xc0d1, &(0x7f00000002c0)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000000)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='J', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x401, 0x2}, 0x8)

24.520476149s ago: executing program 4 (id=2480):
syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40), 0xff, 0x4b7, &(0x7f0000000640)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000000)=""/39, 0x27)

23.800712435s ago: executing program 4 (id=2486):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
setuid(0xee01)
utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

22.131482458s ago: executing program 4 (id=2507):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

21.861771691s ago: executing program 33 (id=2507):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)

3.702150257s ago: executing program 0 (id=2630):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000200), &(0x7f00000001c0)='./bus\x00', 0x810, &(0x7f0000000000)=ANY=[], 0xfd, 0x1067a, &(0x7f0000010ac0)="$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")
setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1)

2.207916112s ago: executing program 0 (id=2636):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x28, 0x37, 0x0, 0x1, @veth={{0x9, 0x324}, {0x10, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r1, 0x10000, 0x48124}}}}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)

980.499842ms ago: executing program 5 (id=2650):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000006000)=[@in={0x2, 0x0, @local}]}, &(0x7f0000005ec0)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x85, &(0x7f0000005f40)={r1}, &(0x7f0000005e80)=0xfc9e)

948.784774ms ago: executing program 1 (id=2651):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1)

939.049014ms ago: executing program 3 (id=2652):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9dadd77c2dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0)
keyctl$revoke(0x3, r1)
keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff)

833.596189ms ago: executing program 1 (id=2653):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff000000000008000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000e8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

773.911312ms ago: executing program 5 (id=2654):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x8, @remote, 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)=')', 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c, &(0x7f00000028c0)=[{&(0x7f0000000040)="ba", 0x1}], 0x1}}], 0x2, 0x40015)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7d, &(0x7f0000000280)="1a00000002000000", 0x8)

734.364564ms ago: executing program 0 (id=2655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x108)

724.153114ms ago: executing program 3 (id=2656):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x4)
recvmmsg(r0, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

663.890007ms ago: executing program 1 (id=2657):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x0, 0x100}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0)

515.846554ms ago: executing program 5 (id=2658):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x9)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0xb9d9, 0x0, 0x4, 0xfffffff8, 0x1, "8ed2e39114a47020fb2202be27a144efda9a7b"})
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x19ceef4b, 0xffff, 0x9, 0x7ff, 0xd, "a7aab3ef4909b9687813fbbcece7f9295d70c4"})

515.479615ms ago: executing program 1 (id=2659):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x553, &(0x7f0000000a40)="$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")
r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0)
io_setup(0x1ff, &(0x7f00000001c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x2600, 0xc8, 0x8, 0x8, 0x0, r0, 0x0, 0x0, 0xfff, 0x0, 0x2}])

515.107195ms ago: executing program 3 (id=2660):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1004}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0xe84}]}, 0x4c}}, 0x0)

501.394095ms ago: executing program 0 (id=2661):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x66}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x100005e3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240000d0}, 0x20004000)

366.408372ms ago: executing program 5 (id=2662):
r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r1 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000040)='>', 0x1, 0xfffffffffffffffe)
r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, 0x0)

356.005023ms ago: executing program 0 (id=2663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000)

316.875894ms ago: executing program 3 (id=2664):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x70bd26, 0x0, {0xa, 0x0, 0x3}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@local}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040801}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

206.71598ms ago: executing program 1 (id=2665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000d2}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)

204.07471ms ago: executing program 5 (id=2666):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0xce20, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0xc, 0x11, 0x0, @local, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {0x4e1d, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x8, 0x100, @void}}}}}}}}, 0x0)

203.35865ms ago: executing program 0 (id=2667):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r0, r1, 0x0, 0x8000fb00)

184.175981ms ago: executing program 3 (id=2668):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)

66.805587ms ago: executing program 1 (id=2669):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, 0x0)

32.397449ms ago: executing program 3 (id=2670):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)={0x90, r1, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x84, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004401}, 0x44094)

0s ago: executing program 5 (id=2671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gre0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xff}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x0)

kernel console output (not intermixed with test programs):

invalid bInterval 0, changing to 7
[  244.696446][ T5802] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.717776][ T5802] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.728062][ T5802] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  244.732560][    T8] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.738599][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.759530][ T5802] usb 2-1: config 0 descriptor??
[  244.760178][    T8] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  244.792134][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  244.798911][    T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  244.808544][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.819376][    T8] usb 1-1: config 0 descriptor??
[  244.874751][T10064] loop3: detected capacity change from 0 to 32768
[  244.898728][T10064] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.988420][   T23] appletouch 5-1:0.85: Geyser mode initialized.
[  245.006273][T10064] XFS (loop3): Ending clean mount
[  245.006672][   T23] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input18
[  245.024866][T10064] XFS (loop3): Quotacheck needed: Please wait.
[  245.122654][T10064] XFS (loop3): Quotacheck: Done.
[  245.286406][ T5765] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  245.303015][ T5802] usb 5-1: USB disconnect, device number 5
[  245.339248][ T5802] appletouch 5-1:0.85: input: appletouch disconnected
[  245.455657][   T23] usb 2-1: USB disconnect, device number 15
[  245.478468][    T8] usb 1-1: USB disconnect, device number 17
[  245.774579][T10081] loop3: detected capacity change from 0 to 4096
[  245.807816][T10082] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  245.889996][T10081] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  246.325622][T10097] loop4: detected capacity change from 0 to 512
[  246.815609][T10086] loop3: detected capacity change from 0 to 40427
[  246.835993][T10086] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  246.845362][T10086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  246.871116][T10086] F2FS-fs (loop3): Found nat_bits in checkpoint
[  246.883592][T10116] input: syz0 as /devices/virtual/input/input19
[  247.018086][T10086] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  247.030939][T10086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  247.440670][T10130] loop4: detected capacity change from 0 to 256
[  247.484026][T10130] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  247.663506][ T5765] syz-executor: attempt to access beyond end of device
[  247.663506][ T5765] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.706183][ T5765] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  248.056078][T10148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1526'.
[  248.223534][T10152] loop1: detected capacity change from 0 to 128
[  248.257465][T10152] EXT4-fs: Ignoring removed nobh option
[  248.322179][T10152] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  248.382360][T10152] ext4 filesystem being mounted at /400/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  248.420430][T10152] EXT4-fs warning (device loop1): __ext4_ioctl:1260: Setting inode version is not supported with metadata_csum enabled.
[  248.530946][ T5764] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  248.680957][T10172] loop1: detected capacity change from 0 to 8
[  250.303543][T10196] loop0: detected capacity change from 0 to 32768
[  250.385426][T10229] loop4: detected capacity change from 0 to 512
[  250.396020][T10229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  250.409561][T10196] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.459588][T10229] EXT4-fs (loop4): 1 truncate cleaned up
[  250.480591][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  250.522541][T10229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.569792][T10196] XFS (loop0): Ending clean mount
[  250.593028][T10196] XFS (loop0): Quotacheck needed: Please wait.
[  250.654796][T10196] XFS (loop0): Quotacheck: Done.
[  250.657963][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.681071][   T23] usb 4-1: Using ep0 maxpacket: 32
[  250.692425][   T23] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  250.714610][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.752463][   T23] usb 4-1: Product: syz
[  250.756815][   T23] usb 4-1: Manufacturer: syz
[  250.781801][   T23] usb 4-1: SerialNumber: syz
[  250.797283][   T23] usb 4-1: config 0 descriptor??
[  250.850026][ T5763] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  250.921652][T10238] loop4: detected capacity change from 0 to 4096
[  250.948170][T10238] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  251.051155][   T23] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  251.288165][ T5836] hid-generic 0005:0B57:0101.0009: item fetching failed at offset 0/1
[  251.301708][ T5836] hid-generic: probe of 0005:0B57:0101.0009 failed with error -22
[  251.386767][T10247] loop4: detected capacity change from 0 to 128
[  251.411635][T10247] EXT4-fs: Ignoring removed nobh option
[  251.437766][T10247] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  251.474060][T10247] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  251.571769][T10247] EXT4-fs warning (device loop4): __ext4_ioctl:1260: Setting inode version is not supported with metadata_csum enabled.
[  251.637080][ T8771] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  251.785156][   T23] usb 4-1: reset high-speed USB device number 16 using dummy_hcd
[  251.873013][T10252] loop1: detected capacity change from 0 to 32768
[  251.899556][T10252] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1569 (10252)
[  251.926558][T10252] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  251.954579][T10252] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  251.963986][T10252] BTRFS info (device loop1): using free space tree
[  252.040582][T10252] BTRFS info (device loop1): enabling ssd optimizations
[  252.047678][T10252] BTRFS info (device loop1): auto enabling async discard
[  252.226399][   T23] usb 4-1: [UEAGLE-ATM] interface 1 not found
[  252.239084][ T5764] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.249955][   T23] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  252.414170][ T5757] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5757)
[  252.523705][   T27] usb 4-1: USB disconnect, device number 16
[  252.990710][ T5771] Bluetooth: hci1: command 0x0406 tx timeout
[  253.339480][T10307] netlink: 'syz.4.1585': attribute type 5 has an invalid length.
[  253.363216][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'.
[  253.562490][T10316] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  253.766447][T10320] loop0: detected capacity change from 0 to 4096
[  253.858395][T10320] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  253.929407][T10320] ntfs3: loop0: Failed to initialize $Extend/$Reparse.
[  254.287075][T10334] loop3: detected capacity change from 0 to 256
[  254.394276][T10334] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  254.429024][T10340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'.
[  254.613698][ T5836] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  254.760294][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1605'.
[  254.765602][T10348] loop3: detected capacity change from 0 to 4096
[  254.823102][ T5836] usb 1-1: Using ep0 maxpacket: 32
[  254.859473][ T5836] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  254.884459][ T5836] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  254.897585][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0
[  254.931917][T10352] loop1: detected capacity change from 0 to 512
[  254.945048][ T5836] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  254.958571][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.007095][ T5836] usb 1-1: Product: syz
[  255.013530][T10352] EXT4-fs (loop1): orphan cleanup on readonly fs
[  255.032272][ T5836] usb 1-1: Manufacturer: syz
[  255.040804][T10352] EXT4-fs error (device loop1): ext4_quota_enable:7136: comm syz.1.1606: Bad quota inum: 2, type: 1
[  255.080237][ T5836] usb 1-1: SerialNumber: syz
[  255.118394][ T5836] usb 1-1: config 0 descriptor??
[  255.138746][T10352] EXT4-fs warning (device loop1): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  255.216431][T10352] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  255.249867][T10352] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  255.292396][T10352] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  255.334023][T10352] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8
[  255.414027][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.573185][T10364] Failed to get privilege flags for destination (handle=0x2:0x0)
[  255.588831][T10367] loop4: detected capacity change from 0 to 16
[  255.595757][ T5836] gs_usb 1-1:0.0: Configuring for 159 interfaces
[  255.613532][T10367] erofs: (device loop4): mounted with root inode @ nid 36.
[  255.683342][   T28] audit: type=1800 audit(1774027674.204:38): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1613" name="file1" dev="loop4" ino=86 res=0 errno=0
[  255.810623][ T5836] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  255.837009][ T5836] gs_usb: probe of 1-1:0.0 failed with error -22
[  256.034780][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  256.072978][ T5802] usb 1-1: USB disconnect, device number 18
[  256.158122][T10388] loop1: detected capacity change from 0 to 16
[  256.180346][T10388] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300)
[  256.660247][ T5836] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  256.671349][ T5773] Bluetooth: hci2: command tx timeout
[  256.871391][T10415] loop3: detected capacity change from 0 to 128
[  256.872128][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.916354][ T5836] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  256.927031][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.937076][ T5836] usb 2-1: Product: syz
[  256.941764][ T5836] usb 2-1: Manufacturer: syz
[  256.948654][ T5836] usb 2-1: SerialNumber: syz
[  256.958164][ T5836] usb 2-1: config 0 descriptor??
[  256.972868][ T5836] dm9601: probe of 2-1:0.0 failed with error -22
[  257.420298][ T5836] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  257.574470][T10427] loop3: detected capacity change from 0 to 32768
[  257.631499][ T5836] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  257.647455][T10427] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  257.667845][ T5836] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  257.670311][T10427] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  257.725611][ T5836] usb 1-1: config 0 interface 0 has no altsetting 0
[  257.746760][ T5836] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  257.766343][T10427] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  257.771197][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  257.815365][ T5836] usb 1-1: Product: syz
[  257.819591][ T5836] usb 1-1: Manufacturer: syz
[  257.836376][ T5836] usb 1-1: SerialNumber: syz
[  257.866385][ T5836] usb 1-1: config 0 descriptor??
[  257.880793][ T5836] hub 1-1:0.0: bad descriptor, ignoring hub
[  257.905321][ T5836] hub: probe of 1-1:0.0 failed with error -5
[  257.923680][ T5836] usb 1-1: selecting invalid altsetting 0
[  257.938764][T10427] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  258.552257][   T28] audit: type=1326 audit(1774027677.074:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10446 comm="syz.4.1647" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff812f9c799 code=0x0
[  258.653041][T10423] usb 1-1: reset high-speed USB device number 19 using dummy_hcd
[  258.865156][T10423] usb 1-1: device firmware changed
[  258.884969][ T5802] usb 1-1: USB disconnect, device number 19
[  258.979634][T10459] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1650'.
[  259.060226][ T5802] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  259.098974][T10463] loop3: detected capacity change from 0 to 256
[  259.141477][T10463] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  259.251857][ T5802] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  259.266089][ T5802] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  259.277782][ T5802] usb 1-1: config 0 interface 0 has no altsetting 0
[  259.296310][ T5802] usb 1-1: string descriptor 0 read error: -22
[  259.306370][ T5802] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  259.318117][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  259.356274][ T5802] usb 1-1: config 0 descriptor??
[  259.368067][ T5802] hub 1-1:0.0: bad descriptor, ignoring hub
[  259.387365][ T5802] hub: probe of 1-1:0.0 failed with error -5
[  259.403381][ T5802] usb 1-1: selecting invalid altsetting 0
[  259.492218][ T5836] usb 2-1: USB disconnect, device number 16
[  259.598642][T10476] syz.1.1657 uses obsolete (PF_INET,SOCK_PACKET)
[  259.895696][T10487] ALSA: mixer_oss: invalid OSS volume ''
[  259.920488][   T23] usb 1-1: USB disconnect, device number 20
[  261.228983][T10515] loop3: detected capacity change from 0 to 32768
[  261.859682][ T5773] Bluetooth: hci2: hcon ffff888059bb4000 sent 0 < count 137
[  261.948303][T10531] loop1: detected capacity change from 0 to 512
[  262.004544][T10531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.018108][T10531] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.101446][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.130249][   T23] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  262.363464][   T23] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  262.393341][   T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  262.403633][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  262.419932][   T23] usb 1-1: SerialNumber: syz
[  262.656453][T10551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1691'.
[  262.899697][T10557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1693'.
[  263.061345][   T23] cdc_ether: probe of 1-1:1.0 failed with error -22
[  263.265868][T10568] loop4: detected capacity change from 0 to 512
[  263.281995][   T23] usb 1-1: USB disconnect, device number 21
[  263.325314][T10568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.362563][T10568] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  263.382706][T10568] EXT4-fs warning (device loop4): ext4_group_extend:1868: can't shrink FS - resize aborted
[  263.435910][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.572190][T10580] loop3: detected capacity change from 0 to 512
[  263.613349][T10580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  263.635230][T10581] loop1: detected capacity change from 0 to 2048
[  263.649353][T10580] EXT4-fs (loop3): 1 truncate cleaned up
[  263.658994][T10580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.726907][T10581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.772156][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.003600][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.037079][T10590] loop0: detected capacity change from 0 to 256
[  264.126838][T10590] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  264.650307][   T27] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  264.721650][T10605] loop0: detected capacity change from 0 to 512
[  264.758586][T10605] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1713: bg 0: block 5: invalid block bitmap
[  264.778108][T10605] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem
[  264.789252][T10605] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1713: invalid indirect mapped block 3 (level 2)
[  264.814754][T10605] EXT4-fs (loop0): 1 orphan inode deleted
[  264.832206][T10605] EXT4-fs (loop0): 1 truncate cleaned up
[  264.838831][T10605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.882646][   T27] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  264.891931][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.911503][   T27] usb 4-1: config 0 descriptor??
[  264.920949][   T27] cp210x 4-1:0.0: cp210x converter detected
[  264.986613][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.003454][T10609] loop4: detected capacity change from 0 to 4096
[  265.069421][T10609] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  265.090225][T10609] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  265.183832][   T28] audit: type=1800 audit(1774027683.704:40): pid=10609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1715" name="file1" dev="loop4" ino=30 res=0 errno=0
[  265.189773][T10609] ntfs3: loop4: ino=1e, "file1" attr_set_size
[  265.236307][T10613] loop1: detected capacity change from 0 to 256
[  265.267445][T10613] exfat: Deprecated parameter 'utf8'
[  265.294246][T10613] exfat: Deprecated parameter 'namecase'
[  265.300009][T10613] exfat: Deprecated parameter 'namecase'
[  265.326731][   T27] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  265.346492][T10613] exfat: Deprecated parameter 'utf8'
[  265.364436][   T27] usb 4-1: cp210x converter now attached to ttyUSB0
[  265.379395][   T49] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  265.400086][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1718'.
[  265.413533][ T8771] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  265.428253][T10615] netlink: 'syz.0.1718': attribute type 20 has an invalid length.
[  265.437915][ T8771] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  265.441593][T10613] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  265.457544][T10615] netlink: 'syz.0.1718': attribute type 21 has an invalid length.
[  265.467529][ T8771] ntfs3: loop4: ino=3, ntfs_set_state failed, -22.
[  265.498920][   T49] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22.
[  265.558639][   T27] usb 4-1: USB disconnect, device number 17
[  265.575001][   T27] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  265.618982][   T27] cp210x 4-1:0.0: device disconnected
[  265.655957][T10618] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1719'.
[  265.873609][T10626] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.988079][T10632] loop1: detected capacity change from 0 to 2048
[  266.050748][T10634] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.356698][   T28] audit: type=1326 audit(1774027684.874:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10644 comm="syz.0.1731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f306339c799 code=0x0
[  266.546287][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  266.602155][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1734'.
[  266.763186][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.794680][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.822793][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  266.839590][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  266.850261][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.866706][    T9] usb 5-1: config 0 descriptor??
[  267.073415][   T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  267.282906][   T23] usb 2-1: Using ep0 maxpacket: 16
[  267.294512][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.305117][   T23] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  267.307664][   T23] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31
[  267.331052][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.339244][    T9] kovaplus 0003:1E7D:2D50.000A: item fetching failed at offset 4/5
[  267.349039][    T9] kovaplus 0003:1E7D:2D50.000A: parse failed
[  267.352495][   T23] usb 2-1: Product: syz
[  267.359411][    T9] kovaplus: probe of 0003:1E7D:2D50.000A failed with error -22
[  267.363484][   T23] usb 2-1: Manufacturer: syz
[  267.374583][T10663] loop3: detected capacity change from 0 to 4096
[  267.378033][   T23] usb 2-1: SerialNumber: syz
[  267.417469][   T23] usb 2-1: config 0 descriptor??
[  267.444979][ T6879] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  267.499125][ T5773] Bluetooth: hci0: unexpected event for opcode 0x1003
[  267.551540][   T23] usb 5-1: USB disconnect, device number 6
[  267.671704][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.691092][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.703063][   T27] usb 2-1: USB disconnect, device number 17
[  268.175525][T10680] loop0: detected capacity change from 0 to 32768
[  268.197030][T10680] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  268.235599][T10680] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  268.306712][T10680] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  268.341953][   T27] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  268.415992][T10680] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  268.587587][   T27] usb 2-1: config 0 has an invalid interface number: 229 but max is 0
[  268.595927][   T27] usb 2-1: config 0 has no interface number 0
[  268.631963][   T27] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  268.674781][   T27] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38
[  268.693795][   T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.701984][   T27] usb 2-1: Product: syz
[  268.706266][   T27] usb 2-1: Manufacturer: syz
[  268.710907][   T27] usb 2-1: SerialNumber: syz
[  268.728459][   T27] usb 2-1: config 0 descriptor??
[  268.742974][T10683] loop4: detected capacity change from 0 to 32768
[  268.829356][   T28] audit: type=1800 audit(1774027687.193:42): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1748" name="file1" dev="loop4" ino=4 res=0 errno=0
[  268.979476][   T27] usb 2-1: USB disconnect, device number 18
[  269.090373][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  269.341953][ T3436] read_mapping_page failed!
[  269.349147][ T3436] ERROR: (device loop4): txCommit: 
[  269.349147][ T3436] 
[  269.368645][ T3436] jfs_write_inode: jfs_commit_inode failed!
[  269.602378][ T5822] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  269.689985][ T5773] Bluetooth: hci2: command tx timeout
[  269.824550][T10709] loop4: detected capacity change from 0 to 2048
[  269.837678][ T5822] usb 4-1: Using ep0 maxpacket: 32
[  269.860639][ T5822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.884511][ T5822] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  269.887283][T10713] loop0: detected capacity change from 0 to 1024
[  269.895916][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.912125][T10709] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.936637][ T5822] usb 4-1: config 0 descriptor??
[  269.984474][ T5822] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  270.052599][T10716] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1763'.
[  270.197695][ T5822] usb 4-1: USB disconnect, device number 18
[  270.278258][T10722] loop1: detected capacity change from 0 to 256
[  270.340939][T10722] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  270.690102][T10735] program syz.4.1771 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  270.973495][T10724] loop0: detected capacity change from 0 to 40427
[  270.988759][T10724] F2FS-fs (loop0): Invalid SB checksum offset: 0
[  270.995755][T10724] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  271.006338][T10724] F2FS-fs (loop0): invalid crc value
[  271.081743][T10724] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  271.089213][T10724] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  271.122087][T10724] syz.0.1766: attempt to access beyond end of device
[  271.122087][T10724] loop0: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  271.159520][ T5763] syz-executor: attempt to access beyond end of device
[  271.159520][ T5763] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.174393][   T27] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  271.185504][ T5763] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  271.380384][   T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  271.395538][   T27] usb 5-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  271.410574][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.427435][   T27] usb 5-1: config 0 descriptor??
[  271.440614][   T27] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  271.670491][   T27] usb 5-1: USB disconnect, device number 7
[  271.818693][ T5773] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  271.829498][ T5773] Bluetooth: hci0: Injecting HCI hardware error event
[  271.840723][ T5771] Bluetooth: hci0: hardware error 0x00
[  272.027752][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1785'.
[  272.135941][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  272.315522][T10772] loop1: detected capacity change from 0 to 32768
[  272.331547][    T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  272.340216][    T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  272.350648][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  272.361739][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  272.372027][T10772] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  272.390300][    T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  272.399778][    T9] usb 4-1: Product: syz
[  272.405015][    T9] usb 4-1: Manufacturer: syz
[  272.412282][T10772] XFS (loop1): Ending clean mount
[  272.418442][    T9] usb 4-1: SerialNumber: syz
[  272.457125][    T9] usb 4-1: config 0 descriptor??
[  272.491010][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  272.511063][    T9] hub: probe of 4-1:0.0 failed with error -5
[  272.538762][    T9] usb 4-1: selecting invalid altsetting 0
[  272.581253][ T5764] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  272.605224][T10782] loop4: detected capacity change from 0 to 256
[  272.640891][T10782] exfat: Deprecated parameter 'utf8'
[  272.683249][T10782] exfat: Deprecated parameter 'namecase'
[  272.688986][T10782] exfat: Deprecated parameter 'namecase'
[  272.771722][T10782] exfat: Deprecated parameter 'utf8'
[  272.863128][T10782] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  273.226310][T10762] usb 4-1: reset high-speed USB device number 19 using dummy_hcd
[  273.445865][T10762] usb 4-1: device firmware changed
[  273.485670][   T23] usb 4-1: USB disconnect, device number 19
[  273.755857][   T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  273.976155][   T23] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[  273.997727][   T23] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  274.024335][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  274.049232][ T5771] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  274.072842][   T23] usb 4-1: string descriptor 0 read error: -22
[  274.091953][   T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  274.101585][   T23] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  274.130263][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'.
[  274.140665][   T23] usb 4-1: config 0 descriptor??
[  274.163969][   T23] hub 4-1:0.0: bad descriptor, ignoring hub
[  274.188194][   T23] hub: probe of 4-1:0.0 failed with error -5
[  274.223905][   T23] usb 4-1: selecting invalid altsetting 0
[  274.375331][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'.
[  274.516784][T10825] loop1: detected capacity change from 0 to 256
[  274.528846][T10825] exfat: Deprecated parameter 'utf8'
[  274.539974][T10825] exfat: Deprecated parameter 'namecase'
[  274.548082][T10825] exfat: Deprecated parameter 'utf8'
[  274.612082][ T5822] usb 4-1: USB disconnect, device number 20
[  274.654952][T10825] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  274.994428][T10827] loop4: detected capacity change from 0 to 40427
[  275.012109][T10827] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  275.019901][T10827] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  275.029747][T10827] F2FS-fs (loop4): invalid crc value
[  275.041042][T10827] F2FS-fs (loop4): Found nat_bits in checkpoint
[  275.093054][T10827] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  275.103217][T10827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  275.265464][T10839] loop3: detected capacity change from 0 to 2048
[  275.332018][T10841] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.174650][T10864] loop3: detected capacity change from 0 to 128
[  276.328384][T10864] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  276.373041][T10864] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.530736][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  276.533153][ T5765] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.561490][T10880] loop1: detected capacity change from 0 to 8
[  276.732727][    T9] usb 5-1: Using ep0 maxpacket: 16
[  276.755303][    T9] usb 5-1: config 1 has an invalid interface number: 105 but max is 0
[  276.763990][    T9] usb 5-1: config 1 has no interface number 0
[  276.771986][T10885] loop1: detected capacity change from 0 to 128
[  276.792077][    T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  276.826144][    T9] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  276.837753][    T9] usb 5-1: config 1 interface 105 has no altsetting 0
[  276.866074][    T9] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  276.892719][    T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  276.907614][    T9] usb 5-1: Product: syz
[  276.921930][    T9] usb 5-1: Manufacturer: syz
[  276.928751][    T9] usb 5-1: SerialNumber: syz
[  276.949222][T10869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  276.967455][T10869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  276.989415][T10890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1835'.
[  277.091509][T10896] loop1: detected capacity change from 0 to 512
[  277.101024][T10896] EXT4-fs: Ignoring removed mblk_io_submit option
[  277.127880][T10896] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.1838: invalid block
[  277.148034][T10896] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1838: invalid indirect mapped block 10 (level 1)
[  277.149897][T10894] block nbd2: server does not support multiple connections per device.
[  277.178736][T10896] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1838: invalid indirect mapped block 8 (level 1)
[  277.180036][T10894] block nbd2: shutting down sockets
[  277.200080][T10896] EXT4-fs (loop1): 1 truncate cleaned up
[  277.216520][T10896] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  277.264300][ T5764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.472756][T10869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  277.488740][T10869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  277.630858][T10908] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1843'.
[  277.777420][T10910] loop3: detected capacity change from 0 to 2048
[  277.826588][T10910] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.930831][    T9] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  277.973299][    T9] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  278.009965][    T9] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  278.068910][T10901] loop0: detected capacity change from 0 to 32768
[  278.086076][    T9] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:f2:8c:ca:85:d3
[  278.105972][T10901] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1840 (10901)
[  278.135962][    T9] usb 5-1: USB disconnect, device number 8
[  278.154008][    T9] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  278.173512][T10901] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  278.214170][T10901] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  278.257689][T10901] BTRFS info (device loop0): setting nodatacow, compression disabled
[  278.282786][T10901] BTRFS info (device loop0): force clearing of disk cache
[  278.308457][T10901] BTRFS info (device loop0): enabling ssd optimizations
[  278.336241][    T9] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  278.347555][T10901] BTRFS info (device loop0): using spread ssd allocation scheme
[  278.355270][T10901] BTRFS info (device loop0): turning off barriers
[  278.366947][    T9] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  278.394838][    T9] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  278.409566][T10901] BTRFS info (device loop0): disabling free space tree
[  278.429859][T10901] BTRFS info (device loop0): not using ssd optimizations
[  278.457038][T10901] BTRFS info (device loop0): not using spread ssd allocation scheme
[  278.569132][T10912] loop1: detected capacity change from 0 to 32768
[  278.656963][T10912] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1845 (10912)
[  278.821262][T10939] VFS: Found a Xenix FS (block size = 512) on device loop4
[  278.833069][T10912] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  278.865605][T10912] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  278.889230][T10901] BTRFS info (device loop0): rebuilding free space tree
[  278.896439][T10942] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.921924][T10912] BTRFS info (device loop1): using free space tree
[  278.963606][T10939] sysv_free_block: trying to free block not in datazone
[  278.980474][T10901] BTRFS info (device loop0): disabling free space tree
[  279.017332][T10901] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  279.053609][T10901] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  279.127979][ T8771] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  279.203928][T10912] BTRFS info (device loop1): enabling ssd optimizations
[  279.233541][T10912] BTRFS info (device loop1): auto enabling async discard
[  279.597806][ T5763] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  279.626493][ T5764] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  279.898908][T10984] set_capacity_and_notify: 2 callbacks suppressed
[  279.898923][T10984] loop4: detected capacity change from 0 to 256
[  280.239606][T10980] loop3: detected capacity change from 0 to 8192
[  280.355950][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'.
[  280.678032][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1860'.
[  280.796638][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'.
[  281.298146][T11026] loop4: detected capacity change from 0 to 512
[  281.325739][T11026] FAT-fs (loop4): Unrecognized mount option "¤Ž¢;:Ñ?þfÚõÃäuÏ!5ÿwÔ#ù÷v�Õú/oàö¸{(Ž£àŒÆduص2û@'g3î÷°ÆÀœX”Fg“ bÆ®7|iÂIN0$áóN�Ù7÷7!£îÒäHð1ú[†¢%¹"ãk6Çí5Âù¶ñ_Y!ðÇä¡àSÔ/TúæN®:FÝ›&Õ›ÜÒpFƒÕøFŽÁdáMà•:Îv¡5Ç" or missing value
[  281.348326][    C1] vkms_vblank_simulate: vblank timer overrun
[  281.533820][T11026] loop4: detected capacity change from 0 to 4096
[  281.564285][T11026] NILFS (loop4): invalid segment: Checksum error in segment payload
[  281.588453][T11026] NILFS (loop4): trying rollback from an earlier position
[  281.667792][T11026] NILFS (loop4): recovery complete
[  281.694467][T11036] loop0: detected capacity change from 0 to 256
[  281.695421][T11037] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.709587][T11036] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  281.774831][T11036] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  281.896638][    T9] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  282.070832][T11043] tap0: tun_chr_ioctl cmd 1074025677
[  282.096831][T11043] tap0: linktype set to 805
[  282.123772][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  282.142610][    T9] usb 4-1: config 0 has no interface number 0
[  282.149235][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  282.169895][    T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  282.181612][    T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  282.196856][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.228531][    T9] usb 4-1: config 0 descriptor??
[  282.247281][T11034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  282.278578][T11053] netlink: 'syz.4.1882': attribute type 10 has an invalid length.
[  282.289226][    T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  282.302150][T11053] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.309914][T11053] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.362208][T11053] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.369675][T11053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  282.379783][T11053] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.387000][T11053] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.412469][T11053] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  282.483011][   T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  282.550642][    T9] usb 4-1: USB disconnect, device number 21
[  282.556652][    C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  282.686312][   T23] usb 2-1: Using ep0 maxpacket: 8
[  282.694129][   T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  282.707341][   T23] usb 2-1: config 0 has no interfaces?
[  282.715313][   T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  282.727478][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.772200][   T23] usb 2-1: Product: syz
[  282.776465][   T23] usb 2-1: Manufacturer: syz
[  282.781166][   T23] usb 2-1: SerialNumber: syz
[  282.828338][   T23] usb 2-1: config 0 descriptor??
[  282.891320][T11068] loop4: detected capacity change from 0 to 2048
[  282.929821][T11068] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  282.946467][T11068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.072229][    T9] usb 2-1: USB disconnect, device number 19
[  283.477208][ T5802] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  283.683974][ T5802] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.713069][ T5802] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.729820][ T5802] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  283.743111][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  283.769288][ T5802] usb 5-1: SerialNumber: syz
[  284.007411][ T5802] usb 5-1: 0:2 : does not exist
[  284.041528][ T5802] usb 5-1: USB disconnect, device number 9
[  284.047628][    C1] icmp: detected local route for 172.20.20.58 during ICMP sending, src 100.1.1.0
[  284.048224][    C1] icmp: detected local route for 172.20.20.58 during ICMP sending, src 100.1.1.0
[  284.048660][    C1] icmp: detected local route for 172.20.20.58 during ICMP sending, src 100.1.1.2
[  284.175260][T11112] loop1: detected capacity change from 0 to 256
[  284.235083][T11112] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  284.277880][T11114] loop3: detected capacity change from 0 to 16
[  284.303566][T11114] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300)
[  284.800270][T11126] loop3: detected capacity change from 0 to 4096
[  284.819529][T11124] loop4: detected capacity change from 0 to 4096
[  284.820985][T11126] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  285.035669][T11126] ntfs3: Cannot use different iocharset when remounting!
[  285.057509][T11126] ntfs3: loop3: failed to convert name for inode a.
[  285.101920][   T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  285.221869][T11130] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  285.294303][   T23] usb 2-1: Using ep0 maxpacket: 32
[  285.308035][   T23] usb 2-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  285.333701][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.368130][   T23] usb 2-1: Product: syz
[  285.379901][   T23] usb 2-1: Manufacturer: syz
[  285.384535][   T23] usb 2-1: SerialNumber: syz
[  285.409242][   T23] usb 2-1: config 0 descriptor??
[  285.420036][T11137] loop3: detected capacity change from 0 to 128
[  285.426928][ T3436] wlan1: Trigger new scan to find an IBSS to join
[  285.518033][T11137] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  285.546061][T11137] hpfs: filesystem error: improperly stopped
[  285.567975][T11137] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  285.596788][T11137] hpfs: You really don't want any checks? You are crazy...
[  285.611818][T11137] hpfs: hpfs_map_sector(): read error
[  285.620059][T11137] hpfs: code page support is disabled
[  285.638261][T11137] hpfs: hpfs_map_4sectors(): unaligned read
[  285.644965][T11137] hpfs: hpfs_map_4sectors(): unaligned read
[  285.663709][T11137] hpfs: filesystem error: unable to find root dir
[  285.672701][   T23] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  285.738840][T11137] hpfs: hpfs_map_4sectors(): unaligned read
[  285.888176][T11150] option changes via remount are deprecated (pid=11149 comm=syz.3.1926)
[  286.309777][ T5822] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  286.416717][   T23] usb 2-1: reset high-speed USB device number 20 using dummy_hcd
[  286.534112][ T5822] usb 1-1: Using ep0 maxpacket: 32
[  286.548423][ T5822] usb 1-1: config 0 has too many interfaces: 193, using maximum allowed: 32
[  286.565925][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 193
[  286.587129][ T5822] usb 1-1: config 0 has no interface number 0
[  286.602083][ T5822] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.622065][ T5822] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.632356][ T5822] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  286.642313][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.675823][ T5822] usb 1-1: config 0 descriptor??
[  286.927361][   T23] usb 2-1: [UEAGLE-ATM] interface 1 not found
[  286.935603][   T23] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  287.153432][ T5822] corsair 0003:1B1C:1B34.000B: unknown main item tag 0x0
[  287.166397][ T5822] corsair 0003:1B1C:1B34.000B: unknown main item tag 0x0
[  287.174510][ T5822] corsair 0003:1B1C:1B34.000B: failed to start in urb: -90
[  287.179567][   T23] usb 2-1: USB disconnect, device number 20
[  287.194631][T11176] loop4: detected capacity change from 0 to 32768
[  287.196452][ T5822] corsair 0003:1B1C:1B34.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input1
[  287.251739][T11176] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.320692][T11176] XFS (loop4): Ending clean mount
[  287.376325][ T8771] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  287.392148][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  287.454836][ T5822] usb 1-1: USB disconnect, device number 22
[  287.592344][    T9] usb 4-1: Using ep0 maxpacket: 16
[  287.653386][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.676697][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.698276][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  287.712521][    T9] usb 4-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  287.722113][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.754524][    T9] usb 4-1: config 0 descriptor??
[  288.149751][   T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  288.207114][    T9] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0
[  288.219734][    T9] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0
[  288.229717][    T9] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0
[  288.244159][    T9] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0
[  288.251799][    T9] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0
[  288.264565][    T9] a4tech 0003:09DA:000A.000C: unknown main item tag 0x0
[  288.273462][    T9] a4tech 0003:09DA:000A.000C: unknown global tag 0xe
[  288.281167][    T9] a4tech 0003:09DA:000A.000C: item 0 0 1 14 parsing failed
[  288.289802][    T9] a4tech 0003:09DA:000A.000C: parse failed
[  288.296217][    T9] a4tech: probe of 0003:09DA:000A.000C failed with error -22
[  288.387277][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  288.398688][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  288.411267][   T23] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  288.434011][   T27] usb 4-1: USB disconnect, device number 22
[  288.444400][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  288.462662][   T23] usb 5-1: SerialNumber: syz
[  288.576906][ T3430] wlan1: Trigger new scan to find an IBSS to join
[  288.699734][   T23] usb 5-1: 0:2 : does not exist
[  288.722624][   T23] usb 5-1: USB disconnect, device number 10
[  288.745813][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.458496][T11225] loop1: detected capacity change from 0 to 40427
[  289.506419][T11225] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  289.529538][T11225] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  289.543308][   T12] wlan1: Creating new IBSS network, BSSID 3e:c4:d6:ed:d1:8c
[  289.562311][T11225] F2FS-fs (loop1): invalid crc_offset: 33558524
[  289.595008][T11225] F2FS-fs (loop1): Found nat_bits in checkpoint
[  289.711987][T11225] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  289.743163][T11225] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  289.820966][T11225] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  290.732445][T11263] loop3: detected capacity change from 0 to 32768
[  290.757432][T11277] loop0: detected capacity change from 0 to 64
[  290.763362][T11263] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1971 (11263)
[  290.803626][T11263] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  290.819200][T11263] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  290.828597][T11263] BTRFS info (device loop3): setting nodatacow, compression disabled
[  290.848560][T11263] BTRFS info (device loop3): force clearing of disk cache
[  290.860834][T11263] BTRFS info (device loop3): enabling ssd optimizations
[  290.870080][T11263] BTRFS info (device loop3): using spread ssd allocation scheme
[  290.882523][T11263] BTRFS info (device loop3): turning off barriers
[  290.894817][T11263] BTRFS info (device loop3): disabling free space tree
[  290.911385][T11263] BTRFS info (device loop3): not using ssd optimizations
[  290.919785][T11263] BTRFS info (device loop3): not using spread ssd allocation scheme
[  290.981025][   T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  291.042550][T11263] BTRFS info (device loop3): rebuilding free space tree
[  291.059154][T11298] loop0: detected capacity change from 0 to 256
[  291.090292][T11263] BTRFS info (device loop3): disabling free space tree
[  291.097256][T11263] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  291.147311][T11263] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  291.196160][   T23] usb 5-1: Using ep0 maxpacket: 8
[  291.214464][   T23] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  291.234842][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.244024][   T23] usb 5-1: Product: syz
[  291.248584][   T23] usb 5-1: Manufacturer: syz
[  291.253434][   T23] usb 5-1: SerialNumber: syz
[  291.302614][   T23] usb 5-1: config 0 descriptor??
[  291.339363][   T23] gspca_main: se401-2.14.0 probing 047d:5003
[  291.483499][ T5765] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  291.537993][T11273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.547810][T11273] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.679477][ T5757] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop3 scanned by udevd (5757)
[  291.831196][   T23] gspca_se401: ExtraFeatures: 4
[  291.846773][   T23] gspca_se401: Frame size: 64x513 bayer
[  291.852529][   T23] gspca_se401: Frame size: 259x521 bayer
[  291.886058][   T23] gspca_se401: Frame size: 96x1537 bayer
[  291.896871][   T23] gspca_se401: Frame size: 1824x1033 bayer
[  291.908340][   T23] gspca_se401: Frame size: 0x256 bayer
[  292.039147][    T9] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  292.048755][   T23] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21
[  292.126218][   T23] usb 5-1: USB disconnect, device number 11
[  292.263115][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  292.280069][T11303] loop0: detected capacity change from 0 to 32768
[  292.283659][    T9] usb 2-1: config 0 has no interface number 0
[  292.296669][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  292.311852][T11303] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1983 (11303)
[  292.342003][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  292.378205][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  292.393218][T11303] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  292.417711][T11303] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  292.421522][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.427542][T11303] BTRFS info (device loop0): using free space tree
[  292.484170][    T9] usb 2-1: config 0 descriptor??
[  292.500469][T11308] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  292.516644][    T9] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  292.593446][T11303] BTRFS info (device loop0): enabling ssd optimizations
[  292.613253][T11303] BTRFS info (device loop0): auto enabling async discard
[  292.891789][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  292.900986][ T5802] usb 2-1: USB disconnect, device number 21
[  292.981292][ T5763] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.269107][T11346] loop3: detected capacity change from 0 to 8192
[  293.287091][T11346] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  293.332239][T11351] loop4: detected capacity change from 0 to 512
[  293.357897][T11346] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  293.377272][T11346] REISERFS (device loop3): using ordered data mode
[  293.384922][T11351] EXT4-fs: Ignoring removed nobh option
[  293.390681][T11351] EXT4-fs: Ignoring removed nobh option
[  293.439379][T11351] EXT4-fs: Ignoring removed i_version option
[  293.460684][T11346] reiserfs: using flush barriers
[  293.492827][T11351] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  293.516310][T11346] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  293.589731][T11346] REISERFS (device loop3): checking transaction log (loop3)
[  293.608417][T11351] EXT4-fs (loop4): 1 truncate cleaned up
[  293.618217][T11354] Falling back ldisc for ttyS3.
[  293.628625][T11351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.674723][T11346] REISERFS (device loop3): Using r5 hash to sort names
[  293.681910][T11346] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  293.750362][T11351] EXT4-fs error (device loop4): ext4_nfs_get_inode:1552: inode #11: comm syz.4.1997: iget: bad extra_isize 46 (inode size 256)
[  293.765651][T11346] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  293.894725][T11359] loop0: detected capacity change from 0 to 1024
[  293.908047][T11346] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  293.936141][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.010089][T11360] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  294.067440][T11357] loop1: detected capacity change from 0 to 8192
[  294.107853][T11346] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  294.190437][T11346] REISERFS warning (device loop3): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  294.373445][T11364] netlink: 'syz.0.2001': attribute type 10 has an invalid length.
[  294.430747][T11364] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.438554][T11364] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.490118][T11366] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2004'.
[  294.719774][T11374] loop0: detected capacity change from 0 to 512
[  294.804235][T11374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.871784][T11374] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.961562][T11374] EXT4-fs (loop0): shut down requested (1)
[  295.023000][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.170488][T11388] loop3: detected capacity change from 0 to 128
[  295.198742][T11390] loop1: detected capacity change from 0 to 256
[  295.288720][   T27] usb 5-1: new low-speed USB device number 12 using dummy_hcd
[  295.308284][T11390] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  295.406376][   T28] audit: type=1800 audit(1774027712.040:43): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2011" name="file1" dev="loop1" ino=1048694 res=0 errno=0
[  295.421336][T11392] loop0: detected capacity change from 0 to 4096
[  295.459958][T11393] FAT-fs (loop1): error, invalid FAT chain (i_pos 196, last_block 8200)
[  295.463477][T11392] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  295.484686][T11393] FAT-fs (loop1): Filesystem has been set read-only
[  295.515719][   T27] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  295.537840][   T27] usb 5-1: config 0 has no interface number 0
[  295.544000][   T27] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  295.583730][   T27] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  295.584150][T11395] netlink: 'syz.3.2015': attribute type 10 has an invalid length.
[  295.603393][   T27] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  295.603422][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.634793][   T27] usb 5-1: config 0 descriptor??
[  295.646335][T11392] ntfs3: Cannot use different iocharset when remounting!
[  295.657056][T11382] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  295.672602][   T27] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  295.690704][T11392] ntfs3: loop0: failed to convert name for inode a.
[  295.723760][T11395] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.749731][T11395] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.756966][T11395] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.772174][T11395] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  295.977279][    T9] usb 5-1: USB disconnect, device number 12
[  295.983291][    C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  296.366700][T11416] program syz.3.2033 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  296.389848][ T5802] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  296.606235][ T5802] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  296.614841][ T5802] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  296.625164][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0
[  296.634035][ T5802] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.643263][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  296.652354][ T5802] usb 2-1: Product: syz
[  296.656640][ T5802] usb 2-1: Manufacturer: syz
[  296.661365][ T5802] usb 2-1: SerialNumber: syz
[  296.667743][ T5802] usb 2-1: config 0 descriptor??
[  296.672802][    T9] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  296.674691][ T5802] hub 2-1:0.0: bad descriptor, ignoring hub
[  296.687020][ T5802] hub: probe of 2-1:0.0 failed with error -5
[  296.694797][ T5802] usb 2-1: selecting invalid altsetting 0
[  296.855771][T11423] loop4: detected capacity change from 0 to 4096
[  296.869583][T11423] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  296.872708][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  296.895196][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00
[  296.908614][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.928719][    T9] usb 1-1: config 0 descriptor??
[  296.938577][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  297.040032][T11423] ntfs3: Cannot use different iocharset when remounting!
[  297.063195][T11423] ntfs3: loop4: failed to convert name for inode a.
[  297.176584][    T9] usb 1-1: USB disconnect, device number 23
[  297.480013][T11408] usb 2-1: reset high-speed USB device number 22 using dummy_hcd
[  297.688991][T11408] usb 2-1: device firmware changed
[  297.694781][ T5802] usb 2-1: USB disconnect, device number 22
[  297.886118][ T5802] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  298.111130][ T5802] usb 2-1: config index 0 descriptor too short (expected 39, got 27)
[  298.119508][ T5802] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  298.149845][ T5802] usb 2-1: config 0 interface 0 has no altsetting 0
[  298.168907][ T5802] usb 2-1: string descriptor 0 read error: -22
[  298.180258][ T5802] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  298.203473][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  298.227600][ T5802] usb 2-1: config 0 descriptor??
[  298.243986][ T5802] hub 2-1:0.0: bad descriptor, ignoring hub
[  298.262274][ T5802] hub: probe of 2-1:0.0 failed with error -5
[  298.282796][ T5802] usb 2-1: selecting invalid altsetting 0
[  298.449239][T11448] loop4: detected capacity change from 0 to 512
[  298.502827][T11448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  298.714581][    T9] usb 2-1: USB disconnect, device number 23
[  298.749127][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.989293][T11459] loop3: detected capacity change from 0 to 256
[  298.996495][T11459] exfat: Deprecated parameter 'utf8'
[  299.028382][T11459] exfat: Deprecated parameter 'utf8'
[  299.055052][T11459] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  299.553618][   T27] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  299.574104][T11471] loop4: detected capacity change from 0 to 256
[  299.593570][T11471] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  299.650481][T11471] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  299.784167][   T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.804061][   T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  299.840327][   T27] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  299.859206][T11475] loop0: detected capacity change from 0 to 1024
[  299.867731][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  299.876569][   T27] usb 4-1: SerialNumber: syz
[  300.050767][   T42] hfsplus: b-tree write err: -5, ino 3
[  300.134465][   T27] usb 4-1: 0:2 : does not exist
[  300.175238][   T27] usb 4-1: USB disconnect, device number 23
[  300.254473][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.922340][ T5822] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  300.968114][T11510] loop3: detected capacity change from 0 to 128
[  301.019083][T11510] FAT-fs (loop3): error, corrupted directory (invalid i_start)
[  301.030027][T11510] FAT-fs (loop3): Filesystem has been set read-only
[  301.125335][ T5822] usb 1-1: Using ep0 maxpacket: 8
[  301.132935][ T5822] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  301.149440][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  301.167830][ T5822] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  301.168076][   T27] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  301.177873][ T5822] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  301.203820][ T5822] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  301.213317][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.381483][   T27] usb 5-1: Using ep0 maxpacket: 16
[  301.394186][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  301.413850][   T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  301.423800][   T27] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  301.435190][   T27] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  301.449928][   T27] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  301.459556][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  301.468683][   T27] usb 5-1: SerialNumber: syz
[  301.480012][T11506] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  301.487515][T11506] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  301.493453][ T5822] usb 1-1: GET_CAPABILITIES returned 0
[  301.512332][ T5822] usbtmc 1-1:16.0: can't read capabilities
[  301.513106][   T27] hub 5-1:1.0: bad descriptor, ignoring hub
[  301.541990][   T27] hub: probe of 5-1:1.0 failed with error -5
[  301.749481][T11506] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  301.758781][T11506] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  301.762933][    T9] usb 1-1: USB disconnect, device number 24
[  301.935727][T11533] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  302.206297][   T27] cdc_ether: probe of 5-1:1.0 failed with error -22
[  302.318809][T11548] loop3: detected capacity change from 0 to 256
[  302.346703][T11548] FAT-fs (loop3): Directory bread(block 64) failed
[  302.353592][T11548] FAT-fs (loop3): Directory bread(block 65) failed
[  302.360642][T11548] FAT-fs (loop3): Directory bread(block 66) failed
[  302.367666][T11548] FAT-fs (loop3): Directory bread(block 67) failed
[  302.374384][T11548] FAT-fs (loop3): Directory bread(block 68) failed
[  302.384698][T11548] FAT-fs (loop3): Directory bread(block 69) failed
[  302.392982][T11548] FAT-fs (loop3): Directory bread(block 70) failed
[  302.404250][T11548] FAT-fs (loop3): Directory bread(block 71) failed
[  302.412553][T11548] FAT-fs (loop3): Directory bread(block 72) failed
[  302.423799][T11548] FAT-fs (loop3): Directory bread(block 73) failed
[  302.508810][T11548] syz.3.2082: attempt to access beyond end of device
[  302.508810][T11548] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256
[  302.542079][T11548] syz.3.2082: attempt to access beyond end of device
[  302.542079][T11548] loop3: rw=0, sector=1192, nr_sectors = 4 limit=256
[  302.653704][   T23] usb 5-1: USB disconnect, device number 13
[  302.825457][T11562] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2089'.
[  302.834615][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'.
[  303.210512][T11570] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  303.256033][T11570] overlayfs: conflicting lowerdir path
[  303.417171][T11575] loop4: detected capacity change from 0 to 1024
[  303.709242][T11566] loop0: detected capacity change from 0 to 40427
[  303.734625][T11566] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  303.742495][T11566] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  303.767312][T11566] F2FS-fs (loop0): Found nat_bits in checkpoint
[  303.859601][T11566] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  303.884700][T11566] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  303.915870][   T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  304.139543][   T23] usb 4-1: Using ep0 maxpacket: 16
[  304.146752][   T23] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.174087][   T23] usb 4-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  304.206132][   T23] usb 4-1: config 0 interface 0 has no altsetting 0
[  304.213546][   T23] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  304.230963][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.245585][   T23] usb 4-1: config 0 descriptor??
[  304.708687][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.715529][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.736270][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.744624][T11608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'.
[  304.745399][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.763639][T11608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2109'.
[  304.768632][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.779861][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.809206][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.823237][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.831292][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x7
[  304.859607][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.882787][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.898672][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.927088][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.936812][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.947236][   T23] elo 0003:04E7:0030.000D: unknown main item tag 0x0
[  304.962047][   T23] elo 0003:04E7:0030.000D: unexpected long global item
[  304.981998][   T23] elo 0003:04E7:0030.000D: parse failed
[  304.989284][   T23] elo: probe of 0003:04E7:0030.000D failed with error -22
[  305.045047][   T23] usb 4-1: USB disconnect, device number 24
[  305.065021][T11612] loop0: detected capacity change from 0 to 4096
[  305.130690][T11612] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  305.672071][T11633] loop6: detected capacity change from 0 to 524287999
[  305.686377][T11631] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2120'.
[  305.806980][ T5822] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  305.974830][T11638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'.
[  306.042436][ T5822] usb 1-1: Using ep0 maxpacket: 16
[  306.069288][ T5822] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[  306.122306][ T5822] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[  306.154426][ T5822] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  306.172479][ T5822] usb 1-1: config 1 interface 0 has no altsetting 0
[  306.185482][ T5822] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[  306.196538][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.204973][ T5822] usb 1-1: Product: syz
[  306.213080][ T5822] usb 1-1: Manufacturer: syz
[  306.221068][ T5822] usb 1-1: SerialNumber: syz
[  306.470354][ T5822] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[  306.565146][T11658] loop4: detected capacity change from 0 to 512
[  306.622648][T11658] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  306.639692][T11658] System zones: 0-2, 18-18, 34-35
[  306.658465][T11658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.707137][T11658] ext4 filesystem being mounted at /257/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.720166][ T5822] usb 1-1: USB disconnect, device number 25
[  306.749475][ T5822] usblp0: removed
[  306.899960][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  307.282248][ T5822] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  307.495774][ T5822] usb 5-1: Using ep0 maxpacket: 8
[  307.505375][ T5822] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  307.527735][ T5822] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  307.537779][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  307.570443][ T5822] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  307.580424][ T5822] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  307.613228][ T5822] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  307.622405][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.861054][T11693] loop0: detected capacity change from 0 to 32768
[  307.872987][T11693] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.2147 (11693)
[  307.898960][T11693] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  307.899444][ T5822] usb 5-1: GET_CAPABILITIES returned 0
[  307.911965][T11693] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  307.926442][T11693] BTRFS info (device loop0): using free space tree
[  307.934828][ T5822] usbtmc 5-1:16.0: can't read capabilities
[  307.981288][T11693] BTRFS info (device loop0): enabling ssd optimizations
[  307.993134][T11693] BTRFS info (device loop0): auto enabling async discard
[  308.179004][ T5763] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  308.246227][ T5836] usb 5-1: USB disconnect, device number 14
[  309.056991][T11733] loop3: detected capacity change from 0 to 256
[  309.078912][T11733] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  309.758910][T11750] loop3: detected capacity change from 0 to 64
[  309.781607][T11750] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  309.847404][   T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  309.873726][T11753] loop0: detected capacity change from 0 to 512
[  309.918328][T11753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.994338][T11753] ext4 filesystem being mounted at /505/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.062697][   T23] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  310.071439][   T23] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  310.082105][   T23] usb 5-1: config 0 interface 0 has no altsetting 0
[  310.093024][   T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  310.104076][T11761] 9pnet_fd: Insufficient options for proto=fd
[  310.112330][   T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  310.126717][   T23] usb 5-1: Product: syz
[  310.128001][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.141795][   T23] usb 5-1: Manufacturer: syz
[  310.146692][   T23] usb 5-1: SerialNumber: syz
[  310.154593][   T23] usb 5-1: config 0 descriptor??
[  310.164971][   T23] hub 5-1:0.0: bad descriptor, ignoring hub
[  310.200119][   T23] hub: probe of 5-1:0.0 failed with error -5
[  310.232848][   T23] usb 5-1: selecting invalid altsetting 0
[  311.001909][T11745] usb 5-1: reset high-speed USB device number 15 using dummy_hcd
[  311.020362][T11787] netlink: 178584 bytes leftover after parsing attributes in process `syz.1.2179'.
[  311.030973][T11787] netlink: zone id is out of range
[  311.036948][T11787] netlink: zone id is out of range
[  311.042212][T11787] netlink: zone id is out of range
[  311.047803][T11787] netlink: zone id is out of range
[  311.053326][T11787] netlink: zone id is out of range
[  311.060380][T11787] netlink: zone id is out of range
[  311.066389][T11787] netlink: zone id is out of range
[  311.071633][T11787] netlink: zone id is out of range
[  311.081405][T11787] netlink: zone id is out of range
[  311.086779][T11787] netlink: zone id is out of range
[  311.217906][T11745] usb 5-1: device firmware changed
[  311.224208][   T27] usb 5-1: USB disconnect, device number 15
[  311.286861][T11794] loop0: detected capacity change from 0 to 128
[  311.329702][T11794] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  311.345227][T11794] ext4 filesystem being mounted at /510/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  311.394745][T11794] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 26915 (only 1 groups)
[  311.418891][   T27] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  311.448921][ T5763] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  311.636458][   T27] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  311.656005][   T27] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  311.676360][   T27] usb 5-1: config 0 interface 0 has no altsetting 0
[  311.687212][   T27] usb 5-1: string descriptor 0 read error: -22
[  311.693517][   T27] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  311.702908][   T27] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  311.713544][   T27] usb 5-1: config 0 descriptor??
[  311.722057][   T27] hub 5-1:0.0: bad descriptor, ignoring hub
[  311.728027][   T27] hub: probe of 5-1:0.0 failed with error -5
[  311.748334][   T27] usb 5-1: selecting invalid altsetting 0
[  311.924136][ T5802] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  312.135572][   T27] usb 5-1: USB disconnect, device number 16
[  312.141631][ T5802] usb 1-1: Using ep0 maxpacket: 8
[  312.163504][ T5802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.183165][ T5802] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  312.221671][ T5802] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  312.240521][ T5802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.258757][ T5802] usb 1-1: Product: syz
[  312.263511][ T5802] usb 1-1: Manufacturer: syz
[  312.268161][ T5802] usb 1-1: SerialNumber: syz
[  312.283427][ T5802] usb 1-1: config 0 descriptor??
[  312.519184][ T5822] usb 1-1: USB disconnect, device number 26
[  312.572104][T11828] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2196'.
[  312.712532][ T5802] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  312.916020][ T5802] usb 4-1: Using ep0 maxpacket: 16
[  312.925067][ T5802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.949979][ T5802] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  312.974789][ T5802] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  312.985203][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.998702][ T5802] usb 4-1: Product: syz
[  313.003832][ T5802] usb 4-1: Manufacturer: syz
[  313.009768][ T5802] usb 4-1: SerialNumber: syz
[  313.490602][ T5802] usb 4-1: cannot find UAC_HEADER
[  313.531697][ T5802] snd-usb-audio: probe of 4-1:1.0 failed with error -22
[  313.558346][ T5802] usb 4-1: USB disconnect, device number 25
[  313.618887][ T5757] udevd[5757]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.704904][T11848] loop4: detected capacity change from 0 to 32768
[  313.765694][T11848] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  313.918909][T11848] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  313.947906][T11848] XFS (loop4): Starting recovery (logdev: internal)
[  313.987725][T11848] XFS (loop4): Ending recovery (logdev: internal)
[  314.064567][ T8771] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  314.330220][T11876] pim6reg: entered allmulticast mode
[  314.423684][T11876] pim6reg: left allmulticast mode
[  314.571770][T11878] 8021q: adding VLAN 0 to HW filter on device bond1
[  314.633329][T11878] bond0: (slave bond1): Enslaving as an active interface with an up link
[  314.734358][T11887] loop0: detected capacity change from 0 to 512
[  314.764859][T11887] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4)
[  315.478322][T11891] loop4: detected capacity change from 0 to 32768
[  315.519861][T11891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2221 (11891)
[  315.601592][T11891] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  315.634431][T11891] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  315.670467][T11891] BTRFS info (device loop4): setting nodatasum
[  315.690882][T11891] BTRFS info (device loop4): force zlib compression, level 3
[  315.718457][T11891] BTRFS info (device loop4): use zlib compression, level 3
[  315.741937][T11891] BTRFS info (device loop4): turning on flush-on-commit
[  315.758638][T11891] BTRFS info (device loop4): enabling auto defrag
[  315.788332][T11891] BTRFS info (device loop4): max_inline at 4096
[  315.804297][T11891] BTRFS info (device loop4): using free space tree
[  315.916100][T11891] BTRFS info (device loop4): enabling ssd optimizations
[  316.223923][T11912] loop0: detected capacity change from 0 to 32768
[  316.254793][T11912] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2231 (11912)
[  316.272396][ T8771] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.306624][T11912] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  316.335696][T11912] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  316.361134][T11912] BTRFS info (device loop0): using free space tree
[  316.568029][T11912] BTRFS info (device loop0): enabling ssd optimizations
[  316.575689][T11912] BTRFS info (device loop0): auto enabling async discard
[  316.624903][T11973] hub 9-0:1.0: USB hub found
[  316.630717][T11973] hub 9-0:1.0: 1 port detected
[  316.873250][T11977] loop4: detected capacity change from 0 to 128
[  317.025897][ T5763] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  318.466188][T12000] loop0: detected capacity change from 0 to 32768
[  318.514761][T12002] loop3: detected capacity change from 0 to 32768
[  318.523606][T12000] JBD2: Ignoring recovery information on journal
[  318.533577][T12000] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  318.545689][T12000] JBD2: bad block at offset 32
[  318.566311][T12002] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  318.590219][T12000] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  318.606226][T12002] JBD2: Ignoring recovery information on journal
[  318.687878][T12002] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  318.923951][ T5763] ocfs2: Unmounting device (7,0) on (node local)
[  318.970080][ T5765] ocfs2: Unmounting device (7,3) on (node local)
[  319.745785][   T27] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  319.981594][   T27] usb 4-1: Using ep0 maxpacket: 32
[  319.996395][   T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  320.014398][   T27] usb 4-1: config 0 has no interface number 0
[  320.036125][   T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.087350][   T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.112820][   T27] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  320.141094][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.166798][   T27] usb 4-1: config 0 descriptor??
[  320.206829][T12059] tun0: tun_chr_ioctl cmd 1074025694
[  320.600404][T12075] loop0: detected capacity change from 0 to 256
[  320.713572][T12075] FAT-fs (loop0): Directory bread(block 64) failed
[  320.736053][T12075] FAT-fs (loop0): Directory bread(block 65) failed
[  320.750603][T12075] FAT-fs (loop0): Directory bread(block 66) failed
[  320.776628][T12075] FAT-fs (loop0): Directory bread(block 67) failed
[  320.788915][T12075] FAT-fs (loop0): Directory bread(block 68) failed
[  320.809110][T12075] FAT-fs (loop0): Directory bread(block 69) failed
[  320.826232][T12075] FAT-fs (loop0): Directory bread(block 70) failed
[  320.832913][T12075] FAT-fs (loop0): Directory bread(block 71) failed
[  320.857543][   T27] uclogic 0003:28BD:0094.000E: pen parameters not found
[  320.858377][T12075] FAT-fs (loop0): Directory bread(block 72) failed
[  320.875672][   T27] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring
[  320.881303][T12075] FAT-fs (loop0): Directory bread(block 73) failed
[  320.993998][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  321.125420][T12082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'.
[  321.140953][   T27] usb 4-1: USB disconnect, device number 26
[  321.156502][T12082] netem: incorrect ge model size
[  321.168092][T12084] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.187359][T12086] loop0: detected capacity change from 0 to 512
[  321.199987][T12084] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.201987][T12086] EXT4-fs: Ignoring removed i_version option
[  321.245069][T12086] EXT4-fs: Ignoring removed oldalloc option
[  321.281504][T12086] EXT4-fs (loop0): 1 truncate cleaned up
[  321.291561][T12086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  321.538757][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.617823][ T3430] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  322.027083][T12098] loop4: detected capacity change from 0 to 40427
[  322.083958][T12098] F2FS-fs (loop4): Found nat_bits in checkpoint
[  322.176447][T12098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  322.258185][ T3436] kworker/u4:8: attempt to access beyond end of device
[  322.258185][ T3436] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  322.290345][ T3436] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  322.375097][    T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  322.435131][T12124] netlink: 'syz.3.2306': attribute type 2 has an invalid length.
[  322.603179][    T8] usb 1-1: Using ep0 maxpacket: 16
[  322.626026][    T8] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.657194][    T8] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.677532][    T8] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  322.692336][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  322.700282][    T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  322.710348][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.733301][    T8] usb 1-1: config 0 descriptor??
[  322.863811][T12135] tipc: Started in network mode
[  322.870287][T12135] tipc: Node identity f_get_cu, cluster identity 4711
[  322.878472][T12135] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  323.151794][T12147] loop4: detected capacity change from 0 to 256
[  323.179720][    T8] hid (null): global environment stack underflow
[  323.194914][    T8] hid (null): report_id 61247 is invalid
[  323.201467][    T8] hid (null): unknown global tag 0xe
[  323.400740][ T5836] usb 1-1: USB disconnect, device number 27
[  324.839954][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2329'.
[  325.243682][   T28] audit: type=1326 audit(1774027739.975:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12178 comm="syz.1.2332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb388f9c799 code=0x0
[  325.328368][T12172] loop4: detected capacity change from 0 to 32768
[  325.348966][T12172] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  325.389834][   T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  325.447005][T12172] XFS (loop4): Ending clean mount
[  325.459281][T12172] XFS (loop4): Quotacheck needed: Please wait.
[  325.534743][T12172] XFS (loop4): Quotacheck: Done.
[  325.582033][   T27] usb 4-1: Using ep0 maxpacket: 16
[  325.604050][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  325.615513][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  325.626930][   T27] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  325.636619][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.647786][   T27] usb 4-1: config 0 descriptor??
[  325.732490][ T8771] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.129920][   T27] ntrig 0003:1B96:0008.0010: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0
[  326.362328][   T27] ntrig 0003:1B96:0008.0010: Firmware version: 2.15.24.29.0 (7f55 b00b)
[  326.587059][   T27] usb 4-1: USB disconnect, device number 27
[  327.200304][T12215] loop3: detected capacity change from 0 to 512
[  327.212294][T12215] EXT4-fs: Ignoring removed i_version option
[  327.221287][T12215] EXT4-fs: Ignoring removed oldalloc option
[  327.242315][T12215] EXT4-fs (loop3): 1 truncate cleaned up
[  327.248644][T12215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.532962][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.707129][T12225] binder: 12224:12225 ioctl c018620c 200000000280 returned -1
[  327.707810][T12227] loop3: detected capacity change from 0 to 64
[  327.876343][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'.
[  327.905029][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2350'.
[  328.054909][T12241] sctp: Trying to GSO but underlying device doesn't support it.
[  328.236365][T12250] loop3: detected capacity change from 0 to 512
[  328.315660][T12253] dvmrp1: tun_chr_ioctl cmd 1074025677
[  328.325749][T12253] dvmrp1: linktype set to 804
[  328.895936][ T5802] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  328.946774][T12256] loop0: detected capacity change from 0 to 32768
[  329.035550][T12256] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.162779][ T5802] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  329.171262][ T5802] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  329.184201][ T5802] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  329.194504][ T5802] usb 5-1: config 220 has no interface number 2
[  329.235304][ T5802] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  329.269664][ T5802] usb 5-1: config 220 interface 0 has no altsetting 0
[  329.277824][ T5802] usb 5-1: config 220 interface 76 has no altsetting 0
[  329.286416][ T5802] usb 5-1: config 220 interface 1 has no altsetting 0
[  329.293578][T12256] XFS (loop0): Ending clean mount
[  329.326237][ T5802] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  329.336477][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.339654][T12264] loop3: detected capacity change from 0 to 32768
[  329.345519][T12256] XFS (loop0): Quotacheck needed: Please wait.
[  329.362555][T12264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2366 (12264)
[  329.366273][ T5802] usb 5-1: Product: syz
[  329.433340][ T5802] usb 5-1: Manufacturer: syz
[  329.438010][ T5802] usb 5-1: SerialNumber: syz
[  329.447221][T12264] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  329.492778][T12256] XFS (loop0): Quotacheck: Done.
[  329.494199][T12264] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  329.569052][T12264] BTRFS info (device loop3): setting nodatasum
[  329.590469][T12264] BTRFS info (device loop3): force zlib compression, level 3
[  329.620149][T12264] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  329.639575][T12264] BTRFS info (device loop3): use lzo compression, level 0
[  329.656926][T12264] BTRFS info (device loop3): turning on flush-on-commit
[  329.674879][T12264] BTRFS info (device loop3): enabling auto defrag
[  329.685748][T12264] BTRFS info (device loop3): max_inline at 4096
[  329.715033][T12264] BTRFS info (device loop3): using free space tree
[  329.740865][ T5802] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  329.747398][ T5802] usb 5-1: No valid video chain found.
[  329.753419][ T5802] usb 5-1: selecting invalid altsetting 0
[  329.791146][ T5802] usb 5-1: selecting invalid altsetting 0
[  329.799378][ T5763] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  329.808098][ T5802] usbtest: probe of 5-1:220.1 failed with error -22
[  329.826209][ T5802] usb 5-1: USB disconnect, device number 17
[  329.972227][T12264] BTRFS info (device loop3): enabling ssd optimizations
[  330.276599][T12291] bond0: (slave bond_slave_0): Releasing backup interface
[  330.305191][T12291] team0: Port device bond_slave_0 added
[  330.312594][T12291] net_ratelimit: 52 callbacks suppressed
[  330.312623][T12291] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  330.405737][ T5765] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.322508][T12321] netlink: 'syz.1.2382': attribute type 7 has an invalid length.
[  331.331645][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'.
[  331.694970][T12336] loop3: detected capacity change from 0 to 512
[  331.727905][T12336] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.2389: iget: bad i_size value: 38620345925642
[  331.827473][T12336] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.2389: couldn't read orphan inode 15 (err -117)
[  331.855459][T12342] loop4: detected capacity change from 0 to 128
[  331.868410][T12342] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  331.892407][T12342] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  331.928501][T12342] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes
[  331.935242][T12336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.990529][ T8771] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  332.170942][T12351] loop8: detected capacity change from 0 to 7
[  332.193006][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.199974][T12351]  loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[  332.218215][T12351] loop8: partition table partially beyond EOD, truncated
[  332.227086][T12351] loop8: p1 size 3651402975 extends beyond EOD, truncated
[  332.248136][T12351] loop8: p2 start 956478 is beyond EOD, truncated
[  332.382299][ T5757] udevd[5757]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  332.560326][T12364] loop4: detected capacity change from 0 to 256
[  332.732493][   T28] audit: type=1326 audit(1774027746.973:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12369 comm="syz.0.2404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f306339c799 code=0x0
[  333.845964][T12394] bond0: Device is already in use.
[  333.938944][T12401] loop3: detected capacity change from 0 to 256
[  333.975848][T12401] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  334.035632][   T28] audit: type=1800 audit(1774027748.189:46): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2416" name="file1" dev="loop3" ino=1048723 res=0 errno=0
[  334.062099][T12404] loop4: detected capacity change from 0 to 256
[  334.097306][   T12] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  334.111957][   T28] audit: type=1800 audit(1774027748.217:47): pid=12401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2416" name="file1" dev="loop3" ino=1048723 res=0 errno=0
[  334.132920][    C1] vkms_vblank_simulate: vblank timer overrun
[  334.145727][   T12] FAT-fs (loop3): Filesystem has been set read-only
[  334.154927][ T5836] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  334.159728][   T12] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  334.186028][   T12] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  334.203339][   T12] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008)
[  334.228389][T12407] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  334.400447][ T5836] usb 1-1: Using ep0 maxpacket: 16
[  334.408316][ T5836] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  334.418707][ T5836] usb 1-1: config 0 has no interface number 0
[  334.434593][ T5836] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  334.455360][ T5836] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  334.482951][ T5836] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  334.494121][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  334.513701][ T5836] usb 1-1: Product: syz
[  334.518401][ T5836] usb 1-1: SerialNumber: syz
[  334.531119][ T5836] usb 1-1: config 0 descriptor??
[  334.552212][ T5836] cm109 1-1:0.8: invalid payload size 0, expected 4
[  334.560481][ T5836] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input23
[  335.039262][    C0] cm109_urb_ctl_callback: 108 callbacks suppressed
[  335.039292][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.053185][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.060529][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.067929][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.084062][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.091397][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.105113][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.112351][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.119978][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.128981][ T5836] usb 1-1: USB disconnect, device number 28
[  335.136545][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  335.143634][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  335.154287][ T5836] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  335.329224][T12430] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2427'.
[  335.607142][T12437] loop3: detected capacity change from 0 to 8192
[  335.901548][T12453] loop4: detected capacity change from 0 to 2048
[  335.953895][T12453] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  336.006433][T12453] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  336.064111][T12453] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.850449][T12489] loop0: detected capacity change from 0 to 2048
[  336.881896][T12489] NILFS (loop0): invalid segment: Magic number mismatch
[  336.888889][T12489] NILFS (loop0): trying rollback from an earlier position
[  336.935871][T12489] NILFS (loop0): recovery complete
[  336.955250][T12497] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  337.408837][    C1] icmp: detected local route for 100.1.1.2 during ICMP sending, src 100.1.1.0
[  338.397800][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'.
[  338.875341][T12539] loop3: detected capacity change from 0 to 4096
[  338.907673][T12539] EXT4-fs: Ignoring removed mblk_io_submit option
[  339.009716][T12539] EXT4-fs (loop3): Test dummy encryption mode enabled
[  339.042221][T12541] loop4: detected capacity change from 0 to 512
[  339.046312][T12533] loop0: detected capacity change from 0 to 40427
[  339.084424][T12541] EXT4-fs error (device loop4): __ext4_iget:5071: inode #17: block 1803188595: comm syz.4.2480: invalid block
[  339.085771][T12539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.125363][T12541] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.2480: couldn't read orphan inode 17 (err -117)
[  339.146648][T12533] F2FS-fs (loop0): invalid crc value
[  339.154203][T12541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.196310][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  339.198172][T12533] F2FS-fs (loop0): Found nat_bits in checkpoint
[  339.389933][T12541] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz.4.2480: path /: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  339.460330][T12533] F2FS-fs (loop0): Start checkpoint disabled!
[  339.481873][ T5765] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.511334][T12533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  339.642448][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  339.749765][ T8771] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz-executor: bg 0: block 7: invalid block bitmap
[  339.781308][   T12] kworker/u4:1: attempt to access beyond end of device
[  339.781308][   T12] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  339.801457][ T8771] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6651: Corrupt filesystem
[  339.802994][   T12] kworker/u4:1: attempt to access beyond end of device
[  339.802994][   T12] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  339.829022][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  339.837300][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  339.846917][   T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  339.859545][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  339.929062][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  339.990192][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  340.013922][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  340.046681][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  340.092676][ T8771] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /337/bus: bad entry in directory: rec_len % 4 != 0 - offset=92, inode=0, rec_len=127, size=1024 fake=0
[  340.521253][T12580] netlink: 'syz.0.2497': attribute type 1 has an invalid length.
[  340.536258][T12580] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2497'.
[  340.585587][T12580] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2497'.
[  341.215150][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.355596][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.470957][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.682351][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.845927][T12605] loop3: detected capacity change from 0 to 4096
[  341.863843][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  341.893646][T12605] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  342.062145][T12598] loop0: detected capacity change from 0 to 32768
[  342.083304][T12598] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.2505 (12598)
[  342.137413][T12598] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  342.178520][T12598] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  342.226190][T12598] BTRFS info (device loop0): using free space tree
[  342.336893][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  342.354748][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  342.369028][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  342.406056][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  342.435916][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  342.458001][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.589087][T12598] BTRFS info (device loop0): enabling ssd optimizations
[  342.599115][T12598] BTRFS info (device loop0): auto enabling async discard
[  342.899414][ T5763] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  342.939789][T12638] macvlan0: entered promiscuous mode
[  342.956887][T12638] batadv0: entered promiscuous mode
[  343.860665][ T5753] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  343.973378][T12668] netlink: 'syz.3.2524': attribute type 6 has an invalid length.
[  344.076253][ T5753] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  344.100843][ T5753] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  344.117583][ T5753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  344.161939][ T5753] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  344.232968][ T5753] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  344.269269][ T5753] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  344.289115][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  344.318367][ T5753] usb 1-1: Product: syz
[  344.349214][ T5753] usb 1-1: Manufacturer: syz
[  344.380432][ T5753] cdc_wdm 1-1:1.0: skipping garbage
[  344.433140][ T5753] cdc_wdm 1-1:1.0: skipping garbage
[  344.480957][ T5753] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  344.506082][ T5753] cdc_wdm 1-1:1.0: Unknown control protocol
[  344.674225][ T5771] Bluetooth: hci2: command tx timeout
[  344.980459][T12612] chnl_net:caif_netlink_parms(): no params data found
[  345.147885][T12673] loop3: detected capacity change from 0 to 131072
[  345.157013][T12673] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  345.163748][T12673] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  345.173982][T12673] F2FS-fs (loop3): invalid crc value
[  345.220377][T12673] F2FS-fs (loop3): Found nat_bits in checkpoint
[  345.281486][T12673] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  345.288984][T12673] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  345.577383][   T12] hsr_slave_0: left promiscuous mode
[  345.638932][   T12] hsr_slave_1: left promiscuous mode
[  345.684775][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.700187][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.735149][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.763282][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.780537][   T12] bridge_slave_1: left promiscuous mode
[  345.804875][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.855359][   T12] bridge_slave_0: left allmulticast mode
[  345.871801][T12698] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm
[  345.873242][   T12] bridge_slave_0: left promiscuous mode
[  345.913511][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.098009][   T12] veth1_macvtap: left promiscuous mode
[  346.103673][   T12] veth0_macvtap: left promiscuous mode
[  346.137522][   T12] veth1_vlan: left promiscuous mode
[  346.143198][   T12] veth0_vlan: left promiscuous mode
[  346.814764][ T5753] usb 1-1: USB disconnect, device number 29
[  346.896450][ T5771] Bluetooth: hci2: command tx timeout
[  347.176420][T12714] loop3: detected capacity change from 0 to 40427
[  347.198695][T12714] F2FS-fs (loop3): build fault injection attr: rate: 25, type: 0x7ffff
[  347.226703][T12714] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7698c
[  347.264135][T12714] F2FS-fs (loop3): invalid crc value
[  347.302756][T12714] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0
[  347.346570][T12714] F2FS-fs (loop3): Found nat_bits in checkpoint
[  347.419206][T12714] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  347.457637][T12714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  347.507395][T12714] F2FS-fs (loop3): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  347.560806][T12714] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  347.632736][ T5765] syz-executor: attempt to access beyond end of device
[  347.632736][ T5765] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  347.647111][ T5765] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  348.016289][T12731] loop3: detected capacity change from 0 to 128
[  348.441891][   T12] team0 (unregistering): Port device team_slave_1 removed
[  348.550362][   T12] team0 (unregistering): Port device team_slave_0 removed
[  348.646561][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.731175][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  349.151616][ T5771] Bluetooth: hci2: command tx timeout
[  349.721253][   T12] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  349.737232][   T12] bond0 (unregistering): Released all slaves
[  349.860874][T12742] loop3: detected capacity change from 0 to 131072
[  349.871328][T12742] F2FS-fs (loop3): invalid crc value
[  349.896648][T12742] F2FS-fs (loop3): Found nat_bits in checkpoint
[  349.967507][T12720] IPv6: NLM_F_CREATE should be specified when creating new route
[  350.018513][T12742] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  350.169289][T12612] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.215811][T12612] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.231875][T12612] bridge_slave_0: entered allmulticast mode
[  350.239153][T12612] bridge_slave_0: entered promiscuous mode
[  350.290941][T12612] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.339955][T12612] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.359692][T12612] bridge_slave_1: entered allmulticast mode
[  350.367075][T12612] bridge_slave_1: entered promiscuous mode
[  350.475482][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.527343][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.724740][T12612] team0: Port device team_slave_0 added
[  350.748099][T12612] team0: Port device team_slave_1 added
[  350.827345][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.930343][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.990671][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.013969][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.020959][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.097078][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.275052][T12612] hsr_slave_0: entered promiscuous mode
[  351.309729][T12612] hsr_slave_1: entered promiscuous mode
[  351.344414][ T5771] Bluetooth: hci2: command tx timeout
[  351.690463][T12612] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  351.720772][T12612] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  351.743228][T12612] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  351.765682][T12612] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  351.877506][T12794] loop3: detected capacity change from 0 to 256
[  351.912856][T12794] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  352.065773][T12612] 8021q: adding VLAN 0 to HW filter on device bond0
[  352.169433][T12612] 8021q: adding VLAN 0 to HW filter on device team0
[  352.252444][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state
[  352.260098][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  352.282994][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state
[  352.290689][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  352.354963][T12802] batadv_slave_0: entered promiscuous mode
[  352.381982][T12802] batman_adv: batadv0: Adding interface: macvtap1
[  352.390581][T12802] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.457710][T12802] batman_adv: batadv0: Interface activated: macvtap1
[  352.585925][T12612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  353.117033][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.497771][T12841] loop0: detected capacity change from 0 to 4096
[  353.893453][T12612] veth0_vlan: entered promiscuous mode
[  353.965420][T12612] veth1_vlan: entered promiscuous mode
[  354.066460][T12612] veth0_macvtap: entered promiscuous mode
[  354.091925][T12612] veth1_macvtap: entered promiscuous mode
[  354.122786][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.141612][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.159695][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.170859][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.186263][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  354.218381][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.237259][T12873] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2581'.
[  354.245421][T12612] batman_adv: batadv0: Interface activated: batadv_slave_0
[  354.264524][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.296542][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.311884][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.341327][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.354247][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  354.357288][ T5802] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  354.365605][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  354.384730][T12612] batman_adv: batadv0: Interface activated: batadv_slave_1
[  354.429367][T12612] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  354.461126][T12612] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  354.486044][T12612] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  354.505753][T12612] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  354.603273][ T5802] usb 4-1: Using ep0 maxpacket: 32
[  354.610965][ T5802] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.652995][ T5802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  354.694404][ T5802] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  354.747843][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.753156][ T5802] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 32
[  354.771046][ T2191] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  354.790152][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.795589][ T5802] usb 4-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  354.860422][ T5802] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  354.870520][ T3430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.878459][ T3430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.888143][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.913340][ T5802] usb 4-1: Product: syz
[  354.917586][ T5802] usb 4-1: Manufacturer: syz
[  354.922423][ T5802] usb 4-1: SerialNumber: syz
[  354.973529][T12868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  355.256241][ T5802] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  355.314051][ T5802] usb 4-1: USB disconnect, device number 28
[  355.393162][ T8459] udevd[8459]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  356.957698][T12943] loop3: detected capacity change from 0 to 2048
[  356.996040][T12943] NILFS (loop3): invalid segment: Inconsistency found
[  357.023072][T12943] NILFS (loop3): trying rollback from an earlier position
[  357.067502][T12943] NILFS (loop3): recovery complete
[  357.086851][T12948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  358.069115][T12967] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  358.907931][T13011] fuse: Invalid group_id
[  359.135225][T13009] loop0: detected capacity change from 0 to 8192
[  359.241307][ T5757] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  360.193883][ T5804] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  360.423194][ T5804] usb 4-1: config 0 has no interfaces?
[  360.462829][ T5804] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  360.509989][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.528833][T13048] loop5: detected capacity change from 0 to 4096
[  360.611579][ T5804] usb 4-1: config 0 descriptor??
[  360.634053][T13048] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  360.981338][T13042] loop0: detected capacity change from 0 to 131072
[  361.004801][T13042] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  361.013963][T13042] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  361.025661][T13042] F2FS-fs (loop0): invalid crc value
[  361.042157][T13042] F2FS-fs (loop0): Found nat_bits in checkpoint
[  361.080158][ T5804] usb 4-1: USB disconnect, device number 29
[  361.089550][T13042] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  361.097190][T13042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  362.579726][T13098] macvlan0: entered promiscuous mode
[  362.586483][T13098] netlink: 'syz.0.2636': attribute type 2 has an invalid length.
[  362.625923][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'.
[  362.849244][T13112] dvmrp1: tun_chr_ioctl cmd 1074025677
[  362.856159][T13112] dvmrp1: linktype set to 264
[  363.212389][T13128] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2664'.
[  363.495805][   T79] wlan1: Trigger new scan to find an IBSS to join
[  363.557196][ T3436] ------------[ cut here ]------------
[  363.574478][ T3436] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xffffffff with flags 0x40
[  363.586227][ T3436] WARNING: CPU: 1 PID: 3436 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880
[  363.596859][ T3436] Modules linked in:
[  363.600990][ T3436] CPU: 1 PID: 3436 Comm: kworker/u4:8 Not tainted syzkaller #0
[  363.608792][ T3436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  363.619137][ T3436] Workqueue: events_unbound cfg80211_wiphy_work
[  363.625678][ T3436] RIP: 0010:__rate_control_send_low+0x635/0x880
[  363.632452][ T3436] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 e2 de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b f1 55 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  363.653053][ T3436] RSP: 0018:ffffc9000cd47380 EFLAGS: 00010246
[  363.660090][ T3436] RAX: 0bab8dad696eb500 RBX: 000000000000000c RCX: ffff88802d993c00
[  363.668871][ T3436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  363.676972][ T3436] RBP: 0000000000000084 R08: ffffc9000cd46f87 R09: 1ffff920019a8df0
[  363.685333][ T3436] R10: dffffc0000000000 R11: fffff520019a8df1 R12: 0000000000000040
[  363.693566][ T3436] R13: dffffc0000000000 R14: ffff88801e66b358 R15: ffff88807b0883e8
[  363.701807][ T3436] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  363.710834][ T3436] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.717739][ T3436] CR2: 0000001b2d41eff8 CR3: 0000000061372000 CR4: 00000000003506e0
[  363.725922][ T3436] Call Trace:
[  363.729262][ T3436]  <TASK>
[  363.732388][ T3436]  rate_control_send_low+0x194/0x790
[  363.738051][ T3436]  rate_control_get_rate+0x20b/0x5d0
[  363.743789][ T3436]  ieee80211_tx_h_rate_ctrl+0xb63/0x1790
[  363.749562][ T3436]  ? ieee80211_tx_h_select_key+0x19e0/0x19e0
[  363.756064][ T3436]  ? __lock_acquire+0x1273/0x7d40
[  363.761400][ T3436]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  363.768008][ T3436]  invoke_tx_handlers_late+0xb6/0x1810
[  363.773919][ T3436]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  363.779911][ T3436]  ieee80211_tx+0x2d8/0x460
[  363.784725][ T3436]  ? ieee80211_skb_resize+0x630/0x630
[  363.790568][ T3436]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  363.796604][ T3436]  ? __bpf_trace_tasklet+0x160/0x160
[  363.802072][ T3436]  ? ieee80211_xmit+0x310/0x3f0
[  363.807112][ T3436]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  363.813340][ T3436]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  363.819337][ T3436]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  363.825798][ T3436]  ieee80211_scan_state_send_probe+0x560/0x930
[  363.832262][ T3436]  ieee80211_scan_work+0x4e9/0x1c40
[  363.837611][ T3436]  cfg80211_wiphy_work+0x225/0x260
[  363.843058][ T3436]  ? process_scheduled_works+0x96f/0x15d0
[  363.848931][ T3436]  process_scheduled_works+0xa5d/0x15d0
[  363.855212][ T3436]  ? worker_attach_to_pool+0x380/0x380
[  363.861122][ T3436]  ? assign_work+0x3d2/0x5d0
[  363.865881][ T3436]  worker_thread+0xa55/0xfc0
[  363.870522][ T3436]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  363.876622][ T3436]  ? _raw_spin_unlock+0x40/0x40
[  363.881569][ T3436]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  363.887527][ T3436]  kthread+0x2fa/0x390
[  363.891724][ T3436]  ? pr_cont_work+0x560/0x560
[  363.896661][ T3436]  ? kthread_blkcg+0xd0/0xd0
[  363.901319][ T3436]  ret_from_fork+0x48/0x80
[  363.905818][ T3436]  ? kthread_blkcg+0xd0/0xd0
[  363.910590][ T3436]  ret_from_fork_asm+0x11/0x20
[  363.915544][ T3436]  </TASK>
[  363.918700][ T3436] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  363.926080][ T3436] CPU: 1 PID: 3436 Comm: kworker/u4:8 Not tainted syzkaller #0
[  363.933812][ T3436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  363.943876][ T3436] Workqueue: events_unbound cfg80211_wiphy_work
[  363.950118][ T3436] Call Trace:
[  363.953610][ T3436]  <TASK>
[  363.956722][ T3436]  dump_stack_lvl+0x18c/0x250
[  363.961516][ T3436]  ? show_regs_print_info+0x20/0x20
[  363.966904][ T3436]  ? load_image+0x400/0x400
[  363.971481][ T3436]  panic+0x2dc/0x730
[  363.975563][ T3436]  ? bpf_jit_dump+0xd0/0xd0
[  363.980272][ T3436]  ? ret_from_fork_asm+0x11/0x20
[  363.985239][ T3436]  __warn+0x2e0/0x470
[  363.989581][ T3436]  ? __rate_control_send_low+0x635/0x880
[  363.995393][ T3436]  ? __rate_control_send_low+0x635/0x880
[  364.001463][ T3436]  report_bug+0x2be/0x4f0
[  364.005790][ T3436]  ? __rate_control_send_low+0x635/0x880
[  364.011485][ T3436]  ? __rate_control_send_low+0x635/0x880
[  364.017382][ T3436]  ? __rate_control_send_low+0x637/0x880
[  364.023118][ T3436]  handle_bug+0xcf/0x120
[  364.027467][ T3436]  exc_invalid_op+0x1a/0x50
[  364.032110][ T3436]  asm_exc_invalid_op+0x1a/0x20
[  364.036988][ T3436] RIP: 0010:__rate_control_send_low+0x635/0x880
[  364.043441][ T3436] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 c0 e2 de 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 4b f1 55 f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff
[  364.063496][ T3436] RSP: 0018:ffffc9000cd47380 EFLAGS: 00010246
[  364.069751][ T3436] RAX: 0bab8dad696eb500 RBX: 000000000000000c RCX: ffff88802d993c00
[  364.077927][ T3436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  364.085910][ T3436] RBP: 0000000000000084 R08: ffffc9000cd46f87 R09: 1ffff920019a8df0
[  364.093980][ T3436] R10: dffffc0000000000 R11: fffff520019a8df1 R12: 0000000000000040
[  364.102031][ T3436] R13: dffffc0000000000 R14: ffff88801e66b358 R15: ffff88807b0883e8
[  364.110185][ T3436]  rate_control_send_low+0x194/0x790
[  364.115756][ T3436]  rate_control_get_rate+0x20b/0x5d0
[  364.121051][ T3436]  ieee80211_tx_h_rate_ctrl+0xb63/0x1790
[  364.126787][ T3436]  ? ieee80211_tx_h_select_key+0x19e0/0x19e0
[  364.132866][ T3436]  ? __lock_acquire+0x1273/0x7d40
[  364.138102][ T3436]  ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0
[  364.144544][ T3436]  invoke_tx_handlers_late+0xb6/0x1810
[  364.150102][ T3436]  ? invoke_tx_handlers_early+0xa11/0x1cf0
[  364.156094][ T3436]  ieee80211_tx+0x2d8/0x460
[  364.160608][ T3436]  ? ieee80211_skb_resize+0x630/0x630
[  364.166247][ T3436]  ? ieee80211_set_qos_hdr+0x1ca/0x510
[  364.171718][ T3436]  ? __bpf_trace_tasklet+0x160/0x160
[  364.177031][ T3436]  ? ieee80211_xmit+0x310/0x3f0
[  364.182090][ T3436]  ? __ieee80211_tx_skb_tid_band+0x490/0x610
[  364.188182][ T3436]  __ieee80211_tx_skb_tid_band+0x4d5/0x610
[  364.194124][ T3436]  ? ieee80211_scan_state_send_probe+0x4b4/0x930
[  364.200570][ T3436]  ieee80211_scan_state_send_probe+0x560/0x930
[  364.206836][ T3436]  ieee80211_scan_work+0x4e9/0x1c40
[  364.212692][ T3436]  cfg80211_wiphy_work+0x225/0x260
[  364.218091][ T3436]  ? process_scheduled_works+0x96f/0x15d0
[  364.223828][ T3436]  process_scheduled_works+0xa5d/0x15d0
[  364.229745][ T3436]  ? worker_attach_to_pool+0x380/0x380
[  364.235420][ T3436]  ? assign_work+0x3d2/0x5d0
[  364.240203][ T3436]  worker_thread+0xa55/0xfc0
[  364.244826][ T3436]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  364.251002][ T3436]  ? _raw_spin_unlock+0x40/0x40
[  364.255901][ T3436]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  364.261976][ T3436]  kthread+0x2fa/0x390
[  364.266130][ T3436]  ? pr_cont_work+0x560/0x560
[  364.271198][ T3436]  ? kthread_blkcg+0xd0/0xd0
[  364.276131][ T3436]  ret_from_fork+0x48/0x80
[  364.280979][ T3436]  ? kthread_blkcg+0xd0/0xd0
[  364.285603][ T3436]  ret_from_fork_asm+0x11/0x20
[  364.290513][ T3436]  </TASK>
[  364.293692][ T3436] Kernel Offset: disabled
[  364.298176][ T3436] Rebooting in 86400 seconds..