last executing test programs:

25.969401333s ago: executing program 2 (id=1907):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00)
r3 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000240)=0x63670318)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0x0, 0x0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c)

24.964723968s ago: executing program 2 (id=1910):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac549"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5)
keyctl$get_persistent(0x16, r7, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

23.683565609s ago: executing program 2 (id=1913):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000011c0)=0x4)

21.423532125s ago: executing program 2 (id=1920):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4)

19.636244358s ago: executing program 2 (id=1926):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00)
r3 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000240)=0x63670318)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c)

12.21549154s ago: executing program 2 (id=1951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac549"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5)
keyctl$get_persistent(0x16, r7, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, 0x0, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, 0x0)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

12.028288635s ago: executing program 32 (id=1951):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac549"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5)
keyctl$get_persistent(0x16, r7, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, 0x0, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, 0x0)
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

7.587646294s ago: executing program 4 (id=1969):
syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT], 0x1, 0x17d, &(0x7f0000000d80)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f0000000140)='.\x00', 0xc00, 0x112)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

6.618384427s ago: executing program 4 (id=1974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac549"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5)
keyctl$get_persistent(0x16, r7, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

6.458783081s ago: executing program 1 (id=1975):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00)
r3 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000240)=0x63670318)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c)

6.447663312s ago: executing program 0 (id=1976):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)

5.303495949s ago: executing program 4 (id=1977):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5)
keyctl$get_persistent(0x16, r7, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

4.780875152s ago: executing program 1 (id=1978):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
truncate(&(0x7f0000000200)='./file1\x00', 0x481)
write$9p(r0, &(0x7f0000002840)="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", 0x201)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.745124383s ago: executing program 4 (id=1979):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000180))
keyctl$get_persistent(0x16, 0x0, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000000)=0xd)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

4.528086739s ago: executing program 3 (id=1980):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00)
r3 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000240)=0x63670318)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c)

4.527941588s ago: executing program 1 (id=1981):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = inotify_init1(0x0)
r3 = inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400)
inotify_rm_watch(0xffffffffffffffff, r3)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1})
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400})

4.082400829s ago: executing program 0 (id=1982):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@grpquota}]}, 0x1, 0x5a1, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$UHID_INPUT(r0, &(0x7f0000001e40)={0x8, {"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", 0x1000}}, 0x1006)

3.990001422s ago: executing program 4 (id=1983):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$uinput_user_dev(r0, &(0x7f0000000680)={'syz0\x00', {0x81, 0x0, 0xb, 0xf881}, 0x3c, [0x2, 0x4, 0x81, 0x0, 0x5, 0x6, 0x2, 0x4, 0x1000, 0x800003, 0x88, 0x51c, 0x1, 0x5, 0x2, 0x4, 0x9, 0xd82, 0xb, 0x2, 0x6, 0x8, 0x80000000, 0xf0, 0x9d75, 0x7, 0x1, 0x401, 0x0, 0x68, 0x3, 0x6, 0x1ff, 0x6, 0x7ff, 0xffffffff, 0x0, 0x306d, 0x7, 0x7f, 0x6, 0x9, 0x1ff, 0x2, 0x3, 0xc6c, 0x9, 0xffff, 0x336c9414, 0x5, 0x7f, 0xe3, 0x4, 0x7, 0x3, 0x5, 0xee, 0x100005, 0x1, 0x1, 0x7, 0x341a9238, 0x0, 0x5], [0x3, 0x2, 0x1000, 0xfffffffd, 0x7, 0xb53, 0xfd49, 0xb8, 0x41, 0xffffff03, 0x7, 0x2, 0x3, 0x401, 0x5, 0x6, 0x6, 0x81, 0x79, 0x5, 0x9, 0x83, 0x0, 0x8001, 0x7, 0xa4, 0x7, 0x5801, 0x8000800, 0x1, 0x7b, 0x0, 0x3, 0x7, 0xb564, 0x8, 0x2, 0x9180, 0x0, 0x23, 0xb, 0x3fb, 0x5, 0xfffffffa, 0x4a, 0x1, 0x9, 0xfffff0a3, 0x0, 0x80003, 0x2, 0xb9, 0x3, 0x6, 0xb772, 0x67, 0x2, 0x7, 0x9, 0x9, 0x2, 0x8, 0x9, 0x1], [0x7, 0xbf3a, 0x1, 0x4, 0x2, 0xfffffffd, 0x7d, 0x1ce0000, 0xfff, 0x74f2, 0x8001, 0x8, 0x6, 0xd, 0x1, 0x7ff, 0x7ffffffc, 0xa, 0x9, 0x7, 0x8, 0xffffffe9, 0x20000000, 0x7, 0x6, 0x8, 0x7, 0x41c, 0x101, 0x5, 0x2, 0xee26, 0x6, 0x3, 0x5, 0x400, 0x2, 0x1, 0x0, 0x7fff, 0xd7, 0x38000000, 0x9, 0x327, 0x6, 0xfffffffa, 0x0, 0x1, 0x39, 0x8, 0x701, 0x4, 0x4, 0x5, 0x2000004, 0x4, 0xad46, 0x3, 0x1c, 0x9, 0xfffffffd, 0x10, 0x2, 0x1], [0x1, 0x3ff, 0x7fff, 0x8, 0x5, 0x0, 0x4, 0x1, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x5, 0x9, 0x245, 0x4, 0xffff, 0x6, 0x1, 0xf, 0x80000000, 0x1000, 0x8, 0x1, 0x8001, 0x7, 0xff, 0x0, 0x5d1, 0x2, 0x81, 0x32, 0x9, 0x4, 0x78, 0xe8, 0x2, 0x80000000, 0x1, 0x0, 0x5c91f772, 0x5, 0x3, 0x2, 0x2, 0x8, 0x6, 0x598a, 0x6, 0x9, 0x5d, 0x9, 0xb2, 0x6, 0x5, 0x1, 0xfff, 0x8, 0x9, 0x8a, 0x4]}, 0x249)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000})
creat(&(0x7f0000000380)='./bus\x00', 0x0)

3.512652733s ago: executing program 0 (id=1984):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000540), 0x3ff, 0x22800)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000680)={'\x00', 0x6, 0x1, 0x7cd5b8c2, 0x5, 0xe9})

3.013412976s ago: executing program 3 (id=1985):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c)
syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0)

2.855649869s ago: executing program 0 (id=1986):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, 0x0)

2.855490639s ago: executing program 3 (id=1987):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00)
r3 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000240)=0x63670318)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c)

1.869019664s ago: executing program 0 (id=1988):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000180)=0xffffffffffffffb5)
keyctl$get_persistent(0x16, r7, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r8, 0x40087602, &(0x7f0000000000)=0xd)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r9, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

1.863687874s ago: executing program 1 (id=1989):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x149442, 0x1a0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)
ftruncate(r0, 0xf88)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10a42, 0x1af)

1.845893954s ago: executing program 3 (id=1990):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
sync()
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0x2}, 0x2)

877.850058ms ago: executing program 0 (id=1991):
syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51ab, &(0x7f0000005280)="$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")
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4002, &(0x7f0000000080)=ANY=[@ANYBLOB='dir_umask=00000000000000000000007,codepage=iso8859-7,iocharset=iso8859-4,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c002883d9fa"], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3U1rE0EcBvBndpN0Y2td20rBg0i14Km09aB4aZHiZ/AgRW1TKMYKWkFFsHoW8SYIHnvzLPoV9CJ+gXrqQTzppXpwZV42mU1msunrtuT5gel2d17+szuzmWmICyLqWVfnNtYvbsp/ogwgBHAFCABEQAnAKYxGD1dWcwsKG1sCOqdoS7OwUnNljWByGLH8rYQBex/tjyRJku+5qX6lG8/3Ox4qhrBHsCUA+szoVMejA49s12ZcO9d0u3qLdYXFFrbwCINFhkNERMUz7/+BeZcYMPP3IADGzTz8qL7/pzLzm63i4jgUGu//gf49EfL8nFCH5HpvebVeW9RLOHn1g3SV6CrL2SeS5umuQPessN+aclm1uKlYgurScr02saYKeIEZw0o2ol4XkTZE8UVbAaYAjLWvTYVjuZpXWr5+1YaybMO0J/7hTjU6F8CffuCNu7r5L13EJD6Lr2JexHiLxcb8r5QIeXLUlYpbhoqOf9JfomplrFNlWtkM/6Sq5LSpAR/fN1tZ9Z3XCKGMxUWWIlrn73Ea5+uKPxeGkP2zgm7dlL91KtcwUBJq1WDnmm4k+uvMNdJaV3WpXK9NLNyr+zr93nKu6MQrcV2M4Sc+YM6a/wcy9Tj8IzMzyoVKaXpGx/aUVErPdcxQA/iufxiSz7XMzS9HWf94idu4jMEHj5/cuVWv1+4Xv5EOlR1mP7vH8eiOaLrjnzP6p5UGkdyQZ9NbTtl/yLnxL0kS56ESDuIS6J5x6Z1uqjkkzD1vd1XIO2fLoVl/YgCzAMye9I6wk9qfNXL1NQvsKvtvebXVHneHTKM6gAGSVpU5FKKvq5FSbduznpPr6fGd3ofoyGlefYzeKDoYKoKcOwi9/rPWK5PqriNf4o1176QsySvcKnGquTbIlDekXo91t4JrFOsNqT/dyFlznbsAnG+pMUBaY9sHXbGJE4fxU8kOH2XMuneLOXzDTf79n4iIiIiIiIiIiIiIiIiIiIiIiIjoqNnutxHav06Qv5GtcbMH/+MNIiIiIiIiIiIiIiIiIiIiIiIiIiIiIqLdsZ7/C4TqiTEV1/N/Oz2pSQn1E2KivXj+b9jF83/F2jZaSUQu/wMAAP//DVRYOg==")
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unlink(&(0x7f0000000080)='./file2\x00')

767.52304ms ago: executing program 1 (id=1992):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0xa, 0x4e1f, 0xf848, @mcast2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000342faece00000034000000060e2000000000004e3bf1964c6ba7c519bb290130e9508ee6b0253c412d5ae182d8930dff5ac5496f"], 0x18}, 0xc894)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0)
r5 = dup3(r3, r2, 0x80000)
r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000180))
keyctl$get_persistent(0x16, 0x0, r6)
keyctl$get_persistent(0x16, 0x0, r6)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xd8}}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$FS_IOC_SETVERSION(r7, 0x40087602, &(0x7f0000000000)=0xd)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000380), 0xe)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})

744.745381ms ago: executing program 3 (id=1993):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x4, 0x0, 0x2080, {0x50000, 0x0, {}, 0x0, 0x2}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ab7441ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000adf6000000000000000000000000000000000000000000000000020000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000008000", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"}})

536.535097ms ago: executing program 4 (id=1994):
r0 = socket(0x2b, 0x1, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0xff00)
r3 = socket(0x15, 0x3, 0x179)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x4, 0x0, 0x8}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x100)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]})
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000240)=0x63670318)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}}, 0x0)
fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @loopback, 0x1}, 0x1c)

93.533987ms ago: executing program 3 (id=1995):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRES8=r0], 0xfdef)

0s ago: executing program 1 (id=1996):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x2)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000340)=0x1)

kernel console output (not intermixed with test programs):

vice [HID 044e:120c] on usb-dummy_hcd.0-1/input0
[  268.146318][ T6881] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,noquota,noquota,nodioread_nolock,auto_da_alloc,grpid,,errors=continue. Quota mode: none.
[  268.176911][ T6881] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  268.236962][ T4231] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  268.266724][ T4231] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  268.278961][   T26] kauditd_printk_skb: 41 callbacks suppressed
[  268.278975][   T26] audit: type=1800 audit(1786470516.548:54): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.755" name="file1" dev="loop2" ino=15 res=0 errno=0
[  268.284598][ T4231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.344806][ T4231] usb 4-1: config 0 descriptor??
[  268.353515][ T1108] usb 1-1: USB disconnect, device number 4
[  268.518078][ T6889] loop2: detected capacity change from 0 to 1024
[  268.948409][ T4231] kye 0003:0458:0138.0004: unknown main item tag 0x3
[  268.955162][ T4231] kye 0003:0458:0138.0004: unexpected long global item
[  268.977089][ T4231] kye 0003:0458:0138.0004: parse failed
[  268.982691][ T4231] kye: probe of 0003:0458:0138.0004 failed with error -22
[  269.052608][ T6898] nfs: Unknown parameter 'pro'
[  269.665538][ T4231] usb 4-1: USB disconnect, device number 3
[  269.679289][ T6899] loop2: detected capacity change from 0 to 1024
[  270.300618][ T4232] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  270.546786][ T4232] usb 3-1: Using ep0 maxpacket: 16
[  270.677581][ T4232] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  270.746344][ T4232] usb 3-1: config 0 has no interface number 0
[  270.874453][ T4232] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.038927][ T4232] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.052642][ T4232] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  271.073742][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.091417][ T4232] usb 3-1: config 0 descriptor??
[  271.956843][ T4232] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71
[  271.975284][ T4232] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71
[  272.006448][ T4232] uclogic 0003:28BD:0071.0005: pen probing failed: -71
[  272.025991][ T4232] uclogic 0003:28BD:0071.0005: failed probing parameters: -71
[  272.036378][ T4232] uclogic: probe of 0003:28BD:0071.0005 failed with error -71
[  272.071247][ T4232] usb 3-1: USB disconnect, device number 6
[  272.273717][ T6944] loop3: detected capacity change from 0 to 1024
[  272.384797][ T6944] EXT4-fs (loop3): Ignoring removed bh option
[  272.426417][ T6944] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  272.459511][ T6944] EXT4-fs (loop3): Online resizing not supported with bigalloc
[  273.095167][ T6976] nfs: Bad value for 'proto'
[  273.653241][ T6979] netlink: 104 bytes leftover after parsing attributes in process `syz.3.790'.
[  274.876952][ T6992] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[  275.013631][ T6995] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  276.147909][ T7011] loop3: detected capacity change from 0 to 64
[  276.570750][ T7017] nfs: Bad value for 'proto'
[  277.524933][ T7030] nfs: Unknown parameter 'pro'
[  278.226116][ T7041] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  278.235134][ T7041] overlayfs: missing 'lowerdir'
[  278.300973][ T7040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.811'.
[  279.098509][ T7046] loop2: detected capacity change from 0 to 1024
[  279.474547][ T7058] nfs: Bad value for 'proto'
[  279.896623][    C1] hrtimer: interrupt took 40674 ns
[  280.376790][ T4231] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  280.896952][ T4231] usb 5-1: Using ep0 maxpacket: 32
[  281.016922][ T4231] usb 5-1: config index 0 descriptor too short (expected 19, got 18)
[  281.053556][ T7076] nfs: Unknown parameter 'pro'
[  281.196852][ T4231] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  281.241597][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.266992][ T4231] usb 5-1: Product: syz
[  281.271405][ T4231] usb 5-1: Manufacturer: syz
[  281.276015][ T4231] usb 5-1: SerialNumber: syz
[  281.303255][ T4231] usb 5-1: config 0 descriptor??
[  281.348591][ T4231] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  281.368070][ T4231] dvb-usb: bulk message failed: -22 (2/0)
[  281.409062][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  281.457007][ T4231] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  281.475788][ T4231] usb 5-1: media controller created
[  281.519260][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.551546][ T7064] dvb-usb: bulk message failed: -22 (3/0)
[  281.586398][ T4231] usb 5-1: selecting invalid altsetting 7
[  281.610021][ T4231] cxusb: set interface failed
[  281.618980][ T4231] dvb-usb: bulk message failed: -22 (1/0)
[  281.712576][ T4231] DVB: Unable to find symbol lgdt330x_attach()
[  281.720071][ T4231] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  282.210879][ T7088] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  282.219905][ T7088] overlayfs: missing 'lowerdir'
[  283.266811][ T4231] rc_core: IR keymap rc-dvico-portable not found
[  283.275877][ T4231] Registered IR keymap rc-empty
[  283.373074][ T7102] loop4: detected capacity change from 0 to 1024
[  283.469223][ T4231] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  283.533469][ T7104] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  283.542489][ T7104] overlayfs: missing 'lowerdir'
[  283.648054][ T4231] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input8
[  284.205223][ T4231] dvb-usb: schedule remote query interval to 100 msecs.
[  284.213519][ T4231] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  284.226440][ T4231] usb 5-1: USB disconnect, device number 7
[  284.708684][ T4231] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  284.772060][ T4447] hfsplus: request for non-existent node 33554434 in B*Tree
[  284.792127][ T4447] hfsplus: request for non-existent node 33554434 in B*Tree
[  285.363051][ T7130] nfs: Unknown parameter 'pro'
[  287.058091][ T7155] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  287.067107][ T7155] overlayfs: missing 'lowerdir'
[  289.086083][ T7175] nfs: Unknown parameter 'pro'
[  289.641314][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  289.907296][   T23] usb 3-1: Using ep0 maxpacket: 16
[  290.047082][   T23] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  290.756633][ T7193] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  290.765473][ T7193] overlayfs: missing 'lowerdir'
[  290.907514][   T23] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  290.970909][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.013080][   T23] usb 3-1: Product: syz
[  291.036761][   T23] usb 3-1: Manufacturer: syz
[  291.063373][   T23] usb 3-1: SerialNumber: syz
[  291.112623][   T23] r8152-cfgselector 3-1: config 0 descriptor??
[  291.136462][ T7202] loop3: detected capacity change from 0 to 64
[  291.388736][   T23] r8152-cfgselector 3-1: Unknown version 0x0000
[  291.529239][ T7212] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  291.538271][ T7212] overlayfs: missing 'lowerdir'
[  291.657100][   T23] r8152-cfgselector 3-1: Unknown version 0x0000
[  291.725318][   T23] r8152-cfgselector 3-1: USB disconnect, device number 7
[  292.620268][ T7219] loop3: detected capacity change from 0 to 4096
[  292.847708][ T7224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.749330][ T7235] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  293.758401][ T7235] overlayfs: missing 'lowerdir'
[  295.046701][ T7131] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  295.306715][ T7131] usb 5-1: Using ep0 maxpacket: 8
[  295.336678][ T4230] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  295.466892][ T7131] usb 5-1: unable to get BOS descriptor or descriptor too short
[  295.546985][ T7131] usb 5-1: config 1 has an invalid interface number: 211 but max is 0
[  295.555185][ T7131] usb 5-1: config 1 has no interface number 0
[  295.578914][ T7131] usb 5-1: too many endpoints for config 1 interface 211 altsetting 3: 250, using maximum allowed: 30
[  295.606877][ T7131] usb 5-1: config 1 interface 211 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 250
[  295.630440][ T7131] usb 5-1: config 1 interface 211 has no altsetting 0
[  295.706906][ T4230] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  295.727011][ T4230] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  295.760273][ T4230] usb 2-1: config 0 interface 0 has no altsetting 0
[  295.767407][ T7131] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=5a.54
[  295.786746][ T7131] usb 5-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3
[  295.794766][ T7131] usb 5-1: Manufacturer: syz
[  295.800612][ T4230] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  295.816710][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.828633][ T7131] usb 5-1: SerialNumber: syz
[  295.864299][ T4230] usb 2-1: config 0 descriptor??
[  295.892373][ T7251] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  296.133361][ T7131] usb 5-1: USB disconnect, device number 8
[  296.387780][ T4230] elecom 0003:056E:00FC.0006: unknown main item tag 0x2
[  296.480621][ T4230] elecom 0003:056E:00FC.0006: unknown main item tag 0x5
[  296.625190][ T4230] elecom 0003:056E:00FC.0006: unknown main item tag 0x3
[  296.866763][ T4230] elecom 0003:056E:00FC.0006: unknown main item tag 0x0
[  296.873805][ T4230] elecom 0003:056E:00FC.0006: unknown main item tag 0x0
[  296.883230][ T4230] elecom 0003:056E:00FC.0006: unknown main item tag 0x0
[  296.890534][ T4230] elecom 0003:056E:00FC.0006: invalid report_count 885399381
[  296.898214][ T4230] elecom 0003:056E:00FC.0006: item 0 4 1 9 parsing failed
[  296.909307][ T4230] elecom: probe of 0003:056E:00FC.0006 failed with error -22
[  296.953925][ T4230] usb 2-1: USB disconnect, device number 5
[  297.716902][ T7282] nfs: Unknown parameter 'pro'
[  298.427113][ T4234] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  299.349598][   T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  299.357366][ T4234] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.388450][ T4234] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.401710][ T4234] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  299.416233][ T4234] usb 5-1: config 0 interface 0 has no altsetting 0
[  299.424260][ T4234] usb 5-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.00
[  299.435156][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.556948][ T4234] usb 5-1: config 0 descriptor??
[  299.817477][   T21] usb 1-1: config 32 has an invalid interface number: 3 but max is 0
[  299.836001][   T21] usb 1-1: config 32 has no interface number 0
[  299.904388][   T21] usb 1-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  299.953781][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.076696][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  300.117960][   T21] usb-storage 1-1:32.3: USB Mass Storage device detected
[  300.139665][ T4234] apple 0003:05AC:0251.0007: Fn key not found (Apple Wireless Keyboard clone?), disabling Fn key handling
[  300.154786][   T21] usb-storage 1-1:32.3: Quirks match for vid 057b pid 0000: 1
[  300.164156][ T4234] input: HID 05ac:0251 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:0251.0007/input/input9
[  300.169746][   T13] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  300.271685][ T4234] apple 0003:05AC:0251.0007: input,hidraw0: USB HID v0.00 Joystick [HID 05ac:0251] on usb-dummy_hcd.4-1/input0
[  300.323986][ T4232] usb 1-1: USB disconnect, device number 5
[  300.447717][ T4230] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb
[  300.466020][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.531269][ T4230] usb 2-1: config 0 descriptor??
[  300.563510][ T1353] usb 5-1: USB disconnect, device number 9
[  300.600668][ T4230] gspca_main: spca505-2.14.0 probing 0733:0430
[  300.716941][   T13] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  300.734361][   T13] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  300.743622][   T13] usb 4-1: Product: syz
[  300.748273][   T13] usb 4-1: Manufacturer: syz
[  300.752884][   T13] usb 4-1: SerialNumber: syz
[  300.767429][   T13] usb 4-1: config 0 descriptor??
[  301.033299][ T4234] usb 4-1: USB disconnect, device number 4
[  301.059061][ T4230] gspca_spca505: reg write: error -71
[  301.064541][ T4230] spca505: probe of 2-1:0.0 failed with error -5
[  301.076149][ T4230] usb 2-1: USB disconnect, device number 6
[  301.183299][ T7326] nfs: Unknown parameter 'pro'
[  302.959786][   T23] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  303.476883][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  303.502875][   T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  303.547957][   T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00
[  303.567589][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.595617][   T23] usb 3-1: config 0 descriptor??
[  304.085530][   T23] uclogic 0003:5543:0522.0008: unknown main item tag 0xd
[  304.107680][   T23] uclogic 0003:5543:0522.0008: unknown main item tag 0xe
[  304.129559][   T23] uclogic 0003:5543:0522.0008: No inputs registered, leaving
[  304.154401][   T23] uclogic 0003:5543:0522.0008: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0
[  304.286388][   T23] usb 3-1: USB disconnect, device number 8
[  304.375472][ T7370] fido_id[7370]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  305.408957][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.0.927'.
[  305.741681][ T1353] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  306.546793][ T1353] usb 3-1: Using ep0 maxpacket: 8
[  306.742031][ T1353] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  306.917253][ T1353] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  306.927816][ T1353] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.957888][ T1353] usb 3-1: Product: syz
[  306.970305][ T1353] usb 3-1: Manufacturer: syz
[  306.989579][ T1353] usb 3-1: SerialNumber: syz
[  307.019523][ T1353] usb 3-1: config 0 descriptor??
[  307.069126][ T1353] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  307.096379][ T1353] usb 3-1: setting power ON
[  307.121321][ T1353] dvb-usb: bulk message failed: -22 (2/0)
[  307.172837][ T1353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  307.237238][ T1353] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  307.281514][ T1353] usb 3-1: media controller created
[  307.355750][ T1353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  307.568053][ T1353] usb 3-1: selecting invalid altsetting 6
[  307.574817][ T1353] usb 3-1: digital interface selection failed (-22)
[  307.581885][ T1353] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  307.628796][ T1353] usb 3-1: setting power OFF
[  307.635177][ T1353] dvb-usb: bulk message failed: -22 (2/0)
[  307.644417][ T1353] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  307.905609][ T1353] (NULL device *): no alternate interface
[  308.366484][ T1353] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  308.436908][ T1353] usb 3-1: USB disconnect, device number 9
[  308.504721][ T7425] sp0: Synchronizing with TNC
[  308.602913][ T7428] netlink: 'syz.0.938': attribute type 2 has an invalid length.
[  311.673877][ T7460] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  311.703215][ T7460] overlayfs: missing 'lowerdir'
[  312.436650][   T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  312.716889][   T23] usb 4-1: Using ep0 maxpacket: 16
[  313.125817][ T7500] nfs: Bad value for 'proto'
[  313.394001][   T23] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  313.405008][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  313.418666][   T23] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  313.427833][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.461862][   T23] usb 4-1: config 0 descriptor??
[  313.806754][ T4232] usb 1-1: new low-speed USB device number 6 using dummy_hcd
[  313.876093][ T7514] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  313.885206][ T7514] overlayfs: missing 'lowerdir'
[  314.190138][   T23] dragonrise 0003:0079:0011.0009: ignoring exceeding usage max
[  314.775661][   T23] dragonrise 0003:0079:0011.0009: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0
[  314.839989][   T23] usb 4-1: USB disconnect, device number 5
[  314.913313][ T7523] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  314.922285][ T7523] overlayfs: missing 'lowerdir'
[  315.927304][ T7524] fido_id[7524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  316.146816][ T4232] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  316.174129][ T4232] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 32, setting to 8
[  316.219689][ T4232] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  316.253316][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0
[  316.276789][ T4234] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  316.304820][ T4232] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  316.365602][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.453794][ T7532] loop4: detected capacity change from 0 to 4096
[  316.505429][ T4232] usb 1-1: config 0 descriptor??
[  316.887181][ T4232] usb 1-1: can't set config #0, error -71
[  316.964711][ T4232] usb 1-1: USB disconnect, device number 6
[  317.101606][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  317.109192][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  317.119359][ T7535] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.968522][ T4234] usb 3-1: device descriptor read/all, error -71
[  318.304575][ T7563] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  318.313496][ T7563] overlayfs: missing 'lowerdir'
[  320.796766][ T1353] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  321.917806][ T1353] usb 5-1: config 0 interface 0 altsetting 65 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  321.932941][ T7606] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  321.941875][ T7606] overlayfs: missing 'lowerdir'
[  322.002021][ T1353] usb 5-1: config 0 interface 0 altsetting 65 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  322.119895][ T1353] usb 5-1: config 0 interface 0 has no altsetting 0
[  322.178742][ T1353] usb 5-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00
[  322.271753][ T1353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.405733][ T1353] usb 5-1: config 0 descriptor??
[  322.488570][ T7585] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  322.999898][ T1353] wacom 0003:056A:0307.000A: unknown main item tag 0x0
[  323.016678][ T1353] wacom 0003:056A:0307.000A: unknown main item tag 0x0
[  323.023601][ T1353] wacom 0003:056A:0307.000A: unknown main item tag 0x0
[  323.035560][ T1353] wacom 0003:056A:0307.000A: hidraw0: USB HID v0.00 Device [HID 056a:0307] on usb-dummy_hcd.4-1/input0
[  323.076672][ T4232] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  323.842632][   T13] usb 5-1: USB disconnect, device number 10
[  324.036736][ T4232] usb 3-1: Using ep0 maxpacket: 16
[  324.168724][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.184545][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.195167][ T4232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  324.213874][ T4232] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  324.223391][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.240427][ T4232] usb 3-1: config 0 descriptor??
[  324.536796][ T4292] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  324.721250][ T4232] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000B/input/input13
[  324.749534][ T4232] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  324.960848][ T1110] usb 3-1: USB disconnect, device number 12
[  324.987294][ T4292] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  325.005846][ T4292] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  325.018828][ T4292] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  325.216839][ T4292] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  325.230221][ T4292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.240575][ T4292] usb 4-1: Product: syz
[  325.244814][ T4292] usb 4-1: Manufacturer: syz
[  325.331180][ T4292] usb 4-1: SerialNumber: syz
[  325.387854][ T4292] cdc_mbim 4-1:1.0: skipping garbage
[  325.393879][ T4292] usb 4-1: selecting invalid altsetting 1
[  325.400079][ T4229] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  325.606819][ T4292] cdc_mbim 4-1:1.0: bind() failure
[  325.632465][ T4292] usb 4-1: USB disconnect, device number 6
[  325.957253][ T4229] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  325.997300][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0
[  326.307278][ T4229] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  326.359099][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  326.575179][ T4229] usb 2-1: Product: syz
[  326.664145][ T4229] usb 2-1: Manufacturer: syz
[  326.757090][ T4229] usb 2-1: SerialNumber: syz
[  326.784353][ T4229] usb 2-1: config 0 descriptor??
[  326.838317][ T7655] syz.4.1012 (7655) used obsolete PPPIOCDETACH ioctl
[  326.860056][ T4229] usb 2-1: selecting invalid altsetting 0
[  327.146449][ T4229] usb 2-1: USB disconnect, device number 7
[  327.526679][ T1353] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  327.816685][ T1353] usb 5-1: Using ep0 maxpacket: 16
[  327.887477][ T7678] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  327.896328][ T7678] overlayfs: missing 'lowerdir'
[  328.716941][ T1353] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  328.730629][ T1353] usb 5-1: config 0 has no interface number 0
[  328.737039][ T1353] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  328.872441][ T1353] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  328.892186][ T1353] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  328.904589][ T1353] usb 5-1: Product: syz
[  328.911610][ T1353] usb 5-1: SerialNumber: syz
[  329.483246][   T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  330.018442][ T1353] usb 5-1: config 0 descriptor??
[  330.058444][ T1353] cm109 5-1:0.8: invalid payload size 208, expected 4
[  330.158330][ T1353] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input14
[  330.204688][ T7131] usb 5-1: USB disconnect, device number 11
[  330.210922][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  330.211253][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  330.258932][ T7131] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  330.304117][ T7703] tipc: Started in network mode
[  330.310412][ T7703] tipc: Node identity , cluster identity 4711
[  330.402410][   T13] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  330.420217][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.597599][   T13] usb 2-1: config 0 descriptor??
[  330.850461][ T7717] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  330.859358][ T7717] overlayfs: missing 'lowerdir'
[  331.327834][   T13] hackrf 2-1:0.0: Board ID: 00
[  331.333852][   T13] hackrf 2-1:0.0: Firmware version: 
[  333.221537][   T13] hackrf 2-1:0.0: Registered as swradio24
[  333.254030][   T13] hackrf 2-1:0.0: Registered as swradio25
[  333.266708][ T7731] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  333.336382][   T13] hackrf 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  333.387001][   T13] usb 2-1: USB disconnect, device number 8
[  333.497021][ T7745] loop2: detected capacity change from 0 to 64
[  333.544523][ T7747] wireguard: wg2: Could not create IPv4 socket
[  334.421481][ T7758] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  334.430513][ T7758] overlayfs: missing 'lowerdir'
[  335.647481][ T1353] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  335.682272][ T7769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'.
[  335.773935][ T7765] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  335.782714][ T7765] overlayfs: missing 'lowerdir'
[  336.042470][ T7776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  336.051378][ T7776] overlayfs: missing 'lowerdir'
[  336.726778][ T1353] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  336.741303][ T1353] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  336.755090][ T1353] usb 4-1: config 0 interface 0 has no altsetting 0
[  336.762471][ T1353] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  336.773481][ T1353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.783644][ T1353] usb 4-1: config 0 descriptor??
[  337.171199][ T7791] netlink: 'syz.4.1055': attribute type 2 has an invalid length.
[  337.193172][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'.
[  337.222511][ T4294] logitech-hidpp-device 0005:046D:B012.000C: Device not connected
[  337.498449][ T1353] logitech 0003:046D:CA03.000D: ignoring exceeding usage max
[  337.866706][ T4229] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  337.914484][ T7796] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  337.923595][ T7796] overlayfs: missing 'lowerdir'
[  338.228331][ T1353] logitech 0003:046D:CA03.000D: hidraw0: USB HID v0.01 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0
[  338.266465][ T1353] logitech 0003:046D:CA03.000D: no inputs found
[  338.375725][ T4229] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  338.404987][ T4229] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  338.443614][ T1353] usb 4-1: USB disconnect, device number 7
[  338.466841][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0
[  338.492659][ T4229] usb 1-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00
[  338.511275][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.524733][ T4229] usb 1-1: config 0 descriptor??
[  338.546956][ T7788] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  338.623218][ T7816] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  338.632238][ T7816] overlayfs: missing 'lowerdir'
[  338.886772][ T1353] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  339.449681][ T7809] fido_id[7809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  339.488389][ T4229] hid_mf 0003:0079:1844.000E: unknown main item tag 0x2
[  339.506902][ T4229] hid_mf 0003:0079:1844.000E: report_id 1214947037 is invalid
[  339.514408][ T4229] hid_mf 0003:0079:1844.000E: item 0 4 1 8 parsing failed
[  339.579239][ T4230] logitech-hidpp-device 0005:046D:B012.000F: Device not connected
[  339.639509][ T4229] hid_mf 0003:0079:1844.000E: HID parse failed.
[  339.646033][ T4229] hid_mf: probe of 0003:0079:1844.000E failed with error -22
[  340.268217][ T4229] usb 1-1: USB disconnect, device number 7
[  340.369186][ T7834] jffs2: notice: (7834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  340.436968][ T1353] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  340.455818][ T1353] usb 4-1: config 0 has no interface number 0
[  340.472796][ T1353] usb 4-1: config 0 interface 255 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  340.523387][ T1353] usb 4-1: config 0 interface 255 altsetting 255 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  341.064312][ T1353] usb 4-1: config 0 interface 255 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  341.132680][ T1353] usb 4-1: config 0 interface 255 has no altsetting 0
[  341.226074][ T1353] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  341.235493][ T1353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.252214][ T1353] usb 4-1: config 0 descriptor??
[  341.288344][ T7813] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  342.599218][ T4230] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  342.756802][ T1353] usbhid 4-1:0.255: can't add hid device: -71
[  342.767814][ T7863] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  342.776736][ T1353] usbhid: probe of 4-1:0.255 failed with error -71
[  342.815290][ T7863] overlayfs: missing 'lowerdir'
[  342.844761][ T1353] usb 4-1: USB disconnect, device number 8
[  343.006859][ T4230] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.371637][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  343.521700][ T4230] usb 2-1: New USB device found, idVendor=0eef, idProduct=722a, bcdDevice= 0.00
[  343.531958][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.581312][ T4230] usb 2-1: config 0 descriptor??
[  344.615087][ T4230] usb 2-1: can't set config #0, error -71
[  344.685967][ T4230] usb 2-1: USB disconnect, device number 9
[  345.340601][ T4230] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  345.655924][ T7886] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  345.667486][ T7886] overlayfs: missing 'lowerdir'
[  345.916191][ T7897] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  345.925080][ T7897] overlayfs: missing 'lowerdir'
[  346.077152][ T4230] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  346.162125][ T4230] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  346.292369][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.458381][ T4230] usb 2-1: config 0 descriptor??
[  346.806913][ T1353] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  347.028993][ T4230] smartjoyplus 0003:0B43:0003.0010: item fetching failed at offset 13/40
[  347.049404][ T4230] smartjoyplus 0003:0B43:0003.0010: parse failed
[  347.076176][ T4230] smartjoyplus: probe of 0003:0B43:0003.0010 failed with error -22
[  347.178974][ T1353] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  347.199019][ T1353] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  347.252005][ T4230] usb 2-1: USB disconnect, device number 10
[  347.317073][ T1353] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  347.326150][ T1353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  347.364565][ T1353] usb 3-1: SerialNumber: syz
[  347.461229][ T7907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  347.470381][ T7907] overlayfs: missing 'lowerdir'
[  347.672657][ T1353] usb 3-1: 0:2 : does not exist
[  347.991561][ T1353] usb 3-1: USB disconnect, device number 13
[  349.231417][ T4351] udevd[4351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  350.663235][ T7941] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  350.672210][ T7941] overlayfs: missing 'lowerdir'
[  350.991929][ T7953] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  351.001051][ T7953] overlayfs: missing 'lowerdir'
[  351.196953][ T1353] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  351.456962][ T1353] usb 2-1: Using ep0 maxpacket: 16
[  351.577393][ T1353] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  351.617867][ T1353] usb 2-1: config 0 has no interface number 0
[  351.704422][ T1353] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  352.374766][ T7966] jffs2: notice: (7966) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  352.595136][ T1353] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  352.605206][ T1353] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  352.634322][ T1353] usb 2-1: Product: syz
[  352.649318][ T1353] usb 2-1: SerialNumber: syz
[  352.670631][ T1353] usb 2-1: config 0 descriptor??
[  352.708670][ T1353] cm109 2-1:0.8: invalid payload size 208, expected 4
[  352.727388][ T1353] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input15
[  353.023281][ T1110] usb 2-1: USB disconnect, device number 11
[  353.036667][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.044113][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  353.201522][ T1110] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  353.450731][ T7987] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  353.474348][ T7987] overlayfs: missing 'lowerdir'
[  353.872512][ T7993] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  353.881335][ T7993] overlayfs: missing 'lowerdir'
[  355.004621][ T8011] loop2: detected capacity change from 0 to 1024
[  355.327014][ T4294] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  355.828293][ T8020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  355.891751][ T4294] usb 5-1: unable to get BOS descriptor or descriptor too short
[  355.973427][ T4294] usb 5-1: not running at top speed; connect to a high speed hub
[  356.199914][ T4294] usb 5-1: config 1 has an invalid interface number: 93 but max is 0
[  356.209667][ T4294] usb 5-1: config 1 has no interface number 0
[  356.217274][ T4294] usb 5-1: config 1 interface 93 has no altsetting 0
[  356.326845][ T4312] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  356.407497][ T4294] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[  356.419588][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.436513][ T4294] usb 5-1: Product: syz
[  356.445408][ T4294] usb 5-1: Manufacturer: syz
[  356.455386][ T4294] usb 5-1: SerialNumber: syz
[  356.616941][ T4312] usb 1-1: Using ep0 maxpacket: 16
[  356.760011][ T4312] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  356.778980][ T4312] usb 1-1: config 0 has no interface number 0
[  356.797737][ T4312] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  356.824748][ T4294] usb 5-1: USB disconnect, device number 12
[  357.057420][ T4312] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  357.078392][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  357.097010][ T4312] usb 1-1: Product: syz
[  357.101214][ T4312] usb 1-1: SerialNumber: syz
[  357.124661][ T4312] usb 1-1: config 0 descriptor??
[  357.181093][ T4312] cm109 1-1:0.8: invalid payload size 208, expected 4
[  357.196966][ T4312] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input16
[  357.274667][ T8039] loop4: detected capacity change from 0 to 256
[  357.346796][ T8039] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  357.366642][ T8039] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  357.404219][ T1353] usb 1-1: USB disconnect, device number 8
[  357.426677][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -2
[  357.435259][ T1353] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  357.441284][ T1110] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  357.465514][ T8039] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  357.712243][ T1110] usb 4-1: Using ep0 maxpacket: 32
[  357.740539][ T8045] loop2: detected capacity change from 0 to 64
[  357.755778][ T8045] hfs: unable to locate alternate MDB
[  357.762686][ T8045] hfs: continuing without an alternate MDB
[  357.848343][ T1110] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.915262][ T1110] usb 4-1: config 0 interface 0 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.949990][ T8049] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  357.959401][ T8049] overlayfs: missing 'lowerdir'
[  357.992741][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0
[  358.015807][ T1110] usb 4-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  358.057153][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.095304][ T1110] usb 4-1: config 0 descriptor??
[  358.740845][ T1110] a4tech 0003:09DA:0006.0011: unknown main item tag 0x5
[  358.798117][ T1110] a4tech 0003:09DA:0006.0011: unknown main item tag 0x4
[  358.890307][ T1110] a4tech 0003:09DA:0006.0011: unknown main item tag 0x2
[  359.057143][ T1110] a4tech 0003:09DA:0006.0011: unknown main item tag 0x7
[  359.067805][ T1110] a4tech 0003:09DA:0006.0011: unknown main item tag 0x7
[  359.076270][ T1110] a4tech 0003:09DA:0006.0011: hidraw0: USB HID v0.08 Device [HID 09da:0006] on usb-dummy_hcd.3-1/input0
[  359.370948][ T8073] nfs: Unknown parameter 'pro'
[  359.484927][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1148'.
[  359.733361][ T8076] netlink: 'syz.0.1148': attribute type 22 has an invalid length.
[  359.915335][ T8076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'.
[  360.023465][ T1110] usb 4-1: USB disconnect, device number 9
[  360.376273][ T8085] fido_id[8085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  360.413895][ T8091] loop4: detected capacity change from 0 to 4096
[  360.555996][ T8095] nfs: Unknown parameter 'pro'
[  360.982371][ T1353] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  361.009493][ T8091] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  361.196245][ T8091] ntfs: volume version 3.1.
[  361.491965][ T1353] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  361.501953][ T1353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.518545][ T1353] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  361.549956][ T1353] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.698067][ T1353] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  361.716648][ T1353] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  361.724081][ T1110] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  361.738060][ T1353] usb 1-1: Product: syz
[  361.743912][ T1353] usb 1-1: Manufacturer: syz
[  361.830451][ T1353] cdc_wdm 1-1:1.0: skipping garbage
[  361.881482][ T1353] cdc_wdm 1-1:1.0: skipping garbage
[  362.445892][ T1353] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  362.462340][ T1353] cdc_wdm 1-1:1.0: Unknown control protocol
[  362.552036][ T1110] usb 4-1: Using ep0 maxpacket: 8
[  362.630337][ T1353] usb 1-1: USB disconnect, device number 9
[  362.682169][ T1110] usb 4-1: config 0 interface 0 has no altsetting 0
[  362.694474][ T1110] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  362.790333][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.802790][ T1110] usb 4-1: config 0 descriptor??
[  363.303747][ T8135] nfs: Unknown parameter 'pro'
[  363.685883][ T1110] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x4
[  363.701262][ T1110] logitech-djreceiver 0003:046D:C534.0012: ignoring exceeding usage max
[  363.711218][ T1110] logitech-djreceiver 0003:046D:C534.0012: unknown main item tag 0x4
[  363.732063][ T1110] logitech-djreceiver 0003:046D:C534.0012: hidraw0: USB HID v0.81 Device [HID 046d:c534] on usb-dummy_hcd.3-1/input0
[  363.954790][ T1353] usb 4-1: USB disconnect, device number 10
[  364.054313][ T8145] fido_id[8145]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  365.192449][ T8143] loop4: detected capacity change from 0 to 32768
[  365.563042][ T8143] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1171 (8143)
[  365.953777][ T8143] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  365.992272][ T8143] BTRFS info (device loop4): metadata ratio 65537
[  366.066198][ T8143] BTRFS info (device loop4): turning on sync discard
[  366.073179][ T8143] BTRFS info (device loop4): using free space tree
[  366.080880][ T8143] BTRFS info (device loop4): has skinny extents
[  366.484989][ T8143] BTRFS info (device loop4): enabling ssd optimizations
[  366.606810][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  366.676701][ T1110] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  366.848004][ T4230] usb 3-1: Using ep0 maxpacket: 32
[  366.939145][ T1110] usb 2-1: Using ep0 maxpacket: 16
[  366.966895][ T4230] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  366.992158][ T4230] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.081675][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.092927][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.106631][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  367.119823][ T1110] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  367.128952][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.142234][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  367.158224][ T1110] usb 2-1: config 0 descriptor??
[  367.164110][ T4230] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  367.185982][ T4230] usb 3-1: Product: syz
[  367.196156][ T4230] usb 3-1: Manufacturer: syz
[  367.261287][ T4230] hub 3-1:4.0: USB hub found
[  367.480366][ T4230] hub 3-1:4.0: 2 ports detected
[  367.642220][ T1110] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  367.654205][ T1110] microsoft 0003:045E:07DA.0013: ignoring exceeding usage max
[  367.809073][ T1110] microsoft 0003:045E:07DA.0013: No inputs registered, leaving
[  367.999222][ T1110] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  368.183242][ T1110] microsoft 0003:045E:07DA.0013: no inputs found
[  368.304741][ T1110] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway
[  368.419910][ T1110] usb 2-1: USB disconnect, device number 12
[  369.097341][ T1353] hub 3-1:4.0: hub_ext_port_status failed (err = -71)
[  369.209374][ T4230] usb 3-1: USB disconnect, device number 14
[  369.219434][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'.
[  369.271387][ T8242] fido_id[8242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  369.906864][ T4230] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  370.277479][ T4230] usb 3-1: config 127 has an invalid interface number: 57 but max is 0
[  370.297132][ T4230] usb 3-1: config 127 has no interface number 0
[  370.332205][ T4230] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  370.397345][   T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  370.634766][ T1110] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  370.640301][ T4230] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  370.660611][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.669035][ T4230] usb 3-1: Product: syz
[  370.673221][ T4230] usb 3-1: Manufacturer: syz
[  370.677915][ T4230] usb 3-1: SerialNumber: syz
[  370.710888][ T8256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  370.815590][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.829262][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.886946][   T23] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  370.901703][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.910175][ T1110] usb 2-1: Using ep0 maxpacket: 32
[  370.921243][   T23] usb 4-1: config 0 descriptor??
[  370.970177][   T23] gspca_main: cpia1-2.14.0 probing 0813:0001
[  371.047074][ T1110] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  371.159800][ T8256] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  371.257656][ T1110] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  371.267974][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  371.276394][ T1110] usb 2-1: Product: syz
[  371.284541][ T1110] usb 2-1: Manufacturer: syz
[  371.290546][ T1110] usb 2-1: SerialNumber: syz
[  371.350875][ T1110] usb 2-1: config 0 descriptor??
[  371.398401][ T8264] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  371.515954][ T1110] hub 2-1:0.0: bad descriptor, ignoring hub
[  371.564088][ T1110] hub: probe of 2-1:0.0 failed with error -5
[  371.634988][ T4230] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  371.645392][ T4230] asix: probe of 3-1:127.57 failed with error -71
[  371.657112][   T23] gspca_cpia1: usb_control_msg 01, error -71
[  371.662602][ T4230] usb 3-1: USB disconnect, device number 15
[  371.663729][   T23] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  371.741066][   T23] usb 4-1: USB disconnect, device number 11
[  372.731124][ T8290] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  372.740154][ T8290] overlayfs: missing 'lowerdir'
[  372.747903][ T4229] usb 2-1: USB disconnect, device number 13
[  373.706727][   T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  374.136816][   T23] usb 5-1: Using ep0 maxpacket: 32
[  374.156712][ T4229] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  376.106576][ T8339] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1228'.
[  376.126852][   T23] usb 5-1: unable to read config index 0 descriptor/all
[  376.141101][   T23] usb 5-1: can't read configurations, error -71
[  376.276812][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  376.313918][ T8342] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  376.325994][ T8342] overlayfs: missing 'lowerdir'
[  376.333332][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  376.359043][ T4229] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  376.368614][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.383731][ T4229] usb 4-1: config 0 descriptor??
[  376.410115][ T8311] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  376.421117][ T8350] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  376.435325][ T8350] overlayfs: missing 'lowerdir'
[  376.662265][ T8348] loop4: detected capacity change from 0 to 40427
[  376.692022][ T8348] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  376.706334][ T8348] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  376.748371][ T8348] F2FS-fs (loop4): invalid crc value
[  376.778318][ T8348] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  376.928563][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.030000][ T8364] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  377.030367][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.045921][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.052865][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.059966][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.068419][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.075479][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.082604][ T4229] kone 0003:1E7D:2CED.0014: unknown main item tag 0x0
[  377.089666][ T4229] kone 0003:1E7D:2CED.0014: unexpected long global item
[  377.097229][ T4229] kone 0003:1E7D:2CED.0014: parse failed
[  377.103887][ T4229] kone: probe of 0003:1E7D:2CED.0014 failed with error -22
[  377.197401][ T8364] overlayfs: missing 'lowerdir'
[  377.214871][ T1353] usb 4-1: USB disconnect, device number 12
[  378.009833][ T8348] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  378.024390][ T8348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  379.365788][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  379.372168][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  380.381292][ T4188] attempt to access beyond end of device
[  380.381292][ T4188] loop4: rw=2049, want=45104, limit=40427
[  381.017353][ T4229] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  381.632342][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short
[  381.788098][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  382.096724][ T4229] usb 4-1: string descriptor 0 read error: -22
[  382.104157][ T4229] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  382.113808][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.143819][ T8399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  382.171991][ T8399] overlayfs: missing 'lowerdir'
[  383.388002][ T4229] usb 4-1: 1:1: cannot get freq at ep 0x1
[  383.438016][ T4229] usb 4-1: USB disconnect, device number 13
[  383.558475][ T8412] pimreg1: tun_chr_ioctl cmd 35108
[  383.672491][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  383.806903][   T13] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  383.863639][ T8389] syz.2.1246 (8389): drop_caches: 1
[  384.113781][ T8391] syz.2.1246 (8391): drop_caches: 1
[  384.407502][   T13] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  384.485777][   T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.747052][   T13] usb 5-1: config 0 descriptor??
[  384.882213][   T13] cp210x 5-1:0.0: cp210x converter detected
[  386.087908][   T13] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  386.106695][   T13] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  386.115080][   T13] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  386.144069][   T13] usb 5-1: cp210x converter now attached to ttyUSB0
[  386.167939][   T13] usb 5-1: USB disconnect, device number 15
[  386.187434][   T13] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  386.202194][   T13] cp210x 5-1:0.0: device disconnected
[  386.587975][ T8441] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  386.698820][ T8441] overlayfs: missing 'lowerdir'
[  387.556686][ T1353] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  388.057180][ T1353] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  388.141917][ T1353] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  388.473649][ T1353] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  388.522161][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.554449][ T1353] usb 5-1: Product: syz
[  388.583130][ T1353] usb 5-1: Manufacturer: syz
[  388.589551][ T1353] usb 5-1: SerialNumber: syz
[  389.839903][ T1353] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  390.615292][ T1353] usb 5-1: USB disconnect, device number 16
[  390.702220][ T1353] usblp0: removed
[  391.900940][ T1353] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  393.203537][ T4232] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  393.247151][ T1353] usb 5-1: Using ep0 maxpacket: 16
[  393.353692][ T8512] loop3: detected capacity change from 0 to 256
[  393.366962][ T1353] usb 5-1: config 0 has no interfaces?
[  393.419004][ T8512] FAT-fs (loop3): Directory bread(block 64) failed
[  393.446973][ T4232] usb 3-1: Using ep0 maxpacket: 16
[  393.455839][ T8512] FAT-fs (loop3): Directory bread(block 65) failed
[  393.473089][ T8512] FAT-fs (loop3): Directory bread(block 66) failed
[  393.510280][ T8512] FAT-fs (loop3): Directory bread(block 67) failed
[  393.527018][ T1353] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  393.530944][ T8512] FAT-fs (loop3): Directory bread(block 68) failed
[  393.542742][ T8512] FAT-fs (loop3): Directory bread(block 69) failed
[  393.546345][ T1353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.549364][ T8512] FAT-fs (loop3): Directory bread(block 70) failed
[  393.549399][ T8512] FAT-fs (loop3): Directory bread(block 71) failed
[  393.571196][ T8512] FAT-fs (loop3): Directory bread(block 72) failed
[  393.577930][ T8512] FAT-fs (loop3): Directory bread(block 73) failed
[  393.586822][ T4232] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.613305][ T1353] usb 5-1: Product: syz
[  393.641822][ T1353] usb 5-1: Manufacturer: syz
[  393.646477][ T1353] usb 5-1: SerialNumber: syz
[  393.656942][ T4232] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.681512][ T1353] usb 5-1: config 0 descriptor??
[  393.687161][ T4232] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  393.717025][ T4232] usb 3-1: config 0 interface 0 has no altsetting 0
[  393.723676][ T4232] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  393.748068][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.757318][ T1353] usb 5-1: can't set config #0, error -71
[  393.786820][ T1353] usb 5-1: USB disconnect, device number 17
[  393.794868][ T4232] usb 3-1: config 0 descriptor??
[  393.829345][ T8518] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  394.308516][ T4232] hid (null): report_id 34376 is invalid
[  394.322109][ T4232] hid (null): invalid report_size 29285
[  394.362317][ T4232] hid (null): invalid report_size 29285
[  394.386578][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  394.511832][ T4232] usb 3-1: USB disconnect, device number 16
[  394.656700][   T23] usb 4-1: Using ep0 maxpacket: 32
[  394.662006][ T4229] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  394.806809][   T23] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  394.904540][ T8538] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  394.913877][ T8538] overlayfs: missing 'lowerdir'
[  395.026764][   T23] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  395.035840][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.046682][ T4229] usb 2-1: config 0 has an invalid interface number: 205 but max is 0
[  395.054881][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  395.089754][   T23] usb 4-1: Product: syz
[  395.093960][   T23] usb 4-1: Manufacturer: syz
[  395.106715][ T4229] usb 2-1: config 0 has no interface number 0
[  395.112851][ T4229] usb 2-1: config 0 interface 205 has no altsetting 0
[  395.124335][   T23] usb 4-1: SerialNumber: syz
[  395.147623][   T23] usb 4-1: config 0 descriptor??
[  395.167488][ T4232] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  395.187591][   T23] usb 4-1: bad CDC descriptors
[  395.192767][   T23] usb 4-1: unsupported MDLM descriptors
[  395.311606][ T8546] loop4: detected capacity change from 0 to 4096
[  395.356885][ T4229] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  395.366060][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.394425][ T4229] usb 2-1: Product: syz
[  395.398781][ T4229] usb 2-1: Manufacturer: syz
[  395.403388][ T4229] usb 2-1: SerialNumber: syz
[  395.424616][ T1353] usb 4-1: USB disconnect, device number 14
[  395.432624][ T4229] usb 2-1: config 0 descriptor??
[  395.478399][ T4229] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  395.510048][ T8546] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  395.527156][ T4229] dvb-usb: bulk message failed: -22 (3/0)
[  395.534449][ T8546] ntfs3: loop4: Failed to load $Extend.
[  395.543114][ T4232] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  395.561876][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.574569][ T4229] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  395.595821][ T4232] usb 1-1: config 0 descriptor??
[  395.626917][ T4229] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  395.647097][ T8544] loop2: detected capacity change from 0 to 32768
[  395.650800][ T4232] cp210x 1-1:0.0: cp210x converter detected
[  395.666683][ T4229] usb 2-1: media controller created
[  395.673188][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  395.692066][ T4188] ntfs3: loop4: ntfs_sync_fs r=9 failed, -22.
[  395.704944][ T4188] ntfs3: loop4: ntfs_evict_inode r=9 failed, -22.
[  395.712873][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  395.726337][ T4229] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  395.738401][ T8544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1297 (8544)
[  395.770854][ T8544] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  395.808088][ T4229] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18
[  395.832987][ T8544] BTRFS info (device loop2): metadata ratio 65537
[  395.844203][ T4229] dvb-usb: schedule remote query interval to 150 msecs.
[  395.861568][ T8544] BTRFS info (device loop2): turning on sync discard
[  395.868685][ T4229] dvb-usb: bulk message failed: -22 (3/0)
[  395.878800][ T8544] BTRFS info (device loop2): using free space tree
[  395.907071][ T8544] BTRFS info (device loop2): has skinny extents
[  395.916628][ T4229] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  395.931535][ T4229] usb 2-1: USB disconnect, device number 14
[  396.050716][ T4229] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  396.151210][ T8544] BTRFS info (device loop2): enabling ssd optimizations
[  396.308054][ T4232] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  396.324068][ T4232] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  396.347983][ T4232] usb 1-1: cp210x converter now attached to ttyUSB0
[  396.395333][ T4232] usb 1-1: USB disconnect, device number 10
[  396.430418][ T4232] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  396.465347][ T4232] cp210x 1-1:0.0: device disconnected
[  397.135242][ T8587] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  397.144067][ T8587] overlayfs: missing 'lowerdir'
[  399.522873][ T8617] bridge0: bridge: STP does not work in non-root netns
[  399.679699][ T8622] device macvlan0 entered promiscuous mode
[  400.917849][ T8651] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  400.926840][ T8651] overlayfs: missing 'lowerdir'
[  402.406752][ T1110] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  402.858057][ T1110] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  402.897651][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.943654][ T1110] usb 2-1: config 0 descriptor??
[  402.961866][ T8679] loop2: detected capacity change from 0 to 2048
[  403.009175][ T1110] cp210x 2-1:0.0: cp210x converter detected
[  403.060684][ T8679] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,,errors=continue. Quota mode: none.
[  403.397313][ T8695] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  403.406106][ T8695] overlayfs: missing 'lowerdir'
[  403.446607][ T1110] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  403.476823][ T1110] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  403.506632][ T1110] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  403.541773][ T8699] tipc: Started in network mode
[  403.550122][ T8699] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711
[  403.567906][ T1110] usb 2-1: cp210x converter now attached to ttyUSB0
[  403.576329][ T8699] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  403.615623][ T1110] usb 2-1: USB disconnect, device number 15
[  403.642501][ T1110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  403.664450][ T1110] cp210x 2-1:0.0: device disconnected
[  403.774251][ T8707] loop2: detected capacity change from 0 to 512
[  403.924521][ T8707] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  404.008274][ T8707] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  405.152536][   T13] tipc: Node number set to 43690
[  405.427383][ T4354] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  406.118437][ T8731] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  406.127235][ T8731] overlayfs: missing 'lowerdir'
[  406.216211][ T8737] loop2: detected capacity change from 0 to 128
[  406.488169][ T8737] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  406.708482][ T8737] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  408.110095][ T8767] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  408.125187][ T8769] loop4: detected capacity change from 0 to 1024
[  408.831039][ T8769] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  408.846640][ T8769] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  408.854096][ T8769] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  408.985453][ T8769] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,noblock_validity,nomblk_io_submit,i_version,grpquota,nomblk_io_submit,noinit_itable,dioread_nolock,. Quota mode: writeback.
[  409.035124][ T8769] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  409.209641][ T8775] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  409.219700][ T8775] overlayfs: missing 'lowerdir'
[  409.265585][ T8769] EXT4-fs (loop4): shut down requested (0)
[  409.603031][ T8799] syz.2.1381[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  409.603185][ T8799] syz.2.1381[8799] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  410.805073][ T8814] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  410.825465][ T8814] overlayfs: missing 'lowerdir'
[  411.023931][ T4232] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  411.031577][ T4232] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  411.056710][ T8227] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  411.442017][ T8227] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  411.442260][ T4232] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  411.450502][ T8227] usb 5-1: config 0 has no interface number 0
[  411.498131][ T8227] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  411.611278][ T8827] fido_id[8827]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  411.624893][   T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  411.642190][ T8831] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  411.651064][ T8831] overlayfs: missing 'lowerdir'
[  411.736922][ T8227] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  411.749219][ T8227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.757737][ T8227] usb 5-1: Product: syz
[  411.761912][ T8227] usb 5-1: Manufacturer: syz
[  411.772045][ T8227] usb 5-1: SerialNumber: syz
[  411.782314][ T8227] usb 5-1: config 0 descriptor??
[  411.820209][ T1110] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  411.935806][ T8227] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  411.976859][   T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.988383][   T13] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  412.003994][   T13] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  412.015120][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.417506][   T13] ttusb-dec: probe of 2-1:1.0 failed with error -2
[  412.614918][   T13] usb 2-1: USB disconnect, device number 16
[  412.716667][    C1] usb 5-1: yurex_control_callback - control failed: -2
[  412.723998][ T1110] usb 4-1: Using ep0 maxpacket: 16
[  412.727986][ T7131] usb 5-1: USB disconnect, device number 18
[  412.757515][ T7131] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  412.859785][ T1110] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  412.868069][ T1110] usb 4-1: config 0 has no interface number 0
[  412.874142][ T1110] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.888251][ T1110] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  412.899326][ T1110] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  412.910292][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.927797][ T1110] usb 4-1: config 0 descriptor??
[  413.461927][ T1110] hid (null): global environment stack underflow
[  413.677093][ T1110] uclogic 0003:28BD:0071.0017: pen parameters not found
[  413.705571][ T1110] uclogic 0003:28BD:0071.0017: interface is invalid, ignoring
[  413.735130][ T8850] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  413.743956][ T8850] overlayfs: missing 'lowerdir'
[  413.980422][ T7131] usb 4-1: USB disconnect, device number 15
[  414.694751][ T8868] loop2: detected capacity change from 0 to 32768
[  414.743573][ T8868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1404 (8868)
[  414.827260][ T8868] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  414.853580][ T8868] BTRFS info (device loop2): setting nodatasum
[  414.864574][ T8868] BTRFS info (device loop2): force zlib compression, level 3
[  414.891655][ T8868] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  414.936866][ T8868] BTRFS info (device loop2): use lzo compression, level 0
[  414.944119][ T8868] BTRFS info (device loop2): turning on flush-on-commit
[  414.984352][ T8868] BTRFS info (device loop2): enabling auto defrag
[  415.004556][ T8868] BTRFS info (device loop2): max_inline at 4096
[  415.016636][ T8868] BTRFS info (device loop2): using free space tree
[  415.033531][ T8868] BTRFS info (device loop2): has skinny extents
[  415.967331][ T8908] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  415.976085][ T8908] overlayfs: missing 'lowerdir'
[  415.991305][ T8868] BTRFS info (device loop2): enabling ssd optimizations
[  417.709149][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1429'.
[  419.092065][   T23] Bluetooth: hci4: command 0x0401 tx timeout
[  419.220165][ T8941] loop2: detected capacity change from 0 to 32768
[  420.111952][ T8941] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  421.028448][ T8960] loop3: detected capacity change from 0 to 32768
[  421.062006][ T4197] ocfs2: Unmounting device (7,2) on (node local)
[  421.152089][   T26] audit: type=1800 audit(1786470675.425:55): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1430" name="file1" dev="loop3" ino=7 res=0 errno=0
[  422.184174][ T9011] capability: warning: `syz.0.1448' uses 32-bit capabilities (legacy support in use)
[  422.211832][ T9011] program syz.0.1448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  423.106694][ T9017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'.
[  423.367886][ T9027] loop3: detected capacity change from 0 to 64
[  423.703474][ T4193] hfs: request for non-existent node 131072 in B*Tree
[  424.622073][ T9054] loop2: detected capacity change from 0 to 512
[  424.644851][ T9054] EXT4-fs (loop2): Ignoring removed bh option
[  424.684619][ T9054] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  424.696699][ T7131] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  424.794687][ T9054] EXT4-fs (loop2): 1 truncate cleaned up
[  424.810830][ T9054] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none.
[  425.176813][ T7131] usb 2-1: Using ep0 maxpacket: 32
[  425.182878][   T26] audit: type=1800 audit(1786470679.455:56): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1462" name="file0" dev="loop2" ino=13 res=0 errno=0
[  425.296855][ T7131] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  425.326717][ T7131] usb 2-1: config 0 has no interface number 0
[  425.487085][ T7131] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  425.506474][ T7131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.524222][ T7131] usb 2-1: Product: syz
[  425.534731][ T7131] usb 2-1: Manufacturer: syz
[  425.542095][ T7131] usb 2-1: SerialNumber: syz
[  425.561368][ T7131] usb 2-1: config 0 descriptor??
[  425.612949][ T7131] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  425.829469][ T7131] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  426.266586][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  426.318351][ T7131] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  426.334855][ T7131] usb 2-1: USB disconnect, device number 17
[  426.344160][ T7131] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  426.385634][ T7131] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  426.425539][ T7131] quatech2 2-1:0.51: device disconnected
[  427.206699][ T4230] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  427.522746][ T9077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1468'.
[  427.726705][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short
[  428.066852][ T4230] usb 3-1: unable to read config index 0 descriptor/start: -71
[  428.077869][ T4230] usb 3-1: can't read configurations, error -71
[  428.844741][ T4233] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  430.323698][ T9125] loop3: detected capacity change from 0 to 128
[  430.347015][ T4189] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  430.410310][ T4233] usb 2-1: Using ep0 maxpacket: 32
[  430.546687][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 158, changing to 11
[  430.567625][ T9125] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  430.660223][ T9125] ext4 filesystem being mounted at /308/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  430.787342][ T4189] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  430.849903][ T4189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.027933][ T4189] usb 5-1: config 0 descriptor??
[  431.195253][ T4189] cp210x 5-1:0.0: cp210x converter detected
[  431.224919][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58832, setting to 1024
[  431.241015][ T4233] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  431.250244][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.261927][ T4233] usb 2-1: config 0 descriptor??
[  431.286733][ T4233] usb 2-1: can't set config #0, error -71
[  431.306734][ T4233] usb 2-1: USB disconnect, device number 18
[  431.676898][ T4189] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  431.987103][ T4189] usb 5-1: cp210x converter now attached to ttyUSB0
[  433.364282][ T4189] usb 5-1: USB disconnect, device number 19
[  433.372508][ T4189] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  433.392329][ T4189] cp210x 5-1:0.0: device disconnected
[  433.654715][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'.
[  434.895628][ T9187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'.
[  435.309002][ T9173] loop4: detected capacity change from 0 to 8192
[  436.450282][ T9173] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  437.450810][ T9173] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  437.462078][ T9173] ntfs3: loop4: Failed to load $Extend.
[  437.694370][ T9139] block2mtd: error: cannot open device i² ì
[  437.694370][ T9139] Òé
[  437.898410][ T9218] loop3: detected capacity change from 0 to 64
[  439.673909][ T9244] mt6360: probe of 0-0034 failed with error -5
[  439.721327][ T9244] i2c i2c-0: new_device: Instantiated device mt6360 at 0x34
[  439.968908][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  439.975718][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  440.080106][ T9262] loop2: detected capacity change from 0 to 256
[  440.191592][ T9262] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  440.245450][ T9262] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  440.292898][ T9262] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  440.338263][   T26] audit: type=1800 audit(1786470694.615:57): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1528" name="file1" dev="loop2" ino=1048723 res=0 errno=0
[  440.375525][ T9269] loop3: detected capacity change from 0 to 512
[  440.610377][ T9269] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  440.861299][ T9269] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  442.583546][ T9305] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  442.590741][ T9305] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  442.653847][ T9305] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  442.660335][ T9305] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  442.736459][ T9305] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  442.743034][ T9305] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  442.793893][ T9305] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  442.800390][ T9305] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  442.818212][ T9315] loop4: detected capacity change from 0 to 256
[  442.843673][ T9305] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  442.850197][ T9305] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  442.902943][ T9315] exfat: Unknown parameter 'zero_size_dir'
[  443.173204][ T9309] loop3: detected capacity change from 0 to 32768
[  443.259016][ T9309] (syz.3.1540,9309,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  443.309329][ T9309] (syz.3.1540,9309,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  443.397885][ T9309] (syz.3.1540,9309,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x8514aa1d. Applying ECC.
[  443.853456][ T9309] JBD2: Ignoring recovery information on journal
[  444.370265][ T9309] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  444.639698][ T9346] loop4: detected capacity change from 0 to 4096
[  444.665425][ T9346] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  444.678518][ T9309] (syz.3.1540,9309,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x6db03cd7, computed 0xe423803c. Applying ECC.
[  444.697869][ T9309] (syz.3.1540,9309,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x6db03cd7, computed 0xa5e8ec9c
[  444.819461][ T9309] (syz.3.1540,9309,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  444.852999][ T9309] (syz.3.1540,9309,0):ocfs2_quota_read:201 ERROR: status = -5
[  444.903307][ T9353] kvm [9352]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010006 data 0x5
[  444.940922][ T9309] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 1
[  444.972449][ T9309] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  444.982022][ T9309] (syz.3.1540,9309,0):ocfs2_acquire_dquot:878 ERROR: status = -5
[  445.038873][ T9309] (syz.3.1540,9309,0):ocfs2_symlink:1879 ERROR: status = -5
[  445.046404][ T9309] (syz.3.1540,9309,0):ocfs2_symlink:2065 ERROR: status = -5
[  445.125034][ T4193] ocfs2: Unmounting device (7,3) on (node local)
[  445.164815][ T9345] loop2: detected capacity change from 0 to 32768
[  445.271784][ T9345] JBD2: Ignoring recovery information on journal
[  445.383298][ T9345] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  445.436744][ T8228] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  445.556342][ T9345] (syz.2.1559,9345,0):ocfs2_reflink_ioctl:4461 ERROR: status = -14
[  445.683254][ T4197] ocfs2: Unmounting device (7,2) on (node local)
[  446.327386][ T9380] kvm [9377]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0xfffffffffffffff7
[  446.357008][ T8228] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  446.768966][ T9390] loop3: detected capacity change from 0 to 4096
[  446.930984][ T8228] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  446.941297][ T8228] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00
[  446.950824][ T8228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.001940][ T9390] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  447.485886][ T9395] loop2: detected capacity change from 0 to 32768
[  447.525352][ T9395] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1576 (9395)
[  447.557498][ T9395] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  447.566335][ T9395] BTRFS info (device loop2): setting nodatacow, compression disabled
[  447.587668][ T9395] BTRFS info (device loop2): setting datasum, datacow enabled
[  447.595188][ T9395] BTRFS info (device loop2): force clearing of disk cache
[  447.624236][ T9395] BTRFS info (device loop2): enabling ssd optimizations
[  447.631478][ T9395] BTRFS info (device loop2): using spread ssd allocation scheme
[  447.639227][ T9395] BTRFS info (device loop2): turning on sync discard
[  447.645970][ T9395] BTRFS info (device loop2): turning on flush-on-commit
[  447.656225][ T9395] BTRFS info (device loop2): not using ssd optimizations
[  447.676312][ T9395] BTRFS info (device loop2): not using spread ssd allocation scheme
[  447.696633][ T9395] BTRFS info (device loop2): using free space tree
[  447.703192][ T9395] BTRFS info (device loop2): has skinny extents
[  448.584749][ T8228] gud 5-1:1.0: Failed to get connectors (error=-71)
[  448.592004][ T8228] gud: probe of 5-1:1.0 failed with error -71
[  448.606426][ T8228] usb 5-1: USB disconnect, device number 20
[  448.627085][ T9395] BTRFS info (device loop2): clearing free space tree
[  448.709512][ T9395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  448.803809][ T9395] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  449.309094][ T9395] BTRFS info (device loop2): creating free space tree
[  449.319142][ T9395] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  449.338646][ T9395] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  449.456270][ T9395] BTRFS error (device loop2): balance: mixed groups data and metadata options must be the same
[  449.469100][ T7131] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  450.516849][ T7131] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.531556][ T7131] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  450.541071][ T7131] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  450.550872][ T7131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.574044][ T7131] usb 4-1: config 0 descriptor??
[  450.630162][ T7131] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  450.637659][ T7131] dvb-usb: bulk message failed: -22 (3/0)
[  450.675722][ T7131] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  450.697700][ T7131] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  450.704798][ T7131] usb 4-1: media controller created
[  450.719334][ T7131] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  450.732179][ T7131] dvb-usb: bulk message failed: -22 (6/0)
[  450.738880][ T7131] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  450.787018][ T7131] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[  450.801209][ T7131] dvb-usb: schedule remote query interval to 150 msecs.
[  450.808823][ T7131] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  450.840078][ T9432] dvb-usb: bulk message failed: -22 (4/0)
[  450.922136][ T7131] usb 4-1: USB disconnect, device number 16
[  450.970057][ T7131] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  451.182737][ T9464] loop4: detected capacity change from 0 to 2048
[  451.274642][ T9469] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.843334][ T9505] loop3: detected capacity change from 0 to 256
[  453.016802][ T9460] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  453.376590][ T4231] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  453.406927][ T9460] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  453.426762][ T9460] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  453.437323][ T9460] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00
[  453.446802][ T9460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.519867][  T146] Bluetooth: hci5: urb ffff888024ea5800 submission failed (90)
[  453.618277][ T4231] usb 3-1: Using ep0 maxpacket: 8
[  453.681723][ T9530] loop4: detected capacity change from 0 to 1024
[  453.757519][ T4231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  453.793763][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  453.830699][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  453.850697][ T4231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  453.864338][ T4231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  453.873984][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.893299][ T9460] usb 2-1: USB disconnect, device number 19
[  454.137009][ T4231] usb 3-1: GET_CAPABILITIES returned 0
[  454.142570][ T4231] usbtmc 3-1:16.0: can't read capabilities
[  454.278736][ T9539] syz.0.1616 uses obsolete (PF_INET,SOCK_PACKET)
[  454.410978][ T4231] usb 3-1: USB disconnect, device number 19
[  459.863456][   T23] Bluetooth: hci4: command 0x0405 tx timeout
[  460.740260][ T9620] Invalid argument reading file caps for ./file0
[  460.881793][ T9629] loop3: detected capacity change from 0 to 16
[  460.898052][ T9629] erofs: (device loop3): mounted with root inode @ nid 36.
[  460.924920][ T9629] attempt to access beyond end of device
[  460.924920][ T9629] loop3: rw=524288, want=48, limit=16
[  460.985150][ T9629] attempt to access beyond end of device
[  460.985150][ T9629] loop3: rw=524288, want=40, limit=16
[  461.937478][ T4229] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  462.307227][ T9648] overlayfs: missing 'lowerdir'
[  462.772711][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  462.783003][ T4229] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  462.793521][ T4229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  462.803520][ T4229] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  463.730611][ T9667] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  463.899112][ T4229] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  463.908386][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.917229][ T4229] usb 5-1: Product: syz
[  463.922221][ T4229] usb 5-1: Manufacturer: syz
[  463.928071][ T4229] usb 5-1: SerialNumber: syz
[  463.945785][ T4229] usb 5-1: config 0 descriptor??
[  464.026266][ T4229] ums-isd200 5-1:0.0: USB Mass Storage device detected
[  464.365862][ T4229] scsi host1: usb-storage 5-1:0.0
[  464.676601][ T9680] loop4: detected capacity change from 0 to 1024
[  464.694035][ T4229] usb 5-1: USB disconnect, device number 21
[  464.764608][ T9684] loop3: detected capacity change from 0 to 8192
[  464.781340][ T9683] loop2: detected capacity change from 0 to 2048
[  464.847547][ T4392] hfsplus: b-tree write err: -5, ino 25
[  464.853476][ T4392] hfsplus: b-tree write err: -5, ino 4
[  464.859984][ T4392] hfsplus: b-tree write err: -5, ino 2
[  464.900051][ T9684] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  464.912099][ T9684] REISERFS (device loop3): using ordered data mode
[  464.918773][ T9684] reiserfs: using flush barriers
[  465.000139][ T9684] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  465.757845][ T9684] REISERFS (device loop3): checking transaction log (loop3)
[  465.766596][ T9683] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  465.816962][ T9683] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.852328][ T9698] net_ratelimit: 1990 callbacks suppressed
[  465.852408][ T9698] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  465.903858][ T9683] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.1660: No space for directory leaf checksum. Please run e2fsck -D.
[  465.955975][ T9683] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.1660: Directory block failed checksum
[  466.006448][ T9704] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.1660: No space for directory leaf checksum. Please run e2fsck -D.
[  466.048589][ T9684] REISERFS (device loop3): Using tea hash to sort names
[  466.060072][ T9684] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  466.098830][ T9704] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.1660: checksumming directory block 0
[  466.237226][ T9711] overlayfs: missing 'lowerdir'
[  468.626709][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'.
[  469.457467][ T9752] overlayfs: missing 'lowerdir'
[  470.652545][ T9766] xt_hashlimit: size too large, truncated to 1048576
[  471.495878][ T9778] device syzkaller1 entered promiscuous mode
[  471.658459][ T9769] loop4: detected capacity change from 0 to 32768
[  471.696703][ T9769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1686 (9769)
[  471.756702][ T4293] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  471.875438][ T9769] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  471.906190][ T9769] BTRFS info (device loop4): metadata ratio 127
[  471.957934][ T9769] BTRFS info (device loop4): setting nodatasum
[  471.985621][ T9769] BTRFS info (device loop4): disabling tree log
[  472.023198][ T9769] BTRFS info (device loop4): turning off barriers
[  472.269602][ T9769] BTRFS info (device loop4): max_inline at 33
[  472.380293][ T9769] BTRFS info (device loop4): using free space tree
[  472.500558][ T9769] BTRFS info (device loop4): has skinny extents
[  472.776936][ T4293] usb 4-1: not running at top speed; connect to a high speed hub
[  472.856769][ T4293] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  472.938424][ T9812] overlayfs: missing 'lowerdir'
[  473.726767][ T4293] usb 4-1: string descriptor 0 read error: -71
[  473.733037][ T4293] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b
[  473.753176][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.805402][ T4293] usb 4-1: can't set config #9, error -71
[  473.813705][ T4293] usb 4-1: USB disconnect, device number 17
[  473.847479][ T9819] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000)
[  474.927451][ T9846] loop9: detected capacity change from 0 to 524287936
[  476.102328][ T9861] overlayfs: missing 'lowerdir'
[  476.824244][ T7131] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  477.865447][ T9872] loop3: detected capacity change from 0 to 256
[  477.969480][ T9872] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x331b010b, utbl_chksum : 0xe619d30d)
[  478.011101][ T7131] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  478.042807][ T7131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  478.055982][   T26] audit: type=1800 audit(1786470732.169:58): pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1714" name="file1" dev="loop3" ino=1048727 res=0 errno=0
[  478.088653][ T7131] usb 5-1: config 0 descriptor??
[  478.141543][ T7131] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  478.444175][ T9893] overlayfs: missing 'lowerdir'
[  478.594752][ T9892] loop2: detected capacity change from 0 to 1024
[  479.096204][ T9892] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  479.122865][ T7131] gspca_stv06xx: I2C: Read error writing address: -71
[  479.209413][ T7131] usb 5-1: USB disconnect, device number 22
[  479.294160][ T4392] hfsplus: b-tree write err: -5, ino 25
[  479.300021][ T4392] hfsplus: b-tree write err: -5, ino 4
[  479.359765][ T4392] hfsplus: b-tree write err: -5, ino 2
[  479.387396][ T9895] loop3: detected capacity change from 0 to 64
[  479.653732][   T26] audit: type=1800 audit(1786470733.665:59): pid=9895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1726" name="file1" dev="loop3" ino=21 res=0 errno=0
[  479.713532][ T4193] hfs: node 4:3 still has 1 user(s)!
[  480.088861][ T9920] input: syz0 as /devices/virtual/input/input20
[  480.903342][ T9931] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1738'.
[  480.918025][ T9929] overlayfs: missing 'lowerdir'
[  481.408449][ T9940] loop3: detected capacity change from 0 to 512
[  481.564487][ T9940] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  481.698789][ T9947] loop4: detected capacity change from 0 to 2048
[  481.738224][ T4330] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  481.784589][ T9952] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  482.009177][ T4330] usb 3-1: Using ep0 maxpacket: 16
[  482.137542][ T4330] usb 3-1: config 0 has an invalid interface number: 7 but max is 0
[  482.156486][ T4330] usb 3-1: config 0 has no interface number 0
[  482.167309][ T4330] usb 3-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  483.037238][ T4330] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  483.047194][ T4330] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.055664][ T4330] usb 3-1: Product: syz
[  483.060300][ T4330] usb 3-1: Manufacturer: syz
[  483.064904][ T4330] usb 3-1: SerialNumber: syz
[  483.094083][ T4330] r8152-cfgselector 3-1: config 0 descriptor??
[  483.121374][ T9956] loop3: detected capacity change from 0 to 32768
[  483.369553][ T9943] udc-core: couldn't find an available UDC or it's busy
[  483.409704][ T9943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  483.756409][ T4330] r8152 3-1:0.7: Expected endpoints are not found
[  483.771531][ T9973] overlayfs: missing 'lowerdir'
[  484.175720][ T4330] r8152-cfgselector 3-1: Unknown version 0x0000
[  484.288409][ T4330] r8152-cfgselector 3-1: USB disconnect, device number 20
[  484.435149][ T9956] XFS (loop3): Mounting V5 Filesystem
[  485.365153][ T9991] overlayfs: missing 'lowerdir'
[  485.574418][ T9956] XFS (loop3): Ending clean mount
[  485.612104][ T9993] netlink: 'syz.1.1757': attribute type 1 has an invalid length.
[  485.674441][ T9993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  485.682503][ T9993] IPv6: NLM_F_CREATE should be set when creating new route
[  485.752601][T10001] netlink: 'syz.1.1757': attribute type 1 has an invalid length.
[  485.760402][T10001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  485.848933][ T4193] XFS (loop3): Unmounting Filesystem
[  487.611971][ T4312] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  487.779308][T10029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  487.788196][T10029] overlayfs: missing 'lowerdir'
[  487.974565][ T4312] usb 2-1: Using ep0 maxpacket: 8
[  488.273482][ T8223] kernel read not supported for file /sequencer (pid: 8223 comm: kworker/1:14)
[  488.295361][ T4312] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  488.306268][T10044] overlayfs: missing 'lowerdir'
[  489.040321][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.060043][ T4312] usb 2-1: Product: syz
[  489.081547][ T4312] usb 2-1: Manufacturer: syz
[  489.086389][ T4312] usb 2-1: SerialNumber: syz
[  489.106828][ T4312] usb 2-1: config 0 descriptor??
[  489.162517][ T4312] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  489.257626][ T8223] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  490.080717][ T4312] gspca_sonixj: reg_w1 err -71
[  490.085723][ T4312] sonixj: probe of 2-1:0.0 failed with error -71
[  490.099085][T10049] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  490.107958][T10049] overlayfs: missing 'lowerdir'
[  490.129364][ T4312] usb 2-1: USB disconnect, device number 20
[  491.124500][ T4330] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  491.951275][ T4330] usb 5-1: Using ep0 maxpacket: 8
[  491.982384][T10077] loop3: detected capacity change from 0 to 131072
[  492.026220][ T8223] usb 3-1: unable to read config index 0 descriptor/all
[  492.070630][T10087] overlayfs: missing 'lowerdir'
[  492.453730][T10077] F2FS-fs (loop3): invalid crc value
[  492.464677][ T4330] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  492.470626][ T8223] usb 3-1: can't read configurations, error -71
[  492.477911][ T4330] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  492.505978][ T4330] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  492.521134][T10077] F2FS-fs (loop3): Found nat_bits in checkpoint
[  492.523029][ T4330] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  492.572179][T10077] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  492.611644][ T4330] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  492.631672][T10077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  492.646178][ T4330] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  492.670918][   T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  492.743695][T10099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  492.754093][T10099] overlayfs: missing 'lowerdir'
[  493.063841][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.130800][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.283529][   T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  493.418716][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.535817][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.566919][   T23] usb 2-1: config 0 descriptor??
[  493.608666][ T4330] usb 5-1: usb_control_msg returned -71
[  493.614290][ T4330] usbtmc 5-1:16.0: can't read capabilities
[  493.644020][ T4330] usb 5-1: USB disconnect, device number 23
[  494.371171][   T23] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  494.395008][   T23] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  494.592142][   T23] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE
[  495.457903][   T23] cp2112 0003:10C4:EA90.0018: error setting SMBus config
[  495.485300][   T23] cp2112: probe of 0003:10C4:EA90.0018 failed with error -71
[  495.523992][T10117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  495.563755][   T23] usb 2-1: USB disconnect, device number 21
[  496.135771][T10117] overlayfs: missing 'lowerdir'
[  498.107258][T10127] fido_id[10127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  498.620047][T10146] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  498.628965][T10146] overlayfs: missing 'lowerdir'
[  499.602687][T10150] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  499.611734][T10150] overlayfs: missing 'lowerdir'
[  501.682146][ T4232] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  503.033754][T10161] loop4: detected capacity change from 0 to 32768
[  503.181427][T10161] find_entry called with index = 0
[  503.189381][ T1433] ieee802154 phy0 wpan0: encryption failed: -22
[  503.202778][T10188] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  503.211841][T10188] overlayfs: missing 'lowerdir'
[  503.220295][ T1433] ieee802154 phy1 wpan1: encryption failed: -22
[  503.302140][T10161] read_mapping_page failed!
[  503.307755][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  503.352010][ T4232] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  503.374877][T10161] ERROR: (device loop4): txCommit: 
[  503.374877][T10161] 
[  503.447275][ T8223] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  503.455796][ T4232] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  503.633053][T10161] read_mapping_page failed!
[  503.682516][T10161] ERROR: (device loop4): txCommit: 
[  503.682516][T10161] 
[  503.744540][ T4232] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01
[  503.787339][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  503.883301][ T4232] usb 3-1: Product: syz
[  503.932139][ T4232] usb 3-1: Manufacturer: syz
[  504.029443][ T4447] read_mapping_page failed!
[  504.043108][ T4447] ERROR: (device loop4): txCommit: 
[  504.043108][ T4447] 
[  504.065255][ T4447] jfs_write_inode: jfs_commit_inode failed!
[  504.080563][T10172] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  504.097255][ T4232] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected
[  504.108633][ T4232] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  504.230931][T10192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  504.240221][T10192] overlayfs: missing 'lowerdir'
[  504.384524][ T8223] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  504.432528][ T8223] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  505.262713][ T8223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  505.271810][ T8223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  505.283185][ T8223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  505.385961][ T4230] usb 3-1: USB disconnect, device number 23
[  506.419055][ T8223] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  506.424219][ T4230] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  506.433251][ T8223] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  506.438450][ T4230] garmin_gps 3-1:1.0: device disconnected
[  506.458936][ T8223] usb 4-1: Product: syz
[  506.496097][ T8223] usb 4-1: can't set config #1, error -71
[  506.518665][ T8223] usb 4-1: USB disconnect, device number 18
[  507.480456][ T4232] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  507.605761][T10224] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  507.614757][T10224] overlayfs: missing 'lowerdir'
[  507.784091][ T4232] usb 2-1: Using ep0 maxpacket: 32
[  508.104817][ T4230] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  508.543334][ T4232] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  508.556325][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.577076][T10218] loop4: detected capacity change from 0 to 32768
[  508.584456][ T4232] usb 2-1: config 0 descriptor??
[  508.641345][ T4232] gspca_main: sunplus-2.14.0 probing 041e:400b
[  508.804220][T10233] netlink: 'syz.4.1830': attribute type 6 has an invalid length.
[  508.856570][ T4230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  508.879980][ T4230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  508.899085][T10237] pimreg: tun_chr_ioctl cmd 1074025677
[  508.904939][T10237] pimreg: linktype set to 774
[  508.917600][T10237] pimreg: tun_chr_ioctl cmd 1074025678
[  508.923102][T10237] pimreg: group set to 0
[  509.003091][ T4230] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  509.024155][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  509.032197][ T4230] usb 3-1: SerialNumber: syz
[  509.565997][ T4230] usb 3-1: 0:2 : does not exist
[  509.719591][ T4232] gspca_sunplus: reg_r err -71
[  509.743664][ T4232] sunplus: probe of 2-1:0.0 failed with error -71
[  509.865793][ T4230] usb 3-1: USB disconnect, device number 24
[  509.915833][ T4232] usb 2-1: USB disconnect, device number 22
[  510.379989][T10259] loop4: detected capacity change from 0 to 512
[  510.821949][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  510.958731][T10259] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  510.987111][T10276] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  511.002331][T10259] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  512.199981][T10293] device syzkaller1 entered promiscuous mode
[  513.663320][T10312] loop2: detected capacity change from 0 to 1024
[  513.698286][T10312] EXT4-fs (loop2): Ignoring removed bh option
[  513.768829][T10312] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  513.929023][T10320] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  515.438754][ T8223] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  515.876823][ T8223] usb 3-1: Using ep0 maxpacket: 16
[  516.005316][ T8223] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  516.101695][ T4230] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  516.176292][ T8223] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  516.185363][ T8223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.208257][ T8223] usb 3-1: Product: syz
[  516.212459][ T8223] usb 3-1: Manufacturer: syz
[  516.217034][ T8223] usb 3-1: SerialNumber: syz
[  516.231854][ T8223] r8152-cfgselector 3-1: config 0 descriptor??
[  516.472212][ T4230] usb 5-1: Using ep0 maxpacket: 8
[  516.508200][ T8223] r8152-cfgselector 3-1: Unknown version 0x0000
[  516.871485][ T8223] r8152-cfgselector 3-1: Unknown version 0x0000
[  516.956158][ T8223] r8152-cfgselector 3-1: USB disconnect, device number 25
[  517.381075][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  517.470734][ T4230] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  517.480531][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.490480][ T4230] usb 5-1: config 0 descriptor??
[  517.499036][T10348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1866'.
[  517.546548][ T4230] gspca_main: vc032x-2.14.0 probing 046d:0892
[  517.595496][T10355] loop2: detected capacity change from 0 to 256
[  517.663757][T10356] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  517.672658][T10356] overlayfs: missing 'lowerdir'
[  518.032206][T10355] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  518.600819][T10362] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22)
[  518.842397][ T4230] gspca_vc032x: reg_r err -71
[  518.847159][ T4230] vc032x: probe of 5-1:0.0 failed with error -71
[  518.856028][ T4230] usb 5-1: USB disconnect, device number 24
[  521.069997][T10399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  521.107739][T10400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  521.116669][T10400] overlayfs: missing 'lowerdir'
[  522.158895][T10410] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  522.167924][T10410] overlayfs: missing 'lowerdir'
[  525.430897][ T8226] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  526.213478][T10446] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  526.222359][T10446] overlayfs: missing 'lowerdir'
[  526.428477][ T8226] usb 5-1: Using ep0 maxpacket: 8
[  526.552982][T10454] loop3: detected capacity change from 0 to 1024
[  526.556952][ T8226] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.580783][ T8226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  526.602371][ T8226] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  526.623340][ T8226] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  526.652989][ T8226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.718264][ T8226] hub 5-1:1.0: bad descriptor, ignoring hub
[  526.738517][ T8226] hub: probe of 5-1:1.0 failed with error -5
[  526.758863][   T26] audit: type=1800 audit(1786470777.723:60): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1903" name="file1" dev="loop3" ino=2 res=0 errno=0
[  526.792400][ T8226] cdc_wdm 5-1:1.0: skipping garbage
[  526.805559][ T8226] cdc_wdm 5-1:1.0: skipping garbage
[  526.833500][ T8226] cdc_wdm: probe of 5-1:1.0 failed with error -22
[  526.927978][T10454] hfsplus: b-tree write err: -5, ino 3
[  527.014032][T10466] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  527.022972][T10466] overlayfs: missing 'lowerdir'
[  527.392529][ T8226] usb 5-1: reset high-speed USB device number 25 using dummy_hcd
[  527.498780][    T9] hfsplus: bad catalog file entry
[  529.100034][ T4232] usb 5-1: USB disconnect, device number 25
[  529.512594][T10489] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  529.521654][T10489] overlayfs: missing 'lowerdir'
[  529.931837][T10482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1912'.
[  530.255836][T10497] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  530.264719][T10497] overlayfs: missing 'lowerdir'
[  531.488340][T10502] loop2: detected capacity change from 0 to 1024
[  531.556133][T10510] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  531.565133][T10510] overlayfs: missing 'lowerdir'
[  531.650932][T10502] EXT4-fs (loop2): Ignoring removed bh option
[  531.861481][T10502] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  533.285694][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  533.384603][T10505] loop3: detected capacity change from 0 to 32768
[  533.391864][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  533.400362][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  533.854134][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  533.880671][ T4197] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  534.018242][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.055173][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  534.150411][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  534.258588][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.269032][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  534.358488][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.367962][ T4197] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  534.395873][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.402672][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  534.455260][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  534.485224][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.531014][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  534.570504][T10505] XFS (loop3): Mounting V5 Filesystem
[  534.625578][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.639973][ T4197] EXT4-fs error (device loop2): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  534.698027][T10505] XFS (loop3): Ending clean mount
[  534.705613][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  534.713280][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  534.868921][ T4197] EXT4-fs error (device loop2): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /366/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  535.001996][ T4193] XFS (loop3): Unmounting Filesystem
[  535.019504][ T4197] EXT4-fs (loop2): Remounting filesystem read-only
[  535.120100][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  535.228406][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  535.329640][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  535.566968][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  535.652457][T10558] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  535.661413][T10558] overlayfs: missing 'lowerdir'
[  536.497468][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  536.529555][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  536.589262][ T4197] EXT4-fs warning (device loop2): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  539.990348][ T1330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  540.952260][ T1330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.160798][ T1330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.278473][ T9460] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  542.998177][ T1330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.285918][T10653] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  543.294911][T10653] overlayfs: missing 'lowerdir'
[  543.469546][ T9460] usb 2-1: Using ep0 maxpacket: 16
[  544.532462][ T4232] Bluetooth: hci4: command 0x0409 tx timeout
[  544.960949][ T9460] usb 2-1: unable to read config index 0 descriptor/start: -71
[  544.968854][ T9460] usb 2-1: can't read configurations, error -71
[  545.027014][T10670] loop3: detected capacity change from 0 to 512
[  545.227961][T10670] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  545.537112][T10670] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  545.546765][T10680] loop4: detected capacity change from 0 to 8
[  545.649644][T10686] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  545.658667][T10686] overlayfs: missing 'lowerdir'
[  545.844014][T10670] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  546.034695][T10688] Illegal XDP return value 4294966772, expect packet loss!
[  546.037897][T10637] chnl_net:caif_netlink_parms(): no params data found
[  546.087363][T10670] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  546.137088][T10670] System zones: 0-2, 18-18, 34-34
[  546.201008][T10670] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.1965: bad orphan inode 15
[  546.237085][T10670] ext4_test_bit(bit=14, block=18) = 1
[  546.244960][T10670] is_bad_inode(inode)=0
[  546.249754][T10670] NEXT_ORPHAN(inode)=2264924160
[  546.255345][T10670] max_ino=32
[  546.258701][T10670] i_nlink=0
[  546.269991][T10670] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1965: corrupted inode contents
[  546.301837][T10670] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #15: comm syz.3.1965: mark_inode_dirty error
[  546.320652][T10670] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #15: comm syz.3.1965: corrupted inode contents
[  546.351129][T10670] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2954: inode #15: comm syz.3.1965: mark_inode_dirty error
[  546.466067][T10670] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2957: inode #15: comm syz.3.1965: mark inode dirty (error -117)
[  546.715172][T10710] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  546.724308][T10710] overlayfs: missing 'lowerdir'
[  547.061352][ T8227] Bluetooth: hci4: command 0x041b tx timeout
[  547.481431][T10670] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117)
[  547.503938][T10670] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  547.538534][T10637] bridge0: port 1(bridge_slave_0) entered blocking state
[  547.545958][T10637] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.554095][T10637] device bridge_slave_0 entered promiscuous mode
[  547.650460][T10637] bridge0: port 2(bridge_slave_1) entered blocking state
[  547.657896][T10637] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.692514][T10670] EXT4-fs (loop3): shut down requested (1)
[  547.969488][T10637] device bridge_slave_1 entered promiscuous mode
[  548.063442][T10637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.121769][T10637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.645406][T10637] team0: Port device team_slave_0 added
[  548.688692][T10637] team0: Port device team_slave_1 added
[  548.920953][T10637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.990588][T10760] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  548.999720][T10760] overlayfs: missing 'lowerdir'
[  549.010236][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  549.285051][ T4312] Bluetooth: hci4: command 0x040f tx timeout
[  549.383714][T10637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  549.864390][T10637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  549.871421][T10637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  550.021747][T10637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.063388][T10757] loop4: detected capacity change from 0 to 32768
[  550.175735][T10777] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  550.184724][T10777] overlayfs: missing 'lowerdir'
[  550.669905][T10757] JBD2: Ignoring recovery information on journal
[  551.042263][T10637] device hsr_slave_0 entered promiscuous mode
[  551.071964][T10637] device hsr_slave_1 entered promiscuous mode
[  551.079720][T10637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  551.089432][T10637] Cannot create hsr debugfs directory
[  551.263981][T10757] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  551.269638][T10637] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  551.856658][ T8227] Bluetooth: hci4: command 0x0419 tx timeout
[  552.067846][T10637] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  552.121656][T10637] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  552.134338][T10637] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  552.344404][ T4188] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  552.588805][ T4188] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  552.625491][ T4188] OCFS2: File system is now read-only.
[  552.631014][ T4188] (syz-executor,4188,1):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  552.673506][T10637] 8021q: adding VLAN 0 to HW filter on device bond0
[  552.706022][ T4188] (syz-executor,4188,1):_ocfs2_free_clusters:2605 ERROR: status = -30
[  552.789904][ T4188] (syz-executor,4188,0):ocfs2_replay_truncate_records:5974 ERROR: status = -30
[  552.808182][ T4188] (syz-executor,4188,0):__ocfs2_flush_truncate_log:6055 ERROR: status = -30
[  552.859244][ T4188] (syz-executor,4188,1):ocfs2_sync_fs:405 ERROR: status = -30
[  552.884360][ T4188] 
[  552.886729][ T4188] ============================================
[  552.892884][ T4188] WARNING: possible recursive locking detected
[  552.899138][ T4188] syzkaller #0 Not tainted
[  552.903566][ T4188] --------------------------------------------
[  552.909718][ T4188] syz-executor/4188 is trying to acquire lock:
[  552.915895][ T4188] ffff8880257d2990 (jbd2_handle){++++}-{0:0}, at: jbd2_log_wait_commit+0x155/0x4e0
[  552.925449][ T4188] 
[  552.925449][ T4188] but task is already holding lock:
[  552.933293][ T4188] ffff8880257d2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  552.942745][ T4188] 
[  552.942745][ T4188] other info that might help us debug this:
[  552.950811][ T4188]  Possible unsafe locking scenario:
[  552.950811][ T4188] 
[  552.958405][ T4188]        CPU0
[  552.961688][ T4188]        ----
[  552.964977][ T4188]   lock(jbd2_handle);
[  552.969062][ T4188]   lock(jbd2_handle);
[  552.973133][ T4188] 
[  552.973133][ T4188]  *** DEADLOCK ***
[  552.973133][ T4188] 
[  552.981278][ T4188]  May be due to missing lock nesting notation
[  552.981278][ T4188] 
[  552.989600][ T4188] 4 locks held by syz-executor/4188:
[  552.994887][ T4188]  #0: ffff888075e7c0e0 (&type->s_umount_key#118){++++}-{3:3}, at: deactivate_super+0xa0/0xd0
[  553.005365][ T4188]  #1: ffff888075e7c650 (sb_internal#4){.+.+}-{0:0}, at: __ocfs2_flush_truncate_log+0x49f/0x1110
[  553.016026][ T4188]  #2: ffff8880216408e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a6/0x6f0
[  553.026925][ T4188]  #3: ffff8880257d2990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560
[  553.036701][ T4188] 
[  553.036701][ T4188] stack backtrace:
[  553.042609][ T4188] CPU: 1 PID: 4188 Comm: syz-executor Not tainted syzkaller #0
[  553.050163][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  553.060298][ T4188] Call Trace:
[  553.063720][ T4188]  <TASK>
[  553.066721][ T4188]  dump_stack_lvl+0x188/0x250
[  553.071569][ T4188]  ? show_regs_print_info+0x20/0x20
[  553.076790][ T4188]  ? load_image+0x410/0x410
[  553.081395][ T4188]  __lock_acquire+0x1247/0x7b50
[  553.086374][ T4188]  ? finish_lock_switch+0x12d/0x290
[  553.091665][ T4188]  ? verify_lock_unused+0x140/0x140
[  553.096885][ T4188]  ? verify_lock_unused+0x140/0x140
[  553.102187][ T4188]  ? __schedule+0x11cb/0x4350
[  553.106969][ T4188]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  553.113181][ T4188]  lock_acquire+0x19e/0x400
[  553.117783][ T4188]  ? jbd2_log_wait_commit+0x155/0x4e0
[  553.123182][ T4188]  ? jbd2_log_wait_commit+0x14e/0x4e0
[  553.128574][ T4188]  ? __lock_acquire+0x7b50/0x7b50
[  553.133626][ T4188]  ? read_lock_is_recursive+0x10/0x10
[  553.139022][ T4188]  ? preempt_schedule+0xbc/0xd0
[  553.144178][ T4188]  ? preempt_schedule_common+0xa5/0xd0
[  553.149661][ T4188]  jbd2_log_wait_commit+0x171/0x4e0
[  553.155054][ T4188]  ? jbd2_log_wait_commit+0x155/0x4e0
[  553.160457][ T4188]  ? jbd2_journal_clear_err+0xb0/0xb0
[  553.165895][ T4188]  ? preempt_schedule_thunk+0x16/0x18
[  553.171334][ T4188]  ? jbd2_journal_start_commit+0x205/0x2b0
[  553.177137][ T4188]  ocfs2_sync_fs+0x21d/0x330
[  553.181941][ T4188]  ? ocfs2_put_super+0x1b0/0x1b0
[  553.186898][ T4188]  ? get_nr_dirty_inodes+0x258/0x2e0
[  553.192213][ T4188]  sync_filesystem+0x1be/0x220
[  553.197041][ T4188]  generic_shutdown_super+0x6b/0x300
[  553.202443][ T4188]  kill_block_super+0x7c/0xe0
[  553.207120][ T4188]  deactivate_locked_super+0x93/0xf0
[  553.212396][ T4188]  cleanup_mnt+0x426/0x4d0
[  553.216894][ T4188]  task_work_run+0x125/0x1a0
[  553.221698][ T4188]  exit_to_user_mode_loop+0x10f/0x130
[  553.227129][ T4188]  exit_to_user_mode_prepare+0xee/0x180
[  553.232681][ T4188]  syscall_exit_to_user_mode+0x16/0x40
[  553.238164][ T4188]  do_syscall_64+0x58/0xa0
[  553.242586][ T4188]  ? clear_bhb_loop+0x30/0x80
[  553.247342][ T4188]  ? clear_bhb_loop+0x30/0x80
[  553.252018][ T4188]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  553.257919][ T4188] RIP: 0033:0x7f8215cb5317
[  553.262395][ T4188] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  553.282278][ T4188] RSP: 002b:00007ffef5861428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  553.290906][ T4188] RAX: 0000000000000000 RBX: 00007f8215d4a474 RCX: 00007f8215cb5317
[  553.298871][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef58614e0
[  553.306944][ T4188] RBP: 00007ffef58614e0 R08: 00007ffef58624e0 R09: 00000000ffffffff
[  553.314929][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef5862570
[  553.322892][ T4188] R13: 00007f8215d4a474 R14: 0000000000085956 R15: 00007ffef58625b0
[  553.330863][ T4188]  </TASK>
[  553.346196][T10637] 8021q: adding VLAN 0 to HW filter on device team0
[  553.357699][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  553.372961][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  553.388650][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  553.398064][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  553.406425][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.413550][ T4447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.421145][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  553.429983][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  553.438488][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.445577][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.473805][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  553.482391][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  553.494057][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  553.503023][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  553.512509][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  553.522466][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  553.537145][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  553.547927][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  553.567241][T10637] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  553.578159][T10637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  553.592632][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  553.602326][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  553.612828][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  553.621858][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  553.642713][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  553.659855][ T1330] device hsr_slave_0 left promiscuous mode
[  553.667076][ T1330] device hsr_slave_1 left promiscuous mode
[  553.678698][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  553.686519][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0
[  553.696110][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  553.704041][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1
[  553.712000][ T1330] device bridge_slave_1 left promiscuous mode
[  553.718351][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.727068][ T1330] device bridge_slave_0 left promiscuous mode
[  553.733342][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.744356][ T1330] device veth1_macvtap left promiscuous mode
[  553.750488][ T1330] device veth0_macvtap left promiscuous mode
[  553.757034][ T1330] device veth1_vlan left promiscuous mode
[  553.762920][ T1330] device veth0_vlan left promiscuous mode
[  553.846116][ T1330] team0 (unregistering): Port device team_slave_1 removed
[  553.858987][ T1330] team0 (unregistering): Port device team_slave_0 removed
[  553.869033][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.881302][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.929168][ T1330] bond0 (unregistering): Released all slaves
[  554.019933][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  554.028031][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  554.044751][T10637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  554.222283][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  554.231192][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  554.247772][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  554.257947][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  554.283419][T10637] device veth0_vlan entered promiscuous mode
[  554.290310][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  554.298362][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  554.311567][T10637] device veth1_vlan entered promiscuous mode
[  554.330105][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  554.338851][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  554.347226][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  554.355698][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  554.366993][T10637] device veth0_macvtap entered promiscuous mode
[  554.378354][T10637] device veth1_macvtap entered promiscuous mode
[  554.391435][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.404401][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.414676][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.429383][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.439299][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.449931][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.460081][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  554.470545][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.481790][T10637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  554.490171][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  554.498501][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  554.507192][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  554.516630][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  554.527330][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.538532][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.548658][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.559763][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.569601][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.580124][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.590228][T10637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  554.600773][T10637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  554.611325][T10637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  554.621729][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  554.632450][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  554.654191][T10637] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  554.665347][T10637] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  554.675561][T10637] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  554.686917][T10637] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  554.735073][T10637] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  554.784892][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.800395][T10637] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  554.809483][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.832044][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  554.864620][ T4447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  554.880812][ T4447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  554.901755][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready