last executing test programs:

6.415237781s ago: executing program 3:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)

4.898667615s ago: executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="010001"], 0x0, 0x0, 0x0, 0x0, 0x0})

4.074111212s ago: executing program 1:
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
ftruncate(r2, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

3.747290162s ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000340)={{0x1, 0x0, 0x80, {0x0, 0x0, 0x1}}, "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", "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"})

3.540541644s ago: executing program 2:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x0, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x800}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.509994369s ago: executing program 0:
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x181001, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x2000}], 0x1)
close(r0)

3.367733031s ago: executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101601)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000000)={{{0x1, 0x1}}, 0x0, 0x0, 0x0})

3.356160593s ago: executing program 1:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0e5bef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c821345a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729", 0xb8}, {&(0x7f0000000940)="b3296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d2040000004a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e523820100a85879d9482fd52ff178117310de87c8243f1e28fc4d6127452b0d5b98d725054f78c4db08baaaa9275252150a05682058a0c2b50728dd04c84d1df1277233beaa311ecc5fe3fa158d", 0x90}, {&(0x7f0000000a00)="a632d1428982a252326f258392e316f18cf86b2e26ac0af8c71b95c35316f3831129f3e611dc5fa965da5032081ce03b978573bf80dbc4659935a61e2b9a7fc3a4a6a89869f95f15cd0fe0cbc18f6a6d873a310a108980d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46ba10031706e21e88845975bdd29854d19f8a6d5dcc1711be7098139fe507fd8878a31eb832c88ab613d26f", 0xa8}, {&(0x7f0000000ac0)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129a51c8b2f59dee73a4747e05d4b034d0ce1f6e0be5b67bd037223a12f09c83ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40f", 0x98}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000740)="871ef996a2e342366bddf429e0e1b457475dfa051dd54e61a11df9bece5d5b4472055a2aebfe716b0f469dab1cd50c6031267d5489fd2e4918f1943a09dbce56e342720a1bba96", 0x47}, {&(0x7f0000000f80)="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", 0x130}, {&(0x7f0000001740)="5871807f4016830cd1c10c0a6900cfeb03b6a65e7944e9e378e548df11d98fb3887d8b3a4b0ab78c43f212e53640544a26ece6f5e849d9116021221cfcf5f51cd34b42590c4b1ff5202707f3299cadbb7bbdb6fb9cf9eb790e608b0ab12a5e14e89e8e586f2217b7d4ddd2af95a1329fa56152066e60947b10866722020000009f3580e73bd8e04fb96bcd437f6fec2ad37ae4304e49d15d65b41b93f53c095473c3e5f30000000000000000c9954293454d35811eb99a265312dfdf386a70ae617868a888fba2513451c6621d77", 0xce}, {&(0x7f0000000200)="8c5b3141d4fbf6d9ea", 0x9}, {&(0x7f0000000b80)="cd40afaa958e1724ba9f60ce09feb3c0028ba772ef3621256d88", 0x1a}], 0x5}}], 0x3, 0xc044)
write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xb60)

3.336294176s ago: executing program 2:
mount(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup(0xffffffffffffffff)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x7}}, {}, {@dmask={'dmask', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@gid}, {@errors_remount}, {@discard}]}, 0x81, 0x14f4, &(0x7f0000001580)="$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")

3.289082964s ago: executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100000500c2"], 0x38}}, 0x0)

3.284577554s ago: executing program 0:
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_CMAP(r0, 0x4b41, 0x0)

3.197770468s ago: executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48)

3.175988451s ago: executing program 1:
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x6b5, 0x41)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x7, 0x0, 0x0})

3.084854555s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a7ff2", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x4, 0xa}, @sack={0x5, 0x6, [0x0]}, @sack={0x5, 0x2}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)

3.045927481s ago: executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10)
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000880)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00']}, @subvolid})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0x40186e8d, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="060000001a04b9435da0352cc7411e9e"}})

2.977469062s ago: executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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")
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
unshare(0x0)
readahead(r0, 0x0, 0x0)

2.20234124s ago: executing program 0:
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x14018, &(0x7f00000001c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303139622c756d61736b3d30303030303030303030303030303030303030303030312c706172743d3078303030303030303030303030313030312c6e6f626172726965722c6465636f6d706f73652c63726561746f723d1eeb39072c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=iso8859-3,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723daf2afe272c756d61736b3d30303030303030303030303030303030f7ff30303030322c00"], 0xdf, 0x6c4, &(0x7f0000000640)="$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")
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0)
gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000100), 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
socket(0x0, 0x803, 0x0)

2.199728691s ago: executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180), 0x8, 0x0)
dup3(r0, r1, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r1, 0x40045106, &(0x7f0000002240))

2.179807374s ago: executing program 4:
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
ftruncate(r2, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

2.131465431s ago: executing program 1:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x0, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x800}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.099891936s ago: executing program 2:
ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x0, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mlockall(0x2)
io_getevents(0x0, 0x0, 0x0, 0x0, 0x0)
ftruncate(r2, 0x2008002)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

2.084664219s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x14)

943.771705ms ago: executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000006580), r0)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, 0x0, 0x0)

910.95166ms ago: executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b)
lseek(r0, 0x0, 0x0)
write$P9_RXATTRWALK(r0, 0x0, 0x0)

896.755522ms ago: executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000000000040341a0208009812ffff010902"], 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

865.238337ms ago: executing program 1:
listen(0xffffffffffffffff, 0x0)
syz_open_dev$media(0x0, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce8220100090581"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2}}, 0x0, &(0x7f0000000800)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

846.0937ms ago: executing program 4:
r0 = socket$inet6(0x10, 0x3, 0x0)
read(r0, &(0x7f0000000340)=""/254, 0xfe)
sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x0}, 0x90)

757.033034ms ago: executing program 0:
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x3)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x2000)

626.808424ms ago: executing program 4:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xab, 0xbe, 0x67, 0x40, 0x17e9, 0x8b4e, 0x9c08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

0s ago: executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0e5bef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c821345a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f4729", 0xb8}, {&(0x7f0000000940)="b3296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d2040000004a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e523820100a85879d9482fd52ff178117310de87c8243f1e28fc4d6127452b0d5b98d725054f78c4db08baaaa9275252150a05682058a0c2b50728dd04c84d1df1277233beaa311ecc5fe3fa158d", 0x90}, {&(0x7f0000000a00)="a632d1428982a252326f258392e316f18cf86b2e26ac0af8c71b95c35316f3831129f3e611dc5fa965da5032081ce03b978573bf80dbc4659935a61e2b9a7fc3a4a6a89869f95f15cd0fe0cbc18f6a6d873a310a108980d9011aad98d0e0dddb70480bd18486191b33112719854b86cb73be4fcff420a4caa64c932b46ba10031706e21e88845975bdd29854d19f8a6d5dcc1711be7098139fe507fd8878a31eb832c88ab613d26f", 0xa8}, {&(0x7f0000000ac0)="e35f7e5e5ac5e9f0cd5260605ba7cda81ba1559f17393edeb50e129a51c8b2f59dee73a4747e05d4b034d0ce1f6e0be5b67bd037223a12f09c83ed222b9d51007de194d43163a764136ee239c65b382cbf2c46ced59f283332621e64913a530016bc320cb091f6fc2c8b8af6884caccb5a8cef9382455f4b1540ad90b9308269b06fe596f2f4935802420035d8efc47278940beabec4d40f", 0x98}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000740)="871ef996a2e342366bddf429e0e1b457475dfa051dd54e61a11df9bece5d5b4472055a2aebfe716b0f469dab1cd50c6031267d5489fd2e4918f1943a09dbce56e342720a1bba96", 0x47}, {0x0}, {&(0x7f0000000f80)="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", 0x130}, {&(0x7f0000001740)="5871807f4016830cd1c10c0a6900cfeb03b6a65e7944e9e378e548df11d98fb3887d8b3a4b0ab78c43f212e53640544a26ece6f5e849d9116021221cfcf5f51cd34b42590c4b1ff5202707f3299cadbb7bbdb6fb9cf9eb790e608b0ab12a5e14e89e8e586f2217b7d4ddd2af95a1329fa56152066e60947b10866722020000009f3580e73bd8e04fb96bcd437f6fec2ad37ae4304e49d15d65b41b93f53c095473c3e5f30000000000000000c9954293454d35811eb99a265312dfdf386a70ae617868a888fba2513451c6621d77", 0xce}, {&(0x7f0000000200)="8c5b3141d4fbf6d9ea", 0x9}, {&(0x7f0000000b80)="cd40afaa958e1724ba9f60ce09feb3c0028ba772ef3621256d88", 0x1a}], 0x6}}], 0x3, 0xc044)
write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xb60)

kernel console output (not intermixed with test programs):

w USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00
[  259.866189][ T3690] usb 2-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255
[  259.874741][ T7674] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  259.904262][ T3690] usb 2-1: Product: syz
[  259.908690][ T3690] usb 2-1: Manufacturer: syz
[  259.913297][ T3690] usb 2-1: SerialNumber: syz
[  259.924166][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.924633][ T3690] usb 2-1: config 0 descriptor??
[  259.951946][ T7150] device veth1_macvtap left promiscuous mode
[  259.959281][ T7150] device veth0_macvtap left promiscuous mode
[  259.973678][ T7150] device veth1_vlan left promiscuous mode
[  259.979733][ T7150] device veth0_vlan left promiscuous mode
[  259.997183][ T7150] device veth1_macvtap left promiscuous mode
[  260.003566][ T7150] device veth0_macvtap left promiscuous mode
[  260.010185][ T7150] device veth1_vlan left promiscuous mode
[  260.016092][ T7150] device veth0_vlan left promiscuous mode
[  260.118703][ T4699] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  260.136623][ T7674] usb 1-1: Using ep0 maxpacket: 16
[  260.191483][  T154] usb 2-1: USB disconnect, device number 17
[  260.256659][ T7674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.273977][ T7674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  260.283923][ T7674] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  260.294550][ T7674] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  260.304337][ T7674] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  260.314456][ T7674] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  260.336736][ T4699] usb 5-1: device descriptor read/64, error -71
[  260.406893][ T7674] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  260.424089][ T7674] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  260.433146][ T7674] usb 1-1: SerialNumber: syz
[  260.463662][ T4699] usb usb5-port1: attempt power cycle
[  260.472766][ T7150] team0 (unregistering): Port device team_slave_1 removed
[  260.478326][ T7674] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  260.497012][ T7674] cdc_acm: probe of 1-1:1.0 failed with error -12
[  260.504255][ T7150] team0 (unregistering): Port device team_slave_0 removed
[  260.526034][ T7150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.545681][ T7150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.619129][ T7150] bond0 (unregistering): Released all slaves
[  260.684637][   T22] usb 1-1: USB disconnect, device number 20
[  260.788991][ T8503] syz-executor.1[8503] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  260.789091][ T8503] syz-executor.1[8503] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  260.806808][ T7674] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  260.832031][ T7150] team0 (unregistering): Port device team_slave_1 removed
[  260.841241][ T8503] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  260.852567][ T7150] team0 (unregistering): Port device team_slave_0 removed
[  260.868528][ T7150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.889011][ T7150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.914672][ T4699] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  260.982192][ T7150] bond0 (unregistering): Released all slaves
[  261.016706][ T4699] usb 5-1: device descriptor read/8, error -71
[  261.163764][ T8508] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  261.203494][ T8510] loop2: detected capacity change from 0 to 256
[  261.316846][ T4699] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  261.447000][ T4699] usb 5-1: device descriptor read/8, error -71
[  261.506638][ T7674] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.525555][ T7674] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  261.535490][ T7674] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  261.551695][ T7674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.562607][ T7674] usb 4-1: config 0 descriptor??
[  261.576827][ T4699] usb usb5-port1: unable to enumerate USB device
[  261.936813][ T7674] usb 4-1: string descriptor 0 read error: -71
[  261.948095][ T7674] usb 4-1: USB disconnect, device number 26
[  262.077305][ T8514] loop2: detected capacity change from 0 to 32768
[  262.096945][ T8514] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8514)
[  262.803482][ T8514] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  262.836887][ T8514] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  262.859751][ T8514] BTRFS info (device loop2): use zlib compression, level 3
[  262.894548][ T8514] BTRFS info (device loop2): using free space tree
[  262.997761][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  263.172367][ T8514] BTRFS info (device loop2): enabling ssd optimizations
[  263.191280][ T8514] BTRFS info (device loop2): checking UUID tree
[  263.282208][ T8555] loop0: detected capacity change from 0 to 2048
[  263.321424][ T8558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.364772][ T7445] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  263.406578][ T7674] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  263.670898][ T7674] usb 4-1: Using ep0 maxpacket: 16
[  263.671475][ T8546] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  263.756613][ T3611] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  263.792198][ T7674] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.818081][ T7674] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.846063][ T7674] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  263.906331][ T7674] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  263.951367][ T7674] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  263.963907][ T3611] usb 1-1: device descriptor read/64, error -71
[  263.986273][ T8567] loop1: detected capacity change from 0 to 256
[  263.987201][ T7674] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  264.018814][ T8567] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.033781][ T8567] FAT-fs (loop1): Filesystem has been set read-only
[  264.042914][ T8567] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.078209][ T8567] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  264.104843][ T8568] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  264.193722][ T8567] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  264.216792][   T26] audit: type=1800 audit(1717247208.624:28): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=1048646 res=0 errno=0
[  264.356658][ T7674] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  264.365750][ T7674] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  264.386529][ T7674] usb 4-1: SerialNumber: syz
[  264.447435][ T7674] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  264.464140][ T7674] cdc_acm: probe of 4-1:1.0 failed with error -12
[  264.471006][ T3611] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  265.407944][ T3611] usb 1-1: device descriptor read/64, error -71
[  265.448409][ T3616] usb 4-1: USB disconnect, device number 27
[  265.555792][ T3611] usb usb1-port1: attempt power cycle
[  265.882166][ T8585] loop2: detected capacity change from 0 to 512
[  265.903019][ T8585] EXT4-fs: Ignoring removed i_version option
[  265.924452][ T8585] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  265.966592][ T3611] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  265.974490][ T8585] EXT4-fs (loop2): 1 truncate cleaned up
[  265.988163][ T8585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  266.052900][ T8571] loop4: detected capacity change from 0 to 32768
[  266.076777][ T3611] usb 1-1: device descriptor read/8, error -71
[  266.148703][ T8571] XFS (loop4): Mounting V5 Filesystem
[  266.155780][ T7445] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2295265481/syzkaller.5XWSRM/40/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  266.168556][ T8593] loop3: detected capacity change from 0 to 2048
[  266.202676][ T7445] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  266.227629][ T7445] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2295265481/syzkaller.5XWSRM/40/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  266.256817][ T7445] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  266.307925][ T8602] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.341906][ T7445] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2295265481/syzkaller.5XWSRM/40/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  266.368082][ T3611] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  266.409746][ T8571] XFS (loop4): Ending clean mount
[  266.424908][ T8571] XFS (loop4): Quotacheck needed: Please wait.
[  266.459801][ T3611] usb 1-1: device descriptor read/8, error -71
[  266.493600][ T7445] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  266.520117][ T8571] XFS (loop4): Quotacheck: Done.
[  266.545610][ T7445] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2295265481/syzkaller.5XWSRM/40/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  266.569367][ T8590] loop1: detected capacity change from 0 to 32768
[  266.577853][ T3611] usb usb1-port1: unable to enumerate USB device
[  266.590136][ T8606] loop0: detected capacity change from 0 to 1024
[  266.592487][ T8590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8590)
[  266.612622][ T8590] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.619313][ T7445] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  266.622995][ T8590] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  266.655958][ T7445] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor.2: path /root/syzkaller-testdir2295265481/syzkaller.5XWSRM/40/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  266.659882][ T8590] BTRFS info (device loop1): use zlib compression, level 3
[  266.697502][ T7445] EXT4-fs error (device loop2): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor.2: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  266.699151][ T6394] XFS (loop4): Unmounting Filesystem
[  266.717666][ T8590] BTRFS info (device loop1): using free space tree
[  266.818844][ T7150] hfsplus: b-tree write err: -5, ino 4
[  266.851185][ T3692] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  266.918324][ T8590] BTRFS info (device loop1): enabling ssd optimizations
[  266.939809][ T8590] BTRFS info (device loop1): checking UUID tree
[  266.993896][ T8628] loop4: detected capacity change from 0 to 8
[  267.113456][ T8207] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.226893][ T3692] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  267.242926][ T3692] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  267.284217][ T3692] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  267.306641][ T3692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.534599][ T7445] EXT4-fs (loop2): unmounting filesystem.
[  267.655134][ T3624] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.686824][ T3687] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  267.871788][ T3624] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.914465][ T8654] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[  267.927017][ T3692] usb 4-1: language id specifier not provided by device, defaulting to English
[  267.936134][ T3687] usb 5-1: Using ep0 maxpacket: 32
[  267.942135][ T8654] device gretap0 entered promiscuous mode
[  268.002544][ T3624] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.048811][ T8656] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'.
[  268.056747][ T3687] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  268.070485][ T8656] 0�X��D: renamed from gretap0
[  268.082182][ T3687] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  268.096444][ T8656] device 
40�X��D left promiscuous mode
[  268.109881][ T8656] A link change request failed with some changes committed already. Interface 
40�X��D may have been left with an inconsistent configuration, please check.
[  268.160419][ T3624] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.177197][ T3692] usb 4-1: USB disconnect, device number 28
[  268.216804][ T3687] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  268.238563][ T3687] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  268.275403][ T3687] usb 5-1: Product: syz
[  268.299129][ T3687] usb 5-1: Manufacturer: syz
[  268.455760][ T3575] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  268.474424][ T3575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  268.484299][ T3575] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  268.495410][ T3575] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  268.503497][ T3575] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  268.513956][ T3575] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  268.648131][ T8669] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'.
[  268.702206][ T8669] device gretap0 entered promiscuous mode
[  268.782308][ T8674] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'.
[  268.796653][ T8674] 0�X��D: renamed from gretap0
[  268.815632][ T8674] device 
40�X��D left promiscuous mode
[  268.840111][ T8674] A link change request failed with some changes committed already. Interface 
40�X��D may have been left with an inconsistent configuration, please check.
[  269.062257][ T8682] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  269.115321][ T8661] chnl_net:caif_netlink_parms(): no params data found
[  269.325830][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.337856][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.345753][ T8661] device bridge_slave_0 entered promiscuous mode
[  269.353152][ T3692] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  269.395643][ T3624] device hsr_slave_0 left promiscuous mode
[  269.402702][ T3624] device hsr_slave_1 left promiscuous mode
[  269.419626][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.432582][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.443118][ T3624] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.456105][ T3624] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.470311][ T3624] device bridge_slave_1 left promiscuous mode
[  269.477455][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.485859][ T3624] device bridge_slave_0 left promiscuous mode
[  269.495614][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.512329][ T3624] device veth1_macvtap left promiscuous mode
[  269.519133][ T3624] device veth0_macvtap left promiscuous mode
[  269.525182][ T3624] device veth1_vlan left promiscuous mode
[  269.538798][ T3624] device veth0_vlan left promiscuous mode
[  269.596767][ T3692] usb 2-1: Using ep0 maxpacket: 16
[  269.716854][ T3692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.745568][ T3692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  269.758484][ T3692] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  269.768679][ T3692] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  269.779542][ T3692] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  269.790361][ T3692] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  269.879220][ T3692] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  269.892754][ T3692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  269.901301][ T3692] usb 2-1: SerialNumber: syz
[  269.918294][ T3624] team0 (unregistering): Port device team_slave_1 removed
[  269.937456][ T3624] team0 (unregistering): Port device team_slave_0 removed
[  269.947842][ T3692] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  269.959352][ T3692] cdc_acm: probe of 2-1:1.0 failed with error -12
[  269.976438][ T3624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.994072][ T3624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.092319][ T3624] bond0 (unregistering): Released all slaves
[  270.158229][ T3692] usb 2-1: USB disconnect, device number 18
[  270.173112][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.182607][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.190755][ T8661] device bridge_slave_1 entered promiscuous mode
[  270.280298][ T8661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.293288][ T8661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.399039][ T8661] team0: Port device team_slave_0 added
[  270.417165][ T8661] team0: Port device team_slave_1 added
[  270.476059][ T3616] usb 5-1: USB disconnect, device number 25
[  270.512418][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.530314][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.602108][   T48] Bluetooth: hci2: command tx timeout
[  270.623260][ T8661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.663637][ T8661] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.716151][ T8661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.808681][ T8661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.925265][ T8661] device hsr_slave_0 entered promiscuous mode
[  270.955971][ T8661] device hsr_slave_1 entered promiscuous mode
[  270.974584][ T8661] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  270.996649][ T8661] Cannot create hsr debugfs directory
[  271.111429][ T8738] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  271.242560][ T8741] device veth0_vlan left promiscuous mode
[  271.258240][ T8741] device veth0_vlan entered promiscuous mode
[  271.279121][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  271.299553][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  271.315882][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  271.478147][ T8744] device veth0_vlan left promiscuous mode
[  271.517204][ T8744] device veth0_vlan entered promiscuous mode
[  272.384327][ T8775] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  272.620963][ T8661] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  272.649107][ T8661] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  272.676989][   T48] Bluetooth: hci2: command tx timeout
[  272.691225][ T8661] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  272.739993][ T8661] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  273.051898][ T8661] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.127195][ T8661] 8021q: adding VLAN 0 to HW filter on device team0
[  273.134366][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  273.148850][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  273.187356][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  273.208018][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  273.231273][ T3692] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.238505][ T3692] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.274123][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  273.274780][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  273.275266][ T3692] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.275331][ T3692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.275702][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  273.295982][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  273.298071][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  273.298879][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  273.300249][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  273.318922][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  273.319781][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  273.322097][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  273.340524][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  273.341101][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  273.345178][ T8661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  273.345908][ T8661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  273.350261][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  273.350839][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  273.965328][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  273.965412][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.993211][ T8661] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.068600][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  274.069296][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  274.092899][ T8814] loop4: detected capacity change from 0 to 2048
[  274.095271][ T8814] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  274.095296][ T8814] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  274.095314][ T8814] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  274.095332][ T8814] EXT4-fs (loop4): group descriptors corrupted!
[  274.106397][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  274.158319][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  274.169515][ T8661] device veth0_vlan entered promiscuous mode
[  274.177565][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  274.185654][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  274.206024][ T8661] device veth1_vlan entered promiscuous mode
[  274.452057][ T8819] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  274.466882][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  274.531247][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  274.547521][ T4698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  274.559421][ T8661] device veth0_macvtap entered promiscuous mode
[  274.572415][ T8661] device veth1_macvtap entered promiscuous mode
[  274.608959][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.627623][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.640727][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.651542][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.661871][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.672993][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.696627][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.709686][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.721083][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.729877][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  274.739489][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  274.751941][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  274.762589][   T48] Bluetooth: hci2: command tx timeout
[  274.773194][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  274.786023][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.802985][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.813831][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.840791][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.855270][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.868141][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.882536][ T8661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.894574][ T8661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.928796][ T8661] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.948973][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  274.962603][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  274.975902][ T8661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.005131][ T8661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.022031][ T8661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.034080][ T8661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.122847][   T26] audit: type=1326 audit(1717247219.584:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  275.190701][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.200823][   T26] audit: type=1326 audit(1717247219.584:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  275.223521][    C1] vkms_vblank_simulate: vblank timer overrun
[  275.233222][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.281150][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  275.301787][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.311184][   T26] audit: type=1326 audit(1717247219.584:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  275.347754][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.353624][ T3763] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  275.359719][   T26] audit: type=1326 audit(1717247219.654:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8835 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  275.441748][ T8844] loop0: detected capacity change from 0 to 2048
[  275.455875][ T8844] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  275.455905][ T8844] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  275.455921][ T8844] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  275.455940][ T8844] EXT4-fs (loop0): group descriptors corrupted!
[  276.047255][ T8847] loop2: detected capacity change from 0 to 32768
[  276.070678][ T8847] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8847)
[  276.099358][ T8847] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.122209][ T8847] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  276.139756][ T8847] BTRFS info (device loop2): use zlib compression, level 3
[  276.147590][ T8847] BTRFS info (device loop2): using free space tree
[  276.163586][ T8869] xt_CT: You must specify a L4 protocol and not use inversions on it
[  276.263724][ T8847] BTRFS info (device loop2): enabling ssd optimizations
[  276.273634][ T8847] BTRFS info (device loop2): checking UUID tree
[  276.445721][ T8661] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  276.838316][   T48] Bluetooth: hci2: command tx timeout
[  277.078208][ T8913] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'.
[  277.078245][ T8913] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  277.080810][ T8913] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.137050][ T8913] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.137215][ T8913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.761164][ T8929] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  277.790558][ T8904] loop3: detected capacity change from 0 to 40427
[  277.830021][ T8904] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  277.846553][ T8904] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  277.882982][ T8915] loop4: detected capacity change from 0 to 32768
[  277.891611][ T8915] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8915)
[  277.912048][ T8904] F2FS-fs (loop3): Found nat_bits in checkpoint
[  277.943618][ T8915] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  277.987155][ T8915] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  277.995958][ T8915] BTRFS info (device loop4): use zlib compression, level 3
[  278.022266][ T8915] BTRFS info (device loop4): using free space tree
[  278.052794][ T8904] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  278.077430][ T8904] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  278.268421][ T8960] loop0: detected capacity change from 0 to 2048
[  278.277926][ T8960] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  278.284322][ T8915] BTRFS info (device loop4): enabling ssd optimizations
[  278.287828][ T8960] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  278.297683][ T8915] BTRFS info (device loop4): checking UUID tree
[  278.305986][ T8960] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  278.322888][ T8960] EXT4-fs (loop0): group descriptors corrupted!
[  278.553894][ T6394] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.755612][    C1] vkms_vblank_simulate: vblank timer overrun
[  278.839272][ T4614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.857608][ T3582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  278.871626][ T3582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  278.881861][ T3582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  278.896158][ T3582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  278.904082][ T3575] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  278.913054][ T3582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  279.050086][ T4614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.193998][ T4614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.273392][ T4614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.303323][ T8992] device batadv_slave_0 entered promiscuous mode
[  279.314547][ T8989] device batadv_slave_0 left promiscuous mode
[  279.433126][ T8971] chnl_net:caif_netlink_parms(): no params data found
[  279.455116][ T8998] loop2: detected capacity change from 0 to 2048
[  279.465858][ T8998] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  279.484541][ T8998] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  279.514898][ T8998] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1)!
[  279.545555][ T8998] EXT4-fs (loop2): group descriptors corrupted!
[  279.737510][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.750891][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.775692][ T8971] device bridge_slave_0 entered promiscuous mode
[  279.814381][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.814504][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.817017][ T8971] device bridge_slave_1 entered promiscuous mode
[  279.885458][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  279.891913][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  280.000486][ T8971] team0: Port device team_slave_0 added
[  280.030366][ T9018] Bluetooth: MGMT ver 1.22
[  280.073273][ T8971] team0: Port device team_slave_1 added
[  280.132076][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  280.132094][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.132117][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  280.133849][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  280.149350][ T9022] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  280.190640][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  280.219825][    C1] vkms_vblank_simulate: vblank timer overrun
[  280.237843][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  280.378009][ T8971] device hsr_slave_0 entered promiscuous mode
[  280.395519][ T8997] loop0: detected capacity change from 0 to 32768
[  280.405372][ T8971] device hsr_slave_1 entered promiscuous mode
[  280.422187][ T8997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8997)
[  280.435094][ T8971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  280.443312][ T8971] Cannot create hsr debugfs directory
[  280.479403][ T8997] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.489930][ T8997] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  280.499051][ T8997] BTRFS info (device loop0): use zlib compression, level 3
[  280.510886][ T8997] BTRFS info (device loop0): using free space tree
[  280.721943][ T8997] BTRFS info (device loop0): enabling ssd optimizations
[  280.742365][ T8997] BTRFS info (device loop0): checking UUID tree
[  280.871186][ T4614] device hsr_slave_0 left promiscuous mode
[  280.898563][ T4614] device hsr_slave_1 left promiscuous mode
[  280.914697][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  280.939485][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0
[  280.984097][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  280.990657][ T4627] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  281.002624][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1
[  281.010331][ T3582] Bluetooth: hci4: command tx timeout
[  281.036811][ T4614] device bridge_slave_1 left promiscuous mode
[  281.043181][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.098422][ T9030] loop4: detected capacity change from 0 to 32768
[  281.131041][ T4614] device bridge_slave_0 left promiscuous mode
[  281.138108][ T9030] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9030)
[  281.165195][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.186757][ T9030] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.210880][ T4614] device veth1_macvtap left promiscuous mode
[  281.216570][ T9030] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  281.225626][ T9030] BTRFS info (device loop4): using free space tree
[  281.230777][ T4614] device veth0_macvtap left promiscuous mode
[  281.260402][ T4614] device veth1_vlan left promiscuous mode
[  281.280807][ T4614] device veth0_vlan left promiscuous mode
[  281.398125][ T9030] BTRFS info (device loop4): enabling ssd optimizations
[  281.562779][ T6394] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.765882][ T9056] loop3: detected capacity change from 0 to 40427
[  281.847140][ T9056] F2FS-fs (loop3): invalid crc value
[  281.853182][ T9056] F2FS-fs (loop3): Found nat_bits in checkpoint
[  281.930709][ T4614] team0 (unregistering): Port device team_slave_1 removed
[  281.948987][ T4614] team0 (unregistering): Port device team_slave_0 removed
[  281.956382][ T9056] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  281.968137][ T9087] f2fs_ckpt-7:3: attempt to access beyond end of device
[  281.968137][ T9087] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  281.974298][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  281.999576][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  282.198259][ T4614] bond0 (unregistering): Released all slaves
[  282.254425][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  282.648807][ T9103] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  282.831352][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  282.881298][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  282.890999][ T9109] mmap: syz-executor.2 (9109) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  282.904273][ T9107] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  283.077185][ T3582] Bluetooth: hci4: command tx timeout
[  283.251624][ T9121] loop0: detected capacity change from 0 to 164
[  283.380600][ T8971] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  283.424373][ T8971] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  283.462983][ T8971] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  283.487309][ T8971] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  283.568805][ T9125] loop0: detected capacity change from 0 to 512
[  283.630649][ T9125] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  283.690029][ T9125] ext4 filesystem being mounted at /root/syzkaller-testdir1091631377/syzkaller.AcsCzb/265/file0 supports timestamps until 2038 (0x7fffffff)
[  283.802039][ T9113] loop2: detected capacity change from 0 to 32768
[  283.809644][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.823376][ T9113] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9113)
[  283.840957][ T3582] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  283.879664][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  283.890257][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  283.902011][ T9113] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  283.912581][ T9113] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  283.922676][ T9113] BTRFS info (device loop2): using free space tree
[  283.924656][ T8971] 8021q: adding VLAN 0 to HW filter on device team0
[  283.957046][ T4627] EXT4-fs (loop0): unmounting filesystem.
[  283.964788][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  283.978189][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  284.001528][ T3610] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.001856][ T9115] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(13925006289877) <= P.seqno(0) <= S.SWH(13925006289951)) and (P.ackno exists or LAWL(70994812698266) <= P.ackno(70994812698267) <= S.AWH(70994812698267), sending SYNC...
[  284.008698][ T3610] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.051657][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  284.063027][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  284.085234][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  284.093782][ T9113] BTRFS info (device loop2): enabling ssd optimizations
[  284.106436][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.113622][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.147938][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  284.210589][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  284.245148][ T8661] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.245973][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  284.292366][ T6710] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  284.336024][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  284.352006][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  284.421446][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  284.454798][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  284.502009][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  284.543616][ T9158] loop0: detected capacity change from 0 to 2048
[  284.546614][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  284.572054][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  284.600864][ T8971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  284.604708][ T9159] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.734085][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  284.751689][ T9161] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  284.793563][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  284.839055][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  284.898940][ T9163] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  285.156750][ T3582] Bluetooth: hci4: command tx timeout
[  285.276316][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  285.290347][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  285.305482][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.384743][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  285.407418][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  285.420961][ T4699] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  285.467453][ T8971] device veth0_vlan entered promiscuous mode
[  285.494594][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  285.505395][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  285.525524][ T8971] device veth1_vlan entered promiscuous mode
[  285.548320][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  285.564231][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  285.582302][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  285.625055][ T9186] loop2: detected capacity change from 0 to 2048
[  285.633397][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  285.648544][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  285.663732][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  285.676559][   T32] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  285.689797][ T8971] device veth0_macvtap entered promiscuous mode
[  285.701180][ T9187] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.712886][ T8971] device veth1_macvtap entered promiscuous mode
[  285.795243][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.806949][ T4699] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  285.819419][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.820353][ T4699] usb 4-1: config 220 has 0 interfaces, different from the descriptor's value: 184
[  285.839677][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.868981][ T4699] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  285.871071][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.893565][ T4699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.915015][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.934719][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.953725][ T9165] loop0: detected capacity change from 0 to 32768
[  285.960911][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  285.975749][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  285.988864][ T9165] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  286.003922][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  286.012173][ T9165] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  286.027851][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  286.036269][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  286.047115][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  286.051278][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  286.069702][ T9165] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  286.070959][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  286.078494][ T3610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  286.102401][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.106357][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  286.126842][   T32] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  286.132647][ T3610] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  286.136116][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.142784][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.142802][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.142817][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.142832][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.142845][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.142859][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  286.172636][   T32] usb 5-1: config 0 descriptor??
[  286.191998][ T3610] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  286.206977][ T6828] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  286.246566][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  286.260066][ T9184] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  286.268010][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  286.278798][ T8971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  286.288793][ T3610] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 96ms
[  286.296255][ T3610] gfs2: fsid=syz:syz.0: jid=0: Done
[  286.302360][ T8971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  286.311206][ T9165] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  286.326579][ T8971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  286.335454][ T8971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  286.372976][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  286.388274][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  286.506756][ T6828] usb 3-1: Using ep0 maxpacket: 8
[  286.553557][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.568567][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.616252][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  286.648450][ T6828] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  286.657349][ T3827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.666797][ T6828] usb 3-1: config 179 has no interface number 0
[  286.673258][ T3827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.684878][ T6828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  286.704303][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  286.705343][ T6828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  286.727037][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.737582][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.750318][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.761433][ T6828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  286.773387][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.784673][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.794704][ T6828] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  286.808527][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.822408][ T6828] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  286.838372][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.851504][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.862581][ T6828] usb 3-1: config 179 interface 65 has no altsetting 0
[  286.873174][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.883202][ T6828] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  286.895985][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.907255][ T6828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.918362][   T32] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0
[  286.935176][   T32] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving
[  286.949884][ T9189] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  286.965522][   T32] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  286.985596][ T6828] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6
[  287.012039][   T32] usb 5-1: USB disconnect, device number 26
[  287.183933][ T4699] usb 3-1: USB disconnect, device number 27
[  287.196541][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  287.207062][ T4699] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  287.237736][   T48] Bluetooth: hci4: command tx timeout
[  287.494900][ T9193] loop1: detected capacity change from 0 to 40427
[  287.536334][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  287.540823][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.541266][ T9202] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.541423][ T9193] F2FS-fs (loop1): Found nat_bits in checkpoint
[  287.545058][ T9202] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  287.632793][ T9193] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  287.652068][   T26] audit: type=1800 audit(1717247232.114:33): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0
[  287.671523][ T9193] syz-executor.1: attempt to access beyond end of device
[  287.671523][ T9193] loop1: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  287.679682][ T9193] syz-executor.1: attempt to access beyond end of device
[  287.679682][ T9193] loop1: rw=0, sector=53256, nr_sectors = 8 limit=40427
[  287.786292][ T9210] loop2: detected capacity change from 0 to 164
[  287.793399][ T9210] Unable to read rock-ridge attributes
[  287.971979][    C1] vkms_vblank_simulate: vblank timer overrun
[  288.168971][ T4699] usb 4-1: USB disconnect, device number 29
[  288.343600][ T9228] loop3: detected capacity change from 0 to 164
[  288.437048][   T48] Bluetooth: hci0: command 0x0406 tx timeout
[  288.590313][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  288.636094][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  288.660891][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  288.695422][ T9236] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  288.837609][ T9238] loop4: detected capacity change from 0 to 1024
[  289.138677][ T9238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  289.175323][ T9238] EXT4-fs (loop4): Test dummy encryption mode enabled
[  289.202476][ T9238] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  289.246034][ T9238] EXT4-fs (loop4): group descriptors corrupted!
[  289.798858][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  290.021865][ T9250] loop1: detected capacity change from 0 to 8192
[  290.043555][ T9250] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  290.088989][ T9256] netlink: 1268 bytes leftover after parsing attributes in process `syz-executor.3'.
[  290.106601][ T3615] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  290.348633][ T9248] loop4: detected capacity change from 0 to 40427
[  290.422614][ T9248] F2FS-fs (loop4): Found nat_bits in checkpoint
[  290.496659][ T3615] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  290.506155][ T3615] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184
[  290.517426][ T3615] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  290.536543][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.536864][ T9248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  290.578326][ T3615] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  290.590327][   T26] audit: type=1800 audit(1717247235.054:34): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  290.630648][ T9248] syz-executor.4: attempt to access beyond end of device
[  290.630648][ T9248] loop4: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  290.648214][ T9248] syz-executor.4: attempt to access beyond end of device
[  290.648214][ T9248] loop4: rw=0, sector=53256, nr_sectors = 8 limit=40427
[  290.716697][ T6710] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  290.786655][ T3615] gspca_sn9c2028: read1 error -71
[  290.816602][ T3615] gspca_sn9c2028: read1 error -71
[  290.836770][ T3615] gspca_sn9c2028: read1 error -71
[  290.841884][ T3615] sn9c2028: probe of 3-1:220.0 failed with error -71
[  290.860005][ T3615] usb 3-1: USB disconnect, device number 28
[  291.081448][ T6710] usb 2-1: config 0 has no interfaces?
[  291.247713][ T6710] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00
[  291.262733][ T6710] usb 2-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255
[  291.273252][ T6710] usb 2-1: Product: syz
[  291.284055][ T6710] usb 2-1: Manufacturer: syz
[  291.290424][ T6710] usb 2-1: SerialNumber: syz
[  291.312128][ T6710] usb 2-1: config 0 descriptor??
[  291.570687][ T3695] usb 2-1: USB disconnect, device number 19
[  291.859902][ T9300] tun0: tun_chr_ioctl cmd 1074025675
[  291.879755][ T9300] tun0: persist disabled
[  292.017172][ T9302] ext4: Unknown parameter 'trans'
[  292.194719][ T9310] Illegal XDP return value 4294967274 on prog  (id 273) dev lo, expect packet loss!
[  292.203006][ T9297] loop0: detected capacity change from 0 to 32768
[  292.235558][ T9297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9297)
[  292.264615][ T9297] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  292.286233][ T9297] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  292.306356][ T9297] BTRFS info (device loop0): using free space tree
[  292.450321][ T6828] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  292.523951][ T9297] BTRFS info (device loop0): enabling ssd optimizations
[  292.667460][ T4627] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  292.683879][ T9344] tun0: tun_chr_ioctl cmd 1074025675
[  292.691322][ T9344] tun0: persist disabled
[  292.856822][ T6828] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  292.871922][ T6828] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[  292.882156][ T6828] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  292.897131][ T6828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.968483][ T6828] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  293.016568][ T3695] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  293.196845][ T6828] gspca_sn9c2028: read1 error -71
[  293.217447][ T6828] gspca_sn9c2028: read1 error -71
[  293.236650][ T6828] gspca_sn9c2028: read1 error -71
[  293.247673][ T6828] sn9c2028: probe of 2-1:220.0 failed with error -71
[  293.273996][ T6828] usb 2-1: USB disconnect, device number 20
[  293.303569][ T9369] loop0: detected capacity change from 0 to 2048
[  293.335439][ T9374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.386935][ T3695] usb 5-1: config 0 has no interfaces?
[  293.547118][ T3695] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00
[  293.564618][ T3695] usb 5-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255
[  293.582382][ T3695] usb 5-1: Product: syz
[  293.589446][ T3695] usb 5-1: Manufacturer: syz
[  293.596689][ T3695] usb 5-1: SerialNumber: syz
[  293.612756][ T3695] usb 5-1: config 0 descriptor??
[  293.862619][ T9381] loop0: detected capacity change from 0 to 32768
[  293.879780][ T6710] usb 5-1: USB disconnect, device number 27
[  293.896686][ T9381] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9381)
[  293.936324][ T9381] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.988363][ T9381] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  294.002688][ T9381] BTRFS info (device loop0): using free space tree
[  294.123860][ T9381] BTRFS info (device loop0): enabling ssd optimizations
[  294.233119][ T4627] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  294.760704][ T3692] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  295.015716][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  295.126791][ T3692] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  295.142144][ T3692] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[  295.178161][ T3692] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  295.207380][ T3692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.266195][   T26] audit: type=1800 audit(1717247239.724:35): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1964 res=0 errno=0
[  295.279984][ T3692] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  295.373147][ T9467] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  295.496773][ T3692] gspca_sn9c2028: read1 error -71
[  295.516983][ T3692] gspca_sn9c2028: read1 error -71
[  295.536653][ T3692] gspca_sn9c2028: read1 error -71
[  295.541942][ T3692] sn9c2028: probe of 5-1:220.0 failed with error -71
[  295.560261][ T3692] usb 5-1: USB disconnect, device number 28
[  295.854314][ T9457] loop0: detected capacity change from 0 to 32768
[  295.865007][ T9457] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9457)
[  295.889492][ T9457] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.906367][ T9457] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  295.915506][ T9457] BTRFS info (device loop0): using free space tree
[  296.016365][ T9457] BTRFS info (device loop0): enabling ssd optimizations
[  296.044804][ T9500] loop2: detected capacity change from 0 to 2048
[  296.083532][ T9508] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  296.222315][ T4627] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.096770][   T22] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  297.413525][ T9539] loop4: detected capacity change from 0 to 32768
[  297.433549][ T9539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9539)
[  297.473923][ T9539] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.487182][   T22] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  297.499549][   T22] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[  297.502563][ T9539] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  297.535080][   T22] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  297.547255][ T9539] BTRFS info (device loop4): using free space tree
[  297.565578][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.629909][   T22] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  297.689306][ T9573] loop0: detected capacity change from 0 to 512
[  297.705820][ T9539] BTRFS info (device loop4): enabling ssd optimizations
[  297.741313][ T9573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  297.839039][   T22] gspca_sn9c2028: read1 error -71
[  297.845154][ T9573] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #3: comm syz-executor.0: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  297.864802][ T9573] EXT4-fs error (device loop0): ext4_quota_enable:6971: comm syz-executor.0: Bad quota inode: 3, type: 0
[  297.881544][ T9573] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  297.887579][   T22] gspca_sn9c2028: read1 error -71
[  297.917592][   T22] gspca_sn9c2028: read1 error -71
[  297.924650][   T22] sn9c2028: probe of 4-1:220.0 failed with error -71
[  297.931898][ T9573] EXT4-fs (loop0): mount failed
[  297.934212][   T22] usb 4-1: USB disconnect, device number 30
[  297.947407][ T6394] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  298.472680][ T9604] loop1: detected capacity change from 0 to 256
[  298.589102][ T9612] overlayfs: failed to clone lowerpath
[  299.036596][ T3691] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  299.133126][ T9613] loop0: detected capacity change from 0 to 32768
[  299.156062][ T9613] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (9613)
[  299.209631][ T9613] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.223218][ T9613] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  299.240371][ T9613] BTRFS info (device loop0): using free space tree
[  299.328465][ T9613] BTRFS info (device loop0): enabling ssd optimizations
[  299.416775][ T3691] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  299.424550][ T4627] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.441896][ T3691] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[  299.481164][ T3691] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  299.490906][ T3691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.548970][ T3691] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  299.866817][ T9662] loop3: detected capacity change from 0 to 32768
[  299.876283][ T9662] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (9662)
[  299.889509][ T3691] gspca_sn9c2028: read1 error -71
[  299.901012][ T9662] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  299.912186][ T9662] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  299.921497][ T9662] BTRFS info (device loop3): enabling auto defrag
[  299.923523][ T9664] loop4: detected capacity change from 0 to 2048
[  299.927989][ T9662] BTRFS info (device loop3): doing ref verification
[  299.928039][ T9662] BTRFS info (device loop3): max_inline at 0
[  299.928076][ T9662] BTRFS info (device loop3): max_inline at 3398
[  299.928095][ T9662] BTRFS info (device loop3): turning on sync discard
[  299.960064][ T9662] BTRFS info (device loop3): turning off barriers
[  299.966547][ T9662] BTRFS info (device loop3): using free space tree
[  299.973393][ T3691] gspca_sn9c2028: read1 error -71
[  299.996640][ T3691] gspca_sn9c2028: read1 error -71
[  300.001803][ T3691] sn9c2028: probe of 2-1:220.0 failed with error -71
[  300.010119][ T3691] usb 2-1: USB disconnect, device number 21
[  300.044401][ T9684] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.089567][ T9682] loop0: detected capacity change from 0 to 256
[  300.131038][ T4856] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  300.503246][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  300.622967][ T9709] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  300.659649][ T7674] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  300.876270][ T9717] loop3: detected capacity change from 0 to 2048
[  300.928534][ T9718] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  301.029178][ T7674] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  301.032992][ T9699] loop1: detected capacity change from 0 to 32768
[  301.050465][ T7674] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[  301.065537][ T9699] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (9699)
[  301.081205][ T7674] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  301.109755][ T7674] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.141842][ T9699] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  301.170283][ T9699] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  301.180072][ T7674] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  301.195230][ T9699] BTRFS info (device loop1): using free space tree
[  301.302257][ T9699] BTRFS info (device loop1): enabling ssd optimizations
[  301.386701][ T7674] gspca_sn9c2028: read1 error -32
[  301.426664][ T7674] gspca_sn9c2028: read1 error -32
[  301.429101][ T9712] loop2: detected capacity change from 0 to 32768
[  301.432351][ T8971] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  301.471479][ T9712] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9712)
[  301.584812][ T9712] BTRFS info (device loop2): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  301.595483][ T9712] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  301.621295][ T9712] BTRFS info (device loop2): use zlib compression, level 3
[  301.629354][ T9712] BTRFS info (device loop2): turning on sync discard
[  301.636299][ T9712] BTRFS info (device loop2): max_inline at 0
[  301.642993][ T9712] BTRFS info (device loop2): enabling ssd optimizations
[  301.650329][ T9712] BTRFS info (device loop2): using spread ssd allocation scheme
[  301.666818][ T9712] BTRFS info (device loop2): using free space tree
[  301.673442][ T7674] usb 5-1: USB disconnect, device number 29
[  301.818929][ T8661] BTRFS info (device loop2): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  302.066770][ T3762] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  302.137210][ T9770] loop3: detected capacity change from 0 to 2048
[  302.165837][ T9771] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.300567][ T9778] loop3: detected capacity change from 0 to 2048
[  302.316068][ T9780] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  302.459567][ T9783] loop4: detected capacity change from 0 to 4096
[  302.468098][ T9783] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  302.492212][ T9783] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  302.499748][ T3762] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  302.519169][ T3762] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[  302.540523][ T9783] ntfs3: loop4: Failed to load root.
[  302.557780][ T3762] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  302.571571][ T3762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.628448][ T3762] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  302.802034][ T9784] loop3: detected capacity change from 0 to 32768
[  302.816667][ T9784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (9784)
[  302.836855][ T3762] gspca_sn9c2028: read1 error -71
[  302.856739][ T9784] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.861785][ T3762] gspca_sn9c2028: read1 error -71
[  302.872355][ T9784] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  302.886629][ T9784] BTRFS info (device loop3): using free space tree
[  302.893078][ T3762] gspca_sn9c2028: read1 error -71
[  302.898941][ T3762] sn9c2028: probe of 2-1:220.0 failed with error -71
[  302.908983][ T3762] usb 2-1: USB disconnect, device number 22
[  303.054085][ T9784] BTRFS info (device loop3): enabling ssd optimizations
[  303.141092][ T4856] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  303.436383][   T26] audit: type=1326 audit(1717247247.894:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae96e7cee9 code=0x7ffc0000
[  303.514630][   T26] audit: type=1326 audit(1717247247.934:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae96e7cee9 code=0x7ffc0000
[  303.559857][   T26] audit: type=1326 audit(1717247247.934:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae96e7cee9 code=0x7ffc0000
[  303.575273][ T9821] loop1: detected capacity change from 0 to 2048
[  303.597812][   T26] audit: type=1326 audit(1717247247.934:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae96e7cee9 code=0x7ffc0000
[  303.622834][   T26] audit: type=1326 audit(1717247247.934:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae96e7cee9 code=0x7ffc0000
[  303.664295][ T9826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  303.677705][   T26] audit: type=1326 audit(1717247247.934:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae96e7a667 code=0x7ffc0000
[  303.726614][   T26] audit: type=1326 audit(1717247247.934:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae96e40329 code=0x7ffc0000
[  303.749385][ T3610] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  303.777863][   T26] audit: type=1326 audit(1717247247.934:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae96e7cee9 code=0x7ffc0000
[  303.840914][   T26] audit: type=1326 audit(1717247247.934:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fae96e7a667 code=0x7ffc0000
[  303.900919][   T26] audit: type=1326 audit(1717247247.934:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fae96e40329 code=0x7ffc0000
[  304.116811][ T3610] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  304.126169][ T3610] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184
[  304.161690][ T3610] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  304.171229][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.228350][ T3610] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  304.246557][ T3761] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  304.339027][ T9838] loop4: detected capacity change from 0 to 32768
[  304.347345][ T9838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9838)
[  304.369738][ T9838] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.386626][ T9838] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  304.395393][ T9838] BTRFS info (device loop4): using free space tree
[  304.446583][ T3610] gspca_sn9c2028: read1 error -32
[  304.486609][ T3610] gspca_sn9c2028: read1 error -32
[  304.571806][ T9838] BTRFS info (device loop4): enabling ssd optimizations
[  304.639201][ T6394] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.697128][ T3761] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  304.718314][ T3761] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[  304.743324][ T3761] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  304.773574][ T9843] loop3: detected capacity change from 0 to 32768
[  304.800990][ T3761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.816164][ T9843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (9843)
[  304.832152][ T9843] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  304.844665][ T9843] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  304.855498][ T3761] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  304.877320][ T9843] BTRFS info (device loop3): using free space tree
[  304.961110][ T3686] usb 3-1: USB disconnect, device number 29
[  304.996039][ T9843] BTRFS info (device loop3): enabling ssd optimizations
[  305.066703][ T3761] gspca_sn9c2028: read1 error -71
[  305.086854][ T3761] gspca_sn9c2028: read1 error -71
[  305.126926][ T3761] gspca_sn9c2028: read1 error -71
[  305.132663][ T3761] sn9c2028: probe of 2-1:220.0 failed with error -71
[  305.185104][ T3761] usb 2-1: USB disconnect, device number 23
[  305.219776][ T9843] kvm [9842]: vcpu0, guest rIP: 0x20e disabled perfctr wrmsr: 0x187 data 0x800
[  305.251823][ T9843] kvm [9842]: vcpu0, guest rIP: 0x20e ignored wrmsr: 0x11e data 0x0
[  305.555574][ T4856] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  305.576721][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  306.150399][ T9907] loop3: detected capacity change from 0 to 2048
[  306.170290][ T3610] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  306.225409][ T9911] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.418857][ T3610] usb 1-1: Using ep0 maxpacket: 32
[  306.538972][ T3610] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  306.604628][ T9918] loop4: detected capacity change from 0 to 64
[  306.688066][ T3610] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  306.706130][ T3610] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  306.716916][ T3610] usb 1-1: Product: syz
[  306.721329][ T3610] usb 1-1: Manufacturer: syz
[  306.777521][ T3610] hub 1-1:4.0: bad descriptor, ignoring hub
[  306.786404][ T3610] hub: probe of 1-1:4.0 failed with error -5
[  306.803540][ T3610] usbhid 1-1:4.0: couldn't find an input interrupt endpoint
[  307.020951][ T9916] loop2: detected capacity change from 0 to 32768
[  307.036879][ T9916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (9916)
[  307.064111][ T9916] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  307.083312][ T9916] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  307.116615][ T9916] BTRFS info (device loop2): using free space tree
[  307.335355][ T9916] BTRFS info (device loop2): enabling ssd optimizations
[  307.412261][ T8661] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  307.648944][ T3610] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  307.996538][ T6828] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  308.016625][ T3610] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  308.025530][ T3610] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[  308.049748][ T3610] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  308.066548][ T3610] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.128228][ T3610] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  308.346618][ T3610] gspca_sn9c2028: read1 error -71
[  308.366707][ T3610] gspca_sn9c2028: read1 error -71
[  308.390032][ T3610] gspca_sn9c2028: read1 error -71
[  308.391824][ T6828] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  308.395131][ T3610] sn9c2028: probe of 5-1:220.0 failed with error -71
[  308.411824][ T6828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.425793][ T6828] usb 3-1: config 0 descriptor??
[  308.456686][ T3610] usb 5-1: USB disconnect, device number 30
[  309.016598][ T6828] [drm:udl_init] *ERROR* Selecting channel failed
[  309.043310][ T6828] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  309.057901][ T6828] [drm] Initialized udl on minor 2
[  309.071870][   T22] usb 1-1: USB disconnect, device number 25
[  309.099294][ T6828] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  309.110056][ T6828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  309.133697][ T6828] usb 3-1: USB disconnect, device number 30
[  309.550638][ T9990] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  309.866633][ T3610] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  310.216595][ T3690] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  310.236669][ T3610] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  310.250599][ T3610] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184
[  310.276722][ T3610] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  310.300806][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.358464][ T3610] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  310.466581][ T3690] usb 2-1: Using ep0 maxpacket: 32
[  310.566746][ T3610] gspca_sn9c2028: read1 error -71
[  310.586686][ T3610] gspca_sn9c2028: read1 error -71
[  310.591908][ T3690] usb 2-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  310.616630][ T3610] gspca_sn9c2028: read1 error -71
[  310.621928][ T3610] sn9c2028: probe of 3-1:220.0 failed with error -71
[  310.636841][ T3610] usb 3-1: USB disconnect, device number 31
[  310.727105][ T3690] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  310.740927][ T3690] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  310.751338][T10007] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  310.755308][ T3690] usb 2-1: Product: syz
[  310.766179][ T3690] usb 2-1: Manufacturer: syz
[  310.813594][ T3690] hub 2-1:4.0: bad descriptor, ignoring hub
[  310.825664][ T3690] hub: probe of 2-1:4.0 failed with error -5
[  310.840420][ T3690] usbhid 2-1:4.0: couldn't find an input interrupt endpoint
[  312.183945][T10038] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  312.612373][T10044] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  312.966598][ T3610] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  313.097305][ T6828] usb 2-1: USB disconnect, device number 24
[  313.341122][ T3610] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  313.366553][ T3610] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184
[  313.375849][ T3610] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  313.424193][ T3610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.498923][ T3610] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  313.716739][ T3610] gspca_sn9c2028: read1 error 0
[  313.936731][ T3610] gspca_sn9c2028: read1 error -71
[  313.956580][ T3610] gspca_sn9c2028: read1 error -71
[  313.961947][ T3610] sn9c2028: probe of 3-1:220.0 failed with error -71
[  313.975102][ T3610] usb 3-1: USB disconnect, device number 32
[  314.371793][ T6828] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  314.646668][ T6828] usb 5-1: Using ep0 maxpacket: 32
[  314.705390][T10090] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  314.786781][ T6828] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  314.941865][ T6828] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  314.961663][ T6828] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  314.981689][ T6828] usb 5-1: Product: syz
[  314.985901][ T6828] usb 5-1: Manufacturer: syz
[  315.042504][ T6828] hub 5-1:4.0: bad descriptor, ignoring hub
[  315.061732][ T6828] hub: probe of 5-1:4.0 failed with error -5
[  315.069502][ T6828] usbhid 5-1:4.0: couldn't find an input interrupt endpoint
[  315.593188][T10105] loop2: detected capacity change from 0 to 256
[  315.648420][T10105] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  315.681391][T10105] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  315.728405][T10105] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xca8265da, utbl_chksum : 0xe619d30d)
[  315.839310][ T8661] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xdd06f53f)
[  315.851638][ T8661] exFAT-fs (loop2): Filesystem has been set read-only
[  315.859387][ T8661] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0xdd06f53f)
[  316.046609][ T6828] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  316.097055][ T4695] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  316.221786][ T4614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.352148][ T4614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.402336][T10125] loop1: detected capacity change from 0 to 512
[  316.413052][T10125] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  316.447089][ T6828] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  316.456008][ T6828] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184
[  316.457569][T10125] EXT4-fs (loop1): failed to initialize system zone (-117)
[  316.483558][ T4614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.486534][ T6828] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  316.503132][ T6828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.504321][T10125] EXT4-fs (loop1): mount failed
[  316.517311][ T4695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.527541][ T4695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  316.548313][ T6828] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  316.583583][ T4614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.641071][ T4695] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  316.650908][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  316.662516][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  316.672842][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  316.680500][ T4695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  316.689010][ T4695] usb 4-1: SerialNumber: syz
[  316.695204][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  316.703955][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  316.713086][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.756715][ T6828] gspca_sn9c2028: read1 error 0
[  316.946226][T10127] chnl_net:caif_netlink_parms(): no params data found
[  316.977526][ T6828] gspca_sn9c2028: read1 error -71
[  316.984197][ T4695] usb 4-1: 0:2 : does not exist
[  317.006947][ T6828] gspca_sn9c2028: read1 error -71
[  317.012043][ T6828] sn9c2028: probe of 1-1:220.0 failed with error -71
[  317.029478][ T6828] usb 1-1: USB disconnect, device number 26
[  317.051458][T10127] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.058973][T10127] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.070310][T10127] device bridge_slave_0 entered promiscuous mode
[  317.085791][T10127] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.087079][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  317.093532][T10127] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.100101][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  317.118042][T10127] device bridge_slave_1 entered promiscuous mode
[  317.218661][T10127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.230800][ T3614] usb 5-1: USB disconnect, device number 31
[  317.276741][T10127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.390853][ T3614] usb 4-1: USB disconnect, device number 31
[  317.439879][T10127] team0: Port device team_slave_0 added
[  317.460671][T10127] team0: Port device team_slave_1 added
[  317.620251][T10127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.629616][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.703991][T10127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.767231][T10127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.774208][T10127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.839629][T10127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.867022][T10150] loop1: detected capacity change from 0 to 2048
[  317.886622][ T3690] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  317.955018][T10150] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  317.957078][T10127] device hsr_slave_0 entered promiscuous mode
[  317.971853][T10127] device hsr_slave_1 entered promiscuous mode
[  317.998892][T10127] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  318.014573][T10127] Cannot create hsr debugfs directory
[  318.061685][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  318.061709][   T26] audit: type=1800 audit(1717247262.524:47): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1941 res=0 errno=0
[  318.091337][   T26] audit: type=1800 audit(1717247262.554:48): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1941 res=0 errno=0
[  318.119553][   T26] audit: type=1800 audit(1717247262.554:49): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1939 res=0 errno=0
[  318.145168][ T4614] device hsr_slave_0 left promiscuous mode
[  318.153160][   T26] audit: type=1800 audit(1717247262.554:50): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1939 res=0 errno=0
[  318.174575][ T4614] device hsr_slave_1 left promiscuous mode
[  318.197055][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.226543][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.250597][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.266826][ T3690] usb 1-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  318.279180][ T3690] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 184
[  318.282908][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.300335][ T3690] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  318.323834][ T3690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.325234][ T4614] device bridge_slave_1 left promiscuous mode
[  318.366767][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.375579][ T4614] device bridge_slave_0 left promiscuous mode
[  318.378438][ T3690] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  318.388293][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.406567][ T6828] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  318.425824][ T4614] device veth1_macvtap left promiscuous mode
[  318.436929][ T4614] device veth0_macvtap left promiscuous mode
[  318.451258][ T4614] device veth1_vlan left promiscuous mode
[  318.465537][ T4614] device veth0_vlan left promiscuous mode
[  318.596620][ T3690] gspca_sn9c2028: read1 error -32
[  318.652127][ T3690] gspca_sn9c2028: read1 error -71
[  318.676610][ T3690] gspca_sn9c2028: read1 error -71
[  318.681910][ T3690] sn9c2028: probe of 1-1:220.0 failed with error -71
[  318.709769][ T3690] usb 1-1: USB disconnect, device number 27
[  318.723073][ T6828] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  318.757376][ T3582] Bluetooth: hci2: command tx timeout
[  318.816748][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  318.896770][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  318.980735][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  319.016313][ T4614] team0 (unregistering): Port device team_slave_1 removed
[  319.044021][ T4614] team0 (unregistering): Port device team_slave_0 removed
[  319.064513][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.096785][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  319.106378][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.197065][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  319.220063][ T4614] bond0 (unregistering): Released all slaves
[  319.276331][T10176] syz-executor.0[10176] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  319.276398][T10176] syz-executor.0[10176] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  319.332046][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  319.440156][ T3690] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  319.489820][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  319.586723][ T6828] usb 2-1: Duplicate descriptor for config 250 interface 0 altsetting 0, skipping
[  319.596159][ T6828] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  319.605372][ T6828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.676579][   T22] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  319.686582][ T3690] usb 4-1: Using ep0 maxpacket: 32
[  319.806617][ T3690] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.861406][ T3289] usb 2-1: USB disconnect, device number 25
[  319.900971][T10127] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  319.917195][T10127] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  319.926806][ T3690] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  319.928773][T10127] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  319.940293][ T3690] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  319.954587][T10127] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  319.961728][ T3690] usb 4-1: Product: syz
[  319.961753][ T3690] usb 4-1: Manufacturer: syz
[  320.017446][ T3690] hub 4-1:4.0: bad descriptor, ignoring hub
[  320.023411][ T3690] hub: probe of 4-1:4.0 failed with error -5
[  320.039992][ T3690] usbhid 4-1:4.0: couldn't find an input interrupt endpoint
[  320.082045][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.105343][   T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  320.125704][T10127] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.144934][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  320.153734][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  320.165372][T10127] 8021q: adding VLAN 0 to HW filter on device team0
[  320.180021][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  320.190047][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  320.203320][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.210500][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.224584][   T22] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  320.249985][   T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  320.269934][   T22] usb 5-1: SerialNumber: syz
[  320.295257][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  320.305761][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  320.315319][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  320.324450][ T4695] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.331604][ T4695] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.340359][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  320.349606][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  320.359083][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  320.369456][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  320.384665][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  320.393983][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  320.414816][T10127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  320.434618][T10127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  320.451665][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  320.460745][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  320.487336][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  320.496007][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  320.517336][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  320.530716][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  320.561073][   T22] usb 5-1: 0:2 : does not exist
[  320.726594][   T32] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  320.748299][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.755835][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  320.765928][T10127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.800735][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  320.813245][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  320.842278][ T3582] Bluetooth: hci2: command tx timeout
[  320.868490][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  320.886900][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  320.897501][T10127] device veth0_vlan entered promiscuous mode
[  320.946907][T10127] device veth1_vlan entered promiscuous mode
[  320.954133][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  320.967563][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  320.975312][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  320.994193][ T3614] usb 5-1: USB disconnect, device number 32
[  321.044605][T10127] device veth0_macvtap entered promiscuous mode
[  321.068120][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  321.076174][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  321.106788][   T32] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  321.107776][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  321.115873][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.145585][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  321.168660][   T32] usb 1-1: config 0 descriptor??
[  321.176366][T10127] device veth1_macvtap entered promiscuous mode
[  321.219197][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.243840][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.263465][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.274634][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.290727][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.302386][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.322850][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  321.335852][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.353589][T10127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.364095][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  321.378986][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  321.389803][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  321.409804][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.435860][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.457545][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.482771][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.493532][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.505471][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.526884][   T32] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  321.535960][   T32] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  321.555249][T10127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  321.569755][T10127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  321.588107][   T32] [drm:udl_init] *ERROR* Selecting channel failed
[  321.600044][T10127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.625168][   T32] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  321.659374][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  321.668807][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  321.677295][   T32] [drm] Initialized udl on minor 2
[  321.697436][T10127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.706171][T10127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.720986][   T32] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  321.750707][   T32] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  321.771713][T10127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.792040][   T32] usb 1-1: USB disconnect, device number 28
[  321.798463][T10127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.952510][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.966781][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.013709][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  322.040019][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.062584][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.091083][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  322.266571][ T3289] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  322.307461][ T3690] usb 4-1: USB disconnect, device number 32
[  322.438355][T10224] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'.
[  322.495431][T10201] loop4: detected capacity change from 0 to 40427
[  322.520356][T10201] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  322.536327][T10201] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  322.598310][T10201] F2FS-fs (loop4): Found nat_bits in checkpoint
[  322.629919][ T3289] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  322.647700][ T3289] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184
[  322.663115][ T3289] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  322.663296][T10201] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  322.676980][ T3289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.720515][T10201] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  322.728305][T10201] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  322.758401][ T3289] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  322.796958][   T32] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  322.912707][T10201] overlayfs: failed to resolve './file0': -2
[  322.920551][ T3582] Bluetooth: hci2: command tx timeout
[  322.976678][ T3289] gspca_sn9c2028: read1 error -32
[  323.016691][ T3289] gspca_sn9c2028: read1 error -71
[  323.036680][ T3289] gspca_sn9c2028: read1 error -71
[  323.041945][ T3289] sn9c2028: probe of 2-1:220.0 failed with error -71
[  323.059731][ T3289] usb 2-1: USB disconnect, device number 26
[  323.187062][   T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  323.212453][   T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  323.326009][T10246] loop0: detected capacity change from 0 to 512
[  323.337551][   T32] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  323.359956][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  323.372975][   T32] usb 4-1: SerialNumber: syz
[  323.381876][T10246] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  323.421823][T10246] ext4 filesystem being mounted at /root/syzkaller-testdir1091631377/syzkaller.AcsCzb/329/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038 (0x7fffffff)
[  323.505235][T10246] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  323.532375][T10246] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  323.592846][ T4627] EXT4-fs (loop0): unmounting filesystem.
[  323.650213][   T32] usb 4-1: 0:2 : does not exist
[  323.890838][   T26] audit: type=1326 audit(1717247268.354:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  323.929569][   T26] audit: type=1326 audit(1717247268.354:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  323.964077][   T26] audit: type=1326 audit(1717247268.354:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  323.994556][   T26] audit: type=1326 audit(1717247268.354:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  324.023006][   T26] audit: type=1326 audit(1717247268.354:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  324.057995][   T26] audit: type=1326 audit(1717247268.354:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8670a7a667 code=0x7ffc0000
[  324.081155][   T26] audit: type=1326 audit(1717247268.354:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8670a40329 code=0x7ffc0000
[  324.098875][   T32] usb 4-1: USB disconnect, device number 33
[  324.106391][   T26] audit: type=1326 audit(1717247268.354:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8670a7cee9 code=0x7ffc0000
[  324.133460][   T26] audit: type=1326 audit(1717247268.354:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8670a7a667 code=0x7ffc0000
[  324.157364][   T26] audit: type=1326 audit(1717247268.354:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8670a40329 code=0x7ffc0000
[  324.337791][T10257] loop1: detected capacity change from 0 to 32768
[  324.361289][T10257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (10257)
[  324.403453][T10257] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  324.433852][T10257] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  324.456578][T10257] BTRFS info (device loop1): using free space tree
[  324.622942][T10257] BTRFS info (device loop1): enabling ssd optimizations
[  325.276637][ T3582] Bluetooth: hci2: command tx timeout
[  325.310976][ T8971] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  325.479674][T10292] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  325.653294][T10302] loop0: detected capacity change from 0 to 512
[  325.680591][T10276] loop4: detected capacity change from 0 to 40427
[  325.700438][T10302] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  325.711302][T10276] F2FS-fs (loop4): invalid crc value
[  325.734231][T10276] F2FS-fs (loop4): Found nat_bits in checkpoint
[  325.746755][T10310] syz-executor.1[10310] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.746848][T10310] syz-executor.1[10310] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.766587][ T3289] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  325.766766][T10302] EXT4-fs (loop0): failed to initialize system zone (-117)
[  325.825191][T10302] EXT4-fs (loop0): mount failed
[  325.836162][T10276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  325.843499][T10314] loop3: detected capacity change from 0 to 512
[  325.859083][T10307] f2fs_ckpt-7:4: attempt to access beyond end of device
[  325.859083][T10307] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  325.874673][T10314] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  325.915419][T10314] EXT4-fs (loop3): 1 truncate cleaned up
[  325.921953][T10314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  325.960199][ T4856] EXT4-fs (loop3): unmounting filesystem.
[  326.156766][ T3289] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  326.175634][ T3289] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184
[  326.204113][ T3289] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  326.231258][ T3289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.288436][ T3289] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  326.506576][ T3289] gspca_sn9c2028: read1 error -32
[  326.546665][ T3289] gspca_sn9c2028: read1 error -71
[  326.566617][ T3289] gspca_sn9c2028: read1 error -71
[  326.571886][ T3289] sn9c2028: probe of 3-1:220.0 failed with error -71
[  326.597303][ T3289] usb 3-1: USB disconnect, device number 33
[  326.976873][T10321] loop0: detected capacity change from 0 to 40427
[  327.013609][T10323] loop1: detected capacity change from 0 to 32768
[  327.033074][T10323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (10323)
[  327.059428][T10323] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.074952][T10323] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  327.087378][T10323] BTRFS info (device loop1): using free space tree
[  327.090426][T10321] F2FS-fs (loop0): Found nat_bits in checkpoint
[  327.248273][T10321] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  327.439155][T10323] BTRFS info (device loop1): enabling ssd optimizations
[  327.483012][T10355] loop2: detected capacity change from 0 to 2048
[  327.543542][T10362] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.569941][ T8971] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  327.598262][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  327.674338][T10367] loop4: detected capacity change from 0 to 1024
[  328.407947][ T3690] libceph: connect (1)[c::]:6789 error -101
[  328.523103][T10372] ceph: No mds server is up or the cluster is laggy
[  328.593190][ T3690] libceph: mon0 (1)[c::]:6789 connect error
[  328.716664][ T3609] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  328.876055][T10383] loop1: detected capacity change from 0 to 512
[  328.894550][T10383] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  328.920225][T10383] EXT4-fs (loop1): failed to initialize system zone (-117)
[  328.931548][T10383] EXT4-fs (loop1): mount failed
[  329.006558][ T3609] usb 3-1: Using ep0 maxpacket: 32
[  329.136910][ T3609] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  329.318609][ T3609] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  329.337006][ T3609] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  329.358419][ T3609] usb 3-1: Product: syz
[  329.362722][ T3609] usb 3-1: Manufacturer: syz
[  329.386635][ T3609] usb 3-1: SerialNumber: syz
[  329.393017][ T3609] usb 3-1: config 0 descriptor??
[  329.398356][ T4697] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  329.417010][T10370] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  329.464139][ T4627] syz-executor.0: attempt to access beyond end of device
[  329.464139][ T4627] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  329.557569][ T8283] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  329.652351][ T3615] usb 3-1: USB disconnect, device number 34
[  329.767189][ T4697] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  329.782259][ T4697] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[  329.792528][ T4697] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  329.802479][ T8283] usb 2-1: Using ep0 maxpacket: 32
[  329.808360][ T4697] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.861238][ T4697] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  329.932371][ T8283] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  330.082392][ T4697] gspca_sn9c2028: read1 error -32
[  330.110522][T10399] loop0: detected capacity change from 0 to 32768
[  330.118731][T10399] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (10399)
[  330.134812][T10399] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.136857][ T8283] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  330.150102][T10399] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  330.164139][T10399] BTRFS info (device loop0): using free space tree
[  330.166548][ T8283] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  330.206692][ T8283] usb 2-1: Product: syz
[  330.210911][ T8283] usb 2-1: Manufacturer: syz
[  330.215534][ T8283] usb 2-1: SerialNumber: syz
[  330.235144][ T8283] usb 2-1: config 0 descriptor??
[  330.256929][T10394] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  330.300977][T10410] loop2: detected capacity change from 0 to 2048
[  330.315923][T10399] BTRFS info (device loop0): enabling ssd optimizations
[  330.320069][T10418] loop3: detected capacity change from 0 to 2048
[  330.345681][T10421] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.358104][ T4697] gspca_sn9c2028: read1 error -71
[  330.363185][ T4697] sn9c2028: probe of 5-1:220.0 failed with error -71
[  330.377017][ T4697] usb 5-1: USB disconnect, device number 33
[  330.389717][T10422] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.478796][ T4627] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.494146][ T3687] usb 2-1: USB disconnect, device number 27
[  330.525097][T10426] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[  330.846196][T10436] loop3: detected capacity change from 0 to 2048
[  330.868067][T10436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.899076][T10436] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  331.053130][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[  331.082153][T10444] loop3: detected capacity change from 0 to 512
[  331.120005][T10444] EXT4-fs (loop3): 1 truncate cleaned up
[  331.152880][T10444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  331.278892][ T4856] EXT4-fs (loop3): unmounting filesystem.
[  331.678667][T10456] loop2: detected capacity change from 0 to 2048
[  331.751378][T10457] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.730955][T10469] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'.
[  332.754058][T10469] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'.
[  333.176826][ T3609] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  334.009191][ T3609] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  334.034052][ T3609] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184
[  334.048211][ T3609] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  334.065720][ T3609] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.080771][T10488] loop0: detected capacity change from 0 to 2048
[  334.101745][T10493] loop4: detected capacity change from 0 to 2048
[  334.116317][T10494] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.140519][ T3609] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  334.153621][T10495] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.357893][ T3609] gspca_sn9c2028: read1 error -32
[  334.400119][T10507] loop2: detected capacity change from 0 to 256
[  334.442938][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  334.469216][T10507] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  334.470249][T10507] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005)
[  334.470273][T10507] exFAT-fs (loop2): Filesystem has been set read-only
[  334.470283][T10507] exFAT-fs (loop2): failed to initialize root inode
[  334.639006][ T3609] gspca_sn9c2028: read1 error -71
[  334.644130][ T3609] sn9c2028: probe of 4-1:220.0 failed with error -71
[  334.714829][T10522] loop1: detected capacity change from 0 to 2048
[  334.717876][ T3609] usb 4-1: USB disconnect, device number 34
[  335.435117][T10528] loop2: detected capacity change from 0 to 2048
[  335.488284][T10527] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  335.500585][T10529] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  335.564527][T10531] loop0: detected capacity change from 0 to 1024
[  337.186542][ T3687] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  337.226539][ T3690] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  337.356560][ T3615] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  337.436536][ T3687] usb 2-1: Using ep0 maxpacket: 32
[  337.461961][T10565] loop0: detected capacity change from 0 to 40427
[  337.471287][T10565] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  337.479670][T10565] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  337.513836][T10565] F2FS-fs (loop0): Found nat_bits in checkpoint
[  337.558143][ T3687] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.605077][T10565] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  337.612611][ T3690] usb 3-1: config 0 has no interfaces?
[  337.618645][T10565] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  337.663956][T10565] ------------[ cut here ]------------
[  337.670019][T10565] kernel BUG at fs/f2fs/inline.c:259!
[  337.677032][T10565] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  337.683154][T10565] CPU: 1 PID: 10565 Comm: syz-executor.0 Not tainted 6.1.92-syzkaller #0
[  337.691582][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  337.701653][T10565] RIP: 0010:f2fs_write_inline_data+0x771/0x780
2024/06/01 13:08:02 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  337.707540][ T3687] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  337.707819][T10565] Code: fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ea fc ff ff 48 89 df e8 9e e8 19 fe e9 dd fc ff ff e8 e4 e3 c2 06 e8 1f 69 c2 fd <0f> 0b e8 18 69 c2 fd 0f 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55
[  337.729637][ T3687] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  337.736505][T10565] RSP: 0018:ffffc9000374ee60 EFLAGS: 00010283
[  337.736532][T10565] RAX: ffffffff83c82431 RBX: 0000000000000001 RCX: 0000000000040000
[  337.736546][T10565] RDX: ffffc9000b1a9000 RSI: 000000000000cca3 RDI: 000000000000cca4
[  337.736557][T10565] RBP: ffffc9000374ef90 R08: ffffffff83c81efd R09: ffffed100e27273f
[  337.736570][T10565] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000374eee8
[  337.736582][T10565] R13: 1ffff1100e27273e R14: ffffc9000374eee0 R15: ffffc9000374eef0
[  337.736595][T10565] FS:  00007f867180c6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  337.736611][T10565] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.736624][T10565] CR2: 0000000020002000 CR3: 0000000079f6b000 CR4: 00000000003506e0
[  337.736640][T10565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  337.736650][T10565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  337.736662][T10565] Call Trace:
[  337.736668][T10565]  <TASK>
[  337.836485][T10565]  ? __die_body+0x5e/0xa0
[  337.840818][T10565]  ? die+0x83/0xb0
[  337.844544][T10565]  ? do_trap+0x11e/0x350
[  337.848776][T10565]  ? f2fs_write_inline_data+0x771/0x780
[  337.854401][T10565]  ? f2fs_write_inline_data+0x771/0x780
[  337.859965][T10565]  ? do_error_trap+0x13d/0x1e0
[  337.864718][T10565]  ? f2fs_write_inline_data+0x771/0x780
[  337.870256][T10565]  ? do_int3+0x30/0x30
[  337.874315][T10565]  ? report_bug+0x3e0/0x500
[  337.878816][T10565]  ? rcu_is_watching+0x11/0xb0
[  337.883568][T10565]  ? handle_invalid_op+0x2c/0x40
[  337.888496][T10565]  ? f2fs_write_inline_data+0x771/0x780
[  337.894035][T10565]  ? exc_invalid_op+0x2f/0x40
[  337.898720][T10565]  ? asm_exc_invalid_op+0x16/0x20
[  337.903738][T10565]  ? f2fs_write_inline_data+0x23d/0x780
[  337.909275][T10565]  ? f2fs_write_inline_data+0x771/0x780
[  337.914815][T10565]  ? f2fs_write_inline_data+0x771/0x780
[  337.920357][T10565]  ? f2fs_grab_cache_page+0x540/0x540
[  337.925725][T10565]  f2fs_write_single_data_page+0xcaf/0x1f90
[  337.931618][T10565]  ? f2fs_i_compr_blocks_update+0x150/0x150
[  337.937500][T10565]  ? folio_clear_dirty_for_io+0x7f4/0xcf0
[  337.943216][T10565]  ? mlock_page_drain_local+0x75/0x490
[  337.948669][T10565]  ? mlock_page_drain_local+0x75/0x490
[  337.954121][T10565]  ? mlock_page_drain_local+0x288/0x490
[  337.959659][T10565]  f2fs_write_data_pages+0x1ceb/0x3a70
[  337.965119][T10565]  ? f2fs_read_data_folio+0x350/0x350
[  337.970502][T10565]  ? xas_load+0x11a/0x140
[  337.975182][T10565]  ? __lock_acquire+0x125b/0x1f80
[  337.980219][T10565]  ? f2fs_read_data_folio+0x350/0x350
[  337.985588][T10565]  do_writepages+0x3a2/0x670
[  337.990179][T10565]  ? __writepage+0x120/0x120
[  337.994765][T10565]  ? filemap_fdatawrite_wbc+0x116/0x180
[  338.000306][T10565]  ? __lock_acquire+0x1f80/0x1f80
[  338.005333][T10565]  ? do_raw_spin_unlock+0x137/0x8a0
[  338.010541][T10565]  ? wbc_attach_and_unlock_inode+0x53f/0x550
[  338.016542][T10565]  filemap_fdatawrite_wbc+0x121/0x180
[  338.021926][T10565]  file_write_and_wait_range+0x1ca/0x2b0
[  338.027561][T10565]  ? __filemap_set_wb_err+0x270/0x270
[  338.032936][T10565]  f2fs_do_sync_file+0x69d/0x1c00
[  338.037962][T10565]  ? f2fs_sync_file+0x160/0x160
[  338.042817][T10565]  ? __up_read+0x690/0x690
[  338.047228][T10565]  ? f2fs_sync_file+0xe5/0x160
[  338.051985][T10565]  f2fs_file_write_iter+0x720/0x2980
[  338.057271][T10565]  ? f2fs_file_read_iter+0xd70/0xd70
[  338.062550][T10565]  ? rcu_read_lock_any_held+0xb3/0x160
[  338.068007][T10565]  vfs_write+0x7ae/0xba0
[  338.072508][T10565]  ? file_end_write+0x250/0x250
[  338.077369][T10565]  ? __fget_files+0x28/0x4a0
[  338.081965][T10565]  ? __fget_files+0x435/0x4a0
[  338.086637][T10565]  ? __fdget_pos+0x2ba/0x360
[  338.091214][T10565]  ? ksys_write+0x77/0x2c0
[  338.095618][T10565]  ksys_write+0x19c/0x2c0
[  338.099935][T10565]  ? print_irqtrace_events+0x210/0x210
[  338.105389][T10565]  ? __ia32_sys_read+0x80/0x80
[  338.110144][T10565]  ? syscall_enter_from_user_mode+0x2e/0x230
[  338.116112][T10565]  ? lockdep_hardirqs_on+0x94/0x130
[  338.121301][T10565]  ? syscall_enter_from_user_mode+0x2e/0x230
[  338.127271][T10565]  do_syscall_64+0x3b/0xb0
[  338.131717][T10565]  ? clear_bhb_loop+0x45/0xa0
[  338.136421][T10565]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  338.142327][T10565] RIP: 0033:0x7f8670a7cee9
[  338.146745][T10565] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  338.166348][T10565] RSP: 002b:00007f867180c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  338.174758][T10565] RAX: ffffffffffffffda RBX: 00007f8670bb3fa0 RCX: 00007f8670a7cee9
[  338.182723][T10565] RDX: 0000000000002000 RSI: 0000000020000040 RDI: 0000000000000006
[  338.190685][T10565] RBP: 00007f8670ac947f R08: 0000000000000000 R09: 0000000000000000
[  338.198645][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  338.206606][T10565] R13: 000000000000000b R14: 00007f8670bb3fa0 R15: 00007ffecc55d4c8
[  338.215007][T10565]  </TASK>
[  338.218017][T10565] Modules linked in:
[  338.236571][ T3690] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice=98.00
[  338.263386][ T3687] usb 2-1: Product: syz
[  338.272050][ T3690] usb 3-1: New USB device strings: Mfr=18, Product=255, SerialNumber=255
[  338.288335][ T3615] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  338.289218][ T3687] usb 2-1: Manufacturer: syz
[  338.307895][ T3615] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.308769][ T3690] usb 3-1: Product: syz
[  338.328379][ T3615] usb 5-1: config 0 descriptor??
[  338.333539][ T3690] usb 3-1: Manufacturer: syz
[  338.338460][T10565] ---[ end trace 0000000000000000 ]---
[  338.344091][T10565] RIP: 0010:f2fs_write_inline_data+0x771/0x780
[  338.354794][ T3690] usb 3-1: SerialNumber: syz
[  338.361880][T10565] Code: fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ea fc ff ff 48 89 df e8 9e e8 19 fe e9 dd fc ff ff e8 e4 e3 c2 06 e8 1f 69 c2 fd <0f> 0b e8 18 69 c2 fd 0f 0b 66 0f 1f 44 00 00 55 41 57 41 56 41 55
[  338.409119][ T3690] usb 3-1: config 0 descriptor??
[  338.433832][T10565] RSP: 0018:ffffc9000374ee60 EFLAGS: 00010283
[  338.445572][T10565] RAX: ffffffff83c82431 RBX: 0000000000000001 RCX: 0000000000040000
[  338.459905][T10565] RDX: ffffc9000b1a9000 RSI: 000000000000cca3 RDI: 000000000000cca4
[  338.480135][T10565] RBP: ffffc9000374ef90 R08: ffffffff83c81efd R09: ffffed100e27273f
[  338.499414][T10565] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc9000374eee8
[  338.515118][T10565] R13: 1ffff1100e27273e R14: ffffc9000374eee0 R15: ffffc9000374eef0
[  338.552222][T10565] FS:  00007f867180c6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  338.574705][T10565] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  338.591215][T10565] CR2: 0000000001480534 CR3: 0000000079f6b000 CR4: 00000000003506f0
[  338.611468][T10565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  338.621496][T10565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  338.630229][T10565] Kernel panic - not syncing: Fatal exception
[  338.636543][T10565] Kernel Offset: disabled
[  338.640856][T10565] Rebooting in 86400 seconds..