last executing test programs:

59.75870504s ago: executing program 2 (id=1539):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r0, &(0x7f0000000a00)='syz0\x00', 0x1ff)

59.758374325s ago: executing program 2 (id=1540):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r0 = syz_open_dev$usbfs(0x0, 0x75, 0x170f03)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0)
add_key$user(0x0, &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000440)="98ff464bc9b091653a17abe8df0f7825aef97d9a7d2ef0185c59e60d0916a08fa3199b2a7e74032af4661cd2ff4400a58bdd0470cc8da9253bb9312908666810bac2a5c84ca3a95898", 0x49, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(r2, 0x9, &(0x7f00000001c0)={0x8000000000000000, 0xa}, &(0x7f0000000280))
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000240)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x5, "14956544c869ef45cda7dd68fe132f1d0259da184039589d199f3db71c15666d95"}})

58.42619328s ago: executing program 2 (id=1544):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0)

58.318868774s ago: executing program 2 (id=1546):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

58.039216611s ago: executing program 2 (id=1550):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

57.219099213s ago: executing program 2 (id=1553):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, 0x0, 0x0, 0x9, 0x0, 0x0, 0x480330})
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0)

57.103784528s ago: executing program 32 (id=1553):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, 0x0, 0x0, 0x9, 0x0, 0x0, 0x480330})
syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0)

6.219656493s ago: executing program 1 (id=2025):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000280050800500020000000000080003000bac4f00090001007ee5d52ffd00000008000700"], 0x50}}, 0x20000000)

5.599166261s ago: executing program 1 (id=2028):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x10}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800)

5.483321522s ago: executing program 1 (id=2030):
modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10)
modify_ldt$read(0x0, &(0x7f0000000140)=""/4096, 0x1000)

5.365656749s ago: executing program 1 (id=2031):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
timerfd_create(0x1, 0x80000)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e65204361707455"], 0xb8)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r4, r3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0xfffe, 0xfffffffc, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3)
getsockopt$bt_hci(r5, 0x11a, 0x3, 0x0, &(0x7f00000004c0))
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0)
connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)

4.559679662s ago: executing program 0 (id=2034):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='errors=continue,euid>', @ANYRESDEC=0xee00, @ANYBLOB="2f039032e39d867e3f5d05ac91f7005e00856153f73e8c83ebf53e2013157e9a879a7e227c9cc0458c509644c7625eb09c784868f45159c608b513b70735717f32ad7e8e1924c82e0762be02be3edf972d"], 0x1, 0x235, &(0x7f0000000000)="$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")
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x5)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
r0 = syz_mount_image$xfs(&(0x7f0000000640), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000200), 0x0, 0x965a, &(0x7f0000012c40)="$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")
ioctl$FS_IOC_GETFSMAP(r0, 0xc0385868, &(0x7f0000000180)=ANY=[])

4.406260496s ago: executing program 1 (id=2035):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20000040)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)

3.360541569s ago: executing program 0 (id=2038):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

2.856435258s ago: executing program 0 (id=2039):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905811c00020000000904010000020d00000904010102020d00", @ANYRESHEX], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0xcc2, 0x10, 0x6, 0x80, 0x7, 0x1, 0x724, 0x1, 0x9, 0xcff1, 0x1ff, 0x7fff}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)

2.654254112s ago: executing program 3 (id=2041):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1)

2.538233611s ago: executing program 3 (id=2042):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x10, 0x0, 0x8, 0x0, 0x73f, 0x3}}, {0x4}}]}]}, 0x58}}, 0x4800)

656.067514ms ago: executing program 0 (id=2043):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@acquire={0x1ac, 0x17, 0x1, 0x70bd2a, 0x25dfdbfe, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x3c}, @in=@loopback, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, 0x4e23, 0xffff, 0x4e21, 0x6, 0x2, 0x0, 0x60, 0x3a, 0x0, 0xee01}, {{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e24, 0x0, 0x4e22, 0x2, 0xa, 0x80, 0x0, 0x2f}, {0x7, 0x3, 0x8, 0x6f8, 0x100, 0x8, 0xfffffffffffff001, 0x3}, {0x1, 0xffff, 0x6, 0x8}, 0x1, 0x6e6bb0, 0x0, 0x1, 0x1, 0x1}, 0x45, 0xa8a, 0x8, 0x70bd25}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x4d5, 0x2b}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0xa, 0xffff338f, 0xe, 0x2}, {{@in=@rand_addr=0x64010100, 0x4d5, 0x32}, 0x2, @in=@remote, 0x3502, 0x3, 0x71ee5de8c91afa94, 0x4, 0x2, 0xfffff542, 0x4}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000)

563.37132ms ago: executing program 1 (id=2044):
creat(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x6}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x1a3)
ioctl$sock_inet_SIOCSARP(r2, 0xc0046686, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x1, @random="89a08d8ed953"}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'rose0\x00'})

503.418114ms ago: executing program 3 (id=2045):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800)

503.077156ms ago: executing program 0 (id=2046):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
sendmsg$netlink(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=ANY=[], 0x1b8}, {0x0, 0x1f88}], 0x2}, 0x0)

412.92616ms ago: executing program 0 (id=2047):
close(0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0)
r1 = syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000140)=0xfffffdfb)
eventfd2(0xff, 0x80001)
syz_io_uring_submit(0x0, r2, 0x0)
io_uring_enter(r1, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x625, 0x4c1, 0xc1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000000580)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

372.402136ms ago: executing program 3 (id=2048):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="140100001f0001002cbd700000000000030100800c0001"], 0x114}], 0x1}, 0x0)

228.286496ms ago: executing program 3 (id=2049):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50)
close(r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)

0s ago: executing program 3 (id=2050):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)

kernel console output (not intermixed with test programs):

ode 0x0c03 failed: -19
[  190.629983][ T6020] pegasus 1-1:0.0: can't reset MAC
[  190.632296][ T6020] pegasus 1-1:0.0: probe with driver pegasus failed with error -5
[  190.645435][ T6020] usb 1-1: USB disconnect, device number 20
[  190.823249][ T8544] loop1: detected capacity change from 0 to 1024
[  190.868692][ T8544] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.875377][ T8544] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.878815][ T8544] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.884538][ T8544] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.889030][ T8544] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.892278][ T8544] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.912044][ T6268] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.915116][ T6268] hfsplus: request for non-existent node 33554434 in B*Tree
[  190.992405][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'.
[  191.103967][ T8554] loop1: detected capacity change from 0 to 4096
[  191.121139][ T8555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.652508][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  192.933689][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1130'.
[  192.977319][ T8608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  192.993673][ T8608] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  193.104795][ T8614] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.258369][ T8624] loop2: detected capacity change from 0 to 512
[  193.274491][ T8624] EXT4-fs: Ignoring removed orlov option
[  193.276792][ T8624] EXT4-fs: Ignoring removed nomblk_io_submit option
[  193.290465][ T8624] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  193.325915][ T8624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c128, mo2=0002]
[  193.334783][ T8628] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  193.341783][ T8624] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1141: corrupted in-inode xattr: e_value size too large
[  193.347773][ T8624] EXT4-fs (loop2): Remounting filesystem read-only
[  193.351880][ T8628] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  193.364641][ T8624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.411898][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.630813][ T6020] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  193.650770][ T5290] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  193.759388][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  193.779353][ T6020] usb 1-1: Using ep0 maxpacket: 16
[  193.783644][ T6020] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  193.787445][ T6020] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.792217][ T6020] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.797801][ T6020] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.800979][ T5290] usb 2-1: Using ep0 maxpacket: 32
[  193.803888][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.807406][ T6020] usb 1-1: Product: syz
[  193.808947][ T6020] usb 1-1: Manufacturer: syz
[  193.811701][ T6020] usb 1-1: SerialNumber: syz
[  193.813538][ T5290] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  193.821891][ T5290] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  193.825460][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.829892][ T5290] usb 2-1: Product: syz
[  193.832456][ T5290] usb 2-1: Manufacturer: syz
[  193.841865][ T5290] usb 2-1: SerialNumber: syz
[  193.909440][    T9] usb 3-1: Using ep0 maxpacket: 32
[  193.913927][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.920220][    T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  193.923822][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.926823][    T9] usb 3-1: Product: syz
[  193.928420][    T9] usb 3-1: Manufacturer: syz
[  193.931665][    T9] usb 3-1: SerialNumber: syz
[  193.936273][    T9] usb 3-1: config 0 descriptor??
[  193.943134][    T9] usb 3-1: no audio or video endpoints found
[  193.960612][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.963088][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.052990][ T5290] usb 2-1: selecting invalid altsetting 1
[  194.145771][ T5986] usb 3-1: USB disconnect, device number 13
[  194.237786][ T6020] usb 1-1: 0:2 : does not exist
[  194.254613][ T5290] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  194.254783][ T5290] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  194.263798][ T5290] usb 2-1: USB disconnect, device number 21
[  194.743779][ T8642] loop2: detected capacity change from 0 to 8192
[  194.922251][ T8647] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1151'.
[  194.954113][ T8648] loop1: detected capacity change from 0 to 512
[  194.958321][ T8648] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  194.964171][ T8648] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  194.968250][ T8648] EXT4-fs (loop1): group descriptors corrupted!
[  195.061035][    T9] usb 1-1: USB disconnect, device number 21
[  195.091680][ T8652] loop2: detected capacity change from 0 to 256
[  195.098173][ T8652] exfat: Deprecated parameter 'namecase'
[  195.125148][ T8652] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  195.419458][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  195.569300][   T10] usb 2-1: Using ep0 maxpacket: 16
[  195.573968][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.581934][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  195.586272][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  195.612138][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  195.615828][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  195.621916][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.629594][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  195.633165][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  195.636316][   T10] usb 2-1: Manufacturer: syz
[  195.642488][   T10] usb 2-1: config 0 descriptor??
[  195.749171][ T8672] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608)
[  195.756548][ T8672] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  195.779672][    T9] usb 3-1: Using ep0 maxpacket: 16
[  195.784418][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.788964][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.793499][    T9] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[  195.804121][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.836873][    T9] usb 3-1: config 0 descriptor??
[  195.868506][ T8676] loop0: detected capacity change from 0 to 16
[  195.895936][ T8676] erofs (device loop0): mounted with root inode @ nid 36.
[  195.949478][   T10] rc_core: IR keymap rc-hauppauge not found
[  195.961891][   T10] Registered IR keymap rc-empty
[  195.966409][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.002060][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.021426][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  196.027707][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input16
[  196.035033][ T5212] Bluetooth: hci1: command 0x0406 tx timeout
[  196.036344][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.062907][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.087412][ T8682] atomic_op ffff88811b885198 conn xmit_atomic 0000000000000000
[  196.099569][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.122062][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.148930][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.169471][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.189610][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.210999][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.241965][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.264815][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  196.282828][   T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  196.286541][   T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  196.328591][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.331767][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.334839][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.337782][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.341370][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.344225][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.346046][ T8690] loop0: detected capacity change from 0 to 4096
[  196.348478][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.355382][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.356364][ T8690] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  196.358430][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.365180][    T9] macally 0003:060B:0001.0004: unknown main item tag 0x0
[  196.399839][    T9] macally 0003:060B:0001.0004: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0
[  196.419374][   T33] audit: type=1800 audit(196.306:73): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1172" name="file1" dev="loop0" ino=30 res=0 errno=0
[  196.487822][ T5290] usb 2-1: USB disconnect, device number 22
[  196.516266][ T6020] usb 3-1: USB disconnect, device number 14
[  197.222310][ T8698] loop2: detected capacity change from 0 to 8
[  197.262260][ T8698] SQUASHFS error: lzo decompression failed, data probably corrupt
[  197.283267][ T8698] SQUASHFS error: Failed to read block 0x91: -5
[  197.296275][ T8698] SQUASHFS error: Unable to read metadata cache entry [8f]
[  197.306444][ T8698] SQUASHFS error: Unable to read inode 0x11f
[  197.785660][ T8717] loop2: detected capacity change from 0 to 1024
[  197.805223][ T8717] hfsplus: bad catalog entry type
[  198.016353][ T6020] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  198.242262][ T6020] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.318228][ T6020] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  198.325830][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.337086][ T6020] usb 1-1: Product: syz
[  198.341922][ T6020] usb 1-1: Manufacturer: syz
[  198.348368][ T6020] usb 1-1: SerialNumber: syz
[  198.359823][ T6020] usb 1-1: config 0 descriptor??
[  198.373963][ T6020] usb 1-1: ucan: probing device on interface #0
[  198.378772][ T6020] usb 1-1: ucan: invalid EP count (0)
[  198.383379][ T6020] usb 1-1: ucan: probe failed; try to update the device firmware
[  198.426432][ T8725] loop1: detected capacity change from 0 to 512
[  198.434034][ T8725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c02c, mo2=0002]
[  198.437174][ T8725] System zones: 0-7
[  198.443855][ T8725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.482614][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.592985][ T6020] usb 1-1: USB disconnect, device number 22
[  198.779958][ T8735] loop2: detected capacity change from 0 to 4096
[  198.789758][ T8735] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  198.814161][ T8735] ntfs3(loop2): $AttrDef is corrupted.
[  199.011381][ T5290] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  199.162009][ T8739] random: crng reseeded on system resumption
[  199.263653][ T5290] usb 2-1: config 1 interface 0 altsetting 165 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.305163][ T5290] usb 2-1: config 1 interface 0 has no altsetting 0
[  199.454985][ T5290] usb 2-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.40
[  199.464807][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.468117][ T5290] usb 2-1: Product: syz
[  199.470678][ T5290] usb 2-1: Manufacturer: syz
[  199.472992][ T5290] usb 2-1: SerialNumber: syz
[  199.702840][ T5290] usbhid 2-1:1.0: can't add hid device: -71
[  199.705475][ T5290] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  199.743285][ T6020] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  199.748953][ T5290] usb 2-1: USB disconnect, device number 23
[  199.899514][ T6020] usb 1-1: Using ep0 maxpacket: 16
[  199.907154][ T6020] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.929873][ T6020] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.937973][ T6020] usb 1-1: config 0 interface 0 has no altsetting 0
[  199.947050][ T6020] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  199.952616][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.958725][ T6020] usb 1-1: config 0 descriptor??
[  200.099614][ T8747] loop2: detected capacity change from 0 to 1024
[  200.120581][ T8747] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.425832][ T6020] cougar 0003:060B:500A.0005: unexpected long global item
[  200.435157][ T6020] cougar 0003:060B:500A.0005: parse failed
[  200.437713][ T6020] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22
[  200.592894][    T9] usb 1-1: USB disconnect, device number 23
[  200.718754][ T8767] loop2: detected capacity change from 0 to 512
[  200.855186][ T8773] loop1: detected capacity change from 0 to 512
[  200.877110][ T8773] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1206: corrupted in-inode xattr: invalid ea_ino
[  200.886327][ T8773] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1206: couldn't read orphan inode 15 (err -117)
[  200.896349][ T8773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.938661][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.037968][ T8777] loop1: detected capacity change from 0 to 4096
[  201.042621][ T8777] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  201.061021][ T8777] ntfs3(loop1): MFT: r=18, expect seq=1 instead of 0!
[  201.064081][ T8777] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  201.067703][ T8777] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  201.142086][ T8779] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1208'.
[  201.290097][ T8787] loop0: detected capacity change from 0 to 2048
[  201.301235][ T8787] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  201.310671][ T5935] udevd[5935]: incorrect nilfs2 checksum on /dev/loop0
[  201.318012][ T8787] NILFS (loop0): mounting unchecked fs
[  201.332914][ T5935] udevd[5935]: incorrect nilfs2 checksum on /dev/loop0
[  201.343205][ T8787] NILFS (loop0): recovery complete
[  201.346349][ T8792] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.668245][ T8795] loop0: detected capacity change from 0 to 32768
[  202.039347][    T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  202.194238][    T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  202.197723][    T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  202.202799][    T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  202.206951][    T9] usb 3-1: config 220 has no interface number 2
[  202.209941][    T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  202.215339][    T9] usb 3-1: config 220 interface 0 has no altsetting 0
[  202.218193][    T9] usb 3-1: config 220 interface 76 has no altsetting 0
[  202.221180][    T9] usb 3-1: config 220 interface 1 has no altsetting 0
[  202.226525][    T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  202.230990][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.239587][    T9] usb 3-1: Product: syz
[  202.241843][    T9] usb 3-1: Manufacturer: syz
[  202.243549][    T9] usb 3-1: SerialNumber: syz
[  202.435079][ T8815] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1224'.
[  202.469095][    T9] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  202.475908][    T9] usb 3-1: No valid video chain found.
[  202.478102][    T9] usb 3-1: selecting invalid altsetting 0
[  202.493892][    T9] usb 3-1: selecting invalid altsetting 0
[  202.495955][    T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  202.503633][    T9] usb 3-1: USB disconnect, device number 15
[  202.546482][ T8820] loop1: detected capacity change from 0 to 512
[  202.575019][ T8820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.610713][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.701415][ T8827] loop1: detected capacity change from 0 to 764
[  202.732978][ T8827] Symlink component flag not implemented
[  202.735426][ T8827] Symlink component flag not implemented
[  203.049411][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  203.199774][    T9] usb 2-1: Using ep0 maxpacket: 16
[  203.214967][ T5936] Bluetooth: hci2: adv larger than maximum supported
[  203.215005][ T5936] Bluetooth: hci2: Malformed LE Event: 0x0d
[  203.216046][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  203.237012][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  203.244974][    T9] usb 2-1: can't read configurations, error -71
[  203.680044][ T8849] : renamed from vlan1 (while UP)
[  203.805353][ T8855] sp0: Synchronizing with TNC
[  203.850148][ T6020] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  204.010497][ T6020] usb 3-1: Using ep0 maxpacket: 8
[  204.017353][ T6020] usb 3-1: config 162 has an invalid interface number: 239 but max is 0
[  204.026168][ T6020] usb 3-1: config 162 has no interface number 0
[  204.033581][ T6020] usb 3-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  204.037043][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.051797][ T6020] usb 3-1: Product: syz
[  204.053525][ T6020] usb 3-1: Manufacturer: syz
[  204.055316][ T6020] usb 3-1: SerialNumber: syz
[  204.099853][ T8853] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  204.290546][ T6020] go7007 3-1:162.239: The Lifeview TV Walker Ultra is not supported. Sorry!
[  204.307592][ T6020] usb 3-1: USB disconnect, device number 16
[  204.392271][ T8874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'.
[  204.957774][ T8896] loop0: detected capacity change from 0 to 256
[  204.964551][ T8896] exfat: Deprecated parameter 'utf8'
[  204.973334][ T8896] exfat: Deprecated parameter 'utf8'
[  204.977667][ T8896] exfat: Deprecated parameter 'namecase'
[  204.998532][ T8896] exFAT-fs (loop0): error, The cluster chain has a loop
[  205.003552][ T8896] exFAT-fs (loop0): failed to count the number of clusters in root
[  205.006661][ T8896] exFAT-fs (loop0): failed to recognize exfat type
[  205.762443][ T8908] loop1: detected capacity change from 0 to 32768
[  206.309644][ T8922] ea_get: invalid extended attribute
[  206.312335][ T8922] ffff88811b25dec0: 04 00 00 00                                      ....
[  206.484201][ T8923] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  206.720279][   T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  206.887769][   T24] usb 3-1: Using ep0 maxpacket: 32
[  206.895072][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  206.898710][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.911199][   T24] usb 3-1: config 0 descriptor??
[  207.300818][ T8958] binder: 8957:8958 ioctl 40046210 0 returned -14
[  207.328950][   T24] redragon 0003:0C45:760B.0006: item fetching failed at offset 0/3
[  207.338975][   T24] redragon 0003:0C45:760B.0006: probe with driver redragon failed with error -22
[  207.538965][   T24] usb 3-1: USB disconnect, device number 17
[  207.952443][ T8975] netlink: 'syz.0.1293': attribute type 2 has an invalid length.
[  208.502235][ T8992] team0: Cannot enslave team device to itself
[  208.681026][ T9001] mmap: syz.2.1305 (9001) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  208.941641][ T9013] loop0: detected capacity change from 0 to 8
[  209.001348][ T9013] SQUASHFS error: xz decompression failed, data probably corrupt
[  209.004403][ T9013] SQUASHFS error: Failed to read block 0x108: -5
[  209.006833][ T9013] SQUASHFS error: Unable to read metadata cache entry [106]
[  209.034864][ T9013] SQUASHFS error: Unable to read inode 0x11f
[  211.438099][ T9046] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1322'.
[  212.788404][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1347'.
[  212.798573][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1347'.
[  212.819162][ T9098] ip6gretap0: entered promiscuous mode
[  212.836968][ T9098] syz_tun: entered promiscuous mode
[  212.979412][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  213.141255][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  213.145009][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  213.171466][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  213.181947][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  213.184839][    T9] usb 2-1: SerialNumber: syz
[  213.422951][    T9] usb 2-1: 0:2 : does not exist
[  213.468015][    T9] usb 2-1: USB disconnect, device number 26
[  213.516706][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  213.612565][ T9110] loop2: detected capacity change from 0 to 32768
[  213.620528][ T9110] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1353 (9110)
[  213.645853][ T9110] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  213.653051][ T9110] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  213.784430][ T9110] BTRFS info (device loop2): enabling ssd optimizations
[  213.786699][ T9110] BTRFS info (device loop2): enabling free space tree
[  213.920187][ T5934] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.542501][ T9136] loop1: detected capacity change from 0 to 1024
[  214.625364][ T9136] hfsplus: xattr searching failed
[  214.657227][ T9136] hfsplus: xattr searching failed
[  214.705637][ T4236] hfsplus: b-tree write err: -5, ino 3
[  214.803347][ T9132] loop2: detected capacity change from 0 to 32768
[  214.818257][ T9142] loop1: detected capacity change from 0 to 1024
[  214.870237][ T9142] EXT4-fs: Ignoring removed orlov option
[  214.872373][ T9142] EXT4-fs: Ignoring removed nomblk_io_submit option
[  214.904504][ T9132] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  214.915379][ T9142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.941715][ T9132] XFS (loop2): Ending clean mount
[  214.962588][ T9132] XFS (loop2): Quotacheck needed: Please wait.
[  215.016861][ T9159] trusted_key: syz.0.1363 sent an empty control message without MSG_MORE.
[  215.048159][ T9132] XFS (loop2): Quotacheck: Done.
[  215.111325][ T5934] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  215.188487][ T9164] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1366'.
[  215.313815][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.404078][ T9169] loop1: detected capacity change from 0 to 4096
[  215.420257][ T9169] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  215.581500][ T9169] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  215.585006][ T9169] ntfs3(loop1): mft corrupted
[  215.587148][ T9169] ntfs3(loop1): Failed to load $Extend (-22).
[  215.589640][ T9169] ntfs3(loop1): Failed to initialize $Extend.
[  215.602451][ T9169] ntfs3(loop1): ino=1e, mi_enum_attr
[  215.604889][ T9169] ntfs3(loop1): ino=1e, mi_enum_attr
[  215.607386][ T9169] ntfs3(loop1): ino=1e, "file1" mi_enum_attr
[  215.611204][ T9169] ntfs3(loop1): ino=1e, "file1" mi_enum_attr
[  215.616613][ T9169] ntfs3(loop1): ino=1e, "file1" mi_enum_attr
[  216.130347][ T9179] loop1: detected capacity change from 0 to 16
[  216.131335][ T5936] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  216.134916][ T9179] erofs (device loop1): mounted with root inode @ nid 36.
[  216.136367][ T5936] CPU: 0 UID: 0 PID: 5936 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[  216.136386][ T5936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.136397][ T5936] Workqueue: hci2 hci_rx_work
[  216.136425][ T5936] Call Trace:
[  216.136432][ T5936]  <TASK>
[  216.136439][ T5936]  dump_stack_lvl+0x189/0x250
[  216.136464][ T5936]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.136482][ T5936]  ? __pfx__printk+0x10/0x10
[  216.136500][ T5936]  ? kernfs_path_from_node+0x250/0x290
[  216.136517][ T5936]  ? kernfs_path_from_node+0x2f/0x290
[  216.136536][ T5936]  sysfs_create_dir_ns+0x259/0x280
[  216.136554][ T5936]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  216.136573][ T5936]  ? do_raw_spin_unlock+0x4d/0x240
[  216.136595][ T5936]  kobject_add_internal+0x59f/0xb40
[  216.136621][ T5936]  kobject_add+0x155/0x220
[  216.136641][ T5936]  ? __pfx_kobject_add+0x10/0x10
[  216.136659][ T5936]  ? _raw_spin_unlock+0x28/0x50
[  216.136675][ T5936]  ? get_device_parent+0x366/0x3a0
[  216.136697][ T5936]  device_add+0x408/0xb50
[  216.136717][ T5936]  hci_conn_add_sysfs+0xd5/0x1e0
[  216.136739][ T5936]  le_conn_complete_evt+0xf39/0x1500
[  216.136766][ T5936]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  216.136783][ T5936]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  216.136798][ T5936]  ? __asan_memcpy+0x40/0x70
[  216.136818][ T5936]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  216.136831][ T5936]  ? skb_pull_data+0xfb/0x200
[  216.136855][ T5936]  hci_le_conn_complete_evt+0x187/0x450
[  216.136910][ T5936]  hci_event_packet+0x78f/0x1200
[  216.136938][ T5936]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  216.136957][ T5936]  ? __pfx_hci_event_packet+0x10/0x10
[  216.136978][ T5936]  ? kcov_remote_start+0x4d3/0x7f0
[  216.136997][ T5936]  ? lockdep_hardirqs_on+0x30/0x150
[  216.137045][ T5936]  ? hci_send_to_monitor+0xe2/0x570
[  216.137066][ T5936]  hci_rx_work+0x46a/0xe80
[  216.137095][ T5936]  ? process_scheduled_works+0x9ef/0x17b0
[  216.137111][ T5936]  process_scheduled_works+0xae1/0x17b0
[  216.137149][ T5936]  ? __pfx_process_scheduled_works+0x10/0x10
[  216.137179][ T5936]  worker_thread+0x8a0/0xda0
[  216.137198][ T5936]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  216.137218][ T5936]  ? __kthread_parkme+0x7b/0x200
[  216.137244][ T5936]  kthread+0x711/0x8a0
[  216.137266][ T5936]  ? __pfx_worker_thread+0x10/0x10
[  216.137280][ T5936]  ? __pfx_kthread+0x10/0x10
[  216.137299][ T5936]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.137312][ T5936]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.137325][ T5936]  ? __pfx_kthread+0x10/0x10
[  216.137363][ T5936]  ret_from_fork+0x439/0x7d0
[  216.137383][ T5936]  ? __pfx_ret_from_fork+0x10/0x10
[  216.137404][ T5936]  ? __switch_to_asm+0x39/0x70
[  216.137422][ T5936]  ? __switch_to_asm+0x33/0x70
[  216.137438][ T5936]  ? __pfx_kthread+0x10/0x10
[  216.137456][ T5936]  ret_from_fork_asm+0x1a/0x30
[  216.137494][ T5936]  </TASK>
[  216.137609][ T5936] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  216.246634][ T9181] loop0: detected capacity change from 0 to 128
[  216.270792][ T5936] Bluetooth: hci2: failed to register connection device
[  216.292736][ T9181] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  216.435755][ T9181] hpfs: filesystem error: improperly stopped
[  216.438021][ T9181] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  216.444718][ T9181] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  216.448298][ T9181] hpfs: You really don't want any checks? You are crazy...
[  216.451378][ T9181] hpfs: hpfs_map_sector(): read error
[  216.453218][ T9181] hpfs: code page support is disabled
[  216.455121][ T9181] hpfs: hpfs_map_4sectors(): unaligned read
[  216.457141][ T9181] hpfs: hpfs_map_4sectors(): unaligned read
[  216.459935][ T9181] hpfs: filesystem error: unable to find root dir
[  216.537935][ T9183] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1372'.
[  217.463009][ T9192] binder: BC_ATTEMPT_ACQUIRE not supported
[  217.465439][ T9192] binder: 9191:9192 ioctl c0306201 2000000001c0 returned -22
[  217.640736][ T9185] loop2: detected capacity change from 0 to 131072
[  217.648358][ T9185] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[  217.737519][ T9185] F2FS-fs (loop2): Bad quota inode 2:2048
[  217.742298][ T9185] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-2). Please run fsck to fix.
[  217.750052][ T9185] F2FS-fs (loop2): Cannot turn on quotas: error -2
[  217.754223][ T9185] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.761706][ T9185] F2FS-fs (loop2): Mounted with checkpoint version = 1b41e955
[  218.351217][ T5212] Bluetooth: hci2: command tx timeout
[  218.530687][ T5985] kernel write not supported for file /snd/seq (pid: 5985 comm: kworker/0:3)
[  218.840626][ T9226] tipc: Started in network mode
[  218.844465][ T9226] tipc: Node identity 7f000001, cluster identity 4711
[  218.848341][ T9226] tipc: Enabled bearer <udp:syz2>, priority 10
[  218.932251][ T9230] netlink: 'syz.2.1389': attribute type 12 has an invalid length.
[  218.937139][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1389'.
[  218.988223][ T9234] loop2: detected capacity change from 0 to 64
[  219.156532][ T9219] loop0: detected capacity change from 0 to 32768
[  219.217327][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1395'.
[  219.231375][ T9244] netlink: 'syz.2.1396': attribute type 1 has an invalid length.
[  219.236941][ T9244] netlink: 'syz.2.1396': attribute type 2 has an invalid length.
[  219.344185][ T9250] loop2: detected capacity change from 0 to 1024
[  219.359138][ T9250] hfsplus: unable to find HFS+ superblock
[  219.424246][ T9253] loop2: detected capacity change from 0 to 256
[  219.428144][ T9253] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  219.445898][ T9253] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  219.452146][ T9253] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  219.498219][ T9255] loop1: detected capacity change from 0 to 512
[  219.523472][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1401'.
[  219.525892][ T9255] EXT4-fs (loop1): can't read group descriptor 0
[  220.095926][ T9258] loop1: detected capacity change from 0 to 40427
[  220.103822][   T10] tipc: Node number set to 2130706433
[  220.114883][ T9258] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  220.118053][ T9258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  220.138177][ T9258] F2FS-fs (loop1): invalid crc value
[  220.276337][ T9258] F2FS-fs (loop1): access invalid blkaddr:0
[  220.278854][ T9258] CPU: 0 UID: 0 PID: 9258 Comm: syz.1.1403 Not tainted syzkaller #0 PREEMPT(full) 
[  220.278876][ T9258] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.278886][ T9258] Call Trace:
[  220.278893][ T9258]  <TASK>
[  220.278917][ T9258]  dump_stack_lvl+0x189/0x250
[  220.278947][ T9258]  ? __pfx_dump_stack_lvl+0x10/0x10
[  220.278978][ T9258]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  220.279005][ T9258]  sanity_check_extent_cache+0x1a3/0x620
[  220.279029][ T9258]  f2fs_iget+0x3a7f/0x5550
[  220.279070][ T9258]  f2fs_fill_super+0x494a/0x6ff0
[  220.279126][ T9258]  get_tree_bdev_flags+0x40e/0x4d0
[  220.279146][ T9258]  ? __pfx_f2fs_fill_super+0x10/0x10
[  220.279164][ T9258]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  220.279211][ T9258]  vfs_get_tree+0x92/0x2b0
[  220.279233][ T9258]  do_new_mount+0x2a2/0xa30
[  220.279260][ T9258]  ? ns_capable+0x8a/0xf0
[  220.279275][ T9258]  ? __pfx_do_new_mount+0x10/0x10
[  220.279294][ T9258]  ? path_mount+0x61c/0xfe0
[  220.279313][ T9258]  ? user_path_at+0x44/0x60
[  220.279336][ T9258]  __se_sys_mount+0x317/0x410
[  220.279354][ T9258]  ? __pfx___se_sys_mount+0x10/0x10
[  220.279371][ T9258]  ? do_syscall_64+0xbe/0x3b0
[  220.279387][ T9258]  ? __x64_sys_mount+0x20/0xc0
[  220.279401][ T9258]  do_syscall_64+0xfa/0x3b0
[  220.279417][ T9258]  ? lockdep_hardirqs_on+0x9c/0x150
[  220.279431][ T9258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.279445][ T9258]  ? exc_page_fault+0x9f/0xf0
[  220.279461][ T9258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  220.279474][ T9258] RIP: 0033:0x7f0020b903ca
[  220.279489][ T9258] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  220.279503][ T9258] RSP: 002b:00007f0021954e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  220.279520][ T9258] RAX: ffffffffffffffda RBX: 00007f0021954ef0 RCX: 00007f0020b903ca
[  220.279531][ T9258] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 00007f0021954eb0
[  220.279542][ T9258] RBP: 0000200000000280 R08: 00007f0021954ef0 R09: 0000000000000000
[  220.279552][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040
[  220.279561][ T9258] R13: 00007f0021954eb0 R14: 000000000000559f R15: 0000200000000340
[  220.279584][ T9258]  </TASK>
[  220.385500][ T9258] F2FS-fs (loop1): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 1280] is incorrect, run fsck to fix
[  220.394245][ T9258] F2FS-fs (loop1): Failed to read root inode
[  221.084464][   T27] Bluetooth: (null): Invalid header checksum
[  221.099140][   T36] Bluetooth: (null): Invalid header checksum
[  221.181055][   T27] Bluetooth: (null): Invalid header checksum
[  221.230473][   T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  221.290284][ T3602] Bluetooth: (null): Invalid header checksum
[  221.292622][  T792] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  221.393399][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  221.396595][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.429132][   T36] Bluetooth: (null): Invalid header checksum
[  221.434946][   T24] pwc: Logitech ViewPort AV 100 webcam detected.
[  221.442909][  T792] usb 3-1: config index 0 descriptor too short (expected 149, got 148)
[  221.457908][  T792] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.462363][  T792] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.469010][  T792] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  221.473785][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  221.476858][  T792] usb 3-1: SerialNumber: syz
[  221.491533][  T792] usb 3-1: 0:2 : does not exist
[  221.510397][ T6268] Bluetooth: (null): Invalid header checksum
[  221.541637][ T9278] loop0: detected capacity change from 0 to 40427
[  221.545128][ T9278] f2fs: Bad value for 'fault_injection'
[  221.620018][   T36] Bluetooth: (null): Invalid header checksum
[  221.632788][   T24] pwc: Failed to set LED on/off time (-71)
[  221.648956][   T24] pwc: send_video_command error -71
[  221.651380][   T24] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  221.654594][   T24] Philips webcam 2-1:127.0: probe with driver Philips webcam failed with error -71
[  221.665647][   T24] usb 2-1: USB disconnect, device number 27
[  221.704173][  T792] usb 3-1: USB disconnect, device number 18
[  222.021063][ T9284] loop0: detected capacity change from 0 to 32768
[  222.036879][ T9284] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.059841][ T9284] XFS (loop0): Ending clean mount
[  222.092878][ T5938] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.357143][ T9301] openvswitch: netlink: Message has 4 unknown bytes.
[  222.484248][ T9312] loop0: detected capacity change from 0 to 4096
[  222.503939][ T9312] NILFS (loop0): invalid segment: Checksum error in segment payload
[  222.506614][ T9312] NILFS (loop0): trying rollback from an earlier position
[  222.517054][ T9312] NILFS (loop0): recovery complete
[  222.522355][ T9315] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.579319][ T6020] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  222.684223][ T9317] overlayfs: upper fs does not support tmpfile.
[  222.691165][ T9317] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  222.693624][ T9317] overlayfs: failed to set xattr on upper
[  222.695737][ T9317] overlayfs: ...falling back to redirect_dir=nofollow.
[  222.698251][ T9317] overlayfs: ...falling back to index=off.
[  222.704463][ T9317] overlayfs: ...falling back to uuid=null.
[  222.741025][ T6020] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  222.744821][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.747643][ T6020] usb 2-1: Product: syz
[  222.749163][ T6020] usb 2-1: Manufacturer: syz
[  222.752579][ T6020] usb 2-1: SerialNumber: syz
[  222.777957][ T6020] usb 2-1: config 0 descriptor??
[  222.788103][ T6020] ch341 2-1:0.0: ch341-uart converter detected
[  222.855155][ T9314] loop2: detected capacity change from 0 to 32768
[  222.906550][ T9314] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  222.963535][   T33] audit: type=1800 audit(222.856:74): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1423" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  223.047196][ T5934] ocfs2: Unmounting device (7,2) on (node local)
[  223.808603][ T6020] usb 2-1: failed to send control message: -71
[  223.811820][ T6020] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  223.825478][ T6020] usb 2-1: USB disconnect, device number 28
[  223.851483][ T6020] ch341 2-1:0.0: device disconnected
[  224.641524][ T9346] loop0: detected capacity change from 0 to 512
[  224.656005][ T9346] EXT4-fs (loop0): can't mount with both data=journal and dax
[  224.881617][ T9354] loop1: detected capacity change from 0 to 256
[  224.897552][ T9354] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x23ae2a4b, utbl_chksum : 0xe619d30d)
[  225.070694][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'.
[  225.091012][ T9360] dummy0: entered promiscuous mode
[  225.111442][ T9360] dummy0: left promiscuous mode
[  225.122954][ T5986] libceph: connect (1)[c::]:6789 error -101
[  225.127993][ T5986] libceph: mon0 (1)[c::]:6789 connect error
[  225.155641][ T9358] ceph: No mds server is up or the cluster is laggy
[  225.187999][ T9363] loop2: detected capacity change from 0 to 2048
[  225.396096][ T9368] loop1: detected capacity change from 0 to 256
[  225.400326][ T9363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.441469][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.464739][ T9368] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.531955][ T9371] loop2: detected capacity change from 0 to 128
[  225.535928][ T9371] FAT-fs (loop2): bogus number of reserved sectors
[  225.538641][ T9371] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  225.552140][ T9371] FAT-fs (loop2): Can't find a valid FAT filesystem
[  225.748902][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1447'.
[  226.049387][ T5986] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  226.199612][ T5986] usb 2-1: Using ep0 maxpacket: 32
[  226.203591][ T5986] usb 2-1: config 8 has an invalid interface number: 203 but max is 0
[  226.206873][ T5986] usb 2-1: config 8 has no interface number 0
[  226.210212][ T5986] usb 2-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  226.215265][ T5986] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  226.219882][ T5986] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  226.223852][ T5986] usb 2-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  226.228343][ T5986] usb 2-1: config 8 interface 203 has no altsetting 0
[  226.233970][ T5986] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  226.237447][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.242096][ T5986] usb 2-1: Product: syz
[  226.243763][ T5986] usb 2-1: Manufacturer: syz
[  226.246356][ T5986] usb 2-1: SerialNumber: syz
[  226.253266][ T9387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  226.256756][ T9387] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  226.404389][ T9412] loop2: detected capacity change from 0 to 1024
[  226.412200][ T9412] EXT4-fs: Ignoring removed bh option
[  226.419958][ T9412] EXT4-fs (loop2): bad geometry: block count 768 exceeds size of device (512 blocks)
[  226.475380][    C1] port100 2-1:8.203: NFC: Urb failure (status -71)
[  226.480828][    C1] port100 2-1:8.203: NFC: Urb failure (status -71)
[  226.483819][ T5986] port100 2-1:8.203: NFC: Could not get supported command types
[  226.491593][ T5986] usb 2-1: USB disconnect, device number 29
[  227.092087][ T9435] netlink: 'syz.1.1472': attribute type 4 has an invalid length.
[  227.523326][ T9449] loop1: detected capacity change from 0 to 512
[  227.536559][ T9449] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  227.553232][ T9449] EXT4-fs (loop1): Couldn't mount because of unsupported optional features (4000000)
[  227.556958][ T9449] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  228.080958][ T9462] loop2: detected capacity change from 0 to 256
[  228.091181][ T9462] exfat: Deprecated parameter 'utf8'
[  228.099668][ T9462] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  229.065431][ T9477] loop1: detected capacity change from 0 to 256
[  229.073389][ T9477] exfat: Deprecated parameter 'namecase'
[  229.076333][ T9477] exfat: Deprecated parameter 'utf8'
[  229.131438][ T9477] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  229.429867][ T6020] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  229.615352][ T6020] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  229.619952][ T6020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  229.630964][ T6020] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  229.634780][ T6020] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  229.659752][ T6020] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  229.664245][ T6020] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.690640][ T6020] usb 1-1: config 0 descriptor??
[  229.696348][ T6020] gspca_main: spca561-2.14.0 probing abcd:cdee
[  229.945707][ T6020] spca561 1-1:0.0: probe with driver spca561 failed with error -22
[  229.956119][ T6020] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  229.958942][ T6020] usb 1-1: MIDIStreaming interface descriptor not found
[  230.065107][ T6020] usb 1-1: USB disconnect, device number 24
[  230.109562][  T792] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  230.262750][  T792] usb 3-1: unable to get BOS descriptor or descriptor too short
[  230.276798][  T792] usb 3-1: config 3 has an invalid interface number: 51 but max is 0
[  230.283415][  T792] usb 3-1: config 3 has no interface number 0
[  230.294612][  T792] usb 3-1: New USB device found, idVendor=0b57, idProduct=2c68, bcdDevice=6e.32
[  230.298208][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.304827][  T792] usb 3-1: Product: syz
[  230.307866][  T792] usb 3-1: Manufacturer: syz
[  230.311874][  T792] usb 3-1: SerialNumber: syz
[  230.323424][  T792] usbhid 3-1:3.51: couldn't find an input interrupt endpoint
[  230.554202][ T5985] usb 3-1: USB disconnect, device number 19
[  230.638582][ T9523] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1512'.
[  230.833350][ T9528] loop1: detected capacity change from 0 to 512
[  230.839127][ T9528] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  230.858953][ T9528] EXT4-fs (loop1): 1 truncate cleaned up
[  230.866308][ T9528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.252362][ T9536] pimreg: tun_chr_ioctl cmd 1074025676
[  231.254862][ T9536] pimreg: owner set to 60929
[  231.676427][ T9538] loop2: detected capacity change from 0 to 32768
[  231.749473][ T9538] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.798791][ T9548] geneve2: entered promiscuous mode
[  231.822167][ T9548] geneve2: entered allmulticast mode
[  231.836679][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.865175][ T9538] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  231.895896][ T9538] XFS (loop2): Starting recovery (logdev: internal)
[  231.922209][ T9538] XFS (loop2): Ending recovery (logdev: internal)
[  231.938597][ T9552] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.992208][ T5934] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.070433][ T9556] loop1: detected capacity change from 0 to 128
[  232.329431][ T5985] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  232.466554][ T9560] loop0: detected capacity change from 0 to 40427
[  232.479341][ T5985] usb 2-1: Using ep0 maxpacket: 32
[  232.483392][ T5985] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  232.485169][ T9560] F2FS-fs (loop0): invalid crc value
[  232.486554][ T5985] usb 2-1: config 0 has no interface number 0
[  232.486595][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  232.486613][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  232.506130][ T5985] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  232.511739][ T5985] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  232.517099][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  232.524251][ T5985] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  232.528105][ T5985] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  232.532550][ T5985] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 60572, setting to 64
[  232.536506][ T5985] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  232.545574][ T5985] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  232.549146][ T5985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.552614][ T5985] usb 2-1: Product: syz
[  232.554295][ T5985] usb 2-1: Manufacturer: syz
[  232.556173][ T5985] usb 2-1: SerialNumber: syz
[  232.563810][ T5985] usb 2-1: config 0 descriptor??
[  232.566948][ T9556] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  232.572865][ T5985] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk.
[  232.576982][ T5985] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out.
[  232.580190][ T9560] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  232.585334][ T9560] F2FS-fs (loop0): Start checkpoint disabled!
[  232.600735][ T9560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  232.633745][   T33] audit: type=1800 audit(232.526:75): pid=9560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1525" name="file1" dev="loop0" ino=10 res=0 errno=0
[  232.664347][ T1094] kworker/u9:7: attempt to access beyond end of device
[  232.664347][ T1094] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  232.670395][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) 
[  232.670444][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.670455][ T1094] Workqueue: writeback wb_workfn (flush-7:0)
[  232.670484][ T1094] Call Trace:
[  232.670492][ T1094]  <TASK>
[  232.670500][ T1094]  dump_stack_lvl+0x189/0x250
[  232.670525][ T1094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.670543][ T1094]  ? __pfx_queue_work_on+0x10/0x10
[  232.670559][ T1094]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  232.670577][ T1094]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  232.670600][ T1094]  f2fs_handle_critical_error+0x37c/0x540
[  232.670624][ T1094]  f2fs_write_end_io+0x886/0xb60
[  232.670658][ T1094]  __submit_merged_bio+0x27a/0x6a0
[  232.670680][ T1094]  __submit_merged_write_cond+0x255/0x530
[  232.670710][ T1094]  f2fs_write_data_pages+0x261d/0x3000
[  232.670761][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  232.670791][ T1094]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  232.670836][ T1094]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  232.670853][ T1094]  ? look_up_lock_class+0x74/0x170
[  232.670877][ T1094]  ? trace_f2fs_writepages+0x7f/0x200
[  232.670894][ T1094]  ? f2fs_write_node_pages+0x478/0x6e0
[  232.670913][ T1094]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  232.670941][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  232.670959][ T1094]  do_writepages+0x32e/0x550
[  232.670982][ T1094]  ? reacquire_held_locks+0x127/0x1d0
[  232.670998][ T1094]  ? writeback_sb_inodes+0x384/0x1010
[  232.671026][ T1094]  __writeback_single_inode+0x145/0xff0
[  232.671043][ T1094]  ? do_raw_spin_unlock+0x4d/0x240
[  232.671064][ T1094]  writeback_sb_inodes+0x6c7/0x1010
[  232.671092][ T1094]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  232.671125][ T1094]  ? rcu_is_watching+0x15/0xb0
[  232.671140][ T1094]  wb_writeback+0x43b/0xaf0
[  232.671160][ T1094]  ? queue_io+0x301/0x590
[  232.671179][ T1094]  ? __pfx_wb_writeback+0x10/0x10
[  232.671204][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.671223][ T1094]  wb_workfn+0x409/0xef0
[  232.671250][ T1094]  ? __pfx_wb_workfn+0x10/0x10
[  232.671270][ T1094]  ? __lock_acquire+0xab9/0xd20
[  232.671292][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[  232.671328][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.671342][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[  232.671355][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[  232.671370][ T1094]  process_scheduled_works+0xae1/0x17b0
[  232.671407][ T1094]  ? __pfx_process_scheduled_works+0x10/0x10
[  232.671463][ T1094]  worker_thread+0x8a0/0xda0
[  232.671500][ T1094]  kthread+0x711/0x8a0
[  232.671522][ T1094]  ? __pfx_worker_thread+0x10/0x10
[  232.671535][ T1094]  ? __pfx_kthread+0x10/0x10
[  232.671552][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[  232.671565][ T1094]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.671578][ T1094]  ? __pfx_kthread+0x10/0x10
[  232.671595][ T1094]  ret_from_fork+0x439/0x7d0
[  232.671613][ T1094]  ? __pfx_ret_from_fork+0x10/0x10
[  232.671633][ T1094]  ? __switch_to_asm+0x39/0x70
[  232.671649][ T1094]  ? __switch_to_asm+0x33/0x70
[  232.671664][ T1094]  ? __pfx_kthread+0x10/0x10
[  232.671680][ T1094]  ret_from_fork_asm+0x1a/0x30
[  232.671711][ T1094]  </TASK>
[  232.790786][ T1094] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  232.810619][   T10] usb 2-1: USB disconnect, device number 30
[  233.641430][ T9572] loop0: detected capacity change from 0 to 32768
[  233.703006][ T9572] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.815043][ T9572] XFS (loop0): Ending clean mount
[  233.827020][ T9572] XFS (loop0): Quotacheck needed: Please wait.
[  233.892454][ T9572] XFS (loop0): Quotacheck: Done.
[  234.103313][ T5938] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  234.840290][ T9612] netem: incorrect ge model size
[  234.842829][ T9612] netem: change failed
[  236.204044][ T9630] loop2: detected capacity change from 0 to 512
[  236.207618][ T9630] EXT4-fs: Ignoring removed oldalloc option
[  236.249891][ T9630] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1546: Parent and EA inode have the same ino 15
[  236.273563][ T9630] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1546: Parent and EA inode have the same ino 15
[  236.279170][ T9630] EXT4-fs (loop2): 1 orphan inode deleted
[  236.293353][ T9630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.338555][ T9634] loop0: detected capacity change from 0 to 4096
[  236.342618][ T9634] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  236.346122][ T9634] ntfs3(loop0): It is recommened to use chkdsk.
[  236.374615][ T9634] ntfs3(loop0): Failed to load $Extend (-22).
[  236.377018][ T9634] ntfs3(loop0): Failed to initialize $Extend.
[  236.420438][ T9638] loop1: detected capacity change from 0 to 256
[  236.450602][ T5934] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  236.478171][ T9638] Process accounting resumed
[  236.485141][ T9638] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  236.495296][ T5934] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[  236.499502][ T9638] FAT-fs (loop1): Filesystem has been set read-only
[  236.514814][ T5934] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[  236.530311][ T9638] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  236.557149][ T5290] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  236.583551][ T5290] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  236.898970][ T6020] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  236.979411][ T9645] loop0: detected capacity change from 0 to 128
[  237.074387][ T9645] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  237.228704][ T7298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.251713][ T6020] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  237.257244][ T6020] usb 2-1: config 0 interface 0 has no altsetting 0
[  237.263015][ T6020] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  237.266816][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  237.272068][ T6020] usb 2-1: Product: syz
[  237.274043][ T6020] usb 2-1: Manufacturer: syz
[  237.275873][ T6020] usb 2-1: SerialNumber: syz
[  237.279006][ T6020] usb 2-1: config 0 descriptor??
[  237.286208][ T6020] usb 2-1: selecting invalid altsetting 0
[  237.512586][ T6020] usb 2-1: USB disconnect, device number 31
[  237.709048][ T9650] loop0: detected capacity change from 0 to 512
[  238.225455][ T5936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.245067][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.250968][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.258528][ T5936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.263815][ T5936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.921339][ T9651] chnl_net:caif_netlink_parms(): no params data found
[  238.932193][ T9654] loop1: detected capacity change from 0 to 32768
[  239.262233][ T9651] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.269616][ T9651] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.272622][ T9651] bridge_slave_0: entered allmulticast mode
[  239.281216][ T9651] bridge_slave_0: entered promiscuous mode
[  239.290118][ T9651] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.292705][ T9651] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.295309][ T9651] bridge_slave_1: entered allmulticast mode
[  239.298624][ T9651] bridge_slave_1: entered promiscuous mode
[  239.320706][ T5936] Bluetooth: hci1: unexpected event for opcode 0x2023
[  239.338363][ T9651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.351383][ T9651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.400643][ T9651] team0: Port device team_slave_0 added
[  239.411867][ T9651] team0: Port device team_slave_1 added
[  239.457729][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.470285][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.480070][ T9651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.486541][ T9651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.499058][ T9651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.512599][ T9651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.565577][ T9651] hsr_slave_0: entered promiscuous mode
[  239.569707][ T9651] hsr_slave_1: entered promiscuous mode
[  239.573056][ T9651] debugfs: 'hsr0' already exists in 'hsr'
[  239.575468][ T9651] Cannot create hsr debugfs directory
[  239.730597][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  239.822816][ T9651] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  239.832421][ T9651] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  239.838122][ T9687] loop1: detected capacity change from 0 to 2048
[  239.838825][ T9651] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  239.848127][ T9687] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  239.871535][ T9651] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  239.879558][   T10] usb 1-1: Using ep0 maxpacket: 8
[  239.885818][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  239.898940][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  239.906390][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  239.911893][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  239.920481][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  239.930005][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  239.935602][   T33] audit: type=1326 audit(239.826:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  239.944382][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.957626][   T10] usb 1-1: config 0 descriptor??
[  239.960943][   T33] audit: type=1326 audit(239.826:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  239.972692][ T9680] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  239.984874][   T33] audit: type=1326 audit(239.826:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  239.996034][   T33] audit: type=1326 audit(239.826:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  240.031671][   T33] audit: type=1326 audit(239.826:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.1.1570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  240.160603][ T9651] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.201765][ T9651] 8021q: adding VLAN 0 to HW filter on device team0
[  240.201875][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.207925][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.210228][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.213457][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.213732][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.222525][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.225426][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.228578][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.231424][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.231512][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.237734][ T5212] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  240.359504][ T5212] Bluetooth: hci0: command tx timeout
[  240.361375][ T9651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.398468][   T10] usb 1-1: USB disconnect, device number 25
[  240.401393][ T5936] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  240.416022][ T9651] veth0_vlan: entered promiscuous mode
[  240.431527][ T9651] veth1_vlan: entered promiscuous mode
[  240.455517][ T9651] veth0_macvtap: entered promiscuous mode
[  240.462530][ T9651] veth1_macvtap: entered promiscuous mode
[  240.473726][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.486085][ T9651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.493539][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.497012][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.501443][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.505543][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.592713][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.599771][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.634274][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.637094][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.032668][   T33] audit: type=1326 audit(240.926:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.1.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7fc00000
[  241.743541][   T33] audit: type=1326 audit(241.636:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9717 comm="syz.1.1576" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0020b85be7 code=0x7fc00000
[  242.429918][ T5212] Bluetooth: hci0: command tx timeout
[  242.696546][ T9750] /dev/sg0: Can't lookup blockdev
[  242.699499][ T5985] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  243.180185][ T5985] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  243.190788][ T5985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.366814][ T5985] usb 1-1: config 0 descriptor??
[  244.193064][ T5212] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  244.196854][ T5212] Bluetooth: hci2: Injecting HCI hardware error event
[  244.210158][ T5936] Bluetooth: hci2: hardware error 0x00
[  244.364940][ T9760] ip6tnl1: entered promiscuous mode
[  244.367620][ T9760] ip6tnl1: entered allmulticast mode
[  244.441526][ T9762] netlink: 'syz.1.1593': attribute type 1 has an invalid length.
[  244.444483][ T9762] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1593'.
[  244.509586][ T5212] Bluetooth: hci0: command tx timeout
[  245.246788][ T9786] loop3: detected capacity change from 0 to 128
[  245.377731][ T9786] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  245.383479][ T9786] hpfs: filesystem error: improperly stopped
[  245.386344][ T9786] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  245.390372][ T9786] hpfs: You really don't want any checks? You are crazy...
[  245.396551][ T9786] hpfs: hpfs_map_sector(): read error
[  245.398880][ T9786] hpfs: code page support is disabled
[  245.420418][ T9786] hpfs: hpfs_map_4sectors(): unaligned read
[  245.424099][ T9786] hpfs: hpfs_map_4sectors(): unaligned read
[  245.426694][ T9786] hpfs: filesystem error: unable to find root dir
[  245.429627][ T5985] usb 1-1: Cannot set autoneg
[  245.455996][ T5985] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  245.481890][ T5985] usb 1-1: USB disconnect, device number 26
[  246.049718][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1608'.
[  246.278417][ T5936] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  246.589570][ T5936] Bluetooth: hci0: command tx timeout
[  246.886405][ T9816] tun0: tun_chr_ioctl cmd 2148553947
[  247.423967][ T9839] loop0: detected capacity change from 0 to 512
[  247.499856][ T9841] loop0: detected capacity change from 0 to 764
[  247.507957][ T9841] rock: directory entry would overflow storage
[  247.519412][ T9841] rock: sig=0x4654, size=5, remaining=4
[  247.676374][ T9830] loop3: detected capacity change from 0 to 32768
[  247.695104][ T9830] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1622 (9830)
[  247.726562][ T9835] loop1: detected capacity change from 0 to 40427
[  247.735023][ T9835] F2FS-fs (loop1): build fault injection rate: 771
[  247.735322][ T9830] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  247.746902][ T9835] F2FS-fs (loop1): invalid crc value
[  247.759375][ T9830] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  247.849478][ T9835] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.880607][ T9835] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  247.946135][ T9830] BTRFS info (device loop3): enabling ssd optimizations
[  247.949044][ T9830] BTRFS info (device loop3): enabling free space tree
[  248.008597][ T9651] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  248.219142][ T9870] loop0: detected capacity change from 0 to 128
[  248.248972][ T9870] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  248.275905][ T9870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.329679][   T33] audit: type=1800 audit(248.206:83): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1634" name="file2" dev="loop0" ino=95 res=0 errno=0
[  248.504535][ T9880] binder: 9879:9880 ioctl c0306201 200000000000 returned -14
[  248.532968][ T9884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1639'.
[  248.872027][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'.
[  249.326984][ T9902] loop3: detected capacity change from 0 to 4096
[  250.304546][ T9920] loop0: detected capacity change from 0 to 1024
[  250.333701][   T33] audit: type=1800 audit(250.226:84): pid=9920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1654" name="file1" dev="loop0" ino=20 res=0 errno=0
[  250.572932][ T9926] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1655'.
[  251.049332][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  251.256846][   T10] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  251.267608][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.276835][   T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  251.301182][   T10] usb 4-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[  251.324014][   T10] usb 4-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[  251.349448][   T10] usb 4-1: Manufacturer: syz
[  251.385227][   T10] usb 4-1: config 0 descriptor??
[  251.662255][   T10] usb 4-1: USB disconnect, device number 2
[  251.789403][ T9933] loop1: detected capacity change from 0 to 4096
[  251.800158][ T9933] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  251.857697][ T9933] ntfs3(loop1): ino=1a, mi_enum_attr
[  251.861941][ T9933] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  252.443554][ T9935] loop1: detected capacity change from 0 to 1024
[  252.486251][   T33] audit: type=1800 audit(252.376:85): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1661" name="file1" dev="loop1" ino=2 res=0 errno=0
[  252.572757][ T9935] hfsplus: invalid catalog entry type
[  252.588604][ T6350] hfsplus: bad catalog folder entry
[  252.609430][ T6350] hfsplus: bad catalog file entry
[  252.809505][ T9951] loop0: detected capacity change from 0 to 32768
[  252.853924][ T9951] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.899116][ T9951] XFS (loop0): Ending clean mount
[  253.040500][   T33] audit: type=1326 audit(252.936:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9968 comm="syz.3.1669" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3c8d8ec29 code=0x0
[  253.121834][ T5938] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  253.542838][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1677'.
[  253.757358][T10000] loop1: detected capacity change from 0 to 1024
[  253.832968][T10000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.873858][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.370498][T10013] loop1: detected capacity change from 0 to 512
[  254.374712][T10013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  254.390373][T10013] EXT4-fs (loop1): 1 truncate cleaned up
[  254.410821][T10013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  255.238852][T10030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1693'.
[  255.282645][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.361595][T10034] hpfs: Bad magic ... probably not HPFS
[  255.393342][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.395675][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  255.718039][ T9651] cgroup: fork rejected by pids controller in /syz3
[  255.810998][   T24] kernel write not supported for file /1322/net/netstat (pid: 24 comm: kworker/1:0)
[  256.181051][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.630989][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.675142][T10082] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  256.736795][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.848629][T10088] vivid-000: =================  START STATUS  =================
[  256.856591][T10088] vivid-000: Radio HW Seek Mode: Bounded
[  256.869404][T10088] vivid-000: Radio Programmable HW Seek: false
[  256.871347][T10088] vivid-000: RDS Rx I/O Mode: Block I/O
[  256.879597][T10088] vivid-000: Generate RBDS Instead of RDS: false
[  256.881649][T10088] vivid-000: RDS Reception: true
[  256.883343][T10088] vivid-000: RDS Program Type: 0 inactive
[  256.885320][T10088] vivid-000: RDS PS Name:  inactive
[  256.899885][T10088] vivid-000: RDS Radio Text:  inactive
[  256.901765][T10088] vivid-000: RDS Traffic Announcement: false inactive
[  256.904011][T10088] vivid-000: RDS Traffic Program: false inactive
[  256.906007][T10088] vivid-000: RDS Music: false inactive
[  256.927671][T10088] vivid-000: ==================  END STATUS  ==================
[  257.036426][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.167533][ T5212] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  257.174339][ T5212] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  257.178854][ T5212] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  257.186430][ T5212] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  257.193711][ T5212] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  257.244008][   T13] bridge_slave_1: left allmulticast mode
[  257.246349][   T13] bridge_slave_1: left promiscuous mode
[  257.251087][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.271134][  T791] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  257.315769][   T13] bridge_slave_0: left allmulticast mode
[  257.317942][   T13] bridge_slave_0: left promiscuous mode
[  257.322855][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.432950][  T791] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  257.441326][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  257.452250][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  257.461619][  T791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  257.470410][  T791] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  257.477027][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.501291][  T791] usb 1-1: config 0 descriptor??
[  257.512296][T10092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  257.938863][  T791] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  257.971160][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  257.978275][  T791] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  257.984473][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  257.993906][   T13] bond0 (unregistering): Released all slaves
[  258.218342][ T5985] usb 1-1: USB disconnect, device number 27
[  258.366549][T10097] chnl_net:caif_netlink_parms(): no params data found
[  258.379392][   T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  258.463988][   T13] hsr_slave_0: left promiscuous mode
[  258.466678][   T13] hsr_slave_1: left promiscuous mode
[  258.470728][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.473802][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.477994][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.482004][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.508318][   T13] veth1_macvtap: left promiscuous mode
[  258.511578][   T13] veth0_macvtap: left promiscuous mode
[  258.514393][   T13] veth1_vlan: left promiscuous mode
[  258.516665][   T13] veth0_vlan: left promiscuous mode
[  258.529422][   T24] usb 2-1: Using ep0 maxpacket: 16
[  258.533436][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.542682][   T24] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  258.546505][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.551285][   T24] usb 2-1: Product: syz
[  258.553008][   T24] usb 2-1: Manufacturer: syz
[  258.554972][   T24] usb 2-1: SerialNumber: syz
[  258.566538][   T24] usb 2-1: config 0 descriptor??
[  258.572532][   T24] hub 2-1:0.0: bad descriptor, ignoring hub
[  258.574786][   T24] hub 2-1:0.0: probe with driver hub failed with error -5
[  258.597459][   T24] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19
[  259.092150][    T9] usb 2-1: USB disconnect, device number 32
[  259.228076][   T13] team0 (unregistering): Port device team_slave_1 removed
[  259.243698][ T5936] Bluetooth: hci0: command tx timeout
[  259.275797][   T13] team0 (unregistering): Port device team_slave_0 removed
[  259.971080][T10097] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.973984][T10097] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.977083][T10097] bridge_slave_0: entered allmulticast mode
[  259.985014][T10097] bridge_slave_0: entered promiscuous mode
[  259.989373][T10097] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.994313][T10097] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.997169][T10097] bridge_slave_1: entered allmulticast mode
[  260.018036][T10097] bridge_slave_1: entered promiscuous mode
[  260.145434][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  260.181156][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  260.285034][T10097] team0: Port device team_slave_0 added
[  260.322334][T10097] team0: Port device team_slave_1 added
[  260.385302][T10147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  260.410120][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.413070][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.425792][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.464976][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.471491][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.482928][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  260.555034][T10097] hsr_slave_0: entered promiscuous mode
[  260.558072][T10097] hsr_slave_1: entered promiscuous mode
[  260.562625][T10097] debugfs: 'hsr0' already exists in 'hsr'
[  260.564634][T10097] Cannot create hsr debugfs directory
[  261.309570][ T5936] Bluetooth: hci0: command tx timeout
[  261.394257][    T9] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  261.555685][    T9] usb 2-1: config 0 has no interfaces?
[  261.557873][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  261.569369][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.599694][    T9] usb 2-1: config 0 descriptor??
[  261.656247][T10097] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  261.677539][T10097] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  261.700574][T10097] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  261.708865][T10097] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  261.897705][T10097] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.925354][T10097] 8021q: adding VLAN 0 to HW filter on device team0
[  261.940451][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.943328][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.958445][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.961399][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.014302][T10097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.041337][T10162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  262.044258][T10162] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  262.050561][    T9] usb 2-1: USB disconnect, device number 33
[  262.225374][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.270676][T10097] veth0_vlan: entered promiscuous mode
[  262.277281][T10097] veth1_vlan: entered promiscuous mode
[  262.298841][T10097] veth0_macvtap: entered promiscuous mode
[  262.304537][T10097] veth1_macvtap: entered promiscuous mode
[  262.316033][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.325071][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.337647][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.343714][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.346759][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.350937][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.415400][  T421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.418424][  T421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.437483][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.441888][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.601601][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  262.612488][T10220] loop1: detected capacity change from 0 to 512
[  262.624496][T10220] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  262.770865][    T9] usb 1-1: Using ep0 maxpacket: 32
[  262.777011][    T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 0
[  262.784142][    T9] usb 1-1: config 0 has no interface number 0
[  262.786074][    T9] usb 1-1: config 0 interface 125 has no altsetting 0
[  262.798354][    T9] usb 1-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  262.814671][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.817135][    T9] usb 1-1: Product: syz
[  262.818391][    T9] usb 1-1: Manufacturer: syz
[  262.825583][    T9] usb 1-1: SerialNumber: syz
[  262.835662][    T9] usb 1-1: config 0 descriptor??
[  262.946183][T10236] netlink: 'syz.1.1758': attribute type 3 has an invalid length.
[  262.948665][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'.
[  263.050056][    T9] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  263.104374][T10242] loop1: detected capacity change from 0 to 128
[  263.118290][T10242] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  263.168224][ T5944] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.319120][   T33] audit: type=1326 audit(263.206:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10251 comm="syz.3.1765" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11c618ec29 code=0x0
[  263.338652][T10254] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  263.347644][T10254] CIFS mount error: No usable UNC path provided in device string!
[  263.347644][T10254] 
[  263.352911][T10254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  263.389537][ T5936] Bluetooth: hci0: command tx timeout
[  263.810390][    T9] usb 1-1: reset high-speed USB device number 28 using dummy_hcd
[  263.823718][T10266] loop1: detected capacity change from 0 to 128
[  263.827615][T10266] ubifs: Bad value for 'compr'
[  264.188416][    T9] usb 1-1: failed to restore interface 125 altsetting 246 (error=-71)
[  264.205592][    T9] ueagle-atm 1-1:0.125: usbatm_usb_probe: bind failed: -19!
[  264.211474][    T9] usb 1-1: USB disconnect, device number 28
[  264.368771][T10284] loop3: detected capacity change from 0 to 2048
[  264.453273][T10284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.507094][T10097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.233065][T10314] loop0: detected capacity change from 0 to 1024
[  265.469414][ T5212] Bluetooth: hci0: command tx timeout
[  265.947582][T10328] sctp: [Deprecated]: syz.0.1793 (pid 10328) Use of int in max_burst socket option deprecated.
[  265.947582][T10328] Use struct sctp_assoc_value instead
[  266.125686][T10332] loop3: detected capacity change from 0 to 128
[  266.168291][T10332] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  266.302999][T10097] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  266.411039][T10330] loop0: detected capacity change from 0 to 32768
[  266.416021][T10330] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1794 (10330)
[  266.449298][T10330] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  266.452550][T10330] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  266.528572][T10330] BTRFS info (device loop0): enabling ssd optimizations
[  266.531661][T10330] BTRFS info (device loop0): enabling free space tree
[  266.534532][T10330] BTRFS info (device loop0): use zstd compression, level 3
[  266.746194][ T5938] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  266.869678][  T791] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  266.987498][T10374] loop0: detected capacity change from 0 to 1024
[  266.992101][ T5936] Bluetooth: hci0: Opcode 0x206a failed: -110
[  267.003231][T10374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.039402][  T791] usb 2-1: Using ep0 maxpacket: 16
[  267.045238][  T791] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  267.048732][  T791] usb 2-1: config 0 has no interface number 0
[  267.052165][  T791] usb 2-1: config 0 interface 51 has no altsetting 0
[  267.061969][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.082552][  T791] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[  267.086198][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.089637][  T791] usb 2-1: Product: syz
[  267.091370][  T791] usb 2-1: Manufacturer: syz
[  267.093227][  T791] usb 2-1: SerialNumber: syz
[  267.103742][  T791] usb 2-1: config 0 descriptor??
[  267.111275][  T791] usb 2-1: bad CDC descriptors
[  267.338882][ T5985] usb 2-1: USB disconnect, device number 34
[  267.408107][T10385] loop0: detected capacity change from 0 to 4096
[  267.426309][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1812'.
[  267.430213][T10387] bond0: ARP target 187.187.187.187 is already present
[  267.432988][T10387] bond0: option arp_ip_target: invalid value (3149642683)
[  267.439031][T10388] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  267.505960][T10392] loop0: detected capacity change from 0 to 16
[  267.514439][T10392] erofs (device loop0): mounted with root inode @ nid 36.
[  267.549463][ T5936] Bluetooth: hci0: command 0x206a tx timeout
[  268.292753][T10407] netlink: 'syz.0.1820': attribute type 15 has an invalid length.
[  268.338827][T10409] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  268.759010][T10417] loop3: detected capacity change from 0 to 40427
[  268.765410][T10417] F2FS-fs (loop3): invalid crc value
[  268.815456][T10417] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  268.819692][T10417] F2FS-fs (loop3): Start checkpoint disabled!
[  268.823756][T10417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  268.865875][T10419] loop0: detected capacity change from 0 to 32768
[  268.882958][   T33] audit: type=1800 audit(268.776:88): pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1824" name="file1" dev="loop3" ino=10 res=0 errno=0
[  268.945810][T10419] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  268.965655][T10419] XFS (loop0): Ending clean mount
[  269.005248][ T5938] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  269.192200][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'.
[  269.195898][T10431] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1824'.
[  269.199819][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'.
[  269.203431][T10431] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1824'.
[  269.207190][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'.
[  269.304038][T10431] syz.3.1824: attempt to access beyond end of device
[  269.304038][T10431] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  269.313866][T10431] syz.3.1824: attempt to access beyond end of device
[  269.313866][T10431] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  269.320491][T10431] syz.3.1824: attempt to access beyond end of device
[  269.320491][T10431] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  269.326297][T10431] syz.3.1824: attempt to access beyond end of device
[  269.326297][T10431] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  269.332384][T10431] syz.3.1824: attempt to access beyond end of device
[  269.332384][T10431] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  269.339415][T10431] syz.3.1824: attempt to access beyond end of device
[  269.339415][T10431] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  269.344768][T10431] syz.3.1824: attempt to access beyond end of device
[  269.344768][T10431] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  269.350674][T10431] syz.3.1824: attempt to access beyond end of device
[  269.350674][T10431] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  269.356835][T10431] syz.3.1824: attempt to access beyond end of device
[  269.356835][T10431] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  269.363705][T10431] syz.3.1824: attempt to access beyond end of device
[  269.363705][T10431] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  269.576133][ T7894] CPU: 1 UID: 0 PID: 7894 Comm: kworker/u10:7 Not tainted syzkaller #0 PREEMPT(full) 
[  269.576148][ T7894] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.576154][ T7894] Workqueue: writeback wb_workfn (flush-7:3)
[  269.576173][ T7894] Call Trace:
[  269.576177][ T7894]  <TASK>
[  269.576181][ T7894]  dump_stack_lvl+0x189/0x250
[  269.576197][ T7894]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.576207][ T7894]  ? __pfx_queue_work_on+0x10/0x10
[  269.576217][ T7894]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  269.576227][ T7894]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.576239][ T7894]  f2fs_handle_critical_error+0x37c/0x540
[  269.576253][ T7894]  f2fs_write_end_io+0x886/0xb60
[  269.576271][ T7894]  __submit_merged_bio+0x27a/0x6a0
[  269.576282][ T7894]  __submit_merged_write_cond+0x255/0x530
[  269.576299][ T7894]  f2fs_write_data_pages+0x261d/0x3000
[  269.576322][ T7894]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  269.576337][ T7894]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  269.576362][ T7894]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  269.576375][ T7894]  ? trace_f2fs_writepages+0x7f/0x200
[  269.576384][ T7894]  ? f2fs_write_node_pages+0x478/0x6e0
[  269.576393][ T7894]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  269.576407][ T7894]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  269.576416][ T7894]  do_writepages+0x32e/0x550
[  269.576431][ T7894]  ? reacquire_held_locks+0x127/0x1d0
[  269.576441][ T7894]  ? writeback_sb_inodes+0x384/0x1010
[  269.576456][ T7894]  __writeback_single_inode+0x145/0xff0
[  269.576466][ T7894]  ? do_raw_spin_unlock+0x4d/0x240
[  269.576478][ T7894]  writeback_sb_inodes+0x6c7/0x1010
[  269.576500][ T7894]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  269.576528][ T7894]  ? rcu_is_watching+0x15/0xb0
[  269.576541][ T7894]  wb_writeback+0x43b/0xaf0
[  269.576555][ T7894]  ? queue_io+0x301/0x590
[  269.576566][ T7894]  ? __pfx_wb_writeback+0x10/0x10
[  269.576580][ T7894]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.576589][ T7894]  wb_workfn+0x409/0xef0
[  269.576604][ T7894]  ? __pfx_wb_workfn+0x10/0x10
[  269.576615][ T7894]  ? __lock_acquire+0xab9/0xd20
[  269.576626][ T7894]  ? process_scheduled_works+0x9ef/0x17b0
[  269.576637][ T7894]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.576643][ T7894]  ? process_scheduled_works+0x9ef/0x17b0
[  269.576650][ T7894]  ? process_scheduled_works+0x9ef/0x17b0
[  269.576658][ T7894]  process_scheduled_works+0xae1/0x17b0
[  269.576678][ T7894]  ? __pfx_process_scheduled_works+0x10/0x10
[  269.576693][ T7894]  worker_thread+0x8a0/0xda0
[  269.576702][ T7894]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.576713][ T7894]  ? __kthread_parkme+0x7b/0x200
[  269.576726][ T7894]  kthread+0x711/0x8a0
[  269.576737][ T7894]  ? __pfx_worker_thread+0x10/0x10
[  269.576745][ T7894]  ? __pfx_kthread+0x10/0x10
[  269.576755][ T7894]  ? _raw_spin_unlock_irq+0x23/0x50
[  269.576762][ T7894]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.576770][ T7894]  ? __pfx_kthread+0x10/0x10
[  269.576780][ T7894]  ret_from_fork+0x439/0x7d0
[  269.576790][ T7894]  ? __pfx_ret_from_fork+0x10/0x10
[  269.576806][ T7894]  ? __switch_to_asm+0x39/0x70
[  269.576815][ T7894]  ? __switch_to_asm+0x33/0x70
[  269.576825][ T7894]  ? __pfx_kthread+0x10/0x10
[  269.576835][ T7894]  ret_from_fork_asm+0x1a/0x30
[  269.576853][ T7894]  </TASK>
[  269.576858][ T7894] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  269.614930][T10438] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  269.722826][T10440] loop0: detected capacity change from 0 to 128
[  269.746663][T10442] loop1: detected capacity change from 0 to 256
[  269.753180][T10442] exfat: Deprecated parameter 'utf8'
[  269.755341][T10442] exfat: Deprecated parameter 'namecase'
[  269.772786][T10440] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.777777][T10442] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  269.802024][T10440] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1830: No space for directory leaf checksum. Please run e2fsck -D.
[  269.808269][T10440] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.1830: Directory block failed checksum
[  269.823530][   T33] audit: type=1800 audit(269.716:89): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1831" name="bus" dev="loop1" ino=1048658 res=0 errno=0
[  269.855677][ T5938] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.184097][T10461] loop3: detected capacity change from 0 to 512
[  270.210585][T10461] EXT4-fs: Ignoring removed orlov option
[  270.230694][T10461] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  270.242065][T10461] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  270.252909][T10461] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1837: corrupted in-inode xattr: e_value size too large
[  270.275090][T10461] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1837: couldn't read orphan inode 15 (err -117)
[  270.294458][T10461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.368084][T10097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.527174][   T33] audit: type=1326 audit(270.416:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10469 comm="syz.0.1841" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6fb198ec29 code=0x0
[  270.830288][T10480] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  270.855683][T10480] bond1: entered allmulticast mode
[  270.859810][T10480] 8021q: adding VLAN 0 to HW filter on device bond1
[  270.864223][T10483] loop1: detected capacity change from 0 to 2048
[  270.913298][T10484] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  270.960908][T10483] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  270.988310][T10483] Remounting filesystem read-only
[  271.031491][ T5944] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  271.038149][T10488] sch_tbf: burst 19360 is lower than device lo mtu (65550) !
[  271.167774][T10494] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  271.455332][T10492] loop3: detected capacity change from 0 to 32768
[  271.481364][T10492] jfs_mount: Failed to read FILESYSTEM_I
[  271.483290][T10492] Mount JFS Failure: -5
[  271.484568][T10492] jfs_mount failed w/return code = -5
[  271.601363][T10510] netlink: 'syz.3.1858': attribute type 11 has an invalid length.
[  271.638299][T10512] loop0: detected capacity change from 0 to 4096
[  271.780619][  T791] IPVS: starting estimator thread 0...
[  271.849627][T10521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1863'.
[  271.853275][T10521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1863'.
[  271.875607][T10521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1863'.
[  271.889511][T10517] IPVS: using max 63 ests per chain, 151200 per kthread
[  271.984511][T10527] loop3: detected capacity change from 0 to 1024
[  272.036324][   T40] hfsplus: b-tree write err: -5, ino 4
[  272.753243][T10545] openvswitch: netlink: IP tunnel TTL not specified.
[  272.839429][ T5290] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  272.994370][ T5290] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  272.997844][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.001303][ T5290] usb 2-1: Product: syz
[  273.003040][ T5290] usb 2-1: Manufacturer: syz
[  273.004873][ T5290] usb 2-1: SerialNumber: syz
[  273.009170][ T5290] usb 2-1: config 0 descriptor??
[  273.039420][ T5985] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  273.191947][ T5985] usb 1-1: config 0 has an invalid interface number: 183 but max is 0
[  273.197479][ T5985] usb 1-1: config 0 has no interface number 0
[  273.204037][ T5985] usb 1-1: config 0 interface 183 has no altsetting 0
[  273.225424][ T5290] hso 2-1:0.0: Failed to find INT IN ep
[  273.228415][ T5290] usb-storage 2-1:0.0: USB Mass Storage device detected
[  273.229105][ T5985] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=57.f2
[  273.235474][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.240549][ T5985] usb 1-1: Product: syz
[  273.242118][ T5985] usb 1-1: Manufacturer: syz
[  273.245074][ T5985] usb 1-1: SerialNumber: syz
[  273.254984][ T5985] usb 1-1: config 0 descriptor??
[  273.435015][ T5290] usb 2-1: USB disconnect, device number 35
[  273.450732][T10559] netlink: 'syz.3.1880': attribute type 1 has an invalid length.
[  273.454783][T10559] netlink: 'syz.3.1880': attribute type 2 has an invalid length.
[  273.487486][ T5985] usb 1-1: USB disconnect, device number 29
[  273.605161][T10566] loop3: detected capacity change from 0 to 128
[  273.610164][T10566] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  273.615901][T10566] hpfs: filesystem error: improperly stopped
[  273.618377][T10566] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  273.624332][T10566] hpfs: You really don't want any checks? You are crazy...
[  273.627738][T10566] hpfs: hpfs_map_sector(): read error
[  273.630277][T10566] hpfs: code page support is disabled
[  273.632663][T10566] hpfs: hpfs_map_4sectors(): unaligned read
[  273.635203][T10566] hpfs: hpfs_map_4sectors(): unaligned read
[  273.637616][T10566] hpfs: filesystem error: unable to find root dir
[  273.647511][T10566] hpfs: hpfs_map_4sectors(): unaligned read
[  273.824833][T10576] netlink: 'syz.3.1888': attribute type 10 has an invalid length.
[  273.827985][T10576] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  274.081106][T10582] loop0: detected capacity change from 0 to 512
[  274.106646][T10578] loop3: detected capacity change from 0 to 32768
[  274.125165][T10582] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  274.149572][T10582] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  274.154456][T10582] EXT4-fs (loop0): mount failed
[  274.158853][T10578] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  274.315739][T10097] ocfs2: Unmounting device (7,3) on (node local)
[  274.613290][T10609] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.725703][T10617] loop3: detected capacity change from 0 to 512
[  274.760968][T10617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.857252][T10097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.991116][T10612] loop1: detected capacity change from 0 to 32768
[  275.183496][T10632] batadv_slave_1: entered promiscuous mode
[  275.188715][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'.
[  275.201754][T10632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  275.894438][T10632] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.114996][T10646] loop0: detected capacity change from 0 to 512
[  276.176153][T10646] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1913: bad orphan inode 11862016
[  276.182847][T10646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  276.604178][T10665] loop1: detected capacity change from 0 to 16
[  276.613691][T10665] erofs (device loop1): dirblkbits 5 isn't supported
[  277.004560][T10672] loop1: detected capacity change from 0 to 764
[  277.036875][T10672] isofs: isofs_export_get_parent(): child directory not normalized!
[  277.394404][ T5938] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  277.473777][T10674] loop1: detected capacity change from 0 to 256
[  277.480781][T10674] vfat: Unknown parameter 'iochar'
[  277.894794][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'.
[  277.905668][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'.
[  278.205486][T10692] loop3: detected capacity change from 0 to 512
[  278.217745][T10692] EXT4-fs: Ignoring removed bh option
[  278.226602][T10692] EXT4-fs: Ignoring removed nomblk_io_submit option
[  278.236977][T10692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  278.252360][T10692] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  278.255490][T10692] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  278.260905][T10692] System zones: 0-1, 15-15, 18-18, 34-34
[  278.291164][T10692] EXT4-fs (loop3): orphan cleanup on readonly fs
[  278.303055][T10692] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  278.328403][T10692] EXT4-fs warning (device loop3): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  278.362738][T10692] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  278.387199][T10692] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1934: bg 0: block 40: padding at end of block bitmap is not set
[  278.423883][T10692] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  278.441099][T10692] EXT4-fs (loop3): 1 truncate cleaned up
[  278.447858][T10692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  278.500271][T10692] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1934: bad symlink.
[  278.611515][T10097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.038594][T10710] loop1: detected capacity change from 0 to 1024
[  279.091135][  T421] hfsplus: b-tree write err: -5, ino 3
[  279.095058][ T5944] hfsplus: node 4:3 still has 2 user(s)!
[  279.449351][ T6020] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  279.594242][T10718] loop0: detected capacity change from 0 to 256
[  279.615518][ T6020] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  279.663751][T10718] exfat: Deprecated parameter 'utf8'
[  279.666397][T10718] exfat: Deprecated parameter 'utf8'
[  279.686216][T10718] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d)
[  279.785075][ T6020] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.789604][ T6020] usb 2-1: Product: syz
[  279.791577][ T6020] usb 2-1: Manufacturer: syz
[  279.793775][ T6020] usb 2-1: SerialNumber: syz
[  279.799095][ T6020] usb 2-1: config 0 descriptor??
[  280.120207][ T5290] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  280.269468][ T6020] usb 2-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4)
[  280.329849][ T5290] usb 1-1: Using ep0 maxpacket: 16
[  280.335019][ T5290] usb 1-1: config 0 has an invalid interface number: 230 but max is 0
[  280.337885][ T5290] usb 1-1: config 0 has no interface number 0
[  280.340234][ T5290] usb 1-1: config 0 interface 230 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 8
[  280.344021][ T5290] usb 1-1: config 0 interface 230 altsetting 2 endpoint 0x1 has invalid maxpacket 447, setting to 64
[  280.347691][ T5290] usb 1-1: config 0 interface 230 has no altsetting 0
[  280.352931][ T5290] usb 1-1: New USB device found, idVendor=157e, idProduct=3007, bcdDevice=65.eb
[  280.355948][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.358371][ T5290] usb 1-1: Product: syz
[  280.359991][ T5290] usb 1-1: Manufacturer: syz
[  280.361764][ T5290] usb 1-1: SerialNumber: syz
[  280.366210][ T5290] usb 1-1: config 0 descriptor??
[  280.370249][T10723] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  280.376294][ T5290] usb 1-1: Could not find all expected endpoints
[  280.537787][ T6020] usb 2-1: failed to fetch extended address, random address set
[  280.589784][ T5985] usb 1-1: USB disconnect, device number 30
[  280.611681][ T6020] usb 2-1: USB disconnect, device number 36
[  280.899485][T10731] loop3: detected capacity change from 0 to 32768
[  280.908848][T10731] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  280.923754][T10731] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  281.010336][T10097] ocfs2: Unmounting device (7,3) on (node local)
[  281.288916][T10748] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1958'.
[  281.298728][T10748] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  281.303287][T10748] openvswitch: netlink: Message has 8454 unknown bytes.
[  281.700766][ T6020] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  281.890632][ T6020] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  281.899268][ T6020] usb 2-1: config 0 has no interface number 0
[  281.904012][ T6020] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.909094][ T6020] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.937402][ T6020] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  281.941406][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.946206][ T6020] usb 2-1: config 0 descriptor??
[  282.192838][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1963'.
[  282.201711][T10761] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.206061][T10761] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.306913][T10765] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1965'.
[  282.367682][ T6020] prodikeys 0003:041E:2801.0008: collection stack underflow
[  282.372795][ T6020] prodikeys 0003:041E:2801.0008: item 0 1 0 12 parsing failed
[  282.376154][ T6020] prodikeys 0003:041E:2801.0008: hid parse failed
[  282.378347][ T6020] prodikeys 0003:041E:2801.0008: probe with driver prodikeys failed with error -22
[  282.567792][ T6020] usb 2-1: USB disconnect, device number 37
[  282.986102][T10773] loop0: detected capacity change from 0 to 32768
[  283.004329][T10773] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  283.017673][T10773] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  283.071305][ T5938] ocfs2: Unmounting device (7,0) on (node local)
[  283.185643][T10777] loop1: detected capacity change from 0 to 1024
[  283.229007][T10777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.244042][T10777] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks
[  283.247023][T10777] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  283.302782][T10785] loop0: detected capacity change from 0 to 2048
[  283.307709][T10785] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  283.314810][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.335929][T10786] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.426440][T10788] loop1: detected capacity change from 0 to 256
[  283.445973][T10788] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  283.457285][T10788] FAT-fs (loop1): bogus number of directory entries (1)
[  283.466819][T10788] FAT-fs (loop1): Can't find a valid FAT filesystem
[  283.839958][T10806] netlink: 'syz.0.1981': attribute type 3 has an invalid length.
[  283.879094][T10810] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  284.190741][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  284.354819][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  284.368720][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  284.373040][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  284.376831][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  284.383086][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  284.389074][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.395332][   T10] usb 1-1: config 0 descriptor??
[  284.596586][   T33] audit: type=1326 audit(284.486:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.608539][   T33] audit: type=1326 audit(284.486:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.612925][T10812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.618713][   T33] audit: type=1326 audit(284.496:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.630256][   T33] audit: type=1326 audit(284.496:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.643375][T10812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.647604][   T33] audit: type=1326 audit(284.496:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.657213][   T10] hdpvr 1-1:0.0: firmware version 0xd dated 
[  284.659455][   T33] audit: type=1326 audit(284.526:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.678338][   T33] audit: type=1326 audit(284.526:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.1.1998" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0020b8ec29 code=0x7ffc0000
[  284.746924][T10847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2000'.
[  284.750452][T10847] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2000'.
[  284.769442][ T5290] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  284.872937][T10853] netlink: 'syz.1.2003': attribute type 2 has an invalid length.
[  284.876020][T10853] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2003'.
[  284.921795][ T5290] usb 4-1: Using ep0 maxpacket: 8
[  284.927546][ T5290] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  284.939354][ T5290] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  284.942228][ T5290] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  284.945110][ T5290] usb 4-1: Product: syz
[  284.946644][ T5290] usb 4-1: Manufacturer: syz
[  284.948094][ T5290] usb 4-1: SerialNumber: syz
[  285.097349][   T10] hdpvr 1-1:0.0: Could not setup controls
[  285.101535][   T10] hdpvr 1-1:0.0: registering videodev failed
[  285.114974][   T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[  285.126811][   T10] usb 1-1: USB disconnect, device number 31
[  285.166886][ T5290] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  285.169934][ T5290] usb 4-1: Handspring Visor / Palm OS: port 0, is for HotSync use
[  285.172585][ T5290] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  285.175539][ T5290] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  285.257387][T10859] loop1: detected capacity change from 0 to 32768
[  285.261218][T10859] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2006 (10859)
[  285.271810][T10859] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  285.275180][T10859] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  285.372047][ T5290] usb 4-1: palm_os_3_probe - error -71 getting bytes available request
[  285.375275][ T5290] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  285.381851][ T5290] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  285.388049][ T5290] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  285.393852][ T5290] usb 4-1: USB disconnect, device number 3
[  285.398258][ T5290] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  285.406697][T10859] BTRFS info (device loop1): enabling ssd optimizations
[  285.406986][ T5290] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  285.414635][ T5290] visor 4-1:1.0: device disconnected
[  285.416396][T10859] BTRFS info (device loop1): enabling free space tree
[  285.421580][T10859] BTRFS info (device loop1): use lzo compression, level 1
[  285.487249][ T5944] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  285.819131][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2010'.
[  285.823477][T10881] loop1: detected capacity change from 0 to 2048
[  285.847485][T10884] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  286.023035][T10891] loop3: detected capacity change from 0 to 4096
[  286.028734][T10891] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  286.082368][T10891] ntfs3(loop3): Failed to initialize MFT zone (-22).
[  286.244076][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.253086][T10904] loop3: detected capacity change from 0 to 1024
[  286.312146][T10905] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  286.323567][T10904] hfsplus: invalid catalog entry type in lookup
[  286.397429][   T40] hfsplus: b-tree write err: -5, ino 4
[  286.479140][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.580925][T10907] loop3: detected capacity change from 0 to 512
[  286.588727][T10907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  286.633461][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.650376][T10907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.758160][   T33] audit: type=1800 audit(286.646:98): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2020" name="file1" dev="loop3" ino=15 res=0 errno=0
[  286.803744][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.074112][T10097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.312392][   T13] dummy0: left allmulticast mode
[  287.315001][   T13] dummy0: left promiscuous mode
[  287.317306][   T13] bridge0: port 3(dummy0) entered disabled state
[  287.387638][   T13] bridge_slave_1: left allmulticast mode
[  287.410414][   T13] bridge_slave_1: left promiscuous mode
[  287.414765][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.446029][   T13] bridge_slave_0: left allmulticast mode
[  287.448382][   T13] bridge_slave_0: left promiscuous mode
[  287.459659][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.815757][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.824787][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.830486][   T13] bond0 (unregistering): Released all slaves
[  288.889720][ T5985] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  288.966525][   T13] tipc: Disabling bearer <udp:syz2>
[  288.977910][   T13] tipc: Left network mode
[  289.075082][ T5985] usb 4-1: Using ep0 maxpacket: 32
[  289.108082][ T5985] usb 4-1: config index 0 descriptor too short (expected 1051, got 27)
[  289.113893][ T5985] usb 4-1: config 0 has an invalid interface number: 101 but max is 1
[  289.139610][ T5985] usb 4-1: config 0 has an invalid interface number: 33 but max is 1
[  289.142902][ T5985] usb 4-1: config 0 has no interface number 0
[  289.149648][ T5985] usb 4-1: config 0 has no interface number 1
[  289.151623][T10933] "syz.0.2029" (10933) uses obsolete ecb(arc4) skcipher
[  289.152079][ T5985] usb 4-1: config 0 interface 101 has no altsetting 0
[  289.177031][ T5985] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84
[  289.191479][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.224815][ T5985] usb 4-1: config 0 descriptor??
[  289.413762][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2032'.
[  289.421698][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2032'.
[  289.427623][T10947] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2032'.
[  289.815167][ T5985] usb 4-1: string descriptor 0 read error: -71
[  289.831834][ T5985] usb 4-1: USB disconnect, device number 4
[  289.908260][ T5935] udevd[5935]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.101/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  290.012119][T10955] loop0: detected capacity change from 0 to 8
[  290.015532][T10955] squashfs: Unknown parameter 'euid>00000000000000060928/2㝆~?]'
[  290.188082][   T13] hsr_slave_0: left promiscuous mode
[  290.197004][   T13] hsr_slave_1: left promiscuous mode
[  290.204247][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.207604][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.220543][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.223632][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.271259][   T13] veth1_macvtap: left promiscuous mode
[  290.276775][   T13] veth0_macvtap: left promiscuous mode
[  290.281817][   T13] veth1_vlan: left promiscuous mode
[  290.284077][   T13] veth0_vlan: left promiscuous mode
[  290.543314][T10966] loop3: detected capacity change from 0 to 1024
[  290.597211][T10966] hfsplus: bad catalog entry type
[  290.672169][ T1091] hfsplus: b-tree write err: -5, ino 4
[  290.887283][T10955] loop0: detected capacity change from 0 to 32768
[  290.951345][T10955] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.040359][T10955] XFS (loop0): Ending clean mount
[  291.155888][ T5938] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.867138][   T13] team0 (unregistering): Port device team_slave_1 removed
[  291.902564][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  291.938106][   T13] team0 (unregistering): Port device team_slave_0 removed
[  292.053030][    T9] usb 1-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config
[  292.056647][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  292.061553][    T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  292.067941][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  292.071135][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.073977][    T9] usb 1-1: Product: syz
[  292.077823][    T9] usb 1-1: Manufacturer: syz
[  292.080488][    T9] usb 1-1: SerialNumber: syz
[  293.121568][    T9] cdc_ncm 1-1:1.0: bind() failure
[  293.141112][    T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  293.143165][    T9] cdc_ncm 1-1:1.1: bind() failure
[  293.335376][ T5290] usb 1-1: USB disconnect, device number 32
[  294.020834][T10996] netlink: 'syz.3.2045': attribute type 21 has an invalid length.
[  294.024017][T10996] netlink: 'syz.3.2045': attribute type 1 has an invalid length.
[  294.037747][T10996] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2045'.
[  294.131799][T11003] netlink: 'syz.3.2048': attribute type 1 has an invalid length.
[  294.135131][T11003] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2048'.
[  294.143064][T11003] NCSI netlink: No device for ifindex 0
[  294.179379][T11004] loop0: detected capacity change from 0 to 512
[  294.183678][T11004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  294.244093][T11004] EXT4-fs (loop0): 1 truncate cleaned up
[  294.252774][T11004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.452576][   T13] IPVS: stop unused estimator thread 0...
[  294.565101][   T13] ------------[ cut here ]------------
[  294.567444][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0
[  294.571317][   T13] Modules linked in:
[  294.574910][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  294.579558][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.583446][   T13] Workqueue: netns cleanup_net
[  294.585359][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  294.587442][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 22 43 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 d3 23 f8 e8 14 a1 df f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 a1 df f7 90 0f 0b 90 e9 60 fe ff ff
[  294.595014][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  294.597390][   T13] RAX: ffffffff89de750c RBX: ffff888023672480 RCX: ffff88801c2c0000
[  294.600682][   T13] RDX: 0000000000000000 RSI: ffffffff8d71699d RDI: ffff88801c2c0000
[  294.603702][   T13] RBP: ffffc900001079b0 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[  294.606694][   T13] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8f1c5700
[  294.609709][   T13] R13: 1ffff92000020f40 R14: ffff888023673940 R15: dffffc0000000000
[  294.612946][   T13] FS:  0000000000000000(0000) GS:ffff8881a417e000(0000) knlGS:0000000000000000
[  294.616309][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  294.618940][   T13] CR2: 00005565cf28f131 CR3: 0000000028932000 CR4: 00000000000006f0
[  294.622094][   T13] Call Trace:
[  294.623424][   T13]  <TASK>
[  294.624600][   T13]  xfrm_net_exit+0x2d/0x70
[  294.626313][   T13]  ops_undo_list+0x49a/0x990
[  294.628092][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  294.630193][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  294.632244][   T13]  cleanup_net+0x4d8/0x820
[  294.633940][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  294.635883][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.637909][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  294.640299][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  294.642599][   T13]  process_scheduled_works+0xae1/0x17b0
[  294.644805][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.647207][   T13]  worker_thread+0x8a0/0xda0
[  294.649611][   T13]  kthread+0x711/0x8a0
[  294.651642][   T13]  ? __pfx_worker_thread+0x10/0x10
[  294.653680][   T13]  ? __pfx_kthread+0x10/0x10
[  294.655541][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.657632][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.659804][   T13]  ? __pfx_kthread+0x10/0x10
[  294.661650][   T13]  ret_from_fork+0x439/0x7d0
[  294.663521][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  294.665564][   T13]  ? __switch_to_asm+0x39/0x70
[  294.667480][   T13]  ? __switch_to_asm+0x33/0x70
[  294.669633][   T13]  ? __pfx_kthread+0x10/0x10
[  294.671480][   T13]  ret_from_fork_asm+0x1a/0x30
[  294.674194][   T13]  </TASK>
[  294.675497][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  294.678298][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  294.681880][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  294.685754][   T13] Workqueue: netns cleanup_net
[  294.687652][   T13] Call Trace:
[  294.688658][   T13]  <TASK>
[  294.689536][   T13]  dump_stack_lvl+0x99/0x250
[  294.691150][   T13]  ? __asan_memcpy+0x40/0x70
[  294.692996][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.694888][   T13]  ? __pfx__printk+0x10/0x10
[  294.696441][   T13]  vpanic+0x281/0x750
[  294.698017][   T13]  ? __pfx__printk+0x10/0x10
[  294.699874][   T13]  ? __pfx_vpanic+0x10/0x10
[  294.701713][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  294.703923][   T13]  panic+0xb9/0xc0
[  294.705104][   T13]  ? __pfx_panic+0x10/0x10
[  294.706850][   T13]  __warn+0x31b/0x4b0
[  294.708430][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  294.710483][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  294.712373][   T13]  report_bug+0x2be/0x4f0
[  294.713945][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  294.715845][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[  294.717631][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[  294.719540][   T13]  handle_bug+0x84/0x160
[  294.721164][   T13]  exc_invalid_op+0x1a/0x50
[  294.722743][   T13]  asm_exc_invalid_op+0x1a/0x20
[  294.724696][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  294.726616][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 1b 22 43 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 d3 23 f8 e8 14 a1 df f7 90 <0f> 0b 90 e9 fd fd ff ff e8 06 a1 df f7 90 0f 0b 90 e9 60 fe ff ff
[  294.734150][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[  294.736440][   T13] RAX: ffffffff89de750c RBX: ffff888023672480 RCX: ffff88801c2c0000
[  294.739498][   T13] RDX: 0000000000000000 RSI: ffffffff8d71699d RDI: ffff88801c2c0000
[  294.742366][   T13] RBP: ffffc900001079b0 R08: ffffffff8f5cac37 R09: 1ffffffff1eb9586
[  294.745389][   T13] R10: dffffc0000000000 R11: fffffbfff1eb9587 R12: ffffffff8f1c5700
[  294.748121][   T13] R13: 1ffff92000020f40 R14: ffff888023673940 R15: dffffc0000000000
[  294.751188][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  294.752812][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[  294.754472][   T13]  xfrm_net_exit+0x2d/0x70
[  294.756238][   T13]  ops_undo_list+0x49a/0x990
[  294.758093][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  294.759971][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  294.761639][   T13]  cleanup_net+0x4d8/0x820
[  294.762915][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  294.764712][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.766691][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  294.768735][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  294.771102][   T13]  process_scheduled_works+0xae1/0x17b0
[  294.773303][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  294.775673][   T13]  worker_thread+0x8a0/0xda0
[  294.777494][   T13]  kthread+0x711/0x8a0
[  294.779078][   T13]  ? __pfx_worker_thread+0x10/0x10
[  294.780843][   T13]  ? __pfx_kthread+0x10/0x10
[  294.782186][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.783911][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  294.785532][   T13]  ? __pfx_kthread+0x10/0x10
[  294.787315][   T13]  ret_from_fork+0x439/0x7d0
[  294.788853][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  294.790551][   T13]  ? __switch_to_asm+0x39/0x70
[  294.792194][   T13]  ? __switch_to_asm+0x33/0x70
[  294.794083][   T13]  ? __pfx_kthread+0x10/0x10
[  294.795924][   T13]  ret_from_fork_asm+0x1a/0x30
[  294.797842][   T13]  </TASK>
[  294.799807][   T13] Kernel Offset: disabled
[  294.801184][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:16:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000200000005a53 RCX=0000000000080000 RDX=ffffc90006fd9000
RSI=000000000007ffff RDI=0000000000080000 RBP=000000000000986c RSP=ffffc9000420fa48
R8 =ffffffff8f5cac37 R9 =1ffffffff1eb9586 R10=dffffc0000000000 R11=fffffbfff1eb9587
R12=000000000000986d R13=000000000000986d R14=dffffc0000000000 R15=1ffff110063b730a
RIP=ffffffff88dc9a78 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6fb27446c0 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005000 CR3=00000000322fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ff00000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=2020202020202020 2020202020202020
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff88801f958237 R9 =1ffff11003f2b046 R10=dffffc0000000000 R11=ffffffff850b3ff0
R12=dffffc0000000000 R13=ffffffff995968e4 R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b406c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005565cf28f131 CR3=0000000028932000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000003065736f72
XMM02=00007f0020da7498 ffffffff8166e8ef XMM03=00007f0020da74a8 00007f0020da74a0
XMM04=00007f002190d100 00007f0020da7460 XMM05=00007f0020da7478 00007f0020da74c0
XMM06=00007f0020da74b8 00007f0020da74b0 XMM07=00007f0020da74a8 00007f0020da74a0
XMM08=003d8cdb9a9a10d4 d48484de1e6834b7 XMM09=0000000000000000 00007f0020c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
