last executing test programs:

2m3.499138832s ago: executing program 0 (id=2150):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f0000000280)={[{@commit={'commit', 0x3d, 0xf2a}}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@orlov}, {@grpjquota}]}, 0xee, 0x43e, &(0x7f00000008c0)="$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")

2m3.391432676s ago: executing program 0 (id=2153):
r0 = socket(0x2d, 0x2, 0x0)
bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)

2m3.340398104s ago: executing program 0 (id=2155):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

2m3.270607637s ago: executing program 0 (id=2156):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/../file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00')

2m3.270046731s ago: executing program 0 (id=2158):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x53}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x562ca4ba}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b34715ec070050d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x4, 0x7}, 0x6)
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x804, &(0x7f0000000280)={[{@utf8}, {@errors_continue}, {}, {@discard}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@namecase}, {@namecase}]}, 0x1, 0x1534, &(0x7f0000000cc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
openat(0xffffffffffffffff, 0x0, 0x4c0142, 0x163)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
ioprio_get$uid(0x3, 0x0)
open$dir(0x0, 0x48000, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x7e7080, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r6, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x310, 0x9, 0x0, 0x81, 0x42}, 0xffffffffffffff7c)
mount$fuse(0x0, 0x0, 0x0, 0x50000, 0x0)

2m1.281459325s ago: executing program 0 (id=2174):
r0 = socket$inet(0x2, 0x801, 0x0)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000003, 0x0)

2m1.201811988s ago: executing program 32 (id=2174):
r0 = socket$inet(0x2, 0x801, 0x0)
r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000003, 0x0)

3.041873293s ago: executing program 1 (id=4030):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006)

2.993524366s ago: executing program 1 (id=4033):
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2f})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)

2.943201213s ago: executing program 3 (id=4034):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
llistxattr(0x0, 0x0, 0x0)
open(0x0, 0x66842, 0x21)
r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115)
fallocate(r1, 0x0, 0x0, 0x8800000)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000010000)="0358b6", 0x3}], 0x1, 0x5000, 0xa68, 0x69aa4dc63df2b560)

2.943038835s ago: executing program 1 (id=4035):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c}, 0x1, 0x0, 0x0, 0x24000840}, 0x40)

2.886492924s ago: executing program 1 (id=4037):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000580)={[{@nomblk_io_submit}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})

2.772441273s ago: executing program 1 (id=4039):
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0)
read$msr(r0, 0x0, 0x0)

2.282503371s ago: executing program 1 (id=4045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

2.229643741s ago: executing program 33 (id=4045):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1.583153989s ago: executing program 3 (id=4051):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="c1", 0x1}], 0x1}}], 0x1, 0x24008001)
lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x3)
close(0x3)

1.012528518s ago: executing program 2 (id=4052):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0)
read(r0, &(0x7f0000000a00)=""/100, 0x64)

913.290508ms ago: executing program 2 (id=4053):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x9, 0x50, 0x10, "6972a16387920cfad256559f58af1ac31147a8bd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x100000004]})

669.244564ms ago: executing program 3 (id=4054):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8018000480140005800800020000000000080001"], 0x3c}}, 0x0)

579.033143ms ago: executing program 2 (id=4055):
mount$9p_rdma(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x2000000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@cache_none}]}})

502.498117ms ago: executing program 3 (id=4056):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000808, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6c733d63703835322c706172743d3078303030303030303030303030303030392c747970653dc357540e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB='\x00'/12], 0x2, 0x605, &(0x7f0000001f80)="$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")
unlink(&(0x7f00000001c0)='./file2\x00')

411.372698ms ago: executing program 2 (id=4057):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0xfffffffe)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)

411.19814ms ago: executing program 3 (id=4058):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0)
syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000480)='./file0\x00', 0x2004000, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="365ed16eb0b645d65aecced1074fd7b29ce2102e91f50ca81a575b7f028af72949ce7d1dec6c9c630a12736f35ec9768936e5ed1e35bc4b2d39587c989504827c3ad3a1114d5f1a1afe4056df5ea7adb4a2148106d7c8b692b134a5016c2fb6dc01a41483e6ba2e4494823197d3d1744b94dbd75db1aaf429cd6137dd9200bb1267e969b4a76b1b1f41bd56d16ead046661138d4e99c03c59c2d5ed8b8da", @ANYRES64], 0xfe, 0x1227, &(0x7f00000024c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x7a680000)

212.033184ms ago: executing program 2 (id=4059):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [<r4=>0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xd, 0xfffffffa, 0x1, [<r6=>0x0], [0x20000005, 0x5, 0xffffffff, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6})

1.520736ms ago: executing program 3 (id=4060):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "1c"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040)

0s ago: executing program 2 (id=4061):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x6, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3)

0s ago: executing program 2 (id=4062):
mkdir(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
set_robust_list(&(0x7f0000000140)={0x0, 0x102}, 0x18)

kernel console output (not intermixed with test programs):

14.558390][T11925] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  214.558535][T11925] EXT4-fs (loop2): no journal found
[  214.563779][T11925] EXT4-fs (loop2): can't get journal size
[  214.568603][T11925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  214.575193][T11925] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (42152!=20869)
[  214.592632][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.775879][T11936] loop2: detected capacity change from 0 to 8
[  214.784313][T11936] SQUASHFS error: zlib decompression failed, data probably corrupt
[  214.788582][T11936] SQUASHFS error: Failed to read block 0x9b: -5
[  214.791329][T11936] SQUASHFS error: Unable to read metadata cache entry [99]
[  214.794354][T11936] SQUASHFS error: Unable to read inode 0x127
[  215.105034][   T33] audit: type=1804 audit(214.957:4659): pid=11952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2690" name="/newroot/112/file0" dev="tmpfs" ino=619 res=1 errno=0
[  215.131248][T11952] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1
[  215.142244][T11952] ref_ctr increment failed for inode: 0x26b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811105bfc0
[  215.187928][T11951] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1
[  215.193338][T11951] ref_ctr decrement failed for inode: 0x26b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811105bfc0
[  215.200472][T11951] uprobe: syz.3.2690:11951 failed to unregister, leaking uprobe
[  215.364575][T11967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.383195][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.722499][T12004] set_capacity_and_notify: 1 callbacks suppressed
[  215.722508][T12004] loop2: detected capacity change from 0 to 128
[  215.730708][T12004] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  215.740068][T12004] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.890777][T12014] loop3: detected capacity change from 0 to 128
[  215.895430][T12014] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  215.911831][ T1111] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  215.978325][   T26] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  216.057226][ T5077] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  216.080536][T12018] loop3: detected capacity change from 0 to 32768
[  216.213952][ T5077] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  216.219524][ T5077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.227225][ T5077] usb 3-1: Product: syz
[  216.232060][ T5077] usb 3-1: Manufacturer: syz
[  216.235443][ T5077] usb 3-1: SerialNumber: syz
[  216.241255][ T5077] ums-karma 3-1:1.0: USB Mass Storage device detected
[  216.255004][ T5077] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  216.255004][ T5077]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  216.651856][ T5077] ums-karma 3-1:1.0: probe with driver ums-karma failed with error -5
[  216.862757][ T5686] usb 3-1: USB disconnect, device number 38
[  217.180088][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  217.185045][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: kworker/u11:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  217.185067][ T5622] Tainted: [L]=SOFTLOCKUP
[  217.185071][ T5622] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.185079][ T5622] Workqueue: hci2 hci_rx_work
[  217.185108][ T5622] Call Trace:
[  217.185114][ T5622]  <TASK>
[  217.185119][ T5622]  dump_stack_lvl+0xe8/0x150
[  217.185140][ T5622]  sysfs_create_dir_ns+0x271/0x2a0
[  217.185160][ T5622]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  217.185179][ T5622]  ? do_raw_spin_unlock+0x4d/0x210
[  217.185197][ T5622]  kobject_add_internal+0x622/0xcd0
[  217.185220][ T5622]  kobject_add+0x163/0x240
[  217.185238][ T5622]  ? __pfx_kobject_add+0x10/0x10
[  217.185258][ T5622]  ? get_device_parent+0x366/0x3a0
[  217.185275][ T5622]  device_add+0x3fa/0xb80
[  217.185292][ T5622]  hci_conn_add_sysfs+0xd5/0x210
[  217.185307][ T5622]  le_conn_complete_evt+0xfef/0x1580
[  217.185323][ T5622]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  217.185340][ T5622]  ? __mutex_unlock_slowpath+0x731/0x900
[  217.185356][ T5622]  ? skb_pull_data+0xf0/0x200
[  217.185373][ T5622]  hci_le_conn_complete_evt+0x187/0x470
[  217.185392][ T5622]  hci_event_packet+0x67a/0xf10
[  217.185411][ T5622]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  217.185426][ T5622]  ? __pfx_hci_event_packet+0x10/0x10
[  217.185443][ T5622]  ? replace_chunk+0x4e0/0xb80
[  217.185458][ T5622]  ? hci_send_to_monitor+0xe2/0x590
[  217.185471][ T5622]  hci_rx_work+0x3ee/0x1020
[  217.185490][ T5622]  ? process_scheduled_works+0xa20/0x14e0
[  217.185502][ T5622]  process_scheduled_works+0xa8e/0x14e0
[  217.185532][ T5622]  ? __pfx_process_scheduled_works+0x10/0x10
[  217.185552][ T5622]  ? assign_work+0x3cf/0x5d0
[  217.185570][ T5622]  worker_thread+0xa47/0xfb0
[  217.185600][ T5622]  kthread+0x388/0x470
[  217.185616][ T5622]  ? __pfx_worker_thread+0x10/0x10
[  217.185628][ T5622]  ? __pfx_kthread+0x10/0x10
[  217.185645][ T5622]  ret_from_fork+0x514/0xb70
[  217.185690][ T5622]  ? __pfx_ret_from_fork+0x10/0x10
[  217.185710][ T5622]  ? __switch_to+0xc89/0x1420
[  217.185729][ T5622]  ? __pfx_kthread+0x10/0x10
[  217.185748][ T5622]  ret_from_fork_asm+0x1a/0x30
[  217.185770][ T5622]  </TASK>
[  217.185857][ T5622] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  217.276763][ T5622] Bluetooth: hci2: failed to register connection device
[  217.643459][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'.
[  217.659470][T12054] netlink: 'syz.1.2738': attribute type 5 has an invalid length.
[  217.669779][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'.
[  217.682142][T12056] loop2: detected capacity change from 0 to 256
[  217.694498][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2738'.
[  217.703958][T12056] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  217.712581][T12058] netlink: 'syz.1.2738': attribute type 5 has an invalid length.
[  217.732496][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2738'.
[  217.787323][ T5671] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  217.795914][ T5671] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  217.808909][ T5671] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  217.825093][ T5671] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  217.876149][T12065] netlink: 'syz.3.2741': attribute type 1 has an invalid length.
[  217.882719][T12065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  217.945209][T12069] loop3: detected capacity change from 0 to 256
[  217.958905][T12069] FAT-fs (loop3): bogus number of FAT sectors
[  217.966184][T12069] FAT-fs (loop3): Can't find a valid FAT filesystem
[  217.993995][T12069] isofs_fill_super: bread failed, dev=loop3, iso_blknum=64, block=128
[  218.113974][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810dd93400: rx timeout, send abort
[  218.216737][ T3163] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  218.267535][T11420] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  218.370221][ T3163] usb 3-1: config 124 has an invalid interface number: 131 but max is 0
[  218.373593][ T3163] usb 3-1: config 124 has an invalid descriptor of length 0, skipping remainder of the config
[  218.378239][ T3163] usb 3-1: config 124 has no interface number 0
[  218.381154][ T3163] usb 3-1: config 124 interface 131 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  218.387212][ T3163] usb 3-1: config 124 interface 131 has no altsetting 0
[  218.393296][ T3163] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice= 9.1e
[  218.399023][ T3163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.402395][ T3163] usb 3-1: Product: syz
[  218.404274][ T3163] usb 3-1: Manufacturer: syz
[  218.406240][ T3163] usb 3-1: SerialNumber: syz
[  218.416591][T11420] usb 4-1: Using ep0 maxpacket: 16
[  218.422200][T11420] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  218.425591][T11420] usb 4-1: config 0 has no interface number 0
[  218.428669][T11420] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  218.435321][T11420] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  218.439654][T11420] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  218.443086][T11420] usb 4-1: Product: syz
[  218.444946][T11420] usb 4-1: SerialNumber: syz
[  218.451276][T11420] usb 4-1: config 0 descriptor??
[  218.469151][T11420] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input13
[  218.613789][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810dd92c00: rx timeout, send abort
[  218.619862][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810dd93400: abort rx timeout. Force session deactivation
[  218.644633][ T3163] usb 3-1: No union descriptors
[  218.652832][ T3163] usb 3-1: USB disconnect, device number 39
[  218.662142][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.668151][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.671888][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.674967][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.678163][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.683666][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.686835][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.689986][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.693086][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.696117][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  218.704973][ T5672] usb 4-1: USB disconnect, device number 9
[  218.705062][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  218.714402][ T5672] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  219.117087][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810dd92c00: abort rx timeout. Force session deactivation
[  219.374622][T12102] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xe
[  219.484177][T12108] CUSE: DEVNAME unspecified
[  219.556560][T12110] loop3: detected capacity change from 0 to 128
[  219.568663][T12110] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[  219.674100][T12107] loop2: detected capacity change from 0 to 32768
[  219.698292][T12107] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: non-device mode 0100644 with i_rdev 8796093022210
[  219.713507][T12107] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  219.721298][T12107] OCFS2: File system is now read-only.
[  219.723995][T12107] (syz.2.2761,12107,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[  219.731003][T12107] (syz.2.2761,12107,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[  219.741125][T12107] (syz.2.2761,12107,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=9, slot=0
[  219.745356][T12107] (syz.2.2761,12107,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  219.750837][T12107] (syz.2.2761,12107,1):ocfs2_mount_volume:1757 ERROR: status = -30
[  219.758082][T12107] (syz.2.2761,12107,1):ocfs2_fill_super:1177 ERROR: status = -30
[  219.875875][ T3163] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  219.966127][T12135] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.030156][ T3163] usb 4-1: config 4 has an invalid interface number: 12 but max is 0
[  220.039247][ T3163] usb 4-1: config 4 has no interface number 0
[  220.043327][ T3163] usb 4-1: config 4 interface 12 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  220.050388][ T3163] usb 4-1: config 4 interface 12 has no altsetting 0
[  220.056272][ T3163] usb 4-1: New USB device found, idVendor=0ace, idProduct=1602, bcdDevice=8c.d0
[  220.060409][ T3163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.063627][ T3163] usb 4-1: Product: syz
[  220.065295][ T3163] usb 4-1: Manufacturer: syz
[  220.067582][ T3163] usb 4-1: SerialNumber: syz
[  220.282559][ T3163] cdc_acm 4-1:4.12: More than one union descriptor, skipping ...
[  220.292586][ T3163] usb 4-1: USB disconnect, device number 10
[  220.976263][T12154] gadgetfs: bound to dummy_udc driver
[  221.225280][ T3163] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  221.235784][    C0] gadgetfs: connected
[  221.247565][ T3163] gadgetfs: disconnected
[  221.425775][    C0] gadgetfs: connected
[  221.429586][ T3163] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  221.436506][ T3163] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  221.441177][T12153] gadgetfs: suspended from state 3
[  221.443101][ T3163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.449782][T12153] gadgetfs: disconnected
[  221.468794][ T3163] usb 1-1: can't set config #1, error -71
[  221.478738][ T3163] usb 1-1: USB disconnect, device number 30
[  221.698005][T12184] loop2: detected capacity change from 0 to 4096
[  221.732805][T12185] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  221.872230][T12182] loop3: detected capacity change from 0 to 40427
[  221.885193][T12182] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  221.888650][T12182] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  221.914020][T12182] F2FS-fs (loop3): invalid crc value
[  221.989958][T12182] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  221.997403][T12182] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  222.000048][T12182] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  222.268072][T12210] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  222.270914][T12210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  222.544247][T12212] loop2: detected capacity change from 0 to 4096
[  222.556923][T12212] ntfs3(loop2): ino=3, mi_enum_attr
[  223.093704][T12236] gfs2: path_lookup on c::: returned error -2
[  223.152288][T12242] loop2: detected capacity change from 0 to 512
[  223.155375][T12242] EXT4-fs: Ignoring removed nomblk_io_submit option
[  223.175784][T12242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  223.207557][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.634598][T11420] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  223.806157][T11420] usb 3-1: unable to get BOS descriptor or descriptor too short
[  223.812035][T11420] usb 3-1: not running at top speed; connect to a high speed hub
[  223.816504][T11420] usb 3-1: config 5 has an invalid interface number: 51 but max is 0
[  223.819646][T11420] usb 3-1: config 5 has no interface number 0
[  223.823139][T11420] usb 3-1: config 5 interface 51 has no altsetting 0
[  223.829062][T11420] usb 3-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=49.7c
[  223.831913][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.835344][T11420] usb 3-1: Product: syz
[  223.838332][T11420] usb 3-1: Manufacturer: syz
[  223.840178][T11420] usb 3-1: SerialNumber: syz
[  223.906484][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2836'.
[  223.909984][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2836'.
[  224.003304][   T33] audit: type=1800 audit(223.857:4660): pid=12287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2838" name="ep_name" dev="configfs" ino=25586 res=0 errno=0
[  224.055639][T11420] safe_serial 3-1:5.51: safe_serial converter detected
[  224.068418][T11420] usb 3-1: safe_serial converter now attached to ttyUSB0
[  224.077541][T11420] usb 3-1: USB disconnect, device number 40
[  224.097190][T11420] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  224.101300][T12295] db_root: cannot open: ./my_
[  224.102697][T11420] safe_serial 3-1:5.51: device disconnected
[  224.165466][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2844'.
[  224.476023][T12331] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2857'.
[  224.844638][ T5672] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  224.995455][ T5672] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  224.998933][ T5672] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  225.006446][ T5672] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  225.011680][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.015930][ T5672] usb 3-1: Product: syz
[  225.017561][ T5672] usb 3-1: Manufacturer: syz
[  225.019324][ T5672] usb 3-1: SerialNumber: syz
[  225.023086][ T5672] usb 3-1: config 0 descriptor??
[  225.030781][ T5672] gspca_main: sunplus-2.14.0 probing 055f:c630
[  225.514527][T12345] syzkaller1: entered promiscuous mode
[  225.516403][T12345] syzkaller1: entered allmulticast mode
[  225.655432][   T31] usb 3-1: USB disconnect, device number 41
[  225.768279][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'.
[  226.280391][T12383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.380608][T12389] macvlan1: entered allmulticast mode
[  226.398860][T12389] veth1_vlan: entered allmulticast mode
[  226.405039][T12389] macvlan1: left allmulticast mode
[  226.407329][T12389] veth1_vlan: left allmulticast mode
[  226.574130][ T5686] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  226.746445][ T5686] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  226.752049][ T5686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.756410][ T5686] usb 3-1: config 0 has no interface number 0
[  226.758406][ T5686] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.762737][ T5686] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.766813][ T5686] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  226.771064][ T5686] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  226.774003][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.777792][ T5686] usb 3-1: config 0 descriptor??
[  226.979370][T12413] cgroup: subsys name conflicts with all
[  227.206994][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.210378][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.214237][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.219216][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.221390][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.223899][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.226422][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.229281][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.232124][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.235056][ T5686] holtek_mouse 0003:04D9:A04A.000D: unknown main item tag 0x0
[  227.238118][ T5686] holtek_mouse 0003:04D9:A04A.000D: item fetching failed at offset 78/235
[  227.241608][ T5686] holtek_mouse 0003:04D9:A04A.000D: hid parse failed: -22
[  227.244568][ T5686] holtek_mouse 0003:04D9:A04A.000D: probe with driver holtek_mouse failed with error -22
[  227.482411][ T5686] usb 3-1: USB disconnect, device number 42
[  227.554419][T12422] x_tables: duplicate underflow at hook 1
[  227.592979][T12424] IPv6: NLM_F_CREATE should be specified when creating new route
[  227.805311][T12432] loop3: detected capacity change from 0 to 1764
[  227.868228][T12434] loop3: detected capacity change from 0 to 1764
[  228.065081][T12450] loop3: detected capacity change from 0 to 256
[  228.121217][T12456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'.
[  228.503737][ T5672] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  228.584746][T11420] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  228.677596][ T5672] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  228.681230][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  228.684462][ T5672] usb 3-1: Product: syz
[  228.686391][ T5672] usb 3-1: SerialNumber: syz
[  228.690308][ T5672] usb 3-1: config 0 descriptor??
[  228.744381][T11420] usb 4-1: Using ep0 maxpacket: 8
[  228.750199][T11420] usb 4-1: config 0 has an invalid interface number: 70 but max is 0
[  228.753306][T11420] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.758110][T11420] usb 4-1: config 0 has no interface number 0
[  228.760518][T11420] usb 4-1: config 0 interface 70 altsetting 5 has an invalid endpoint descriptor of length 6, skipping
[  228.765569][T11420] usb 4-1: config 0 interface 70 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  228.769672][T11420] usb 4-1: config 0 interface 70 has no altsetting 0
[  228.775802][T11420] usb 4-1: Dual-Role OTG device on HNP port
[  228.778352][T11420] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e
[  228.781322][T11420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.784834][T11420] usb 4-1: Product: syz
[  228.786616][T11420] usb 4-1: Manufacturer: syz
[  228.788435][T11420] usb 4-1: SerialNumber: syz
[  228.792536][T11420] usb 4-1: config 0 descriptor??
[  228.795950][T12472] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  228.896863][ T5672] hso 3-1:0.0: Failed to find BULK eps
[  229.008620][T11420] ti_usb_3410_5052 4-1:0.70: required endpoints missing
[  229.013420][T11420] usb 4-1: USB disconnect, device number 11
[  229.099240][ T5672] usb 3-1: USB disconnect, device number 43
[  229.545352][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2931'.
[  229.820367][T12516] loop2: detected capacity change from 0 to 128
[  230.170195][T12531] loop2: detected capacity change from 0 to 128
[  230.199261][T12531] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  230.247804][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  230.296683][T12535] loop2: detected capacity change from 0 to 64
[  230.454455][   T26] wlan1: Trigger new scan to find an IBSS to join
[  230.693047][T12548] netlink: 'syz.2.2955': attribute type 1 has an invalid length.
[  231.010964][T12579] loop3: detected capacity change from 0 to 736
[  231.078584][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'.
[  231.164656][   T31] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  231.252301][T12587] loop3: detected capacity change from 0 to 32768
[  231.264184][T12587] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2972 (12587)
[  231.285747][T12587] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.290038][T12587] BTRFS info (device loop3): using crc32c checksum algorithm
[  231.318801][T12587] BTRFS info (device loop3): enabling ssd optimizations
[  231.321528][T12587] BTRFS info (device loop3): turning on async discard
[  231.323664][   T31] usb 3-1: Using ep0 maxpacket: 32
[  231.327678][T12587] BTRFS info (device loop3): enabling free space tree
[  231.330480][   T31] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  231.337896][T12587] BTRFS info (device loop3 state M): use zstd compression, level 15
[  231.338938][   T31] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  231.352003][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  231.358980][   T31] usb 3-1: config 1 has no interface number 0
[  231.363262][   T31] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  231.373473][   T31] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  231.387301][   T31] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  231.394808][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.415427][   T31] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  231.418628][T10759] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.621728][   T31] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  231.744671][T12613] loop3: detected capacity change from 0 to 128
[  231.768491][T12613] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  231.773419][T12613] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.793107][T12613] overlayfs: failed to create directory ./bus/work (errno: 28); mounting read-only
[  231.797790][T12613] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  232.030855][ T5672] usb 3-1: USB disconnect, device number 44
[  232.037176][ T5672] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  232.077634][T12623] loop3: detected capacity change from 0 to 32768
[  232.089750][T12623] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2982 (12623)
[  232.105407][T12623] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  232.109110][T12623] BTRFS info (device loop3): using crc32c checksum algorithm
[  232.180121][T12623] BTRFS info (device loop3): enabling ssd optimizations
[  232.186884][T12623] BTRFS info (device loop3): turning on async discard
[  232.190686][T12623] BTRFS info (device loop3): enabling free space tree
[  232.237687][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2993'.
[  232.264650][T10759] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  232.300911][T12657] netlink: 'syz.1.2993': attribute type 1 has an invalid length.
[  232.382313][T12660] overlayfs: failed to clone upperpath
[  232.515368][T12670] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  232.534297][T12672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'.
[  232.830192][T12698] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3013'.
[  232.933220][T12706] loop2: detected capacity change from 0 to 1024
[  233.024084][T12712] netlink: 'syz.1.3020': attribute type 10 has an invalid length.
[  233.040326][T12716] loop3: detected capacity change from 0 to 16
[  233.042777][T12716] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  233.065477][T12712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'.
[  233.149955][T12724] loop3: detected capacity change from 0 to 1764
[  233.333747][T11420] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  233.495146][T11420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.503681][T11420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.508592][T11420] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  233.521522][T11420] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  233.526524][T11420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.531748][T11420] usb 3-1: config 0 descriptor??
[  233.584547][ T5672] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  233.735662][ T5672] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  233.744229][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  233.748769][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  233.754239][ T5672] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  233.758005][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.763995][ T5672] usb 4-1: config 0 descriptor??
[  233.768830][T12735] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  233.964269][T11420] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  234.184165][ T5672] hid-multitouch 0003:1FD2:6007.000F: ignoring exceeding usage max
[  234.187227][ T5672] hid_parser_main: 55 callbacks suppressed
[  234.187236][ T5672] hid-multitouch 0003:1FD2:6007.000F: unknown main item tag 0x2
[  234.194814][ T5672] hid-multitouch 0003:1FD2:6007.000F: hidraw1: USB HID v0.05 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  234.223396][ T5672] usb 3-1: USB disconnect, device number 45
[  234.393746][T11420] usb 4-1: USB disconnect, device number 12
[  234.895471][T12762] loop2: detected capacity change from 0 to 4096
[  234.901841][T12762] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  234.940497][T12762] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  235.006144][   T33] audit: type=1326 audit(235.866:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12765 comm="syz.3.3045" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd136d9e019 code=0x0
[  235.036428][T12768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'.
[  235.040115][T12768] gre0: Master is either lo or non-ether device
[  235.403991][  T153] wlan1: Trigger new scan to find an IBSS to join
[  235.425706][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3059'.
[  235.432195][T12795] program syz.3.3058 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.518142][T12803] loop3: detected capacity change from 0 to 256
[  235.580562][T12803] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  235.587241][T12803] FAT-fs (loop3): Filesystem has been set read-only
[  235.861234][T12830] loop2: detected capacity change from 0 to 64
[  235.861289][T12828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.873949][T12830] MINIX-fs: mounting file system with errors, running fsck is recommended
[  235.881124][T12828] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  236.013954][T12836] kAFS: unable to lookup cell 'syz0'
[  236.272789][T12855] loop3: detected capacity change from 0 to 1024
[  236.485605][   T40] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  237.213789][T11420] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  237.267132][T12888] loop3: detected capacity change from 0 to 4096
[  237.286980][T12889] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.366818][T11420] usb 3-1: Using ep0 maxpacket: 32
[  237.376085][T11420] usb 3-1: unable to get BOS descriptor or descriptor too short
[  237.384709][T11420] usb 3-1: config 7 has an invalid interface number: 187 but max is 0
[  237.389464][T11420] usb 3-1: config 7 has no interface number 0
[  237.393495][T11420] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  237.399244][T11420] usb 3-1: config 7 interface 187 has no altsetting 0
[  237.415702][T11420] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  237.419686][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.423131][T11420] usb 3-1: Product: syz
[  237.427250][T11420] usb 3-1: Manufacturer: syz
[  237.429253][T11420] usb 3-1: SerialNumber: syz
[  237.642942][T11420] usb 3-1: Limiting number of CPorts to U8_MAX
[  237.658345][T11420] usb 3-1: Unknown endpoint type found, address 0x07
[  237.662636][T11420] usb 3-1: Unknown endpoint type found, address 0x03
[  237.665419][T11420] usb 3-1: Not enough endpoints found in device, aborting!
[  237.854214][ T5672] usb 3-1: USB disconnect, device number 46
[  237.885151][ T4999] Bluetooth: hci2: command 0x0406 tx timeout
[  238.426120][T12913] netlink: 'syz.3.3113': attribute type 7 has an invalid length.
[  238.429559][T12913] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3113'.
[  238.433308][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3113'.
[  238.529984][T12919] ieee802154 phy0 wpan0: encryption failed: -22
[  238.550076][T12917] syzkaller0: entered promiscuous mode
[  238.558812][T12917] syzkaller0: entered allmulticast mode
[  238.630230][T12917] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error!
[  238.633965][T12917] udc dummy_udc.0: failed to start g1: -19
[  238.642290][T12917] UDC core: g1: couldn't find an available UDC or it's busy
[  238.811634][T12930] batadv_slave_1: entered promiscuous mode
[  238.853985][ T5618] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  238.930931][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3122'.
[  239.017436][ T5618] usb 3-1: Using ep0 maxpacket: 32
[  239.022556][ T5618] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  239.029301][ T5618] usb 3-1: config 0 has no interface number 0
[  239.033834][ T5618] usb 3-1: config 0 interface 184 has no altsetting 0
[  239.045512][ T5618] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  239.049192][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.052214][ T5618] usb 3-1: Product: syz
[  239.059863][T12940] loop3: detected capacity change from 0 to 4096
[  239.063723][ T5618] usb 3-1: Manufacturer: syz
[  239.065699][ T5618] usb 3-1: SerialNumber: syz
[  239.081580][ T5618] usb 3-1: config 0 descriptor??
[  239.434604][T11420] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  240.056802][T11420] usb 4-1: config 0 interface 0 has no altsetting 0
[  240.059190][T11420] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  240.062162][T11420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.068078][T11420] usb 4-1: config 0 descriptor??
[  240.108582][ T5618] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  240.118157][ T5618] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  240.326523][ T5618] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  240.330818][ T5618] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  240.334715][ T5618] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  240.338164][ T5618] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  240.344400][ T5618] usb 3-1: USB disconnect, device number 47
[  240.500535][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.502702][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.504828][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.506835][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.508848][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.510853][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.512903][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.515030][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.517442][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.520013][T11420] kye 0003:0458:0138.0010: unknown main item tag 0x0
[  240.524129][T11420] kye 0003:0458:0138.0010: hidraw0: USB HID v0.18 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0
[  240.808513][T11420] usb 4-1: USB disconnect, device number 13
[  241.053869][   T33] audit: type=1326 audit(241.906:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.062755][   T33] audit: type=1326 audit(241.906:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.101650][   T33] audit: type=1326 audit(241.926:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.108908][   T33] audit: type=1326 audit(241.926:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.115743][   T33] audit: type=1326 audit(241.926:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.122286][   T33] audit: type=1326 audit(241.946:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.131962][   T33] audit: type=1326 audit(241.946:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.157575][   T33] audit: type=1326 audit(241.946:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.175298][   T33] audit: type=1326 audit(241.946:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.182613][   T33] audit: type=1326 audit(241.946:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.2.3134" exe="/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  241.350090][T12964] loop2: detected capacity change from 0 to 32768
[  241.370779][T12964] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 65: 381 clusters
[  241.381294][T12964] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  241.386576][T12964] OCFS2: File system is now read-only.
[  241.389127][T12964] (syz.2.3135,12964,0):ocfs2_read_locked_inode:633 ERROR: status = -30
[  241.392044][T12964] (syz.2.3135,12964,0):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  241.396900][T12964] (syz.2.3135,12964,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  241.400407][T12964] (syz.2.3135,12964,0):ocfs2_initialize_super:2195 ERROR: status = -30
[  241.403056][T12964] (syz.2.3135,12964,0):ocfs2_fill_super:1177 ERROR: status = -30
[  241.762907][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'.
[  241.814878][T12988] loop2: detected capacity change from 0 to 32768
[  241.823508][T12988] (syz.2.3142,12988,1):ocfs2_journal_addressable:1934 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  241.823526][T12988] (syz.2.3142,12988,1):ocfs2_check_volume:2429 ERROR: status = -27
[  241.840783][T12988] (syz.2.3142,12988,1):ocfs2_mount_volume:1763 ERROR: status = -27
[  241.853490][T12988] (syz.2.3142,12988,1):ocfs2_fill_super:1177 ERROR: status = -27
[  242.063785][ T5618] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  242.264927][ T5612] Bluetooth: hci2: unexpected event for opcode 0x202d
[  242.988006][ T5618] usb 4-1: Using ep0 maxpacket: 32
[  243.218664][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.223946][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.227346][ T5618] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  243.230296][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.234528][ T5618] usb 4-1: config 0 descriptor??
[  243.573722][T11420] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  243.723694][T11420] usb 3-1: Using ep0 maxpacket: 32
[  243.726704][T11420] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  243.729452][T11420] usb 3-1: config 0 has no interface number 0
[  243.731730][T11420] usb 3-1: config 0 interface 12 has no altsetting 0
[  243.737007][T11420] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  243.739827][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.742347][T11420] usb 3-1: Product: syz
[  243.744174][T11420] usb 3-1: Manufacturer: syz
[  243.745786][T11420] usb 3-1: SerialNumber: syz
[  243.773383][T11420] usb 3-1: config 0 descriptor??
[  244.055970][ T5618] koneplus 0003:1E7D:2D51.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[  244.273112][ T5672] usb 4-1: USB disconnect, device number 14
[  244.678097][T13065] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  244.747168][T13071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'.
[  244.885610][T13077] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  244.892182][T13077] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  245.216788][T13097] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  245.403906][T11420] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  245.408910][T11420] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  245.411129][T11420] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  245.413522][T11420] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  245.426518][T11420] usb 3-1: USB disconnect, device number 48
[  245.834606][T13137] input: syz0 as /devices/virtual/input/input14
[  246.179929][T13170] /dev/nullb0: Can't lookup blockdev
[  246.192650][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  246.192659][   T33] audit: type=1326 audit(247.046:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.3.3227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136d9e019 code=0x7ffc0000
[  246.211410][   T33] audit: type=1326 audit(247.056:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.3.3227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136d9e019 code=0x7ffc0000
[  246.223473][T13174] fuse: fd is not a fuse device
[  246.227374][   T33] audit: type=1326 audit(247.066:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.3.3227" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fd136d9e019 code=0x7ffc0000
[  246.242108][   T33] audit: type=1326 audit(247.066:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.3.3227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136d9e019 code=0x7ffc0000
[  246.250159][   T33] audit: type=1326 audit(247.066:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.3.3227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd136d9e019 code=0x7ffc0000
[  246.832428][T13188] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  246.849123][T13188] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  246.853135][T13188] pci 0000:00:01.0: BAR 2 [mem 0xfebf0000-0xfebf0fff]
[  246.856278][T13188] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[  246.859442][T13188] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  246.881569][T13188] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  246.883748][T13188] pci 0000:00:01.0: vgaarb: bridge control possible
[  246.885870][T13188] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  246.896888][T13188] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  246.908591][T13188] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  246.921042][T13188] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  246.938582][T13188] [drm] Found bochs VGA, ID 0xb0c5.
[  246.942621][T13188] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  246.960189][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3241'.
[  246.963831][T13210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3241'.
[  246.985462][T13188] [drm] Initialized bochs-drm 1.0.0 for 0000:00:01.0 on minor 2
[  247.107605][T13188] bochs-drm 0000:00:01.0: [drm] fb1: bochs-drmdrmfb frame buffer device
[  247.558702][T13244] overlayfs: failed to clone lowerpath
[  247.795313][T13257] 9p: Bad value for 'rfdno'
[  248.199507][   T33] audit: type=1326 audit(249.056:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.1.3269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  248.219515][   T33] audit: type=1326 audit(249.056:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.1.3269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  248.243735][   T33] audit: type=1326 audit(249.056:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.1.3269" exe="/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  248.253465][   T33] audit: type=1326 audit(249.056:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.1.3269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  248.262610][   T33] audit: type=1326 audit(249.056:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13277 comm="syz.1.3269" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  249.273033][T13318] binder: 13317:13318 unknown command 0
[  249.275487][T13318] binder: 13317:13318 ioctl c0306201 2000000001c0 returned -22
[  250.463657][ T3163] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  250.578896][T13335] xt_hashlimit: size too large, truncated to 1048576
[  250.649385][ T3163] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  250.653342][ T3163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.668594][ T3163] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[  250.883530][T13352] loop2: detected capacity change from 0 to 512
[  250.887006][T13352] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  250.905832][T13352] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3300: invalid indirect mapped block 32768 (level 2)
[  250.915681][T13352] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  250.919182][T13352] EXT4-fs (loop2): Remounting filesystem read-only
[  250.925083][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  250.927337][    C0] EXT4-fs (loop2): initial error at time 251: ext4_free_branches:1023: inode 16
[  250.930297][    C0] EXT4-fs (loop2): last error at time 251: ext4_free_branches:1023: inode 16
[  250.939280][T13352] EXT4-fs (loop2): 1 orphan inode deleted
[  250.941689][T13352] EXT4-fs (loop2): 1 truncate cleaned up
[  250.948669][T13352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.959985][T13352] EXT4-fs (loop2): shut down requested (2)
[  250.963413][T13352] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  250.994208][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.069512][ T3163] gspca_sn9c20x: Write register 1001 failed -71
[  251.074475][ T3163] gspca_sn9c20x: Device initialization failed
[  251.077135][ T3163] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71
[  251.083978][ T3163] usb 4-1: USB disconnect, device number 15
[  251.340509][T13374] loop2: detected capacity change from 0 to 24
[  251.368186][T13374] romfs: read error for inode 0x8000
[  251.439918][T13380] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input15
[  251.662361][T13397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3320'.
[  251.714106][ T5686] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  251.866399][ T5686] usb 3-1: unable to get BOS descriptor or descriptor too short
[  251.870482][ T5686] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  251.874353][ T5686] usb 3-1: config 0 has no interface number 0
[  251.876917][ T5686] usb 3-1: config 0 interface 196 has no altsetting 0
[  251.892998][ T5686] usb 3-1: New USB device found, idVendor=1de1, idProduct=f105, bcdDevice=bf.64
[  251.896924][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.902163][ T5686] usb 3-1: config 0 descriptor??
[  251.973078][T13409] lo speed is unknown, defaulting to 1000
[  252.117027][ T5686] uvcvideo 3-1:0.196: Found UVC 0.00 device <unnamed> (1de1:f105)
[  252.119571][ T5686] uvcvideo 3-1:0.196: No valid video chain found.
[  252.125485][ T5686] usb 3-1: USB disconnect, device number 49
[  252.159574][T13415] loop3: detected capacity change from 0 to 512
[  252.316503][T13423] loop3: detected capacity change from 0 to 164
[  252.334074][T13423] iso9660: Corrupted directory entry in block 4 of inode 1792
[  252.340840][T13423] iso9660: Corrupted directory entry in block 4 of inode 1792
[  252.566676][T13425] Bluetooth: hci0: unsupported parameter 255
[  252.569244][T13425] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  252.639827][T13427] xt_hashlimit: size too large, truncated to 1048576
[  252.690659][T13432] loop2: detected capacity change from 0 to 128
[  252.721048][T13432] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  252.728457][T13432] hpfs: filesystem error: improperly stopped
[  252.731032][T13432] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  252.739951][T13432] hpfs: You really don't want any checks? You are crazy...
[  252.745784][T13432] hpfs: hpfs_map_sector(): read error
[  252.752668][T13432] hpfs: code page support is disabled
[  252.756966][T13432] hpfs: hpfs_map_4sectors(): unaligned read
[  252.763337][T13432] hpfs: hpfs_map_4sectors(): unaligned read
[  252.769043][T13432] hpfs: filesystem error: unable to find root dir
[  252.779533][T13432] hpfs: hpfs_map_4sectors(): unaligned read
[  252.861324][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'.
[  253.061301][T13461] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  253.200006][T13463] loop3: detected capacity change from 0 to 32768
[  253.203017][T13463] btrfs: Deprecated parameter 'usebackuproot'
[  253.205253][T13463] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  253.209987][T13463] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3348 (13463)
[  253.216220][T13463] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  253.219822][T13463] BTRFS info (device loop3): using crc32c checksum algorithm
[  253.284150][   T32] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  253.290049][ T3163] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  253.294092][T13463] BTRFS error (device loop3): failed to load root extent
[  253.296983][T13463] BTRFS warning (device loop3): try to load backup roots slot 1
[  253.300768][ T3355] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  253.305649][T13463] BTRFS warning (device loop3): couldn't read tree root
[  253.308365][T13463] BTRFS warning (device loop3): try to load backup roots slot 2
[  253.311499][   T32] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  253.315756][T13463] BTRFS warning (device loop3): couldn't read tree root
[  253.318190][T13463] BTRFS warning (device loop3): try to load backup roots slot 3
[  253.328351][T13463] BTRFS info (device loop3): rebuilding free space tree
[  253.344717][T13463] BTRFS info (device loop3): checking UUID tree
[  253.350260][T13463] BTRFS info (device loop3): enabling ssd optimizations
[  253.352304][T13463] BTRFS info (device loop3): turning on async discard
[  253.354779][T13463] BTRFS info (device loop3): enabling free space tree
[  253.356896][T13463] BTRFS info (device loop3): force clearing of disk cache
[  253.359108][T13463] BTRFS info (device loop3): enabling auto defrag
[  253.360903][T13463] BTRFS info (device loop3): trying to use backup root at mount time
[  253.363262][T13463] BTRFS info (device loop3): use zstd compression, level 3
[  253.418530][T10759] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  253.446623][ T3163] usb 3-1: unable to get BOS descriptor or descriptor too short
[  253.461213][T13481] 9p: Bad value for 'rfdno'
[  253.464914][ T3163] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.483032][ T3163] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  253.494134][ T3163] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  253.525316][ T3163] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  253.529424][ T3163] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.540092][ T3163] usb 3-1: Product: syz
[  253.541462][ T3163] usb 3-1: Manufacturer: syz
[  253.551822][ T3163] usb 3-1: SerialNumber: syz
[  253.772110][ T3163] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor
[  253.774672][ T3163] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  253.776811][ T3163] usb 3-1: 1:1 : invalid channels 0
[  253.800584][ T3163] usb 3-1: USB disconnect, device number 50
[  253.830086][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.593752][ T3163] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  254.771369][ T3163] usb 3-1: unable to get BOS descriptor or descriptor too short
[  254.778995][ T3163] usb 3-1: unable to read config index 0 descriptor/start: -71
[  254.782085][ T3163] usb 3-1: can't read configurations, error -71
[  255.420668][T13534] x_tables: unsorted entry at hook 2
[  255.449695][T13536] loop2: detected capacity change from 0 to 256
[  255.455672][T13536] exfat: Deprecated parameter 'utf8'
[  255.459536][T13536] exfat: Deprecated parameter 'namecase'
[  255.468524][T13536] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  255.580220][T13540] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.584971][T13540] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.609841][T13540] batman_adv: batadv0: Interface deactivated: dummy0
[  255.689841][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.700865][T13540] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.823854][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.829575][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.835626][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.840879][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  255.875695][T13545] loop2: detected capacity change from 0 to 256
[  255.879094][T13545] exfat: Deprecated parameter 'namecase'
[  255.909009][T13545] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d)
[  256.218514][T13566] loop2: detected capacity change from 0 to 512
[  256.223397][T13566] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  256.230745][T13566] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349)
[  256.234952][T13566] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm syz.2.3388: Invalid inode table block 1 in block_group 0
[  256.239219][T13566] loop2: lost filesystem error report for type 5 error -117
[  256.239441][T13566] EXT4-fs (loop2): Remounting filesystem read-only
[  256.243998][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  256.244007][    C1] EXT4-fs (loop2): initial error at time 257: __ext4_get_inode_loc:4886
[  256.244017][    C1] EXT4-fs (loop2): last error at time 257: __ext4_get_inode_loc:4886
[  256.252203][T13566] EXT4-fs (loop2): get root inode failed
[  256.254092][T13566] EXT4-fs (loop2): mount failed
[  256.284762][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  256.287106][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  256.510813][T13584] loop2: detected capacity change from 0 to 256
[  256.887805][T13603] loop2: detected capacity change from 0 to 32768
[  256.918186][T13603] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  256.939477][T13603] XFS (loop2): Ending clean mount
[  256.956267][T13614] loop3: detected capacity change from 0 to 2048
[  256.987156][T13614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.997745][ T5610] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.202794][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.310011][T13633] xt_hashlimit: size too large, truncated to 1048576
[  257.317420][T13636] loop3: detected capacity change from 0 to 512
[  257.325302][T13636] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.3416: invalid block
[  257.330753][T13636] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  257.331656][T13636] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3416: invalid indirect mapped block 4294967295 (level 1)
[  257.334859][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  257.334868][    C0] EXT4-fs (loop3): initial error at time 258: ext4_get_branch:178: inode 11: block 4294967295
[  257.334883][    C0] EXT4-fs (loop3): last error at time 258: ext4_get_branch:178: inode 11: block 4294967295
[  257.349555][T13636] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  257.354781][T13636] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3416: invalid indirect mapped block 4294967295 (level 1)
[  257.362112][T13636] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  257.362552][T13636] EXT4-fs (loop3): 2 truncates cleaned up
[  257.369156][T13636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.377809][T13636] EXT4-fs (loop3): shut down requested (2)
[  257.392735][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.507632][T13646] loop3: detected capacity change from 0 to 256
[  257.510870][T13646] exfat: Deprecated parameter 'namecase'
[  257.515309][T13646] exfat: Deprecated parameter 'namecase'
[  257.523119][T13646] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  257.677033][T13650] loop2: detected capacity change from 0 to 32768
[  257.684715][T13650] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  257.690821][T13650] JBD2: Ignoring recovery information on journal
[  257.719907][T13650] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  257.774940][ T5610] ocfs2: Unmounting device (7,2) on (node local)
[  257.868759][T13658] loop3: detected capacity change from 0 to 32768
[  258.247253][T13674] loop3: detected capacity change from 0 to 4096
[  258.623754][ T5618] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  258.786790][ T5618] usb 4-1: Using ep0 maxpacket: 8
[  258.792405][ T5618] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  258.796103][ T5618] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  258.800590][ T5618] usb 4-1: config 0 has no interface number 0
[  258.809157][ T5618] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  258.816532][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.823170][ T5618] usb 4-1: Product: syz
[  258.825795][ T5618] usb 4-1: Manufacturer: syz
[  258.827719][ T5618] usb 4-1: SerialNumber: syz
[  258.834172][ T5618] usb 4-1: config 0 descriptor??
[  258.889766][T13703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3446'.
[  258.926617][T13705] loop2: detected capacity change from 0 to 16
[  258.929758][T13705] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  259.025692][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'.
[  259.029334][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3448'.
[  259.046218][T13680] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3435'.
[  259.047323][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3448'.
[  259.049620][T13680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'.
[  259.053070][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3448'.
[  259.059738][ T5618] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  259.059821][T11910] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  259.066813][T11910] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  259.068861][ T5618] uvcvideo 4-1:0.31: No valid video chain found.
[  259.074160][T11910] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  259.075972][ T5618] usb 4-1: USB disconnect, device number 16
[  259.079423][T11910] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  259.138858][T13710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.180839][T13710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.262739][T13714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  259.289540][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.632391][T13733] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  259.646653][T13733] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  259.654765][T13733] EXT4-fs (loop3): 1 truncate cleaned up
[  259.662255][T13733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.688560][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.035640][T11420] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  260.078461][T13760] EXT4-fs: Ignoring removed oldalloc option
[  260.097906][T13760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  260.107475][T13760] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.3470: invalid indirect mapped block 83886080 (level 1)
[  260.114653][T13760] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  260.115210][T13760] EXT4-fs (loop3): Remounting filesystem read-only
[  260.122094][T13760] EXT4-fs (loop3): 1 orphan inode deleted
[  260.124337][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  260.124348][    C0] EXT4-fs (loop3): initial error at time 260: ext4_free_branches:1023: inode 16
[  260.124364][    C0] EXT4-fs (loop3): last error at time 260: ext4_free_branches:1023: inode 16
[  260.137983][T13760] EXT4-fs (loop3): 1 truncate cleaned up
[  260.141953][T13760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  260.165404][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.200316][T11420] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  260.205745][T11420] usb 3-1: config 0 has no interface number 0
[  260.208034][T11420] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  260.211625][T11420] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10
[  260.216782][T11420] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024
[  260.221607][T11420] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  260.225249][T11420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.229573][T11420] usb 3-1: config 0 descriptor??
[  260.234918][T11420] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input17
[  260.399383][T13776] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.401417][T13776] EXT4-fs: inline encryption not supported
[  260.403357][T13776] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.426572][T13776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  260.441921][T11420] usb 3-1: USB disconnect, device number 53
[  260.458931][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  261.190113][T13791] EXT4-fs (loop2): Test dummy encryption mode enabled
[  261.208260][T13791] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  261.367575][T13791] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  261.468917][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  261.854427][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3493'.
[  261.870786][T13816] hsr_slave_0: left promiscuous mode
[  261.879418][T13816] hsr_slave_1: left promiscuous mode
[  261.966201][T13827] set_capacity_and_notify: 8 callbacks suppressed
[  261.966211][T13827] loop2: detected capacity change from 0 to 128
[  261.986411][T13827] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  262.007331][ T5610] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  262.076858][T13836] sit0: entered promiscuous mode
[  262.092125][T13836] netlink: 'syz.1.3502': attribute type 1 has an invalid length.
[  262.103739][ T5672] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  262.106843][T13836] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3502'.
[  262.179580][T13834] loop2: detected capacity change from 0 to 32768
[  262.184716][T13834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3500 (13834)
[  262.196332][T13834] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  262.200479][T13834] BTRFS info (device loop2): using crc32c checksum algorithm
[  262.236695][T13834] BTRFS info (device loop2): enabling ssd optimizations
[  262.240569][T13834] BTRFS info (device loop2): turning on flush-on-commit
[  262.249079][T13834] BTRFS info (device loop2): enabling free space tree
[  262.252990][T13834] BTRFS info (device loop2): enabling auto defrag
[  262.255520][ T5672] usb 4-1: Using ep0 maxpacket: 32
[  262.258678][ T5672] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[  262.263061][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.263126][T13834] BTRFS info (device loop2): use lzo compression, level 1
[  262.269539][T13834] BTRFS info (device loop2): max_inline set to 4096
[  262.285561][ T5672] gspca_main: nw80x-2.14.0 probing 055f:d001
[  262.444810][ T5610] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  262.491180][ T5672] gspca_nw80x: reg_w err -71
[  262.503300][ T5672] nw80x 4-1:16.0: probe with driver nw80x failed with error -71
[  262.519332][ T5672] usb 4-1: USB disconnect, device number 17
[  262.634769][T13873] loop2: detected capacity change from 0 to 1024
[  262.830677][T13884] loop2: detected capacity change from 0 to 512
[  262.843010][T13884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.860916][T13884] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 2365587455 (only 1 groups)
[  262.886683][ T5610] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.957816][T13892] fuse: fd is not a fuse device
[  262.999408][T13896] lo speed is unknown, defaulting to 1000
[  263.137169][T13907] loop3: detected capacity change from 0 to 4096
[  263.145369][T13907] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  263.354950][T13917] loop3: detected capacity change from 0 to 256
[  263.370732][T13917] exfat: Deprecated parameter 'utf8'
[  263.377281][T13917] exfat: Deprecated parameter 'namecase'
[  263.386694][T13917] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  263.519675][T13925] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.533378][T13930] loop3: detected capacity change from 0 to 256
[  264.401855][T13954] loop3: detected capacity change from 0 to 32768
[  264.408084][T13954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3548 (13954)
[  264.430380][T13954] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  264.438582][T13954] BTRFS info (device loop3): using sha256 checksum algorithm
[  264.503363][T13954] BTRFS info (device loop3): enabling ssd optimizations
[  264.509566][T13954] BTRFS info (device loop3): turning on async discard
[  264.514408][T13954] BTRFS info (device loop3): enabling free space tree
[  264.586366][T13954] BTRFS info (device loop3): disk added /dev/nullb0
[  264.621608][T13972] BTRFS info (device loop3): balance: start -dconvert=raid0 -mconvert=raid0
[  264.634687][T13972] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[  264.714841][T13972] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[  265.208278][T13972] BTRFS info (device loop3): found 6 extents, stage: move data extents
[  265.243875][T13972] BTRFS info (device loop3): balance: canceled
[  265.268251][T10759] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.433960][ T5672] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  265.584743][ T5672] usb 3-1: Using ep0 maxpacket: 32
[  265.592152][ T5672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.607880][ T5672] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f
[  265.616841][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.625438][ T5672] usb 3-1: Product: syz
[  265.628504][ T5672] usb 3-1: Manufacturer: syz
[  265.630544][ T5672] usb 3-1: SerialNumber: syz
[  265.633495][ T5672] usb 3-1: config 0 descriptor??
[  265.758994][T13999] batadv_slave_1: entered promiscuous mode
[  265.762518][T13998] batadv_slave_1: left promiscuous mode
[  265.846338][ T5672] usb 3-1: USB disconnect, device number 54
[  265.953745][ T5618] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  266.027103][T14005] netlink: 'syz.1.3561': attribute type 9 has an invalid length.
[  266.134756][ T5618] usb 4-1: Using ep0 maxpacket: 16
[  266.139229][ T5618] usb 4-1: unable to get BOS descriptor or descriptor too short
[  266.143316][ T5618] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  266.147430][ T5618] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  266.153451][ T5618] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  266.156981][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.160203][ T5618] usb 4-1: Product: syz
[  266.161897][ T5618] usb 4-1: Manufacturer: syz
[  266.163733][ T5618] usb 4-1: SerialNumber: syz
[  266.387022][T13996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.392597][T13996] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.416147][ T5618] cdc_ncm 4-1:1.0: bind() failure
[  266.435137][ T5618] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  266.437914][ T5618] cdc_ncm 4-1:1.1: bind() failure
[  266.452580][ T5618] usb 4-1: USB disconnect, device number 18
[  266.461872][T14010] loop2: detected capacity change from 0 to 8192
[  266.522868][T14012] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  266.813910][ T5686] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  266.955055][ T5618] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  266.977562][ T5686] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  266.983461][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.994323][ T5686] usb 3-1: config 0 descriptor??
[  267.000251][ T5686] cp210x 3-1:0.0: cp210x converter detected
[  267.108208][ T5618] usb 4-1: config index 0 descriptor too short (expected 122, got 92)
[  267.114948][ T5618] usb 4-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config
[  267.125858][ T5618] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  267.133674][ T5618] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 64
[  267.146641][ T5618] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40
[  267.150350][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.153653][ T5618] usb 4-1: Product: syz
[  267.155510][ T5618] usb 4-1: Manufacturer: syz
[  267.157489][ T5618] usb 4-1: SerialNumber: syz
[  267.162891][T13996] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  267.407921][ T5686] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71
[  267.415010][ T5686] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  267.423397][ T5686] usb 3-1: cp210x converter now attached to ttyUSB0
[  267.434931][ T5686] usb 3-1: USB disconnect, device number 55
[  267.828015][ T5618] usb 4-1: __uac_clock_find_source(): clock selector control is not readable, id 0
[  267.840979][ T5686] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  267.850523][ T5686] cp210x 3-1:0.0: device disconnected
[  267.853963][ T5618] usb 4-1: __uac_clock_find_source(): selector reported illegal value, id 0, ret 0
[  267.858241][ T5618] usb 4-1: __uac_clock_find_source(): clock selector control is not readable, id 0
[  268.151879][ T5618] usb 4-1: USB disconnect, device number 19
[  268.184998][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'.
[  268.188690][T14042] netlink: 'syz.1.3578': attribute type 15 has an invalid length.
[  268.191763][T14042] netlink: 'syz.1.3578': attribute type 25 has an invalid length.
[  268.195617][T14042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'.
[  268.220527][ T7749] udevd[7749]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  268.446072][ T1252] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  268.523896][ T5686] usb 3-1: new full-speed USB device number 56 using dummy_hcd
[  268.629543][T14066] loop3: detected capacity change from 0 to 512
[  268.635737][T14066] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  268.648268][T14066] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  268.651694][T14066] EXT4-fs (loop3): orphan cleanup on readonly fs
[  268.659168][T14066] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  268.665338][T14066] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  268.671325][T14066] EXT4-fs (loop3): 1 orphan inode deleted
[  268.682863][T14066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  268.696998][ T5686] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  268.701811][ T5686] usb 3-1: config 0 has no interface number 0
[  268.709878][ T5686] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  268.715782][ T5686] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 108, setting to 64
[  268.722543][ T5686] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  268.728529][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.730740][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.738489][ T5686] usb 3-1: config 0 descriptor??
[  268.744518][T14046] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  268.758289][ T5686] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input18
[  268.851638][T14075] loop3: detected capacity change from 0 to 4096
[  268.879517][T14076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.953188][ T5686] usb 3-1: USB disconnect, device number 56
[  269.075414][T14080] loop3: detected capacity change from 0 to 1024
[  269.084685][T14080] EXT4-fs: Ignoring removed orlov option
[  269.097869][T14080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  269.142268][T10759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.453282][T14087] loop3: detected capacity change from 0 to 40427
[  269.459831][T14087] F2FS-fs (loop3): invalid crc value
[  269.533474][T14087] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  269.549581][T14090] loop2: detected capacity change from 0 to 256
[  269.551620][T14087] F2FS-fs (loop3): f2fs_disable_checkpoint starts, unusable: 0
[  269.561022][T14087] F2FS-fs (loop3): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  269.573100][T14087] F2FS-fs (loop3): Start checkpoint disabled!
[  269.615511][T14087] F2FS-fs (loop3): f2fs_disable_checkpoint finishes, err:0
[  269.620851][T14087] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  269.656285][T14093] serio: Serial port ptm0
[  270.063787][ T5686] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  270.142061][T14106] loop3: detected capacity change from 0 to 32768
[  270.173430][T14106] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  270.205514][T14106] XFS (loop3): Ending clean mount
[  270.217730][ T5686] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  270.228320][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.239136][ T5686] usb 3-1: Product: syz
[  270.242439][ T5686] usb 3-1: Manufacturer: syz
[  270.242451][T10759] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  270.247109][ T5686] usb 3-1: SerialNumber: syz
[  270.256956][ T5686] usb 3-1: config 0 descriptor??
[  270.280150][ T5686] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  270.389791][ T5686] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  270.414541][ T5686] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  270.418360][ T5686] usb 3-1: media controller created
[  270.447938][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  270.518835][ T5686] DVB: Unable to find symbol mt352_attach()
[  270.542307][ T5686] DVB: Unable to find symbol nxt6000_attach()
[  270.545383][ T5686] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  270.552892][ T5686] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19
[  270.562178][ T5686] dvb-usb: schedule remote query interval to 1000 msecs.
[  270.566265][ T5686] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  270.571781][ T5686] dvb-usb: bulk message failed: -22 (7/0)
[  270.581853][ T5686] dvb-usb: bulk message failed: -22 (7/0)
[  270.587848][ T5686] usb 3-1: USB disconnect, device number 57
[  270.624145][ T5672] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  270.639186][ T5686] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  270.808344][ T5672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  270.812726][ T5672] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  270.820614][ T5672] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  270.824705][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.830216][ T5672] usb 4-1: Product: syz
[  270.831522][ T5672] usb 4-1: Manufacturer: syz
[  270.832926][ T5672] usb 4-1: SerialNumber: syz
[  270.839202][T14122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  270.841504][T14122] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  271.056755][ T5672] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  271.067624][ T5672] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  271.071712][ T5672] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  271.081129][ T5672] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  271.090063][ T5672] usb 4-1: USB disconnect, device number 20
[  271.633961][ T5686] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  271.783842][ T5686] usb 3-1: Using ep0 maxpacket: 8
[  271.791905][ T5686] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  271.803791][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.807183][ T5686] usb 3-1: Product: syz
[  271.809523][ T5686] usb 3-1: Manufacturer: 픷쓴绂競⩛댚此䡙ㄨꎍ옗뉓ᡥ௤榭駖ꈣ赩㌦￳ῃǥ訝잌ᐸ垌込纫৔䌿ｰ屒뤰ꂗ䢢耪ꮦ䤭蜿琚嶈↮ᠭ雮⼌ⶲ콊풗᯴꩑蟙䓒◦㽄䢪䧨㐉红宕峓⑫쎎Ꙍ觤跔鉈ꓢ櫦ᒡ息
[  271.829529][ T5686] usb 3-1: SerialNumber: syz
[  271.932025][T14166] loop3: detected capacity change from 0 to 32768
[  271.968108][T14166] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  272.002475][T14166] XFS (loop3): Ending clean mount
[  272.079400][ T5686] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  272.086174][ T5686] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  272.146446][T10759] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  272.201526][ T5686] usb 3-1: USB disconnect, device number 58
[  272.672901][T14213] loop3: detected capacity change from 0 to 2048
[  272.677523][T14213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  273.127209][ T5612] Bluetooth: hci1: unexpected event for opcode 0x0c5a
[  273.208589][T14253] loop3: detected capacity change from 0 to 4096
[  273.216111][T14253] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  273.237007][T14253] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  273.257904][   T33] audit: type=1800 audit(530.166:4687): pid=14253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3667" name="file2" dev="loop3" ino=31 res=0 errno=0
[  273.285843][T11420] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  273.444788][T11420] usb 3-1: Using ep0 maxpacket: 32
[  273.451467][T11420] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  273.455477][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.458764][T11420] usb 3-1: Product: syz
[  273.460452][T11420] usb 3-1: Manufacturer: syz
[  273.462575][T11420] usb 3-1: SerialNumber: syz
[  273.698542][T11420] usb 3-1: config 0 descriptor??
[  273.823708][ T5672] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  273.904237][T11420] airspy 3-1:0.0: usb_control_msg() failed -71 request 09
[  273.907948][T11420] airspy 3-1:0.0: Could not detect board
[  273.910035][T11420] airspy 3-1:0.0: probe with driver airspy failed with error -71
[  273.914109][T11420] usb 3-1: USB disconnect, device number 59
[  273.983660][ T5672] usb 4-1: Using ep0 maxpacket: 8
[  273.987388][ T5672] usb 4-1: config index 0 descriptor too short (expected 2075, got 27)
[  273.990876][ T5672] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  273.994209][ T5672] usb 4-1: config 0 has no interface number 0
[  273.996685][ T5672] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  274.000678][ T5672] usb 4-1: config 0 interface 200 has no altsetting 0
[  274.006320][ T5672] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  274.010213][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.013464][ T5672] usb 4-1: Product: syz
[  274.015211][ T5672] usb 4-1: Manufacturer: syz
[  274.016997][ T5672] usb 4-1: SerialNumber: syz
[  274.021077][ T5672] usb 4-1: config 0 descriptor??
[  274.236508][ T5672] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input20
[  274.249067][ T5672] usb 4-1: USB disconnect, device number 21
[  274.266128][ T5612] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  274.449523][   T33] audit: type=1800 audit(531.356:4688): pid=14281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3678" name="addr_trtype" dev="configfs" ino=32153 res=0 errno=0
[  274.592081][T14285] loop2: detected capacity change from 0 to 32768
[  274.597306][T14285] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 829a1466-aab2-4cb6-8fd1-b1d1c931b8cc
[  274.608656][T14285] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3679 (14285)
[  274.625282][T14285] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  274.628665][T14285] BTRFS info (device loop2): using sha256 checksum algorithm
[  274.697844][T14285] BTRFS info (device loop2): enabling ssd optimizations
[  274.703679][T14285] BTRFS info (device loop2): turning on async discard
[  274.713838][T14285] BTRFS info (device loop2): enabling free space tree
[  274.717798][T14285] BTRFS info (device loop2): use zlib compression, level 3
[  274.796663][ T5610] BTRFS info (device loop2): last unmount of filesystem 829a1466-aab2-4cb6-8fd1-b1d1c931b8cc
[  275.234291][T11420] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  275.386072][T11420] usb 3-1: not running at top speed; connect to a high speed hub
[  275.392866][T11420] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  275.421112][T11420] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b
[  275.427133][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.436397][T11420] usb 3-1: Product: syz
[  275.439967][T11420] usb 3-1: Manufacturer: syz
[  275.448057][T11420] usb 3-1: SerialNumber: syz
[  275.664241][T14306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.670881][T14306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.689203][T11420] usb 3-1: USB disconnect, device number 60
[  276.105852][T11420] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  276.239397][T14334] loop2: detected capacity change from 0 to 256
[  276.241874][T14334] exfat: Deprecated parameter 'utf8'
[  276.243978][T14334] exfat: Deprecated parameter 'utf8'
[  276.249753][T14334] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  276.257953][T11420] usb 4-1: config 0 has an invalid interface number: 235 but max is 0
[  276.266162][T11420] usb 4-1: config 0 has no interface number 0
[  276.270943][T11420] usb 4-1: config 0 interface 235 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.276320][T11420] usb 4-1: config 0 interface 235 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.285600][T11420] usb 4-1: config 0 interface 235 has no altsetting 0
[  276.289955][T11420] usb 4-1: New USB device found, idVendor=e57f, idProduct=ffff, bcdDevice= 0.00
[  276.299325][T11420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.314361][T11420] usb 4-1: config 0 descriptor??
[  276.392834][   T33] audit: type=1326 audit(533.296:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.402076][   T33] audit: type=1326 audit(533.296:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.410622][   T33] audit: type=1326 audit(533.296:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.419998][   T33] audit: type=1326 audit(533.296:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.433735][   T33] audit: type=1326 audit(533.296:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.452340][   T33] audit: type=1326 audit(533.296:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.459956][   T33] audit: type=1326 audit(533.296:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.470022][   T33] audit: type=1326 audit(533.296:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14341 comm="syz.1.3698" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe579e019 code=0x7ffc0000
[  276.506494][T14348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  276.511049][T14348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  276.516913][T14348] bond0 (unregistering): Released all slaves
[  276.584460][T14350] loop2: detected capacity change from 0 to 256
[  276.732354][T11420] hid-generic 0003:E57F:FFFF.0012: unbalanced collection at end of report description
[  276.741437][T11420] hid-generic 0003:E57F:FFFF.0012: probe with driver hid-generic failed with error -22
[  276.841728][T14360] loop2: detected capacity change from 0 to 4096
[  276.845159][T14360] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  276.858225][T14360] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  276.942145][T11420] usb 4-1: USB disconnect, device number 22
[  277.162664][T14366] loop2: detected capacity change from 0 to 32768
[  277.171381][T14366] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  277.179330][T14366] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.198809][T14366] XFS (loop2): Ending clean mount
[  277.217061][ T5610] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  277.540129][T14378] loop2: detected capacity change from 0 to 32768
[  277.593468][T14378] jfs_lookup: iget failed on inum 4
[  277.597717][T14378] jfs_lookup: iget failed on inum 4
[  278.216562][ T5618] kernel read not supported for file /dsp (pid: 5618 comm: kworker/1:4)
[  278.287051][ T5612] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  278.290880][ T5612] Bluetooth: hci2: Injecting HCI hardware error event
[  278.295175][ T5612] Bluetooth: hci2: hardware error 0x00
[  278.563176][T14420] loop3: detected capacity change from 0 to 32768
[  278.583719][ T5618] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  278.616709][T14420]  loop3: p1 p3 < >
[  278.650465][T14418] syz.3.3730 (14418): /proc/14419/oom_adj is deprecated, please use /proc/14419/oom_score_adj instead.
[  278.733936][ T5618] usb 3-1: Using ep0 maxpacket: 32
[  278.739777][ T5618] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  278.743204][ T5618] usb 3-1: config 0 has no interface number 0
[  278.748443][ T5618] usb 3-1: config 0 interface 184 has no altsetting 0
[  278.753017][ T5618] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  278.757071][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.760372][ T5618] usb 3-1: Product: syz
[  278.762135][ T5618] usb 3-1: Manufacturer: syz
[  278.764471][ T5618] usb 3-1: SerialNumber: syz
[  278.770508][ T5618] usb 3-1: config 0 descriptor??
[  278.917110][T14422] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  278.982572][ T5618] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  278.992218][ T5618] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  279.002205][ T5618] usb 3-1: USB disconnect, device number 61
[  279.052515][T14429] team0: Caught tx_queue_len zero misconfig
[  279.166245][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3740'.
[  279.171170][T14441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3740'.
[  279.443767][ T5618] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  279.595542][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.600035][ T5618] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  279.604758][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.615947][ T5618] usb 4-1: config 0 descriptor??
[  279.642275][T14453] loop2: detected capacity change from 0 to 1024
[  279.650708][T14453] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  279.829538][ T5618] usbhid 4-1:0.0: can't add hid device: -71
[  279.832527][ T5618] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  279.837951][ T5618] usb 4-1: USB disconnect, device number 23
[  279.953758][T11420] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  280.273920][ T5618] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  280.287925][T11420] usb 3-1: Using ep0 maxpacket: 16
[  280.293705][T11420] usb 3-1: config 251 has an invalid interface number: 202 but max is 0
[  280.297982][T11420] usb 3-1: config 251 has no interface number 0
[  280.300609][T11420] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  280.304819][T11420] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  280.308705][T11420] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  280.313410][T11420] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  280.319069][T11420] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  280.323843][T11420] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.328348][T11420] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0
[  280.332227][T11420] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  280.337498][T11420] usb 3-1: config 251 interface 202 has no altsetting 0
[  280.342617][T11420] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  280.346972][T11420] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  280.350468][T11420] usb 3-1: Product: syz
[  280.352264][T11420] usb 3-1: SerialNumber: syz
[  280.363706][ T5612] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  280.431164][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.436767][ T5618] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  280.440550][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.447027][ T5618] usb 4-1: config 0 descriptor??
[  280.579837][T11420] cxacru_cm: 149 callbacks suppressed
[  280.579856][T11420] cxacru 3-1:251.202: submit of read urb for cm 0x90 failed (-90)
[  280.586432][T11420] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02!
[  280.589844][T11420] cxacru 3-1:251.202: probe with driver cxacru failed with error -22
[  280.598598][T11420] usb 3-1: USB disconnect, device number 62
[  281.254481][ T5618] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  281.257070][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.274954][ T5618] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  281.290561][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.649066][ T5618] usb 4-1: USB disconnect, device number 24
[  281.651501][    C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  281.886990][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3783'.
[  282.708882][T14552] loop3: detected capacity change from 0 to 40427
[  282.712155][T14552] F2FS-fs: inline encryption not supported
[  282.718965][T14552] f2fs: Invalid gid '0x00000000ffffffff'
[  282.964311][T14564] loop2: detected capacity change from 0 to 256
[  283.555900][T14595] loop2: detected capacity change from 0 to 256
[  283.863293][T14610] loop2: detected capacity change from 0 to 128
[  283.877552][T14610] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  283.897500][T14610] FAT-fs (loop2): error, invalid access to FAT (entry 0x09cb9c9e)
[  283.902562][T14610] FAT-fs (loop2): Filesystem has been set read-only
[  284.144205][   T33] audit: type=1326 audit(541.056:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.161459][   T33] audit: type=1326 audit(541.056:4847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.182938][   T33] audit: type=1326 audit(541.056:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.192270][   T33] audit: type=1326 audit(541.056:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.200711][   T33] audit: type=1326 audit(541.056:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.207674][   T33] audit: type=1326 audit(541.056:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.215608][   T33] audit: type=1326 audit(541.056:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.223126][   T33] audit: type=1326 audit(541.056:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.230941][   T33] audit: type=1326 audit(541.056:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14622 comm="syz.2.3822" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7b9419e019 code=0x7ffc0000
[  284.276909][T14627] loop2: detected capacity change from 0 to 4096
[  284.300598][T14628] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.325548][T14627] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  284.340278][T14627] Remounting filesystem read-only
[  284.342319][T14627] NILFS error (device loop2): nilfs_readdir: bad page in #2
[  284.754771][T14660] loop2: detected capacity change from 0 to 256
[  284.972847][T14672] loop2: detected capacity change from 0 to 8192
[  285.263671][ T5618] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  285.413675][ T5618] usb 3-1: Using ep0 maxpacket: 32
[  285.417414][ T5618] usb 3-1: config 0 has an invalid interface number: 151 but max is 0
[  285.420831][ T5618] usb 3-1: config 0 has no interface number 0
[  285.423222][ T5618] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  285.427897][ T5618] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  285.434358][ T5618] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  285.437778][ T5618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.440989][ T5618] usb 3-1: Product: syz
[  285.442698][ T5618] usb 3-1: Manufacturer: syz
[  285.444775][ T5618] usb 3-1: SerialNumber: syz
[  285.448754][ T5618] usb 3-1: config 0 descriptor??
[  285.494573][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  285.654878][ T5618] usb 3-1: USB disconnect, device number 63
[  286.479090][T14707] loop2: detected capacity change from 0 to 32768
[  286.501727][T14707] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  286.569224][ T5610] ocfs2: Unmounting device (7,2) on (node local)
[  286.913713][T11420] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  287.063674][T11420] usb 3-1: Using ep0 maxpacket: 16
[  287.066690][T11420] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  287.069416][T11420] usb 3-1: config 0 has no interface number 0
[  287.073286][T11420] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  287.077554][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.080660][T11420] usb 3-1: Product: syz
[  287.082243][T11420] usb 3-1: Manufacturer: syz
[  287.085039][T11420] usb 3-1: SerialNumber: syz
[  287.088267][T11420] usb 3-1: config 0 descriptor??
[  287.094460][T11420] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  287.500514][T11420] gspca_spca1528: reg_w err -71
[  287.514088][T11420] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  287.519816][T11420] usb 3-1: USB disconnect, device number 64
[  288.313724][T11420] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  288.465607][T11420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.470215][T11420] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.474580][T11420] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  288.479911][T11420] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  288.483530][T11420] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.490180][T11420] usb 3-1: config 0 descriptor??
[  288.907338][T11420] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max
[  288.929834][T11420] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  289.110488][ T5686] usb 3-1: USB disconnect, device number 65
[  289.882070][T14793] loop2: detected capacity change from 0 to 32768
[  289.885288][T14793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3903 (14793)
[  289.891786][T14793] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  289.895412][T14793] BTRFS info (device loop2 state S): using crc32c checksum algorithm
[  289.913999][ T1111] BTRFS warning (device loop2 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  289.923480][   T36] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  289.934410][ T1111] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  289.940124][T14793] BTRFS error (device loop2 state ES): failed to load root free space
[  289.947610][ T1111] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5267456 mirror 1 wanted 0x22fa3277 found 0x0d9b21b0 level 0, ignored
[  289.953152][T14793] BTRFS info (device loop2 state ES): enabling ssd optimizations
[  289.956225][T14793] BTRFS info (device loop2 state ES): enabling free space tree
[  289.958643][T14793] BTRFS info (device loop2 state ES): ignoring bad roots
[  289.960856][T14793] BTRFS info (device loop2 state ES): ignoring meta csums
[  289.963011][T14793] BTRFS info (device loop2 state ES): force zlib compression, level 3
[  289.986453][ T5610] BTRFS info (device loop2 state ES): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.064508][T14809] loop2: detected capacity change from 0 to 128
[  290.071997][T14809] vfat: Unknown parameter 'shotname'
[  290.117938][T14809] loop2: detected capacity change from 0 to 256
[  290.142128][T14809] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x0f9fe206, utbl_chksum : 0xe619d30d)
[  290.453708][T11420] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  290.603747][T11420] usb 3-1: Using ep0 maxpacket: 8
[  290.609741][T11420] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  290.614338][T11420] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.617575][T11420] usb 3-1: Product: syz
[  290.619228][T11420] usb 3-1: Manufacturer: syz
[  290.621064][T11420] usb 3-1: SerialNumber: syz
[  290.625078][T11420] usb 3-1: config 0 descriptor??
[  290.842800][T11420] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  291.245760][T11420] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  291.252829][T11420] usb 3-1: USB disconnect, device number 66
[  291.316802][T14835] fuse: fd is not a fuse device
[  291.862247][   T33] kauditd_printk_skb: 15 callbacks suppressed
[  291.862261][   T33] audit: type=1807 audit(548.766:4870): action=measure func=F res=0
[  291.864398][T14854] ima: policy update failed
[  291.867404][   T33] audit: type=1802 audit(548.776:4871): pid=14855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.3923" res=0 errno=0
[  291.880260][   T33] audit: type=1802 audit(548.776:4872): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3923" res=0 errno=0
[  291.936354][T14857] loop2: detected capacity change from 0 to 2048
[  291.986012][T14857] NILFS (loop2): The specified checkpoint is not a snapshot (checkpoint number=2)
[  292.173919][T11420] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  292.269518][T14873] loop2: detected capacity change from 0 to 4096
[  292.273178][T14873] ntfs3(loop2): ino=0, mi_enum_attr
[  292.276839][T14873] ntfs3(loop2): ino=0, mi_enum_attr
[  292.278582][T14873] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  292.281467][T14873] ntfs3(loop2): ino=0, mi_enum_attr
[  292.283336][T14873] ntfs3(loop2): ino=3, mi_enum_attr
[  292.285636][T14873] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  292.329323][T11420] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.335869][T11420] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  292.345349][T11420] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  292.349592][T11420] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.353147][T11420] usb 4-1: Product: syz
[  292.355530][T11420] usb 4-1: Manufacturer: syz
[  292.357607][T11420] usb 4-1: SerialNumber: syz
[  292.583789][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.595433][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.613941][T11420] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  292.623041][T11420] usb 4-1: USB disconnect, device number 25
[  293.063758][T11420] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  293.104509][T14894] netlink: 'syz.1.3942': attribute type 39 has an invalid length.
[  293.213704][T11420] usb 4-1: Using ep0 maxpacket: 8
[  293.217968][T11420] usb 4-1: config index 0 descriptor too short (expected 301, got 72)
[  293.221417][T11420] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  293.225382][T11420] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  293.228638][T11420] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  293.232086][T11420] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  293.236392][T11420] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.240361][T11420] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  293.243230][T11420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.456998][T11420] usb 4-1: GET_CAPABILITIES returned 0
[  293.460624][T11420] usbtmc 4-1:16.0: can't read capabilities
[  293.518869][T14896] loop2: detected capacity change from 0 to 32768
[  293.523314][T14896] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3943 (14896)
[  293.534244][T14896] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  293.539330][T14896] BTRFS info (device loop2): using crc32c checksum algorithm
[  293.584197][T14896] BTRFS info (device loop2): enabling ssd optimizations
[  293.587077][T14896] BTRFS info (device loop2): turning on async discard
[  293.589703][T14896] BTRFS info (device loop2): enabling free space tree
[  293.592344][T14896] BTRFS info (device loop2): max_inline set to 4096
[  293.671818][T11420] usb 4-1: USB disconnect, device number 26
[  293.681755][ T5610] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  294.562101][T14937] loop3: detected capacity change from 0 to 32768
[  294.573430][T14937] XFS (loop3): invalid log iosize: 2 [not 12-30]
[  295.062780][T14947] loop3: detected capacity change from 0 to 32768
[  295.638155][ T5673] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  295.769391][T14979] fuse: fd is not a fuse device
[  295.805574][ T5673] usb 4-1: Using ep0 maxpacket: 32
[  295.811882][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.816350][ T5673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.822372][ T5673] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  295.828725][ T5673] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  295.832122][ T5673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.839521][ T5673] usb 4-1: config 0 descriptor??
[  295.943906][ T5686] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  296.093792][ T5686] usb 3-1: Using ep0 maxpacket: 8
[  296.097537][ T5686] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  296.102971][ T5686] usb 3-1: config 0 interface 0 has no altsetting 0
[  296.105900][ T5686] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  296.109543][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.115279][ T5686] usb 3-1: config 0 descriptor??
[  296.266036][ T5673] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0014/input/input23
[  296.441967][ T5673] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0014/input/input24
[  296.506196][ T5673] kye 0003:0458:5011.0014: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  296.550769][ T5686] hid_parser_main: 33 callbacks suppressed
[  296.550786][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.557761][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.560772][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.563437][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.567106][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.569997][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.572940][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.580477][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.583263][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.586402][ T5686] lenovo 0003:17EF:60B5.0015: unknown main item tag 0x0
[  296.596917][ T5686] lenovo 0003:17EF:60B5.0015: hidraw1: USB HID v0.0b Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0
[  296.748046][ T5673] usb 3-1: USB disconnect, device number 67
[  297.319712][    C0] kye 0003:0458:5011.0014: usb_submit_urb(ctrl) failed: -1
[  297.672922][T15002] loop2: detected capacity change from 0 to 32768
[  297.685837][T15002] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  297.707236][T15002] XFS (loop2): Ending clean mount
[  297.754341][ T5610] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  297.922220][T15018] loop2: detected capacity change from 0 to 8
[  297.926369][T15018] SQUASHFS error: Failed to read block 0x6de: -5
[  297.928559][T15018] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  297.931266][T15018] SQUASHFS error: Unable to read inode 0x11f
[  298.189208][T11420] usb 4-1: USB disconnect, device number 27
[  298.762521][T15047] overlayfs: failed to clone lowerpath
[  298.943703][T11420] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  299.123706][T11420] usb 4-1: Using ep0 maxpacket: 32
[  299.133252][T11420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.147350][T11420] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.152233][T11420] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  299.157949][T11420] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.163030][T11420] usb 4-1: config 0 descriptor??
[  299.168707][T11420] hub 4-1:0.0: USB hub found
[  299.253245][T15064] lo speed is unknown, defaulting to 1000
[  299.360686][T15060] loop2: detected capacity change from 0 to 32768
[  299.367735][T15060] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 967cf8b3-9589-4c82-8f8d-2632042ec032
[  299.371096][T15060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4009 (15060)
[  299.375190][T11420] hub 4-1:0.0: 26 ports detected
[  299.381490][T11420] hub 4-1:0.0: insufficient power available to use all downstream ports
[  299.389514][T15060] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.402085][T15060] BTRFS info (device loop2): using sha256 checksum algorithm
[  299.540910][T15060] BTRFS info (device loop2): enabling ssd optimizations
[  299.550395][T15060] BTRFS info (device loop2): turning on async discard
[  299.559486][T15060] BTRFS info (device loop2): enabling free space tree
[  299.577095][T11420] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  299.587361][T11420] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  299.604986][T11420] usbhid 4-1:0.0: can't add hid device: -71
[  299.607486][T11420] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  299.631005][ T5610] BTRFS info (device loop2): last unmount of filesystem 967cf8b3-9589-4c82-8f8d-2632042ec032
[  299.654540][T11420] usb 4-1: USB disconnect, device number 28
[  299.810554][ T5954] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  299.899157][T15109] loop2: detected capacity change from 0 to 16
[  299.911552][T15109] erofs (device loop2): mounted with root inode @ nid 36.
[  299.917727][T15109] erofs (device loop2): readahead error at folio 2 @ nid 89
[  299.949785][   T55] erofs (device loop2): failed to decompress (shifted) -EOPNOTSUPP @ pa 4096 size 4096 => 4868
[  299.968835][T15109] erofs (device loop2): failed to decompress (shifted) -EOPNOTSUPP @ pa 4096 size 4096 => 4868
[  299.974145][T15109] erofs (device loop2): read error -95 @ 1 of nid 89
[  299.976952][   T33] audit: type=1800 audit(556.886:4873): pid=15109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4024" name="file2" dev="loop2" ino=89 res=0 errno=0
[  300.137420][T15124] loop2: detected capacity change from 0 to 1024
[  300.157868][T15124] hfsplus: catalog searching failed
[  300.296918][T15135] loop2: detected capacity change from 0 to 1764
[  300.419327][T15141] v: renamed from dummy0
[  300.616648][T15146] loop2: detected capacity change from 0 to 2048
[  300.629725][T15146] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  300.914770][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.919870][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.974348][T15155] loop2: detected capacity change from 0 to 128
[  300.977932][T15155] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  301.120400][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  301.125042][T15158] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4048'.
[  301.132946][T15158] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4048'.
[  301.133386][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  301.138911][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.148486][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  301.158649][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  301.165707][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  301.170841][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  301.251725][   T33] audit: type=1326 audit(558.156:4874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15162 comm="syz.2.4049" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b9419e019 code=0x0
[  301.287693][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  301.291107][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.376820][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  301.380323][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.507474][T15156] lo speed is unknown, defaulting to 1000
[  301.633126][   T13] bridge_slave_1: left allmulticast mode
[  301.635401][   T13] bridge_slave_1: left promiscuous mode
[  301.640969][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.649964][   T13] bridge_slave_0: left allmulticast mode
[  301.651923][   T13] bridge_slave_0: left promiscuous mode
[  301.654038][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.766863][   T13] batman_adv: batadv0: Removing interface: ip6gretap0
[  301.968957][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.975906][   T13] bond0 (unregistering): Released all slaves
[  301.983134][   T13] bond1 (unregistering): Released all slaves
[  301.996493][   T13] bond2 (unregistering): Released all slaves
[  302.007637][ T5356] 8021q: adding VLAN 0 to HW filter on device eth1
[  302.118663][   T13] tipc: Disabling bearer <udp:s>
[  302.141785][   T13] tipc: Left network mode
[  302.252693][T15193] loop6: detected capacity change from 0 to 2640
[  302.271641][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.278866][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.281683][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.284690][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.287288][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.290071][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.293159][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.296422][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.299651][T15193] ldm_validate_partition_table(): Disk read failed.
[  302.301825][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.301897][ T5356] 8021q: adding VLAN 0 to HW filter on device eth2
[  302.304735][T15193] Buffer I/O error on dev loop6, logical block 0, async page read
[  302.324706][T15193] Dev loop6: unable to read RDB block 0
[  302.330294][T15193]  loop6: unable to read partition table
[  302.334453][T15193] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[  302.437397][T15195] loop6: detected capacity change from 2640 to 524288000
[  302.445818][T15156] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.450371][T15156] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.456207][T15156] bridge_slave_0: entered allmulticast mode
[  302.465186][T15156] bridge_slave_0: entered promiscuous mode
[  302.501845][ T5059] ldm_validate_partition_table(): Disk read failed.
[  302.508263][ T5059] Dev loop6: unable to read RDB block 0
[  302.514678][ T5059]  loop6: unable to read partition table
[  302.530420][T15156] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.553961][T15156] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.558644][T15156] bridge_slave_1: entered allmulticast mode
[  302.566471][T15156] bridge_slave_1: entered promiscuous mode
[  302.695455][T15208] loop3: detected capacity change from 0 to 1024
[  302.834951][T15214] loop3: detected capacity change from 0 to 8192
[  302.849238][   T33] audit: type=1800 audit(559.756:4875): pid=15214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4058" name="file1" dev="loop3" ino=1048668 res=0 errno=0
[  302.902621][T15156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.926795][T15156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.945734][ T5356] 8021q: adding VLAN 0 to HW filter on device eth3
[  303.002731][T15217] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size.
[  303.062596][T15156] team0: Port device team_slave_0 added
[  303.078878][T15156] team0: Port device team_slave_1 added
[  303.150830][T15156] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.159257][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.182381][T15156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.220452][T15156] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.226824][T15156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  303.238805][T15156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.243887][    C1] 
[  303.244689][    C1] ================================
[  303.246232][    C1] WARNING: inconsistent lock state
[  303.247740][    C1] syzkaller #0 Tainted: G             L     
[  303.249655][    C1] --------------------------------
[  303.251173][    C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.
[  303.253332][    C1] syz.2.4062/15224 [HC0[0]:SC1[1]:HE1:SE0] takes:
[  303.255354][    C1] ffff8881783f6260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250
[  303.258287][    C1] {SOFTIRQ-ON-W} state was registered at:
[  303.259977][    C1]   lock_acquire+0x106/0x350
[  303.261438][    C1]   lock_sock_nested+0x41/0x100
[  303.262949][    C1]   x25_bind+0x209/0x450
[  303.264296][    C1]   __sys_bind+0x2e3/0x410
[  303.265638][    C1]   __x64_sys_bind+0x7a/0x90
[  303.267016][    C1]   do_syscall_64+0x174/0x580
[  303.268590][    C1]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.270621][    C1] irq event stamp: 2332
[  303.271933][    C1] hardirqs last  enabled at (2332): [<ffffffff81888fb0>] __local_bh_enable_ip+0xd0/0x130
[  303.274922][    C1] hardirqs last disabled at (2331): [<ffffffff81888f51>] __local_bh_enable_ip+0x71/0x130
[  303.278070][    C1] softirqs last  enabled at (1876): [<ffffffff81889096>] do_softirq+0x76/0xd0
[  303.280771][    C1] softirqs last disabled at (2231): [<ffffffff81889c2a>] __irq_exit_rcu+0xca/0x220
[  303.283451][    C1] 
[  303.283451][    C1] other info that might help us debug this:
[  303.285904][    C1]  Possible unsafe locking scenario:
[  303.285904][    C1] 
[  303.288100][    C1]        CPU0
[  303.289117][    C1]        ----
[  303.290102][    C1]   lock(sk_lock-AF_X25);
[  303.291661][    C1]   <Interrupt>
[  303.292835][    C1]     lock(sk_lock-AF_X25);
[  303.294320][    C1] 
[  303.294320][    C1]  *** DEADLOCK ***
[  303.294320][    C1] 
[  303.296728][    C1] 2 locks held by syz.2.4062/15224:
[  303.298278][    C1]  #0: ffff88817196c088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[  303.301624][    C1]  #1: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0
[  303.304798][    C1] 
[  303.304798][    C1] stack backtrace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  303.306632][    C1] CPU: 1 UID: 0 PID: 15224 Comm: syz.2.4062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.306643][    C1] Tainted: [L]=SOFTLOCKUP
[  303.306645][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.306649][    C1] Call Trace:
[  303.306653][    C1]  <IRQ>
[  303.306656][    C1]  dump_stack_lvl+0xe8/0x150
[  303.306666][    C1]  print_usage_bug+0x28b/0x2e0
[  303.306676][    C1]  mark_lock_irq+0x410/0x420
[  303.306686][    C1]  mark_lock+0x115/0x190
[  303.306694][    C1]  __lock_acquire+0x65c/0x2cf0
[  303.306703][    C1]  ? kasan_quarantine_put+0xbb/0x1f0
[  303.306711][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.306718][    C1]  ? lock_acquire+0x106/0x350
[  303.306726][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  303.306735][    C1]  lock_acquire+0x106/0x350
[  303.306743][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  303.306752][    C1]  ? x25_kill_by_neigh+0x103/0x250
[  303.306760][    C1]  lock_sock_nested+0x41/0x100
[  303.306769][    C1]  ? x25_kill_by_neigh+0x10d/0x250
[  303.306777][    C1]  x25_kill_by_neigh+0x10d/0x250
[  303.306786][    C1]  x25_lapb_receive_frame+0x1b0/0xfb0
[  303.306793][    C1]  ? netif_receive_skb_core+0x33/0x2b0
[  303.306800][    C1]  ? netif_receive_skb_core+0x33/0x2b0
[  303.306808][    C1]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  303.306814][    C1]  netif_receive_skb_core+0x2a6/0x2b0
[  303.306822][    C1]  lapbeth_napi_poll+0x42/0x90
[  303.306831][    C1]  __napi_poll+0xaa/0x330
[  303.306840][    C1]  net_rx_action+0x61d/0xf50
[  303.306847][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  303.306855][    C1]  ? lapic_next_event+0x11/0x20
[  303.306862][    C1]  handle_softirqs+0x225/0x840
[  303.306870][    C1]  ? __irq_exit_rcu+0xca/0x220
[  303.306878][    C1]  __irq_exit_rcu+0xca/0x220
[  303.306884][    C1]  irq_exit_rcu+0x9/0x30
[  303.306890][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  303.306899][    C1]  </IRQ>
[  303.306901][    C1]  <TASK>
[  303.306903][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  303.306910][    C1] RIP: 0010:memcg1_commit_charge+0x204/0x290
[  303.306919][    C1] Code: 40 84 ed 75 5f 41 f7 c5 00 02 00 00 74 05 e8 53 95 93 ff 9c 58 a9 00 02 00 00 75 38 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc ba 01 00 00 00 4c
[  303.306925][    C1] RSP: 0000:ffffc9000349f9e8 EFLAGS: 00000286
[  303.306931][    C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: 0000000000000046
[  303.306936][    C1] RDX: 0000000000000007 RSI: ffffffff8e22f0ee RDI: ffffffff8c4bdd80
[  303.306940][    C1] RBP: 00000000000487a7 R08: ffffffff90579d37 R09: 1ffffffff20af3a6
[  303.306944][    C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: ffff88817208a7c0
[  303.306948][    C1] R13: 0000000000000246 R14: 057ff00000000000 R15: 1ffff1102e4114f8
[  303.306960][    C1]  charge_memcg+0x20e/0x2b0
[  303.306969][    C1]  __mem_cgroup_charge+0x25/0x80
[  303.306977][    C1]  do_wp_page+0x118e/0x4c70
[  303.306986][    C1]  ? __pfx_do_wp_page+0x10/0x10
[  303.306992][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.306998][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  303.307006][    C1]  handle_mm_fault+0x1490/0x3080
[  303.307014][    C1]  ? handle_mm_fault+0xec/0x3080
[  303.307021][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  303.307027][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  303.307034][    C1]  ? __pfx_do_futex+0x10/0x10
[  303.307043][    C1]  do_user_addr_fault+0xa4d/0x1340
[  303.307053][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  303.307062][    C1]  exc_page_fault+0x6a/0xc0
[  303.307069][    C1]  asm_exc_page_fault+0x26/0x30
[  303.307074][    C1] RIP: 0033:0x7f7b940517fc
[  303.307081][    C1] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83
[  303.307086][    C1] RSP: 002b:00007ffd967218c8 EFLAGS: 00010246
[  303.307091][    C1] RAX: 0000000000000000 RBX: ffffffff84d23814 RCX: 0000000000000000
[  303.307095][    C1] RDX: 0000000000001814 RSI: ffffffff84d23814 RDI: 0000000000000000
[  303.307099][    C1] RBP: 0000000000000000 R08: 00007f7b94410000 R09: 00007f7b94412000
[  303.307103][    C1] R10: 0000000084d23818 R11: 0000000000000000 R12: 00007f7b94426038
[  303.307107][    C1] R13: 0000000000000050 R14: ffffffff84d23814 R15: 00007f7b94f55720
[  303.307111][    C1]  ? bsearch+0x24/0xc0
[  303.307117][    C1]  ? bsearch+0x24/0xc0
[  303.307123][    C1]  ? bsearch+0x24/0xc0
[  303.307129][    C1]  </TASK>
[  303.321724][T15156] hsr_slave_0: entered promiscuous mode
[  303.322060][    C1] BUG: sleeping function called from invalid context at net/core/sock.c:3830
[  303.324047][T15156] hsr_slave_1: entered promiscuous mode
[  303.324886][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15224, name: syz.2.4062
[  303.375420][ T5622] Bluetooth: hci2: command tx timeout
[  303.465856][    C1] preempt_count: 100, expected: 0
[  303.467740][    C1] RCU nest depth: 1, expected: 0
[  303.469510][    C1] INFO: lockdep is turned off.
[  303.471250][    C1] Preemption disabled at:
[  303.471256][    C1] [<ffffffff818891ab>] handle_softirqs+0xab/0x840
[  303.475733][    C1] CPU: 1 UID: 0 PID: 15224 Comm: syz.2.4062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.475751][    C1] Tainted: [L]=SOFTLOCKUP
[  303.475755][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.475763][    C1] Call Trace:
[  303.475768][    C1]  <IRQ>
[  303.475773][    C1]  dump_stack_lvl+0xe8/0x150
[  303.475791][    C1]  __might_resched+0x378/0x4d0
[  303.475806][    C1]  ? handle_softirqs+0xab/0x840
[  303.475816][    C1]  lock_sock_nested+0x56/0x100
[  303.475830][    C1]  x25_kill_by_neigh+0x10d/0x250
[  303.475846][    C1]  x25_lapb_receive_frame+0x1b0/0xfb0
[  303.475856][    C1]  ? netif_receive_skb_core+0x33/0x2b0
[  303.475870][    C1]  ? netif_receive_skb_core+0x33/0x2b0
[  303.475883][    C1]  ? __pfx_x25_lapb_receive_frame+0x10/0x10
[  303.475894][    C1]  netif_receive_skb_core+0x2a6/0x2b0
[  303.475910][    C1]  lapbeth_napi_poll+0x42/0x90
[  303.475923][    C1]  __napi_poll+0xaa/0x330
[  303.475939][    C1]  net_rx_action+0x61d/0xf50
[  303.475960][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  303.475974][    C1]  ? lapic_next_event+0x11/0x20
[  303.475987][    C1]  handle_softirqs+0x225/0x840
[  303.475999][    C1]  ? __irq_exit_rcu+0xca/0x220
[  303.476011][    C1]  __irq_exit_rcu+0xca/0x220
[  303.476023][    C1]  irq_exit_rcu+0x9/0x30
[  303.476034][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  303.476046][    C1]  </IRQ>
[  303.476050][    C1]  <TASK>
[  303.476054][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  303.476067][    C1] RIP: 0010:memcg1_commit_charge+0x204/0x290
[  303.476081][    C1] Code: 40 84 ed 75 5f 41 f7 c5 00 02 00 00 74 05 e8 53 95 93 ff 9c 58 a9 00 02 00 00 75 38 41 f7 c5 00 02 00 00 74 01 fb 48 83 c4 08 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc ba 01 00 00 00 4c
[  303.476091][    C1] RSP: 0000:ffffc9000349f9e8 EFLAGS: 00000286
[  303.476103][    C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: 0000000000000046
[  303.476111][    C1] RDX: 0000000000000007 RSI: ffffffff8e22f0ee RDI: ffffffff8c4bdd80
[  303.476119][    C1] RBP: 00000000000487a7 R08: ffffffff90579d37 R09: 1ffffffff20af3a6
[  303.476127][    C1] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: ffff88817208a7c0
[  303.476134][    C1] R13: 0000000000000246 R14: 057ff00000000000 R15: 1ffff1102e4114f8
[  303.476147][    C1]  charge_memcg+0x20e/0x2b0
[  303.476162][    C1]  __mem_cgroup_charge+0x25/0x80
[  303.476174][    C1]  do_wp_page+0x118e/0x4c70
[  303.476187][    C1]  ? __pfx_do_wp_page+0x10/0x10
[  303.476195][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.476207][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  303.476221][    C1]  handle_mm_fault+0x1490/0x3080
[  303.476236][    C1]  ? handle_mm_fault+0xec/0x3080
[  303.476249][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  303.476259][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  303.476273][    C1]  ? __pfx_do_futex+0x10/0x10
[  303.476288][    C1]  do_user_addr_fault+0xa4d/0x1340
[  303.476306][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  303.476322][    C1]  exc_page_fault+0x6a/0xc0
[  303.476334][    C1]  asm_exc_page_fault+0x26/0x30
[  303.476344][    C1] RIP: 0033:0x7f7b940517fc
[  303.476354][    C1] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83
[  303.476364][    C1] RSP: 002b:00007ffd967218c8 EFLAGS: 00010246
[  303.476374][    C1] RAX: 0000000000000000 RBX: ffffffff84d23814 RCX: 0000000000000000
[  303.476381][    C1] RDX: 0000000000001814 RSI: ffffffff84d23814 RDI: 0000000000000000
[  303.476388][    C1] RBP: 0000000000000000 R08: 00007f7b94410000 R09: 00007f7b94412000
[  303.476396][    C1] R10: 0000000084d23818 R11: 0000000000000000 R12: 00007f7b94426038
[  303.476403][    C1] R13: 0000000000000050 R14: ffffffff84d23814 R15: 00007f7b94f55720
[  303.476411][    C1]  ? bsearch+0x24/0xc0
[  303.476422][    C1]  ? bsearch+0x24/0xc0
[  303.476432][    C1]  ? bsearch+0x24/0xc0
[  303.476443][    C1]  </TASK>
[  303.479751][   T13] hsr_slave_0: left promiscuous mode
[  303.634491][   T13] hsr_slave_1: left promiscuous mode
[  303.637492][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  303.640291][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.649430][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.652305][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.662716][   T13] veth1_vlan: left promiscuous mode
[  303.782076][   T13] team0 (unregistering): Port device team_slave_1 removed
[  303.788309][   T13] team0 (unregistering): Port device team_slave_0 removed
[  303.845073][ T5356] 8021q: adding VLAN 0 to HW filter on device eth4
[  304.079634][   T13] IPVS: stop unused estimator thread 0...
[  304.146184][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.174379][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.218071][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.266791][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  304.317325][   T13] bridge_slave_1: left allmulticast mode
[  304.319201][   T13] bridge_slave_1: left promiscuous mode
[  304.321047][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.324840][   T13] bridge_slave_0: left allmulticast mode
[  304.327028][   T13] bridge_slave_0: left promiscuous mode
[  304.329456][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.334230][   T13] bridge_slave_1: left allmulticast mode
[  304.336530][   T13] bridge_slave_1: left promiscuous mode
[  304.338824][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.342470][   T13] bridge_slave_0: left allmulticast mode
[  304.348554][   T13] bridge_slave_0: left promiscuous mode
[  304.351042][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.372826][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.377151][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  304.380353][   T13] bond0 (unregistering): Released all slaves
[  304.465721][   T13] bond2 (unregistering): (slave gretap1): Releasing active interface
[  304.495466][   T13] bond1 (unregistering): Released all slaves
[  304.503056][   T13] bond2 (unregistering): Released all slaves
[  304.518692][   T13] bond3 (unregistering): Released all slaves
[  304.587887][   T13] tipc: Left network mode
[  304.624135][   T13] rxrpc: Leaked peer 121 {1} 127.0.0.1:7003
[  304.632235][ T5356] 8021q: adding VLAN 0 to HW filter on device eth6
[  304.741971][   T13] hsr_slave_0: left promiscuous mode
[  304.744655][   T13] hsr_slave_1: left promiscuous mode
[  304.747260][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.749858][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.755867][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.758340][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.760739][   T13] batman_adv: batadv0: Removing interface: v
[  304.779918][   T13] team0 (unregistering): Port device team_slave_1 removed
[  304.786038][   T13] team0 (unregistering): Port device team_slave_0 removed
[  304.959672][   T13] team0 (unregistering): Port device team_slave_1 removed
[  304.969642][   T13] team0 (unregistering): Port device team_slave_0 removed
[  305.019756][ T5356] 8021q: adding VLAN 0 to HW filter on device eth5
[  305.106379][ T5356] 8021q: adding VLAN 0 to HW filter on device eth8
[  305.200671][ T5356] 8021q: adding VLAN 0 to HW filter on device eth7
[  305.390580][   T13] IPVS: stop unused estimator thread 0...
