last executing test programs:

7.580572242s ago: executing program 2 (id=928):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000240)={{0x7, 0x5, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

7.453850822s ago: executing program 2 (id=930):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setregid(0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
getpeername$qrtr(r7, &(0x7f0000000040), &(0x7f0000000300)=0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070a010300024000"/28], 0x1c}}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="000000f9b0d41c6120d6cf", 0xb, 0x200000000000}])

5.333058341s ago: executing program 2 (id=948):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x284, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f00000004c0)='./bus/file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x0)

5.280692375s ago: executing program 4 (id=949):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000500), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xd000941e, &(0x7f00000006c0)={"00001f000000ab62af6300"})

5.037762655s ago: executing program 2 (id=954):
r0 = epoll_create(0x6)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r1, r2, 0x6, 0x0, @val=@tcx={@void, @value}}, 0x40)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r4, 0x6, 0x0, @void}, 0x10)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = dup2(r0, r5)
close_range(r6, 0xffffffffffffffff, 0x0)

4.774687538s ago: executing program 3 (id=958):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x204, 0x2)
r1 = dup(r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setregid(0x0, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r5)
sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
getpeername$qrtr(r7, &(0x7f0000000040), &(0x7f0000000300)=0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070a010300024000"/28], 0x1c}}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x20, &(0x7f0000001140)=<r10=>0x0)
io_submit(r10, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r9, &(0x7f00000000c0)="000000f9b0d41c6120d6cf", 0xb, 0x200000000000}])

4.706087844s ago: executing program 2 (id=959):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"})
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x985)
sendfile(0xffffffffffffffff, r2, 0x0, 0x80000000)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002480)={{}, 0x0, 0x0, @unused, @subvolid=0x3})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0389424, 0x0)

4.007799242s ago: executing program 1 (id=962):
r0 = syz_open_dev$vbi(&(0x7f0000000640), 0x3, 0x2)
ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x6, 0x4, '\x00', &(0x7f0000000180)})

3.839397537s ago: executing program 1 (id=963):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5})
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00dd777d1a0bdf1f93e99155d234b582f647f409197d84f949084582fb9db8bebf9e0cca79f0566173d31bf6ca7d00d1"], 0x1, 0xa0b, &(0x7f0000000b00)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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")
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x1, 0x0, 0x4, 0x8, 0x3f}, 0x20)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_clone3(&(0x7f00000002c0)={0x80100000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58)
mmap$qrtrtun(&(0x7f000073e000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)

3.608880726s ago: executing program 4 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname(r0, 0x0, &(0x7f0000000d00))

2.637780497s ago: executing program 0 (id=969):
r0 = socket$inet6(0xa, 0x3, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3, 0x21eae}}, 0x20}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x7, 0x2, 0xb}}]}, 0x40}}, 0x0)
r4 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, r3})
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

2.428007985s ago: executing program 4 (id=970):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x10, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xe2)

2.303271996s ago: executing program 3 (id=971):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000100)={0x0, 0x2, {0xffffffffffffffff, 0x3, 0x8, 0x0, 0x9}, 0x10001})

2.176846106s ago: executing program 3 (id=972):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)
dup3(r0, r1, 0x0)
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"})

2.070658546s ago: executing program 3 (id=973):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000ac0)={0x0, 0x15, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.041051428s ago: executing program 0 (id=974):
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000004d0000000000000000000000000000000000000023285dcd", 0x1c, 0xffffffffffffffff)

1.951303545s ago: executing program 1 (id=975):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.876761392s ago: executing program 2 (id=976):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000740)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.864811563s ago: executing program 0 (id=977):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r3, 0x6, 0x0, 0x800, 0xea54, 0x8}, &(0x7f00000000c0)=0x14)

1.856856283s ago: executing program 4 (id=978):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801)
sendmmsg$inet6(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xc, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr={{0x18, 0x29, 0x39, {0x2f, 0x0, 0x1, 0x83}}}], 0x18}}], 0x2, 0x800)

1.740833743s ago: executing program 0 (id=979):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000717754b7f7729b"], 0x24}}, 0x0)

1.720542675s ago: executing program 4 (id=980):
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000080))
socket(0xa, 0x2, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4)
bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x7, 0x0, 0x699, 0x38d, 0x1, 0xffffffff7fffffff, 0x8, 0x3}, 0x0, &(0x7f00000000c0)={0x7ff, 0xfffffffffffffff9, 0x1200000000000000, 0x6, 0x67, 0x24d, 0xc, 0x9}, &(0x7f0000000100), 0x0)

1.66393634s ago: executing program 1 (id=981):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.588269196s ago: executing program 0 (id=982):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0xd})

1.451482907s ago: executing program 0 (id=983):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x2, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x9, 0x6066}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x5, 0x2}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xfffc, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a00)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

1.382187303s ago: executing program 1 (id=984):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8)

1.107732206s ago: executing program 4 (id=985):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000003c0)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@noenospc_debug}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5})
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00dd777d1a0bdf1f93e99155d234b582f647f409197d84f949084582fb9db8bebf9e0cca79f0566173d31bf6ca7d00d1"], 0x1, 0xa0b, &(0x7f0000000b00)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nogrpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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")
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x1, 0x1, 0x0, 0x4, 0x8, 0x3f}, 0x20)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_clone3(&(0x7f00000002c0)={0x80100000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x1}, 0x58)
mmap$qrtrtun(&(0x7f000073e000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r0, 0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)

489.982778ms ago: executing program 1 (id=986):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = accept(r0, 0x0, 0x0)
sendto$inet(r1, &(0x7f0000000180)="200b5fefbcc15d", 0x7, 0x4000010, 0x0, 0x0)
recvfrom(r2, &(0x7f0000000300)=""/130, 0x82, 0x10141, 0x0, 0x0)

148.992527ms ago: executing program 3 (id=987):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x39d0, 0xf)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x16, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$packet(r0, &(0x7f00000002c0)="913dcf3296db5d6d52d2f3b42d66", 0xe, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000)

0s ago: executing program 3 (id=988):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x7, 0x1, 0x4}, 0x10)

kernel console output (not intermixed with test programs):

 on: batadv_slave_1
[  181.151284][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.164113][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.183798][ T3614] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.194759][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.208666][ T4632] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.215119][ T3614] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  181.228743][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.239538][ T4632] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  181.239588][ T4632] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  181.239615][ T4632] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.251477][ T4632] usb 3-1: config 0 descriptor??
[  181.279255][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.308232][ T3614] usb 5-1: config 0 descriptor??
[  181.321027][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.358494][ T3614] pwc: Askey VC010 type 2 USB webcam detected.
[  181.367324][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.383844][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.404129][ T5673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.415560][ T5673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.434439][ T5673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.484895][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.506561][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.546360][ T5673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.565226][ T5673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.584336][ T5673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.604612][ T5673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.633098][ T5773] netlink: 2016 bytes leftover after parsing attributes in process `syz.2.476'.
[  181.653110][ T5773] netlink: 'syz.2.476': attribute type 1 has an invalid length.
[  181.795463][ T3614] pwc: recv_control_msg error -32 req 02 val 2b00
[  181.856112][ T3614] pwc: recv_control_msg error -32 req 02 val 2700
[  181.885841][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.895310][ T3614] pwc: recv_control_msg error -32 req 02 val 2c00
[  181.902961][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.945288][ T3614] pwc: recv_control_msg error -32 req 04 val 1000
[  181.959023][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  181.982952][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.003713][ T3614] pwc: recv_control_msg error -32 req 04 val 1300
[  182.051044][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.059501][ T3614] pwc: recv_control_msg error -32 req 04 val 1400
[  182.087077][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.105303][ T3614] pwc: recv_control_msg error -32 req 02 val 2000
[  182.155166][ T3614] pwc: recv_control_msg error -32 req 02 val 2100
[  182.216407][ T3614] pwc: recv_control_msg error -32 req 04 val 1500
[  182.262914][ T3614] pwc: recv_control_msg error -32 req 02 val 2500
[  182.327541][ T5788] netlink: 16 bytes leftover after parsing attributes in process `syz.0.481'.
[  182.355763][ T4174] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  182.478444][ T5793] cgroup: Unknown subsys name 'fowner'
[  182.535330][ T3614] pwc: recv_control_msg error -71 req 02 val 2600
[  182.557227][ T3614] pwc: recv_control_msg error -71 req 02 val 2900
[  182.575173][ T3614] pwc: recv_control_msg error -71 req 02 val 2800
[  182.595219][ T3614] pwc: recv_control_msg error -71 req 04 val 1100
[  182.615172][ T3614] pwc: recv_control_msg error -71 req 04 val 1200
[  182.642404][ T3614] pwc: Registered as video71.
[  182.683544][ T3614] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20
[  182.740108][ T3614] usb 5-1: USB disconnect, device number 18
[  182.755253][ T4174] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  182.775618][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.786185][ T4380] Bluetooth: hci4: command 0x0419 tx timeout
[  182.824378][ T5803] binder: 5802:5803 ioctl c018620c 20000040 returned -22
[  182.838198][ T4174] usb 4-1: config 0 descriptor??
[  183.345285][ T4174] hackrf 4-1:0.0: Board ID: 00
[  183.350248][ T4174] hackrf 4-1:0.0: Firmware version: 
[  183.373221][ T4174] hackrf 4-1:0.0: Registered as swradio16
[  183.400004][ T4174] hackrf 4-1:0.0: Registered as swradio17
[  183.419269][ T4174] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  183.523766][ T4174] usb 3-1: USB disconnect, device number 12
[  183.555422][ T3614] usb 4-1: USB disconnect, device number 11
[  184.025113][ T4174] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  184.235223][ T3615] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  184.305149][ T4174] usb 3-1: Using ep0 maxpacket: 16
[  184.325205][ T4825] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  184.425264][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.444874][ T4174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.456074][ T4174] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  184.476428][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.503426][ T4174] usb 3-1: config 0 descriptor??
[  184.545272][ T3615] usb 1-1: Using ep0 maxpacket: 32
[  184.685142][ T3615] usb 1-1: config 0 has no interfaces?
[  184.695364][ T4825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.721058][ T4825] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  184.742131][ T4825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.772926][ T4825] usb 5-1: config 0 descriptor??
[  184.817504][ T4825] pwc: Askey VC010 type 2 USB webcam detected.
[  184.885253][ T3615] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  184.894738][ T3615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.935120][ T3615] usb 1-1: Product: syz
[  184.939362][ T3615] usb 1-1: Manufacturer: syz
[  184.943988][ T3615] usb 1-1: SerialNumber: syz
[  184.972946][ T3615] usb 1-1: config 0 descriptor??
[  185.000424][ T4174] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review
[  185.038464][ T4318] handle_bad_sector: 23093 callbacks suppressed
[  185.038483][ T4318] attempt to access beyond end of device
[  185.038483][ T4318] loop0: rw=524288, want=52368, limit=64
[  185.045201][ T4825] pwc: send_video_command error -71
[  185.072700][ T4174] bigben 0003:146B:0902.0004: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.2-1/input0
[  185.080214][ T4825] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  185.100684][ T4825] Philips webcam: probe of 5-1:0.0 failed with error -71
[  185.105208][ T4318] attempt to access beyond end of device
[  185.105208][ T4318] loop0: rw=524288, want=52376, limit=64
[  185.121336][ T4174] bigben 0003:146B:0902.0004: not enough values in HID_OUTPUT_REPORT 0 field 0
[  185.142056][ T4825] usb 5-1: USB disconnect, device number 19
[  185.154855][ T4174] bigben 0003:146B:0902.0004: no output report found
[  185.162048][ T4318] attempt to access beyond end of device
[  185.162048][ T4318] loop0: rw=524288, want=52384, limit=64
[  185.192204][ T4318] attempt to access beyond end of device
[  185.192204][ T4318] loop0: rw=524288, want=52392, limit=64
[  185.227857][ T4174] usb 3-1: USB disconnect, device number 13
[  185.247712][ T4318] attempt to access beyond end of device
[  185.247712][ T4318] loop0: rw=524288, want=52400, limit=64
[  185.278329][ T4318] attempt to access beyond end of device
[  185.278329][ T4318] loop0: rw=524288, want=52408, limit=64
[  185.308164][ T4318] attempt to access beyond end of device
[  185.308164][ T4318] loop0: rw=524288, want=52416, limit=64
[  185.319722][ T3614] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  185.332683][ T4318] attempt to access beyond end of device
[  185.332683][ T4318] loop0: rw=524288, want=52424, limit=64
[  185.362575][ T4318] attempt to access beyond end of device
[  185.362575][ T4318] loop0: rw=524288, want=52432, limit=64
[  185.377315][ T4318] attempt to access beyond end of device
[  185.377315][ T4318] loop0: rw=524288, want=52440, limit=64
[  185.567442][ T5863] x_tables: ip_tables: udp.0 match: invalid size 16 (kernel) != (user) 24
[  185.625129][ T4825] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  185.695192][ T3614] usb 2-1: config 1 has an invalid interface number: 142 but max is 0
[  185.706706][ T3614] usb 2-1: config 1 has no interface number 0
[  185.713039][ T3614] usb 2-1: config 1 interface 142 has no altsetting 0
[  185.846845][ T5869] loop2: detected capacity change from 0 to 1024
[  185.876163][ T3614] usb 2-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=c6.7f
[  185.893617][ T3614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.911239][ T3614] usb 2-1: Product: syz
[  185.929509][ T5869] EXT4-fs (loop2): Ignoring removed orlov option
[  185.938670][ T3614] usb 2-1: Manufacturer: syz
[  185.952253][ T3614] usb 2-1: SerialNumber: syz
[  185.955199][ T5869] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  186.005418][ T4825] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.028105][ T4825] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  186.042097][ T5869] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  186.045074][ T4825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.084025][ T4825] usb 5-1: config 0 descriptor??
[  186.130847][ T4825] pwc: Askey VC010 type 2 USB webcam detected.
[  186.298051][ T3614] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  186.333404][ T3614] usb 2-1: selecting invalid altsetting 0
[  186.373593][ T3614] usb 2-1: USB disconnect, device number 9
[  186.382801][ T2148] pvrusb2: control-write URB failure, status=-71
[  186.391063][ T2148] pvrusb2: Device being rendered inoperable
[  186.406204][ T2148] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  186.441240][ T2148] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  186.565153][ T4825] pwc: recv_control_msg error -32 req 02 val 2b00
[  186.605142][ T4825] pwc: recv_control_msg error -32 req 02 val 2700
[  186.645315][ T4825] pwc: recv_control_msg error -32 req 02 val 2c00
[  186.685308][ T4825] pwc: recv_control_msg error -32 req 04 val 1000
[  186.725376][ T4825] pwc: recv_control_msg error -32 req 04 val 1300
[  186.785523][ T4825] pwc: recv_control_msg error -32 req 04 val 1400
[  186.835148][ T4825] pwc: recv_control_msg error -32 req 02 val 2000
[  186.895214][ T4825] pwc: recv_control_msg error -32 req 02 val 2100
[  186.910474][ T3614] usb 1-1: USB disconnect, device number 8
[  186.935259][ T4825] pwc: recv_control_msg error -32 req 04 val 1500
[  186.985233][ T4825] pwc: recv_control_msg error -32 req 02 val 2500
[  187.118456][ T5893] netlink: 40 bytes leftover after parsing attributes in process `syz.1.526'.
[  187.144298][ T5875] loop2: detected capacity change from 0 to 32768
[  187.255100][ T4825] pwc: recv_control_msg error -71 req 02 val 2600
[  187.275557][ T4825] pwc: recv_control_msg error -71 req 02 val 2900
[  187.315387][ T4825] pwc: recv_control_msg error -71 req 02 val 2800
[  187.340241][ T4825] pwc: recv_control_msg error -71 req 04 val 1100
[  187.397641][ T4825] pwc: recv_control_msg error -71 req 04 val 1200
[  187.415226][ T4825] pwc: Registered as video71.
[  187.445154][ T4825] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21
[  187.505049][ T5711] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  187.513919][ T4825] usb 5-1: USB disconnect, device number 20
[  187.905512][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.930454][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.940632][ T3615] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  187.958635][ T5711] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  187.978892][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.006106][ T5711] usb 4-1: config 0 descriptor??
[  188.128673][ T4825] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  188.195047][ T3615] usb 3-1: Using ep0 maxpacket: 16
[  188.335234][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.365191][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.386779][ T3615] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  188.393416][ T4825] usb 5-1: Using ep0 maxpacket: 32
[  188.415154][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.447570][ T3615] usb 3-1: config 0 descriptor??
[  188.514079][ T5711] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  188.675270][ T4825] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  188.688801][ T4825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.707255][ T4825] usb 5-1: Product: syz
[  188.727642][ T4825] usb 5-1: Manufacturer: syz
[  188.732287][ T4825] usb 5-1: SerialNumber: syz
[  188.761131][ T4825] usb 5-1: config 0 descriptor??
[  188.818242][ T4825] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  188.852562][ T4177] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  188.949034][ T3615] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0006/input/input22
[  189.078257][ T3615] appleir 0003:05AC:8241.0006: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  189.105148][ T4177] usb 1-1: Using ep0 maxpacket: 32
[  189.235630][ T4177] usb 1-1: config 1 interface 0 has no altsetting 0
[  189.495526][ T4177] usb 1-1: language id specifier not provided by device, defaulting to English
[  189.551512][ T5935] ip6t_srh: unknown srh invflags 4000
[  189.773550][ T1077] usb 3-1: USB disconnect, device number 14
[  189.825214][ T4177] usb 1-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.40
[  189.834313][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.876100][ T4177] usb 1-1: Product: syz
[  189.882987][ T4177] usb 1-1: Manufacturer: syz
[  189.895447][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'.
[  189.896162][ T4177] usb 1-1: SerialNumber: syz
[  190.046051][ T4318] handle_bad_sector: 24146 callbacks suppressed
[  190.046075][ T4318] attempt to access beyond end of device
[  190.046075][ T4318] loop0: rw=524288, want=49392, limit=64
[  190.081756][ T4318] attempt to access beyond end of device
[  190.081756][ T4318] loop0: rw=524288, want=49400, limit=64
[  190.102987][ T4318] attempt to access beyond end of device
[  190.102987][ T4318] loop0: rw=524288, want=49408, limit=64
[  190.123927][ T4318] attempt to access beyond end of device
[  190.123927][ T4318] loop0: rw=524288, want=49416, limit=64
[  190.144161][ T4318] attempt to access beyond end of device
[  190.144161][ T4318] loop0: rw=524288, want=49424, limit=64
[  190.159476][ T4318] attempt to access beyond end of device
[  190.159476][ T4318] loop0: rw=524288, want=49432, limit=64
[  190.172209][ T4318] attempt to access beyond end of device
[  190.172209][ T4318] loop0: rw=524288, want=49440, limit=64
[  190.184336][ T4318] attempt to access beyond end of device
[  190.184336][ T4318] loop0: rw=524288, want=49448, limit=64
[  190.202993][ T4318] attempt to access beyond end of device
[  190.202993][ T4318] loop0: rw=524288, want=49456, limit=64
[  190.216468][ T4318] attempt to access beyond end of device
[  190.216468][ T4318] loop0: rw=524288, want=49464, limit=64
[  190.435450][ T4177] usbhid 1-1:1.0: can't add hid device: -71
[  190.449343][ T4177] usbhid: probe of 1-1:1.0 failed with error -71
[  190.489414][ T4177] usb 1-1: USB disconnect, device number 9
[  190.895261][ T5711] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device
[  190.902705][ T5711] pyra 0003:1E7D:2CF6.0005: couldn't install mouse
[  190.933806][ T5711] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71
[  190.965265][ T5711] usb 4-1: USB disconnect, device number 12
[  191.168228][ T5949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  191.539941][ T5956] syz.2.550 uses obsolete (PF_INET,SOCK_PACKET)
[  191.925194][ T4825] gspca_stk1135: reg_w 0x351 err -71
[  191.932959][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  191.958950][ T4825] gspca_stk1135: Sensor write failed
[  191.978963][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.008943][ T4825] gspca_stk1135: Sensor write failed
[  192.029319][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.052630][ T4825] gspca_stk1135: Sensor read failed
[  192.075747][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.101285][ T4825] gspca_stk1135: Sensor read failed
[  192.122505][ T4825] gspca_stk1135: Detected sensor type unknown (0x0)
[  192.148027][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.172290][ T4825] gspca_stk1135: Sensor read failed
[  192.194135][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.230817][ T4825] gspca_stk1135: Sensor read failed
[  192.254200][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.277680][ T4825] gspca_stk1135: Sensor write failed
[  192.298510][ T4825] gspca_stk1135: serial bus timeout: status=0x00
[  192.360017][ T4825] gspca_stk1135: Sensor write failed
[  192.385284][ T4825] stk1135: probe of 5-1:0.0 failed with error -71
[  192.435324][ T4825] usb 5-1: USB disconnect, device number 21
[  192.758278][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'.
[  193.180301][ T6016] loop4: detected capacity change from 0 to 128
[  194.067371][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  194.073699][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  194.144386][ T6058] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  194.280474][   T26] audit: type=1326 audit(2000000010.580:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.1.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1beae87ff9 code=0x0
[  194.355107][   T26] audit: type=1326 audit(2000000010.630:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.1.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1beae87ff9 code=0x0
[  194.400515][ T6073] loop2: detected capacity change from 0 to 512
[  194.583408][ T6073] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  194.745366][ T6073] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.058884][ T4318] handle_bad_sector: 13186 callbacks suppressed
[  195.058907][ T4318] attempt to access beyond end of device
[  195.058907][ T4318] loop0: rw=0, want=52760, limit=64
[  195.210645][ T4318] attempt to access beyond end of device
[  195.210645][ T4318] loop0: rw=0, want=52768, limit=64
[  195.385103][ T4318] attempt to access beyond end of device
[  195.385103][ T4318] loop0: rw=0, want=52776, limit=64
[  195.442619][ T4318] attempt to access beyond end of device
[  195.442619][ T4318] loop0: rw=0, want=52784, limit=64
[  195.565232][ T4318] attempt to access beyond end of device
[  195.565232][ T4318] loop0: rw=0, want=52792, limit=64
[  195.632476][ T4318] attempt to access beyond end of device
[  195.632476][ T4318] loop0: rw=0, want=52800, limit=64
[  195.698319][ T4318] attempt to access beyond end of device
[  195.698319][ T4318] loop0: rw=0, want=52808, limit=64
[  195.767597][ T4318] attempt to access beyond end of device
[  195.767597][ T4318] loop0: rw=0, want=52816, limit=64
[  195.820011][ T4318] attempt to access beyond end of device
[  195.820011][ T4318] loop0: rw=0, want=52824, limit=64
[  195.885215][ T4318] attempt to access beyond end of device
[  195.885215][ T4318] loop0: rw=0, want=52832, limit=64
[  195.955155][ T6139] netlink: 'syz.3.603': attribute type 1 has an invalid length.
[  196.255075][ T5711] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  196.460517][ T6115] loop4: detected capacity change from 0 to 32768
[  196.585155][ T4825] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  196.619176][ T6115] XFS (loop4): Mounting V5 Filesystem
[  196.645574][ T5711] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  196.654604][ T5711] usb 3-1: config 0 has no interface number 0
[  196.702611][ T5711] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.725133][ T5711] usb 3-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.735808][ T5711] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  196.745832][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.758571][ T5711] usb 3-1: config 0 descriptor??
[  196.820578][ T6115] XFS (loop4): Ending clean mount
[  196.843453][ T6115] XFS (loop4): Quotacheck needed: Please wait.
[  196.935596][ T6115] XFS (loop4): Quotacheck: Done.
[  196.955355][ T4825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.972532][   T26] audit: type=1800 audit(2000000013.270:23): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.596" name="bus" dev="loop4" ino=9291 res=0 errno=0
[  196.983686][ T4825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.035065][ T4825] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  197.044412][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.055977][ T4285] XFS (loop4): Unmounting Filesystem
[  197.057871][ T4825] usb 4-1: config 0 descriptor??
[  197.238846][ T5711] uclogic 0003:256C:006D.0007: No inputs registered, leaving
[  197.276102][ T5711] uclogic 0003:256C:006D.0007: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input128
[  197.453792][ T3614] usb 3-1: USB disconnect, device number 15
[  197.557034][ T4825] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0
[  197.564318][ T4825] cm6533_jd 0003:0D8C:0022.0008: item fetching failed at offset 4/5
[  197.595499][ T4825] cm6533_jd 0003:0D8C:0022.0008: parse failed
[  197.601678][ T4825] cm6533_jd: probe of 0003:0D8C:0022.0008 failed with error -22
[  197.762824][ T3614] usb 4-1: USB disconnect, device number 13
[  197.791073][ T6176] loop4: detected capacity change from 0 to 2048
[  197.894091][ T6176] EXT4-fs (loop4): invalid first ino: 0
[  198.380663][ T6192] loop4: detected capacity change from 0 to 512
[  198.524808][ T6192] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.615: casefold flag without casefold feature
[  198.646675][ T6192] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.615: couldn't read orphan inode 15 (err -117)
[  198.725928][ T6192] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  199.073578][ T6182] loop2: detected capacity change from 0 to 40427
[  199.205302][ T6192] loop_set_status: loop4 () has still dirty pages (nrpages=1)
[  199.261466][ T6182] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  199.285107][ T6182] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  199.365701][ T6182] F2FS-fs (loop2): Found nat_bits in checkpoint
[  199.443682][ T5711] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  199.606547][ T6182] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  199.613645][ T6182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  199.698445][ T6182] F2FS-fs (loop2): Unrecognized mount option "noload" or missing value
[  199.855496][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.875653][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.905321][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0
[  199.925103][ T5711] usb 2-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  199.954786][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.025956][ T5711] usb 2-1: config 0 descriptor??
[  200.095371][ T4318] handle_bad_sector: 13227 callbacks suppressed
[  200.095393][ T4318] attempt to access beyond end of device
[  200.095393][ T4318] loop0: rw=0, want=52368, limit=64
[  200.224265][ T4318] attempt to access beyond end of device
[  200.224265][ T4318] loop0: rw=0, want=52376, limit=64
[  200.240081][ T6219] loop3: detected capacity change from 0 to 40427
[  200.286349][ T4318] attempt to access beyond end of device
[  200.286349][ T4318] loop0: rw=0, want=52384, limit=64
[  200.330759][ T6219] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  200.362777][ T6219] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  200.371826][ T4318] attempt to access beyond end of device
[  200.371826][ T4318] loop0: rw=0, want=52392, limit=64
[  200.430008][ T6219] F2FS-fs (loop3): invalid crc value
[  200.444004][ T6239] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  200.459048][ T4318] attempt to access beyond end of device
[  200.459048][ T4318] loop0: rw=0, want=52400, limit=64
[  200.490720][ T6239] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  200.504118][ T6219] F2FS-fs (loop3): Found nat_bits in checkpoint
[  200.515645][ T5711] pantherlord 0003:0810:0002.0009: hidraw0: USB HID v74.2b Device [HID 0810:0002] on usb-dummy_hcd.1-1/input0
[  200.536473][ T6219] F2FS-fs (loop3) : inject kvmalloc in f2fs_kvmalloc of f2fs_build_node_manager+0x1007/0x2050
[  200.537903][ T4318] attempt to access beyond end of device
[  200.537903][ T4318] loop0: rw=0, want=52408, limit=64
[  200.558313][ T5711] pantherlord 0003:0810:0002.0009: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  200.581236][ T6219] F2FS-fs (loop3): Failed to initialize F2FS node manager (-12)
[  200.620284][ T4318] attempt to access beyond end of device
[  200.620284][ T4318] loop0: rw=0, want=52416, limit=64
[  200.637646][ T4318] attempt to access beyond end of device
[  200.637646][ T4318] loop0: rw=0, want=52424, limit=64
[  200.649458][ T4318] attempt to access beyond end of device
[  200.649458][ T4318] loop0: rw=0, want=52432, limit=64
[  200.661028][ T4318] attempt to access beyond end of device
[  200.661028][ T4318] loop0: rw=0, want=52440, limit=64
[  200.714153][ T5711] usb 2-1: USB disconnect, device number 10
[  200.867974][ T6248] loop4: detected capacity change from 0 to 1024
[  200.951297][ T6254] loop2: detected capacity change from 0 to 256
[  201.014170][ T6248] EXT4-fs (loop4): Test dummy encryption mode enabled
[  201.026136][ T6248] EXT4-fs (loop4): Test dummy encryption mode enabled
[  201.057842][ T6248] EXT4-fs (loop4): Ignoring removed orlov option
[  201.094910][ T6248] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  201.313905][ T6248] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  201.686035][ T6277] loop4: detected capacity change from 0 to 760
[  201.765229][ T5711] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  201.915195][ T6282] loop2: detected capacity change from 0 to 128
[  202.045261][ T5711] usb 4-1: Using ep0 maxpacket: 32
[  202.175458][ T5711] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  202.183739][ T5711] usb 4-1: config 0 has no interface number 0
[  202.396400][ T5711] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  202.425137][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.443746][ T5711] usb 4-1: Product: syz
[  202.453895][ T5711] usb 4-1: Manufacturer: syz
[  202.464043][ T5711] usb 4-1: SerialNumber: syz
[  202.489147][ T5711] usb 4-1: config 0 descriptor??
[  202.564624][ T5711] smsc95xx v2.0.0
[  203.005391][ T5711] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  203.026538][ T5711] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  203.316630][ T6292] loop4: detected capacity change from 0 to 32768
[  203.376263][ T6292] XFS: noikeep mount option is deprecated.
[  203.487869][ T6292] XFS (loop4): Mounting V5 Filesystem
[  203.570495][ T6300] loop2: detected capacity change from 0 to 32768
[  203.628881][ T6292] XFS (loop4): Ending clean mount
[  203.694789][ T6292] XFS (loop4): Quotacheck needed: Please wait.
[  203.775165][ T5711] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -32
[  203.823452][ T5711] smsc95xx: probe of 4-1:0.67 failed with error -32
[  203.906604][ T6292] XFS (loop4): Quotacheck: Done.
[  204.048611][ T4285] XFS (loop4): Unmounting Filesystem
[  204.705170][ T4825] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  204.774006][ T3940] usb 4-1: USB disconnect, device number 14
[  205.065491][ T4825] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  205.085188][ T3614] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  205.099384][ T4825] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.112317][ T4318] handle_bad_sector: 14927 callbacks suppressed
[  205.112337][ T4318] attempt to access beyond end of device
[  205.112337][ T4318] loop0: rw=0, want=49224, limit=64
[  205.155103][ T4825] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.169854][ T4318] attempt to access beyond end of device
[  205.169854][ T4318] loop0: rw=0, want=49232, limit=64
[  205.251935][ T4318] attempt to access beyond end of device
[  205.251935][ T4318] loop0: rw=0, want=49240, limit=64
[  205.263662][ T4318] attempt to access beyond end of device
[  205.263662][ T4318] loop0: rw=0, want=49248, limit=64
[  205.306987][ T4318] attempt to access beyond end of device
[  205.306987][ T4318] loop0: rw=0, want=49256, limit=64
[  205.341228][ T4825] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  205.353040][ T4825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.362741][ T4825] usb 3-1: Product: syz
[  205.372458][ T4318] attempt to access beyond end of device
[  205.372458][ T4318] loop0: rw=0, want=49264, limit=64
[  205.393789][ T4825] usb 3-1: Manufacturer: syz
[  205.398967][ T4825] usb 3-1: SerialNumber: syz
[  205.431658][ T4318] attempt to access beyond end of device
[  205.431658][ T4318] loop0: rw=0, want=49272, limit=64
[  205.453712][ T4318] attempt to access beyond end of device
[  205.453712][ T4318] loop0: rw=0, want=49280, limit=64
[  205.487230][ T3614] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.515405][ T3614] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  205.532347][ T4318] attempt to access beyond end of device
[  205.532347][ T4318] loop0: rw=0, want=49288, limit=64
[  205.543890][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.578830][ T4318] attempt to access beyond end of device
[  205.578830][ T4318] loop0: rw=0, want=49296, limit=64
[  205.596036][ T3614] usb 5-1: config 0 descriptor??
[  205.662322][ T3614] pwc: Askey VC010 type 2 USB webcam detected.
[  205.778958][ T4825] usb 3-1: 0:2 : does not exist
[  205.844175][ T4825] usb 3-1: USB disconnect, device number 16
[  205.865150][ T3614] pwc: send_video_command error -71
[  205.870476][ T3614] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  205.904080][ T3614] Philips webcam: probe of 5-1:0.0 failed with error -71
[  205.958678][ T3614] usb 5-1: USB disconnect, device number 22
[  206.435302][ T3614] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  206.760124][ T6377] loop3: detected capacity change from 0 to 32768
[  206.795274][ T3614] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.809472][ T3614] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  206.835066][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.902756][ T3614] usb 5-1: config 0 descriptor??
[  206.932326][ T6377] XFS (loop3): Mounting V5 Filesystem
[  206.955108][ T4633] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  206.957543][ T3614] pwc: Askey VC010 type 2 USB webcam detected.
[  207.091410][ T6377] XFS (loop3): Ending clean mount
[  207.245061][ T4633] usb 3-1: Using ep0 maxpacket: 8
[  207.264026][ T4731] XFS (loop3): Unmounting Filesystem
[  207.301799][ T6403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.691'.
[  207.615239][ T3614] pwc: recv_control_msg error -71 req 02 val 2700
[  207.617468][ T4633] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  207.635194][ T3614] pwc: recv_control_msg error -71 req 02 val 2c00
[  207.641404][ T4633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.661641][ T4633] usb 3-1: Product: syz
[  207.663065][ T3614] pwc: recv_control_msg error -71 req 04 val 1000
[  207.666145][ T4633] usb 3-1: Manufacturer: syz
[  207.666168][ T4633] usb 3-1: SerialNumber: syz
[  207.688435][ T4633] usb 3-1: config 0 descriptor??
[  207.725274][ T3614] pwc: recv_control_msg error -71 req 04 val 1300
[  207.745715][ T3614] pwc: recv_control_msg error -71 req 04 val 1400
[  207.785760][ T3614] pwc: recv_control_msg error -71 req 02 val 2000
[  207.805222][ T3614] pwc: recv_control_msg error -71 req 02 val 2100
[  207.827004][ T3614] pwc: recv_control_msg error -71 req 04 val 1500
[  207.853496][ T3614] pwc: recv_control_msg error -71 req 02 val 2500
[  207.895267][ T3614] pwc: recv_control_msg error -71 req 02 val 2400
[  207.925225][ T3614] pwc: recv_control_msg error -71 req 02 val 2600
[  207.946588][ T3614] pwc: recv_control_msg error -71 req 02 val 2900
[  207.955502][ T4633] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  207.975224][ T3614] pwc: recv_control_msg error -71 req 02 val 2800
[  208.005206][ T3614] pwc: recv_control_msg error -71 req 04 val 1100
[  208.035198][ T3614] pwc: recv_control_msg error -71 req 04 val 1200
[  208.054153][ T3614] pwc: Registered as video71.
[  208.077374][ T3614] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23
[  208.139133][ T3614] usb 5-1: USB disconnect, device number 23
[  208.705376][ T3614] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  208.735065][ T4177] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  208.878821][ T6408] syz.1.694 (6408): drop_caches: 2
[  208.955288][ T3614] usb 5-1: Using ep0 maxpacket: 32
[  209.152602][ T4177] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  209.168635][ T4177] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.197265][ T4177] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.244054][ T3614] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  209.265549][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.295178][ T3614] usb 5-1: Product: syz
[  209.299400][ T3614] usb 5-1: Manufacturer: syz
[  209.304008][ T3614] usb 5-1: SerialNumber: syz
[  209.330645][ T3614] usb 5-1: config 0 descriptor??
[  209.385762][ T4177] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  209.387370][ T3614] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  209.401747][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.401779][ T4177] usb 4-1: Product: syz
[  209.401796][ T4177] usb 4-1: Manufacturer: syz
[  209.401813][ T4177] usb 4-1: SerialNumber: syz
[  209.765335][ T4177] usb 4-1: 0:2 : does not exist
[  209.806109][ T4177] usb 4-1: USB disconnect, device number 15
[  210.122066][ T4318] handle_bad_sector: 22261 callbacks suppressed
[  210.122087][ T4318] attempt to access beyond end of device
[  210.122087][ T4318] loop0: rw=524288, want=51608, limit=64
[  210.265283][ T4318] attempt to access beyond end of device
[  210.265283][ T4318] loop0: rw=524288, want=51616, limit=64
[  210.306319][ T4318] attempt to access beyond end of device
[  210.306319][ T4318] loop0: rw=524288, want=51624, limit=64
[  210.319971][ T4318] attempt to access beyond end of device
[  210.319971][ T4318] loop0: rw=524288, want=51632, limit=64
[  210.333496][ T4318] attempt to access beyond end of device
[  210.333496][ T4318] loop0: rw=524288, want=51640, limit=64
[  210.345618][ T4318] attempt to access beyond end of device
[  210.345618][ T4318] loop0: rw=524288, want=51648, limit=64
[  210.360281][ T4318] attempt to access beyond end of device
[  210.360281][ T4318] loop0: rw=524288, want=51656, limit=64
[  210.373097][ T4318] attempt to access beyond end of device
[  210.373097][ T4318] loop0: rw=524288, want=51664, limit=64
[  210.385579][ T4318] attempt to access beyond end of device
[  210.385579][ T4318] loop0: rw=524288, want=51672, limit=64
[  210.400690][ T4318] attempt to access beyond end of device
[  210.400690][ T4318] loop0: rw=524288, want=51680, limit=64
[  210.545844][ T4177] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  210.575233][ T3615] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  210.935480][ T4177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.945256][ T3614] gspca_ov534_9: sccb_write failed
[  210.965264][ T3615] usb 4-1: config 0 has an invalid interface number: 183 but max is 0
[  210.973510][ T3615] usb 4-1: config 0 has no interface number 0
[  210.982445][ T4177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.993216][ T3615] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=26.3d
[  211.002536][ T4177] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  211.012010][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.020761][ T4177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.049268][ T3615] usb 4-1: config 0 descriptor??
[  211.072294][ T4177] usb 2-1: config 0 descriptor??
[  211.376560][ T3614] gspca_ov534_9: reg_w failed -71
[  211.505312][ T3935] Bluetooth: hci1: command 0x0406 tx timeout
[  211.535345][ T3615] airspy 4-1:0.183: usb_control_msg() failed -71 request 0a
[  211.542726][ T3615] airspy 4-1:0.183: Could not detect board
[  211.558806][ T3615] airspy: probe of 4-1:0.183 failed with error -71
[  211.603465][ T3615] usb 4-1: USB disconnect, device number 16
[  211.695626][ T3614] gspca_ov534_9: Unknown sensor 0000
[  211.695708][ T3614] ov534_9: probe of 5-1:0.0 failed with error -22
[  211.732733][ T3614] usb 5-1: USB disconnect, device number 24
[  211.735288][ T4633] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71
[  211.783685][ T4633] usb 3-1: USB disconnect, device number 17
[  212.218647][ T4177] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input24
[  212.249202][ T6498] tmpfs: Bad value for 'mpol'
[  212.357636][ T4177] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.000A/input/input25
[  212.452557][ T4177] uclogic 0003:256C:006D.000A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  212.478717][ T6503] loop4: detected capacity change from 0 to 2048
[  212.498850][ T4177] usb 2-1: USB disconnect, device number 11
[  212.655328][ T6503] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  212.693432][ T6503] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.181545][ T6492] loop2: detected capacity change from 0 to 32768
[  213.622859][ T6531] loop1: detected capacity change from 32768 to 11
[  213.699350][ T6539] loop2: detected capacity change from 0 to 128
[  213.785317][ T4177] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  213.845450][ T6539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  213.881933][ T6539] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.065210][ T3935] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  214.298737][ T6547] loop2: detected capacity change from 0 to 256
[  214.397931][ T4177] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  214.421139][ T4177] usb 5-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3
[  214.425391][ T3935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  214.443541][ T6536] loop3: detected capacity change from 0 to 32768
[  214.454992][ T4177] usb 5-1: Product: syz
[  214.459210][ T4177] usb 5-1: Manufacturer: syz
[  214.460476][ T6547] FAT-fs (loop2): Directory bread(block 64) failed
[  214.468482][ T4177] usb 5-1: SerialNumber: syz
[  214.481480][ T3935] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  214.490744][ T6547] FAT-fs (loop2): Directory bread(block 65) failed
[  214.505093][ T3935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.512865][ T4177] usb 5-1: config 0 descriptor??
[  214.513451][ T6547] FAT-fs (loop2): Directory bread(block 66) failed
[  214.537128][ T3935] usb 2-1: config 0 descriptor??
[  214.544212][ T6536] jfs: Unrecognized mount option "nuota" or missing value
[  214.563579][ T6547] FAT-fs (loop2): Directory bread(block 67) failed
[  214.582993][ T3935] pwc: Askey VC010 type 2 USB webcam detected.
[  214.638427][ T6547] FAT-fs (loop2): Directory bread(block 68) failed
[  214.647704][ T6547] FAT-fs (loop2): Directory bread(block 69) failed
[  214.654399][ T6547] FAT-fs (loop2): Directory bread(block 70) failed
[  214.672488][ T6547] FAT-fs (loop2): Directory bread(block 71) failed
[  214.704785][ T6547] FAT-fs (loop2): Directory bread(block 72) failed
[  214.725342][ T6547] FAT-fs (loop2): Directory bread(block 73) failed
[  214.795209][ T3935] pwc: send_video_command error -71
[  214.800482][ T3935] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  214.830008][ T3935] Philips webcam: probe of 2-1:0.0 failed with error -71
[  214.880756][ T3935] usb 2-1: USB disconnect, device number 12
[  214.995445][ T4177] usb 5-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32
[  215.044184][ T4177] usb 5-1: Firmware version (0.0) predates our first public release.
[  215.078273][ T4177] usb 5-1: Please update to version 0.2 or newer
[  215.135134][ T4177] usb 5-1: Firmware: build �

[  215.140081][ T4177] usb 5-1: atusb_probe: initialization failed, error = -32
[  215.151773][ T4318] handle_bad_sector: 22194 callbacks suppressed
[  215.151796][ T4318] attempt to access beyond end of device
[  215.151796][ T4318] loop0: rw=524288, want=49368, limit=64
[  215.158463][ T4177] atusb: probe of 5-1:0.0 failed with error -32
[  215.202903][ T4318] attempt to access beyond end of device
[  215.202903][ T4318] loop0: rw=524288, want=49376, limit=64
[  215.229525][ T6564] loop3: detected capacity change from 0 to 256
[  215.249889][ T4318] attempt to access beyond end of device
[  215.249889][ T4318] loop0: rw=524288, want=49384, limit=64
[  215.298605][ T4318] attempt to access beyond end of device
[  215.298605][ T4318] loop0: rw=524288, want=49392, limit=64
[  215.313680][ T4318] attempt to access beyond end of device
[  215.313680][ T4318] loop0: rw=524288, want=49400, limit=64
[  215.325769][ T4318] attempt to access beyond end of device
[  215.325769][ T4318] loop0: rw=524288, want=49408, limit=64
[  215.338898][ T4318] attempt to access beyond end of device
[  215.338898][ T4318] loop0: rw=524288, want=49416, limit=64
[  215.355504][ T4825] usb 5-1: USB disconnect, device number 25
[  215.362003][ T4318] attempt to access beyond end of device
[  215.362003][ T4318] loop0: rw=524288, want=49424, limit=64
[  215.375146][ T3935] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  215.403932][ T4318] attempt to access beyond end of device
[  215.403932][ T4318] loop0: rw=524288, want=49432, limit=64
[  215.440607][ T4318] attempt to access beyond end of device
[  215.440607][ T4318] loop0: rw=524288, want=49440, limit=64
[  215.485154][ T6564] loop3: detected capacity change from 256 to 11
[  215.499095][ T6564] FAT-fs (loop3): Directory bread(block 3) failed
[  215.551921][ T4731] FAT-fs (loop3): Directory bread(block 3) failed
[  215.595006][ T4177] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  215.710900][ T6561] loop2: detected capacity change from 0 to 32768
[  215.742956][ T3935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  215.764825][ T3935] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  215.780801][ T3935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.803540][ T3935] usb 2-1: config 0 descriptor??
[  215.845193][ T4177] usb 1-1: Using ep0 maxpacket: 32
[  215.849362][ T3935] pwc: Askey VC010 type 2 USB webcam detected.
[  215.975316][ T4177] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  216.011774][ T4177] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  216.042909][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.074349][ T4177] usb 1-1: config 0 descriptor??
[  216.116391][ T6567] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  216.128501][ T3752] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.140335][ T4177] hub 1-1:0.0: bad descriptor, ignoring hub
[  216.175077][ T4177] hub: probe of 1-1:0.0 failed with error -5
[  216.183184][ T4177] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  216.285363][ T3935] pwc: recv_control_msg error -32 req 02 val 2b00
[  216.295323][ T3752] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.325224][ T3935] pwc: recv_control_msg error -32 req 02 val 2700
[  216.365188][ T3935] pwc: recv_control_msg error -32 req 02 val 2c00
[  216.406232][ T3935] pwc: recv_control_msg error -32 req 04 val 1000
[  216.425778][ T3752] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.445162][ T3935] pwc: recv_control_msg error -32 req 04 val 1300
[  216.485169][ T3935] pwc: recv_control_msg error -32 req 04 val 1400
[  216.525147][ T3935] pwc: recv_control_msg error -32 req 02 val 2000
[  216.565174][ T3935] pwc: recv_control_msg error -32 req 02 val 2100
[  216.603823][ T3752] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.622846][ T3935] pwc: recv_control_msg error -32 req 04 val 1500
[  216.675112][ T3935] pwc: recv_control_msg error -32 req 02 val 2500
[  216.935178][ T3935] pwc: recv_control_msg error -71 req 02 val 2600
[  216.955595][ T3935] pwc: recv_control_msg error -71 req 02 val 2900
[  217.001846][ T3935] pwc: recv_control_msg error -71 req 02 val 2800
[  217.025140][ T3935] pwc: recv_control_msg error -71 req 04 val 1100
[  217.055132][ T3935] pwc: recv_control_msg error -71 req 04 val 1200
[  217.090685][ T6569] loop4: detected capacity change from 0 to 32768
[  217.098736][ T3935] pwc: Registered as video71.
[  217.117065][ T3935] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26
[  217.171162][ T3935] usb 2-1: USB disconnect, device number 13
[  217.324565][ T6569] XFS (loop4): Mounting V5 Filesystem
[  217.364285][ T6582] chnl_net:caif_netlink_parms(): no params data found
[  217.426460][ T6569] XFS (loop4): Ending clean mount
[  217.466223][ T6569] XFS (loop4): Quotacheck needed: Please wait.
[  217.613898][ T6569] XFS (loop4): Quotacheck: Done.
[  217.900855][ T4285] XFS (loop4): Unmounting Filesystem
[  217.911728][ T6604] loop2: detected capacity change from 0 to 32768
[  217.955425][ T3614] usb 1-1: USB disconnect, device number 10
[  218.128556][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.138081][ T6582] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.156341][ T6582] device bridge_slave_0 entered promiscuous mode
[  218.240743][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.275065][ T6582] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.312895][ T6582] device bridge_slave_1 entered promiscuous mode
[  218.467914][ T6582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  218.516689][ T6582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  218.705216][ T4633] Bluetooth: hci6: command 0x0409 tx timeout
[  218.872477][ T6582] team0: Port device team_slave_0 added
[  218.938552][ T6582] team0: Port device team_slave_1 added
[  219.155162][ T3935] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  219.176219][ T5711] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  219.256704][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.263684][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.367014][ T6582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.387723][ T6683] loop2: detected capacity change from 0 to 4096
[  219.406232][ T6582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.415059][ T3935] usb 1-1: Using ep0 maxpacket: 16
[  219.420443][ T6582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.476574][ T6582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.495227][ T5711] usb 5-1: Using ep0 maxpacket: 32
[  219.545156][ T3935] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  219.545206][ T6683] NILFS (loop2): invalid segment: Checksum error in segment payload
[  219.582850][ T6683] NILFS (loop2): trying rollback from an earlier position
[  219.598876][ T3935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.621158][ T5711] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  219.637329][ T3935] usb 1-1: config 0 descriptor??
[  219.642470][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  219.707258][ T3935] gspca_main: sonixj-2.14.0 probing 0471:0327
[  219.708176][ T6683] NILFS (loop2): recovery complete
[  219.724821][ T6582] device hsr_slave_0 entered promiscuous mode
[  219.746372][ T6582] device hsr_slave_1 entered promiscuous mode
[  219.765208][ T6691] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.807439][ T6582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.836958][ T6582] Cannot create hsr debugfs directory
[  219.855186][ T5711] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  219.874620][ T5711] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  219.888728][ T6683] overlayfs: upper fs does not support tmpfile.
[  219.904987][ T5711] usb 5-1: Product: syz
[  219.909373][ T5711] usb 5-1: Manufacturer: syz
[  219.913990][ T5711] usb 5-1: SerialNumber: syz
[  219.947820][ T6683] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  219.956270][ T5711] usb 5-1: config 0 descriptor??
[  219.986066][ T6683] overlayfs: failed to set xattr on upper
[  220.003083][ T6683] overlayfs: ...falling back to index=off,metacopy=off.
[  220.012167][ T5711] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  220.033534][ T6683] overlayfs: failed to resolve './file0': -2
[  220.043352][ T3752] device hsr_slave_0 left promiscuous mode
[  220.052938][ T5711] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  220.123771][ T3752] device hsr_slave_1 left promiscuous mode
[  220.140101][ T3752] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.155193][ T4318] handle_bad_sector: 17961 callbacks suppressed
[  220.155214][ T4318] attempt to access beyond end of device
[  220.155214][ T4318] loop0: rw=0, want=50056, limit=64
[  220.158551][ T3752] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.188335][ T4318] attempt to access beyond end of device
[  220.188335][ T4318] loop0: rw=0, want=50064, limit=64
[  220.229426][ T4318] attempt to access beyond end of device
[  220.229426][ T4318] loop0: rw=0, want=50072, limit=64
[  220.270598][ T3752] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.278306][ T4318] attempt to access beyond end of device
[  220.278306][ T4318] loop0: rw=0, want=50080, limit=64
[  220.305435][ T3752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.326333][ T4633] usb 5-1: USB disconnect, device number 26
[  220.344526][ T4633] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  220.344785][ T4318] attempt to access beyond end of device
[  220.344785][ T4318] loop0: rw=0, want=50088, limit=64
[  220.365560][ T3752] device bridge_slave_1 left promiscuous mode
[  220.377689][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.393789][ T4318] attempt to access beyond end of device
[  220.393789][ T4318] loop0: rw=0, want=50096, limit=64
[  220.406990][ T3752] device bridge_slave_0 left promiscuous mode
[  220.413249][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.421346][ T4318] attempt to access beyond end of device
[  220.421346][ T4318] loop0: rw=0, want=50104, limit=64
[  220.436073][ T4318] attempt to access beyond end of device
[  220.436073][ T4318] loop0: rw=0, want=50112, limit=64
[  220.457778][ T3752] device veth1_macvtap left promiscuous mode
[  220.463855][ T3752] device veth0_macvtap left promiscuous mode
[  220.485687][ T4318] attempt to access beyond end of device
[  220.485687][ T4318] loop0: rw=0, want=50120, limit=64
[  220.512773][ T3752] device veth1_vlan left promiscuous mode
[  220.518736][ T4318] attempt to access beyond end of device
[  220.518736][ T4318] loop0: rw=0, want=50128, limit=64
[  220.531034][ T3752] device veth0_vlan left promiscuous mode
[  220.657686][ T4177] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  220.788315][ T1077] Bluetooth: hci6: command 0x041b tx timeout
[  220.965200][ T4177] usb 3-1: Using ep0 maxpacket: 8
[  221.086810][ T1077] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  221.132842][ T4177] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  221.143952][ T4177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.161135][ T3752] team0 (unregistering): Port device team_slave_1 removed
[  221.172643][ T4177] usb 3-1: config 0 descriptor??
[  221.193475][ T3752] team0 (unregistering): Port device team_slave_0 removed
[  221.211457][ T3752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.253965][ T3752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.381884][ T3752] bond0 (unregistering): Released all slaves
[  221.455309][ T1077] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  221.467830][ T1077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.496937][ T1077] usb 2-1: config 0 descriptor??
[  221.521784][ T6714] tipc: Started in network mode
[  221.542067][ T6714] tipc: Node identity aaaaaaaaaa1, cluster identity 4711
[  221.542998][ T1077] pwc: Samsung MPC-C10 USB webcam detected.
[  221.556528][ T6714] tipc: Enabled bearer <eth:gretap0>, priority 10
[  221.745341][ T1077] pwc: send_video_command error -71
[  221.745449][ T5711] Bluetooth: hci3: command 0x0406 tx timeout
[  221.753852][ T1077] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  221.784732][ T1077] Philips webcam: probe of 2-1:0.0 failed with error -71
[  221.816902][ T1077] usb 2-1: USB disconnect, device number 14
[  221.940451][ T6725] loop4: detected capacity change from 0 to 512
[  222.073204][ T6725] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback.
[  222.091310][ T6725] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  222.146795][ T6725] Quota error (device loop4): find_tree_dqentry: Getting block too big (9 >= 6)
[  222.195247][ T6725] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  222.285060][ T6725] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.796: Failed to acquire dquot type 0
[  222.335972][ T1077] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  222.535153][ T4177] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  222.571978][ T4177] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  222.583580][ T6742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.619165][ T4177] asix: probe of 3-1:0.0 failed with error -71
[  222.629251][ T6743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  222.645744][ T4177] usb 3-1: USB disconnect, device number 18
[  222.663654][ T5711] tipc: Node number set to 12233386
[  222.705205][ T1077] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44
[  222.726411][ T1077] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.766716][ T1077] usb 2-1: config 0 descriptor??
[  222.822578][ T6582] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  222.827561][ T1077] pwc: Samsung MPC-C10 USB webcam detected.
[  222.856099][ T6582] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  222.865370][ T5711] Bluetooth: hci6: command 0x040f tx timeout
[  222.906638][ T6582] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  222.926876][ T6582] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  223.155168][ T3935] gspca_sonixj: reg_w1 err -71
[  223.160036][ T3935] sonixj: probe of 1-1:0.0 failed with error -71
[  223.167035][ T6582] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.198576][ T3935] usb 1-1: USB disconnect, device number 11
[  223.247841][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  223.255348][ T1077] pwc: recv_control_msg error -32 req 02 val 2b00
[  223.284505][ T4984] Bluetooth: hci7: Frame reassembly failed (-84)
[  223.291795][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  223.299295][ T1077] pwc: recv_control_msg error -32 req 02 val 2700
[  223.328021][ T6761] Bluetooth: hci7: received HCILL_GO_TO_SLEEP_ACK in state 2
[  223.350747][ T6582] 8021q: adding VLAN 0 to HW filter on device team0
[  223.375306][ T1077] pwc: recv_control_msg error -32 req 04 val 1700
[  223.404063][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  223.423845][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.435147][ T1077] pwc: recv_control_msg error -32 req 02 val 2c00
[  223.474351][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.481526][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.489179][ T1077] pwc: recv_control_msg error -32 req 04 val 1000
[  223.529062][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.537468][ T1077] pwc: recv_control_msg error -32 req 04 val 1300
[  223.567388][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.575669][ T1077] pwc: recv_control_msg error -32 req 04 val 1400
[  223.605617][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.612776][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.620454][ T1077] pwc: recv_control_msg error -32 req 02 val 2000
[  223.656369][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.665268][ T1077] pwc: recv_control_msg error -32 req 02 val 2100
[  223.705318][ T1077] pwc: recv_control_msg error -32 req 02 val 2200
[  223.725885][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.747747][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  223.797283][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  223.837354][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  223.868220][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  223.931291][ T6582] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  223.972143][ T1077] pwc: recv_control_msg error -71 req 04 val 1500
[  224.005122][ T1077] pwc: recv_control_msg error -71 req 02 val 2500
[  224.015390][ T6582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.045154][ T1077] pwc: recv_control_msg error -71 req 02 val 2400
[  224.054718][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  224.065655][ T1077] pwc: recv_control_msg error -71 req 02 val 2600
[  224.081157][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  224.095323][ T1077] pwc: recv_control_msg error -71 req 02 val 2900
[  224.115113][ T1077] pwc: recv_control_msg error -71 req 02 val 2800
[  224.123868][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  224.136010][ T1077] pwc: recv_control_msg error -71 req 04 val 1100
[  224.159161][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  224.176439][ T1077] pwc: recv_control_msg error -71 req 04 val 1200
[  224.179733][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  224.193430][ T1077] pwc: Registered as video71.
[  224.220738][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  224.224092][ T1077] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input27
[  224.252296][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  224.342986][ T1077] usb 2-1: USB disconnect, device number 15
[  224.802672][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  224.814872][ T4312] F2FS-fs (loop0): Issue discard(4097, 4097, 1) failed, ret: -5
[  224.815023][ T4312] F2FS-fs (loop0): Issue discard(4614, 4614, 1) failed, ret: -5
[  224.821578][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  224.898248][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.945984][ T4633] Bluetooth: hci6: command 0x0419 tx timeout
[  225.005779][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  225.045514][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.092956][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  225.126056][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.142489][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.165465][ T4318] handle_bad_sector: 19799 callbacks suppressed
[  225.165489][ T4318] attempt to access beyond end of device
[  225.165489][ T4318] loop0: rw=0, want=53168, limit=64
[  225.190176][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  225.245977][ T4318] attempt to access beyond end of device
[  225.245977][ T4318] loop0: rw=0, want=53176, limit=64
[  225.311777][ T6582] device veth0_vlan entered promiscuous mode
[  225.330003][ T4318] attempt to access beyond end of device
[  225.330003][ T4318] loop0: rw=0, want=53184, limit=64
[  225.350048][ T5711] Bluetooth: hci7: command 0x1003 tx timeout
[  225.364229][ T6582] device veth1_vlan entered promiscuous mode
[  225.378971][ T4318] attempt to access beyond end of device
[  225.378971][ T4318] loop0: rw=0, want=53192, limit=64
[  225.385695][ T3570] Bluetooth: hci7: sending frame failed (-49)
[  225.449650][ T6582] device veth0_macvtap entered promiscuous mode
[  225.458525][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  225.466248][ T4318] attempt to access beyond end of device
[  225.466248][ T4318] loop0: rw=0, want=53200, limit=64
[  225.485317][ T4318] attempt to access beyond end of device
[  225.485317][ T4318] loop0: rw=0, want=53208, limit=64
[  225.517246][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  225.526087][ T4318] attempt to access beyond end of device
[  225.526087][ T4318] loop0: rw=0, want=53216, limit=64
[  225.557020][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.582558][ T6813] loop4: detected capacity change from 0 to 8192
[  225.586618][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  225.638812][ T4984] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.677569][ T6582] device veth1_macvtap entered promiscuous mode
[  225.685303][ T4318] attempt to access beyond end of device
[  225.685303][ T4318] loop0: rw=0, want=53224, limit=64
[  225.700686][ T6813] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  225.730402][ T6813] FAT-fs (loop4): Filesystem has been set read-only
[  225.749724][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.760794][ T4318] attempt to access beyond end of device
[  225.760794][ T4318] loop0: rw=0, want=53232, limit=64
[  225.773677][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.810495][ T4318] attempt to access beyond end of device
[  225.810495][ T4318] loop0: rw=0, want=53240, limit=64
[  225.824006][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.854984][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.882784][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.924242][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.954991][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.995109][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.025262][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.056638][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.085056][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  226.115315][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.156300][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  226.183973][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  226.230068][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  226.281411][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  226.330362][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.366536][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.377143][ T6827] loop4: detected capacity change from 0 to 512
[  226.405002][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.454974][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.464826][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.534401][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.565458][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.616485][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.637197][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.658127][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.690503][ T6582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  226.716092][ T6582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  226.763532][ T6582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.798651][ T6827] EXT4-fs (loop4): The Hurd can't support 64-bit file systems
[  226.829034][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  226.847339][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  226.923914][ T6582] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.943166][ T6582] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.974615][ T6582] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.016426][ T6582] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.400286][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.454343][ T4633] Bluetooth: hci7: command 0x1001 tx timeout
[  227.460545][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.515054][ T3570] Bluetooth: hci7: sending frame failed (-49)
[  227.539508][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.549677][ T3816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  227.559491][ T3816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.596980][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  228.375312][ T4633] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  228.645049][ T4633] usb 4-1: Using ep0 maxpacket: 8
[  228.731380][ T6867] loop4: detected capacity change from 0 to 32768
[  228.765323][ T4633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  228.795351][ T4633] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  228.795418][ T6867] XFS: ikeep mount option is deprecated.
[  228.814769][ T4633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.891734][ T4633] usb 4-1: config 0 descriptor??
[  228.982785][ T6867] XFS (loop4): Mounting V5 Filesystem
[  229.200408][ T6867] XFS (loop4): Ending clean mount
[  229.208277][ T6867] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x33d/0xce0, inode 0x42b dinode
[  229.208966][ T4633] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  229.270209][ T6867] XFS (loop4): Unmount and run xfs_repair
[  229.307040][ T6867] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  229.334679][ T6867] 00000000: 49 4e 00 00 03 00 00 00 00 00 00 00 00 00 00 00  IN..............
[  229.354429][ T6867] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.393172][ T6867] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.403859][ T6867] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.439300][ T4633] usb 4-1: USB disconnect, device number 17
[  229.442400][ T6867] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.456958][ T4633] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[  229.463609][ T6867] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  229.487490][ T6867] 00000060: ff ff ff ff 65 3f 0d b5 00 00 00 00 00 00 00 00  ....e?..........
[  229.505122][ T6867] 00000070: 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00  ................
[  229.534701][ T6867] XFS (loop4): Internal error xfs_trans_cancel at line 954 of file fs/xfs/xfs_trans.c.  Caller xfs_qm_qino_alloc+0x558/0x9c0
[  229.586889][ T4177] Bluetooth: hci7: command 0x1009 tx timeout
[  229.589613][ T6867] CPU: 1 PID: 6867 Comm: syz.4.823 Not tainted 5.15.168-syzkaller #0
[  229.600998][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  229.611077][ T6867] Call Trace:
[  229.614375][ T6867]  <TASK>
[  229.617319][ T6867]  dump_stack_lvl+0x1e3/0x2d0
[  229.622038][ T6867]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  229.628033][ T6867]  ? xfs_init_new_inode+0x1e8/0x1100
[  229.633370][ T6867]  ? xfs_error_report+0x8e/0xd0
[  229.638251][ T6867]  ? xfs_qm_qino_alloc+0x558/0x9c0
[  229.643413][ T6867]  ? xfs_qm_qino_alloc+0x558/0x9c0
[  229.648548][ T6867]  xfs_trans_cancel+0x1c9/0x410
[  229.653437][ T6867]  ? xfs_qm_qino_alloc+0x558/0x9c0
[  229.658749][ T6867]  xfs_qm_qino_alloc+0x558/0x9c0
[  229.663725][ T6867]  ? xfs_qm_shrink_scan+0x3d0/0x3d0
[  229.668953][ T6867]  ? __list_lru_init+0x76d/0xa70
[  229.674459][ T6867]  ? __lock_acquire+0x1ff0/0x1ff0
[  229.679692][ T6867]  ? __up_read+0x2b9/0x690
[  229.684144][ T6867]  xfs_qm_init_quotainos+0x788/0x8a0
[  229.689556][ T6867]  ? xfs_qm_dqpurge+0x640/0x640
[  229.694446][ T6867]  ? __list_lru_init+0x76d/0xa70
[  229.699428][ T6867]  ? kmem_alloc+0x1ec/0x380
[  229.703975][ T6867]  xfs_qm_init_quotainfo+0xa6/0x970
[  229.709221][ T6867]  ? xfs_fs_unreserve_ag_blocks+0xd4/0x190
[  229.715073][ T6867]  ? xfs_perag_put+0xea/0x270
[  229.719800][ T6867]  xfs_qm_mount_quotas+0x90/0x610
[  229.724872][ T6867]  xfs_mountfs+0x166a/0x1ce0
[  229.729519][ T6867]  ? xfs_default_resblks+0x70/0x70
[  229.734665][ T6867]  ? xfs_filestream_new_ag+0x410/0x410
[  229.740178][ T6867]  ? xfs_mru_cache_create+0x44c/0x550
[  229.745603][ T6867]  xfs_fs_fill_super+0x11b4/0x1400
[  229.750848][ T6867]  get_tree_bdev+0x3fe/0x620
[  229.755517][ T6867]  ? xfs_fs_warn_deprecated+0x180/0x180
[  229.761154][ T6867]  vfs_get_tree+0x88/0x270
[  229.765760][ T6867]  do_new_mount+0x2ba/0xb40
[  229.770540][ T6867]  ? do_move_mount_old+0x160/0x160
[  229.775694][ T6867]  ? user_path_at_empty+0x12b/0x180
[  229.780939][ T6867]  __se_sys_mount+0x2d5/0x3c0
[  229.785648][ T6867]  ? __x64_sys_mount+0xc0/0xc0
[  229.790445][ T6867]  ? syscall_enter_from_user_mode+0x2e/0x240
[  229.796944][ T6867]  ? lockdep_hardirqs_on+0x94/0x130
[  229.802180][ T6867]  ? __x64_sys_mount+0x1c/0xc0
[  229.806979][ T6867]  do_syscall_64+0x3b/0xb0
[  229.811424][ T6867]  ? clear_bhb_loop+0x15/0x70
[  229.816120][ T6867]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  229.822036][ T6867] RIP: 0033:0x7f326b5b079a
[  229.826474][ T6867] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.846280][ T6867] RSP: 002b:00007f3269a26e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  229.854738][ T6867] RAX: ffffffffffffffda RBX: 00007f3269a26ef0 RCX: 00007f326b5b079a
[  229.862834][ T6867] RDX: 0000000020009800 RSI: 00000000200002c0 RDI: 00007f3269a26eb0
[  229.870838][ T6867] RBP: 0000000020009800 R08: 00007f3269a26ef0 R09: 0000000000808050
[  229.878840][ T6867] R10: 0000000000808050 R11: 0000000000000246 R12: 00000000200002c0
[  229.886930][ T6867] R13: 00007f3269a26eb0 R14: 0000000000009925 R15: 0000000020000000
[  229.895035][ T6867]  </TASK>
[  229.954409][ T6867] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_trans_cancel+0x1e2/0x410 (fs/xfs/xfs_trans.c:955).  Shutting down filesystem.
[  229.978995][ T6867] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  229.990903][ T6867] XFS (loop4): xfs_qm_mount_quotas: Superblock update failed!
[  229.999007][ T6867] XFS (loop4): Failed to initialize disk quotas.
[  230.008674][ T6867] XFS (loop4): Error -5 reserving per-AG metadata reserve pool.
[  230.178525][ T4318] handle_bad_sector: 13286 callbacks suppressed
[  230.178549][ T4318] attempt to access beyond end of device
[  230.178549][ T4318] loop0: rw=524288, want=49160, limit=64
[  230.204715][ T6914] bridge0: port 3(syz_tun) entered blocking state
[  230.241684][ T6914] bridge0: port 3(syz_tun) entered disabled state
[  230.259139][ T4318] attempt to access beyond end of device
[  230.259139][ T4318] loop0: rw=524288, want=49168, limit=64
[  230.273505][ T6914] device syz_tun entered promiscuous mode
[  230.298379][ T6914] bridge0: port 3(syz_tun) entered blocking state
[  230.304986][ T6914] bridge0: port 3(syz_tun) entered forwarding state
[  230.313100][ T4318] attempt to access beyond end of device
[  230.313100][ T4318] loop0: rw=524288, want=49176, limit=64
[  230.325634][ T4318] attempt to access beyond end of device
[  230.325634][ T4318] loop0: rw=524288, want=49184, limit=64
[  230.383976][ T4318] attempt to access beyond end of device
[  230.383976][ T4318] loop0: rw=524288, want=49192, limit=64
[  230.410571][ T4318] attempt to access beyond end of device
[  230.410571][ T4318] loop0: rw=524288, want=49200, limit=64
[  230.444239][ T4318] attempt to access beyond end of device
[  230.444239][ T4318] loop0: rw=524288, want=49208, limit=64
[  230.456866][ T4318] attempt to access beyond end of device
[  230.456866][ T4318] loop0: rw=524288, want=49216, limit=64
[  230.500491][ T4318] attempt to access beyond end of device
[  230.500491][ T4318] loop0: rw=524288, want=49224, limit=64
[  230.630917][ T4318] attempt to access beyond end of device
[  230.630917][ T4318] loop0: rw=524288, want=49232, limit=64
[  231.009864][ T6934] loop4: detected capacity change from 0 to 4096
[  231.118289][ T4380] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  231.265023][ T4633] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  231.375050][ T4380] usb 4-1: Using ep0 maxpacket: 32
[  231.501276][ T4380] usb 4-1: config 0 has an invalid interface number: 109 but max is 0
[  231.515120][ T4380] usb 4-1: config 0 has no interface number 0
[  231.645311][ T4633] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  231.655362][ T4633] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  231.666557][ T4633] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  231.675501][ T4380] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  231.675535][ T4380] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.675558][ T4380] usb 4-1: Product: syz
[  231.675574][ T4380] usb 4-1: Manufacturer: syz
[  231.675591][ T4380] usb 4-1: SerialNumber: syz
[  231.677624][ T4380] usb 4-1: config 0 descriptor??
[  231.857173][ T4633] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.874979][ T4633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.895068][ T3940] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  231.902721][ T4633] usb 1-1: Product: syz
[  231.914971][ T4633] usb 1-1: Manufacturer: syz
[  231.923974][ T4633] usb 1-1: SerialNumber: syz
[  231.997236][ T1077] Bluetooth: hci5: command 0x0406 tx timeout
[  232.027505][ T4380] mdc800 4-1:0.109: probe fails -> wrong Interface
[  232.055808][ T4380] usb 4-1: USB disconnect, device number 18
[  232.135083][ T3940] usb 5-1: Using ep0 maxpacket: 8
[  232.265256][ T3940] usb 5-1: config 0 has an invalid interface number: 235 but max is 0
[  232.273471][ T3940] usb 5-1: config 0 has no interface number 0
[  232.285323][ T4633] usb 1-1: 0:2 : does not exist
[  232.295169][ T3940] usb 5-1: config 0 interface 235 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 927
[  232.335631][ T4633] usb 1-1: USB disconnect, device number 12
[  232.475163][ T3940] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=87.c8
[  232.484309][ T3940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.505204][ T3940] usb 5-1: Product: syz
[  232.535109][ T3940] usb 5-1: Manufacturer: syz
[  232.540722][ T3940] usb 5-1: SerialNumber: syz
[  232.576904][ T3940] usb 5-1: config 0 descriptor??
[  232.605836][ T6942] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  232.906114][ T3940] usb 5-1: USB disconnect, device number 27
[  233.485033][ T3940] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  233.725180][ T3940] usb 2-1: Using ep0 maxpacket: 32
[  233.855209][ T3940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.890500][ T6966] chnl_net:caif_netlink_parms(): no params data found
[  234.044414][ T3940] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72
[  234.085175][ T3940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.103527][ T3940] usb 2-1: Product: syz
[  234.113698][ T3940] usb 2-1: Manufacturer: syz
[  234.128890][ T3940] usb 2-1: SerialNumber: syz
[  234.155158][ T3940] usb 2-1: config 0 descriptor??
[  234.387724][ T6964] loop3: detected capacity change from 0 to 40427
[  234.396589][ T4174] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  234.410622][ T6966] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.425515][ T6966] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.437622][ T6966] device bridge_slave_0 entered promiscuous mode
[  234.448139][ T6966] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.456834][ T6966] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.457131][ T6964] F2FS-fs (loop3): invalid crc value
[  234.465341][ T6966] device bridge_slave_1 entered promiscuous mode
[  234.475493][ T3940] usb 2-1: unknown interface protocol 0xf, assuming v1
[  234.510916][ T6964] F2FS-fs (loop3): Found nat_bits in checkpoint
[  234.562819][ T3940] usb 2-1: USB disconnect, device number 16
[  234.564551][ T6964] F2FS-fs (loop3): Start checkpoint disabled!
[  234.626390][ T6964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  234.723865][ T4984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.785265][ T4174] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  234.799029][ T6966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.835097][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.855691][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  234.878784][ T4984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.894378][ T6966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.927773][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.937113][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.045192][ T4174] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  235.054318][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.093485][ T4174] usb 5-1: Product: syz
[  235.099418][ T4174] usb 5-1: Manufacturer: syz
[  235.104089][ T4174] usb 5-1: SerialNumber: syz
[  235.134755][ T6966] team0: Port device team_slave_0 added
[  235.153820][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.859'.
[  235.197545][ T4984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.223927][ T4318] handle_bad_sector: 27634 callbacks suppressed
[  235.223947][ T4318] attempt to access beyond end of device
[  235.223947][ T4318] loop0: rw=524288, want=49544, limit=64
[  235.246679][ T6966] team0: Port device team_slave_1 added
[  235.261472][ T4318] attempt to access beyond end of device
[  235.261472][ T4318] loop0: rw=524288, want=49552, limit=64
[  235.310776][ T4318] attempt to access beyond end of device
[  235.310776][ T4318] loop0: rw=524288, want=49560, limit=64
[  235.329343][ T4984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  235.380717][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.396511][ T4318] attempt to access beyond end of device
[  235.396511][ T4318] loop0: rw=524288, want=49568, limit=64
[  235.416210][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.442221][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.459085][ T6966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.481398][ T4318] attempt to access beyond end of device
[  235.481398][ T4318] loop0: rw=524288, want=49576, limit=64
[  235.491725][ T6966] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.500213][ T4174] usb 5-1: 0:2 : does not exist
[  235.528235][ T4177] Bluetooth: hci8: command 0x0409 tx timeout
[  235.565586][ T6966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.591607][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.598966][ T4318] attempt to access beyond end of device
[  235.598966][ T4318] loop0: rw=524288, want=49584, limit=64
[  235.600835][ T4174] usb 5-1: USB disconnect, device number 28
[  235.630023][ T6966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.664750][ T3563] udevd[3563]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.685665][ T4318] attempt to access beyond end of device
[  235.685665][ T4318] loop0: rw=524288, want=49592, limit=64
[  235.743504][ T4318] attempt to access beyond end of device
[  235.743504][ T4318] loop0: rw=524288, want=49600, limit=64
[  235.799161][ T4318] attempt to access beyond end of device
[  235.799161][ T4318] loop0: rw=524288, want=49608, limit=64
[  235.829765][ T6999] loop3: detected capacity change from 0 to 512
[  235.844112][ T6966] device hsr_slave_0 entered promiscuous mode
[  235.849815][ T4318] attempt to access beyond end of device
[  235.849815][ T4318] loop0: rw=524288, want=49616, limit=64
[  235.862619][ T6966] device hsr_slave_1 entered promiscuous mode
[  235.881210][ T6966] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.904857][ T6999] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  235.917793][ T6966] Cannot create hsr debugfs directory
[  236.255024][ T3940] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  236.625502][ T3940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.654892][ T3940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.684302][ T3940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  236.711237][ T3940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  236.755068][ T3940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.795926][ T3940] usb 4-1: config 0 descriptor??
[  237.166595][ T7005] loop4: detected capacity change from 0 to 32768
[  237.206500][ T7005] XFS: noikeep mount option is deprecated.
[  237.277424][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.284868][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.346085][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.359888][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.378406][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.389838][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.397823][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.406534][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.407505][ T6966] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  237.413953][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.429241][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.437111][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.439101][ T4632] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  237.444798][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.463605][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.471668][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.476172][ T4632] Bluetooth: hci3: Injecting HCI hardware error event
[  237.485986][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486016][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486040][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486063][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486087][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486110][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486133][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.486157][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.548443][ T3570] Bluetooth: hci3: hardware error 0x00
[  237.560936][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.610820][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.654685][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.671020][ T6966] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  237.705942][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.737089][ T6966] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  237.761829][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.782195][ T6966] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  237.815168][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.879623][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.907534][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.937957][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  237.958233][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.006492][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.014139][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.032615][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.050704][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.065170][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.086791][ T4984] device hsr_slave_0 left promiscuous mode
[  238.103842][ T3940] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  238.122145][ T4984] device hsr_slave_1 left promiscuous mode
[  238.132678][ T3940] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  238.140880][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.158994][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.171323][ T3940] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  238.187363][ T4984] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.202894][ T4984] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.212994][ T4984] device bridge_slave_1 left promiscuous mode
[  238.227111][ T3940] usb 4-1: USB disconnect, device number 19
[  238.251847][ T7005] XFS (loop4): Mounting V5 Filesystem
[  238.262395][ T4984] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.290668][ T3935] Bluetooth: hci8: command 0x041b tx timeout
[  238.303404][ T4984] device bridge_slave_0 left promiscuous mode
[  238.335242][ T4984] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.392493][ T4984] device veth1_macvtap left promiscuous mode
[  238.411945][ T7005] XFS (loop4): Ending clean mount
[  238.419526][ T7005] XFS (loop4): Quotacheck needed: Please wait.
[  238.426492][ T4984] device veth0_macvtap left promiscuous mode
[  238.432634][ T4984] device veth1_vlan left promiscuous mode
[  238.470023][ T4984] device veth0_vlan left promiscuous mode
[  238.517898][ T7005] XFS (loop4): Quotacheck: Done.
[  238.575641][ T4380] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  238.829441][ T4380] usb 1-1: Using ep0 maxpacket: 8
[  238.939908][ T4285] XFS (loop4): Unmounting Filesystem
[  238.945815][ T4380] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[  238.963374][ T4380] usb 1-1: config 0 has an invalid interface association descriptor of length 4, skipping
[  238.986043][ T4380] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.008170][ T4380] usb 1-1: config 0 has no interface number 0
[  239.014310][ T4380] usb 1-1: config 0 interface 48 altsetting 12 has an invalid endpoint descriptor of length 2, skipping
[  239.040114][ T4380] usb 1-1: config 0 interface 48 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  239.063715][ T4380] usb 1-1: config 0 interface 48 has no altsetting 0
[  239.070922][ T4380] usb 1-1: New USB device found, idVendor=059f, idProduct=0643, bcdDevice= 0.00
[  239.089811][ T4380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.131850][ T4380] usb 1-1: config 0 descriptor??
[  239.289390][ T4984] team0 (unregistering): Port device team_slave_1 removed
[  239.308723][ T4984] team0 (unregistering): Port device team_slave_0 removed
[  239.324070][ T4984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.343638][ T4984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.415201][ T4380] usb 1-1: string descriptor 0 read error: -71
[  239.427861][ T4380] usb-storage 1-1:0.48: USB Mass Storage device detected
[  239.480881][ T4380] usb-storage 1-1:0.48: Quirks match for vid 059f pid 0643: 100
[  239.515182][ T3940] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  239.541659][ T4984] bond0 (unregistering): Released all slaves
[  239.548626][ T4380] usb 1-1: USB disconnect, device number 13
[  239.704181][ T6966] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.752509][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  239.771004][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  239.804066][ T6966] 8021q: adding VLAN 0 to HW filter on device team0
[  239.805461][ T3940] usb 2-1: Using ep0 maxpacket: 16
[  239.838552][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  239.864639][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  239.876770][ T4349] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.884057][ T4349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.907150][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  239.940599][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.948511][ T3940] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  239.958765][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.965676][ T3940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.978907][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.986065][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.998135][ T3940] usb 2-1: config 0 descriptor??
[  240.024960][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  240.051326][ T3940] gspca_main: sonixj-2.14.0 probing 0471:0327
[  240.061696][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  240.101953][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  240.136876][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  240.216223][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  240.231381][ T4318] handle_bad_sector: 18338 callbacks suppressed
[  240.231405][ T4318] attempt to access beyond end of device
[  240.231405][ T4318] loop0: rw=524288, want=49160, limit=64
[  240.235800][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  240.250828][ T4318] attempt to access beyond end of device
[  240.250828][ T4318] loop0: rw=524288, want=49168, limit=64
[  240.293202][ T4318] attempt to access beyond end of device
[  240.293202][ T4318] loop0: rw=524288, want=49176, limit=64
[  240.309214][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  240.329137][ T4318] attempt to access beyond end of device
[  240.329137][ T4318] loop0: rw=524288, want=49184, limit=64
[  240.343224][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  240.365678][ T4318] attempt to access beyond end of device
[  240.365678][ T4318] loop0: rw=524288, want=49192, limit=64
[  240.382184][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  240.387754][ T4825] Bluetooth: hci8: command 0x040f tx timeout
[  240.406871][ T4318] attempt to access beyond end of device
[  240.406871][ T4318] loop0: rw=524288, want=49200, limit=64
[  240.474236][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  240.482974][ T4318] attempt to access beyond end of device
[  240.482974][ T4318] loop0: rw=524288, want=49208, limit=64
[  240.498683][ T3752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  240.546111][ T4318] attempt to access beyond end of device
[  240.546111][ T4318] loop0: rw=524288, want=49216, limit=64
[  240.561719][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  240.562890][ T4318] attempt to access beyond end of device
[  240.562890][ T4318] loop0: rw=524288, want=49224, limit=64
[  240.593673][ T4318] attempt to access beyond end of device
[  240.593673][ T4318] loop0: rw=524288, want=49232, limit=64
[  240.785903][ T4825] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  240.888829][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.906886][ T1401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.932764][ T6966] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.079241][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  241.116634][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  241.195694][ T4825] usb 4-1: Using ep0 maxpacket: 32
[  241.208684][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  241.229365][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  241.292899][ T6966] device veth0_vlan entered promiscuous mode
[  241.315236][ T4825] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  241.323617][ T4825] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  241.346588][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'.
[  241.358817][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  241.382822][ T4825] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  241.386361][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.413574][ T4825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  241.431754][ T6966] device veth1_vlan entered promiscuous mode
[  241.466115][ T4825] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  241.516130][ T4825] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  241.545889][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  241.564687][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  241.584369][ T4825] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  241.599275][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  241.621590][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.642963][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.665877][ T4825] usb 4-1: config 0 descriptor??
[  241.685330][ T6966] device veth0_macvtap entered promiscuous mode
[  241.720728][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  241.746536][ T6966] device veth1_macvtap entered promiscuous mode
[  241.829710][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.868404][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.899982][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.949560][ T4825] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  241.952166][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.021124][ T4825] usb 4-1: USB disconnect, device number 20
[  242.033213][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.062635][ T4825] usblp0: removed
[  242.069084][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.123460][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.174973][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.214973][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.245121][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.275100][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.305969][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.340536][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.372336][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.387078][ T3816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.438119][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.459455][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.465101][ T1077] Bluetooth: hci8: command 0x0419 tx timeout
[  242.496439][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.505070][ T4825] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  242.527824][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.564973][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.595170][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.615476][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.654955][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.685111][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.704983][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.735537][ T6966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.755051][ T4825] usb 4-1: Using ep0 maxpacket: 32
[  242.774963][ T6966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.797025][ T6966] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.812286][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.846151][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  242.873740][ T6966] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.875364][ T4825] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  242.903333][ T6966] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  242.925105][ T4825] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  242.932877][ T6966] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  242.933748][ T4825] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  242.955515][ T6966] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.017787][ T4825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  243.080040][ T4825] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  243.129271][ T4825] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  243.175771][ T4825] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  243.187275][ T3752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.238956][ T3752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.257340][ T4825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.285976][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  243.298879][ T4825] usb 4-1: config 0 descriptor??
[  243.300428][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.322293][ T3940] gspca_sonixj: reg_w1 err -71
[  243.327410][ T3940] sonixj: probe of 2-1:0.0 failed with error -71
[  243.369487][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.375207][ T3940] usb 2-1: USB disconnect, device number 17
[  243.428900][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  243.578188][ T4825] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  243.628953][ T4825] usb 4-1: USB disconnect, device number 21
[  243.666671][ T4825] usblp0: removed
[  244.265058][ T4825] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  244.546085][ T1077] Bluetooth: hci8: command 0x0411 tx timeout
[  244.635400][ T4825] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  244.644133][ T4825] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.648951][ T7147] loop3: detected capacity change from 0 to 32768
[  244.701700][ T4825] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.796945][ T7145] loop2: detected capacity change from 0 to 32768
[  244.811678][ T7147] XFS (loop3): Mounting V5 Filesystem
[  244.890880][ T7145] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.883 (7145)
[  244.903410][ T4825] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  244.923102][ T4825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.935070][ T4177] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  244.963071][ T4825] usb 2-1: Product: syz
[  244.972801][ T4825] usb 2-1: Manufacturer: syz
[  244.982310][ T4825] usb 2-1: SerialNumber: syz
[  244.999099][ T7147] XFS (loop3): Ending clean mount
[  245.011755][ T7145] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  245.075115][ T7145] BTRFS info (device loop2): using free space tree
[  245.093653][ T7145] BTRFS info (device loop2): has skinny extents
[  245.117668][   T26] audit: type=1800 audit(2000000061.420:24): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.884" name="file1" dev="loop3" ino=1286 res=0 errno=0
[  245.138125][    C0] vkms_vblank_simulate: vblank timer overrun
[  245.151151][ T1077] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 
[  245.175575][ T1077] XFS (loop3): Unmount and run xfs_repair
[  245.181375][ T1077] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  245.195474][ T4177] usb 5-1: Using ep0 maxpacket: 8
[  245.245327][ T4318] handle_bad_sector: 10284 callbacks suppressed
[  245.245350][ T4318] attempt to access beyond end of device
[  245.245350][ T4318] loop0: rw=524288, want=49752, limit=64
[  245.278443][ T1077] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  245.309356][ T1077] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40  ...............@
[  245.313822][ T4318] attempt to access beyond end of device
[  245.313822][ T4318] loop0: rw=524288, want=49760, limit=64
[  245.319565][ T4825] usb 2-1: 0:2 : does not exist
[  245.330601][ T4318] attempt to access beyond end of device
[  245.330601][ T4318] loop0: rw=524288, want=49768, limit=64
[  245.352890][ T4177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.363207][ T4177] usb 5-1: config 0 has no interfaces?
[  245.369065][ T4318] attempt to access beyond end of device
[  245.369065][ T4318] loop0: rw=524288, want=49776, limit=64
[  245.380351][ T1077] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6  .~!...H8.-v7.. .
[  245.381095][ T4318] attempt to access beyond end of device
[  245.381095][ T4318] loop0: rw=524288, want=49784, limit=64
[  245.401413][ T4318] attempt to access beyond end of device
[  245.401413][ T4318] loop0: rw=524288, want=49792, limit=64
[  245.412796][ T4318] attempt to access beyond end of device
[  245.412796][ T4318] loop0: rw=524288, want=49800, limit=64
[  245.416431][ T7145] BTRFS info (device loop2): enabling ssd optimizations
[  245.424512][ T4318] attempt to access beyond end of device
[  245.424512][ T4318] loop0: rw=524288, want=49808, limit=64
[  245.443877][ T4318] attempt to access beyond end of device
[  245.443877][ T4318] loop0: rw=524288, want=49816, limit=64
[  245.463147][ T4825] usb 2-1: USB disconnect, device number 18
[  245.463361][ T4318] attempt to access beyond end of device
[  245.463361][ T4318] loop0: rw=524288, want=49824, limit=64
[  245.471833][ T1077] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03  ................
[  245.545380][ T4177] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b
[  245.554497][ T4177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.556917][ T1077] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60  .......\.......`
[  245.588379][ T1077] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  245.594566][ T4177] usb 5-1: Product: syz
[  245.598729][ T1077] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  245.602081][ T4177] usb 5-1: Manufacturer: syz
[  245.611486][ T1077] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  245.626325][ T7147] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74
[  245.637828][ T4177] usb 5-1: SerialNumber: syz
[  245.667027][ T7147] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  245.697751][ T4177] usb 5-1: config 0 descriptor??
[  245.710871][ T7147] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  245.814006][ T6582] XFS (loop3): Unmounting Filesystem
[  245.948242][ T4632] usb 5-1: USB disconnect, device number 29
[  246.986506][ T7216] bridge0: port 3(syz_tun) entered disabled state
[  247.059681][ T7216] device syz_tun left promiscuous mode
[  247.071163][ T7216] bridge0: port 3(syz_tun) entered disabled state
[  247.405702][ T7239] loop4: detected capacity change from 0 to 128
[  247.468882][ T7239] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  247.665102][ T1077] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  247.865251][ T3614] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  248.005115][ T3940] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  248.043522][ T1077] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  248.053712][ T1077] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.074203][ T1077] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  248.135203][ T3614] usb 5-1: Using ep0 maxpacket: 32
[  248.222774][ T7261] netlink: 72 bytes leftover after parsing attributes in process `syz.3.919'.
[  248.235528][ T1077] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  248.244702][ T1077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.269671][ T1077] usb 3-1: Product: syz
[  248.273979][ T1077] usb 3-1: Manufacturer: syz
[  248.289707][ T1077] usb 3-1: SerialNumber: syz
[  248.295534][ T3614] usb 5-1: unable to get BOS descriptor or descriptor too short
[  248.303521][ T3940] usb 2-1: too many configurations: 53, using maximum allowed: 8
[  248.395227][ T3614] usb 5-1: config 1 has an invalid descriptor of length 14, skipping remainder of the config
[  248.405836][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.425037][ T3614] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  248.444708][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.555308][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.565767][ T3614] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  248.574819][ T3614] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  248.595301][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.615904][ T3614] usb 5-1: SerialNumber: syz
[  248.664150][ T1077] usb 3-1: 0:2 : does not exist
[  248.677332][ T7273] dccp_invalid_packet: P.Data Offset(102) too large
[  248.685047][ T3614] cdc_ether 5-1:1.0: skipping garbage
[  248.690485][ T3614] usb 5-1: bad CDC descriptors
[  248.699231][ T1077] usb 3-1: USB disconnect, device number 19
[  248.705645][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.725409][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.825282][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.858005][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.887551][ T3935] usb 5-1: USB disconnect, device number 30
[  248.965477][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  248.982589][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.075263][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.092738][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.210705][ T7269] loop3: detected capacity change from 0 to 32768
[  249.235260][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.273365][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.385280][ T3940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.417896][ T3940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.468589][ T7269] XFS (loop3): Mounting V5 Filesystem
[  249.595173][ T3940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  249.606619][ T3940] usb 2-1: New USB device strings: Mfr=225, Product=156, SerialNumber=185
[  249.638198][ T3940] usb 2-1: Product: syz
[  249.643327][ T3940] usb 2-1: Manufacturer: syz
[  249.651522][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'.
[  249.655083][ T3940] usb 2-1: SerialNumber: syz
[  249.672196][ T7269] XFS (loop3): Ending clean mount
[  249.688520][ T7269] XFS (loop3): Quotacheck needed: Please wait.
[  249.698338][ T7296] loop4: detected capacity change from 0 to 1024
[  249.790382][ T7269] XFS (loop3): Quotacheck: Done.
[  249.838568][ T7296] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  249.976925][ T7269] xfs: Unknown parameter '�����������	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����'
[  250.177359][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'.
[  250.177408][ T6582] XFS (loop3): Unmounting Filesystem
[  250.271205][ T4318] handle_bad_sector: 19334 callbacks suppressed
[  250.271230][ T4318] attempt to access beyond end of device
[  250.271230][ T4318] loop0: rw=524288, want=49160, limit=64
[  250.345179][ T4318] attempt to access beyond end of device
[  250.345179][ T4318] loop0: rw=524288, want=49168, limit=64
[  250.388798][ T4318] attempt to access beyond end of device
[  250.388798][ T4318] loop0: rw=524288, want=49176, limit=64
[  250.395075][ T3940] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  250.416781][ T3940] cdc_ncm 2-1:1.0: bind() failure
[  250.423118][ T3940] usbtest 2-1:1.0: Linux gadget zero
[  250.437791][ T3940] usbtest 2-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  250.455237][ T4318] attempt to access beyond end of device
[  250.455237][ T4318] loop0: rw=524288, want=49184, limit=64
[  250.461380][ T3940] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  250.473577][ T3940] cdc_ncm 2-1:1.1: bind() failure
[  250.484341][ T3940] usbtest 2-1:1.1: couldn't get endpoints, -22
[  250.490981][ T3940] usbtest: probe of 2-1:1.1 failed with error -22
[  250.516011][ T4318] attempt to access beyond end of device
[  250.516011][ T4318] loop0: rw=524288, want=49192, limit=64
[  250.529904][ T3940] usb 2-1: USB disconnect, device number 19
[  250.552345][ T7303] Process accounting resumed
[  250.621821][ T4318] attempt to access beyond end of device
[  250.621821][ T4318] loop0: rw=524288, want=49200, limit=64
[  250.646460][ T4318] attempt to access beyond end of device
[  250.646460][ T4318] loop0: rw=524288, want=49208, limit=64
[  250.659140][ T4318] attempt to access beyond end of device
[  250.659140][ T4318] loop0: rw=524288, want=49216, limit=64
[  250.680105][ T4318] attempt to access beyond end of device
[  250.680105][ T4318] loop0: rw=524288, want=49224, limit=64
[  250.692723][ T4318] attempt to access beyond end of device
[  250.692723][ T4318] loop0: rw=524288, want=49232, limit=64
[  251.130649][ T3935] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  251.417353][ T7338] loop2: detected capacity change from 0 to 128
[  251.506666][ T3935] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  251.528143][ T3935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.573249][ T3935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  251.785341][ T3935] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  251.823320][ T3935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.843536][ T3935] usb 1-1: Product: syz
[  251.863185][ T3935] usb 1-1: Manufacturer: syz
[  251.905895][ T3935] usb 1-1: SerialNumber: syz
[  252.245316][ T3935] usb 1-1: 0:2 : does not exist
[  252.324724][ T3935] usb 1-1: USB disconnect, device number 14
[  252.364451][ T7344] loop4: detected capacity change from 0 to 32768
[  252.475122][ T7344] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.949 (7344)
[  252.525593][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.958'.
[  252.589018][ T7344] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  252.648235][ T7344] BTRFS info (device loop4): using free space tree
[  252.677181][ T7344] BTRFS info (device loop4): has skinny extents
[  252.933009][ T7344] BTRFS info (device loop4): enabling ssd optimizations
[  253.345328][ T7365] loop2: detected capacity change from 0 to 32768
[  253.424294][ T7365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.959 (7365)
[  253.792501][ T7365] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  253.817677][ T7365] BTRFS info (device loop2): using free space tree
[  253.862875][ T7365] BTRFS info (device loop2): has skinny extents
[  254.019078][ T7414] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  254.031938][ T7414] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub
[  254.253759][ T7365] BTRFS info (device loop2): enabling ssd optimizations
[  254.523436][ T7365] loop2: detected capacity change from 32768 to 64
[  254.554407][ T7432] sp0: Synchronizing with TNC
[  254.596704][ T7439] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  254.626082][ T7431] [U] �`
[  254.966842][ T3570] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  254.997092][ T4177] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  255.032613][ T6966] BTRFS: error (device loop2) in __btrfs_run_delayed_items:1089: errno=-5 IO failure
[  255.048017][ T6966] BTRFS info (device loop2): forced readonly
[  255.054526][ T6966] BTRFS warning (device loop2): Skipping commit of aborted transaction.
[  255.063735][ T6966] BTRFS: error (device loop2) in cleanup_transaction:2018: errno=-5 IO failure
[  255.278920][ T4318] handle_bad_sector: 16043 callbacks suppressed
[  255.278944][ T4318] attempt to access beyond end of device
[  255.278944][ T4318] loop0: rw=0, want=50840, limit=64
[  255.354232][ T4318] attempt to access beyond end of device
[  255.354232][ T4318] loop0: rw=0, want=50848, limit=64
[  255.379762][ T4318] attempt to access beyond end of device
[  255.379762][ T4318] loop0: rw=0, want=50856, limit=64
[  255.400736][ T4318] attempt to access beyond end of device
[  255.400736][ T4318] loop0: rw=0, want=50864, limit=64
[  255.424240][ T4318] attempt to access beyond end of device
[  255.424240][ T4318] loop0: rw=0, want=50872, limit=64
[  255.460263][ T4177] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.470669][ T4318] attempt to access beyond end of device
[  255.470669][ T4318] loop0: rw=0, want=50880, limit=64
[  255.482137][ T4177] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  255.485281][ T4318] attempt to access beyond end of device
[  255.485281][ T4318] loop0: rw=0, want=50888, limit=64
[  255.491327][ T4177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.511044][ T1388] ieee802154 phy0 wpan0: encryption failed: -22
[  255.511162][ T1388] ieee802154 phy1 wpan1: encryption failed: -22
[  255.526946][ T4318] attempt to access beyond end of device
[  255.526946][ T4318] loop0: rw=0, want=50896, limit=64
[  255.537917][ T4318] attempt to access beyond end of device
[  255.537917][ T4318] loop0: rw=0, want=50904, limit=64
[  255.555564][ T4177] usb 4-1: config 0 descriptor??
[  255.560992][ T4318] attempt to access beyond end of device
[  255.560992][ T4318] loop0: rw=0, want=50912, limit=64
[  255.617433][ T4177] pwc: Askey VC010 type 2 USB webcam detected.
[  255.815150][ T4632] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  255.835394][ T4177] pwc: send_video_command error -71
[  255.840647][ T4177] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  255.855097][ T4177] Philips webcam: probe of 4-1:0.0 failed with error -71
[  255.876439][ T4177] usb 4-1: USB disconnect, device number 22
[  256.165177][ T4320] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  256.205521][ T4632] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.229115][ T7470] loop4: detected capacity change from 0 to 32768
[  256.308756][ T7470] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.985 (7470)
[  256.365104][ T7470] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  256.385156][ T7470] BTRFS info (device loop4): enabling auto defrag
[  256.391662][ T7470] BTRFS info (device loop4): doing ref verification
[  256.399523][ T4632] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  256.414985][ T4632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.432852][ T4320] usb 3-1: Using ep0 maxpacket: 8
[  256.445266][ T7470] BTRFS info (device loop4): use no compression
[  256.451666][ T4632] usb 1-1: Product: syz
[  256.461803][ T7470] BTRFS info (device loop4): force clearing of disk cache
[  256.469450][ T4632] usb 1-1: Manufacturer: syz
[  256.475223][ T4632] usb 1-1: SerialNumber: syz
[  256.484432][ T7470] BTRFS info (device loop4): disabling free space tree
[  256.515033][ T7470] BTRFS info (device loop4): has skinny extents
[  256.731430][ T7470] BTRFS info (device loop4): enabling ssd optimizations
[  256.754844][ T7470] BTRFS info (device loop4): clearing free space tree
[  256.782025][ T7470] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  256.797099][   T27] INFO: task kworker/u4:12:3956 blocked for more than 143 seconds.
[  256.805785][ T4320] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  256.815690][   T27]       Not tainted 5.15.168-syzkaller #0
[  256.821481][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  256.834972][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.839098][ T7470] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  256.847558][ T4320] usb 3-1: Product: syz
[  256.857583][ T4320] usb 3-1: Manufacturer: syz
[  256.862210][ T4320] usb 3-1: SerialNumber: syz
[  256.872092][ T4320] usb 3-1: config 0 descriptor??
[  256.881599][   T27] task:kworker/u4:12   state:D stack:23744 pid: 3956 ppid:     2 flags:0x00004000
[  256.890959][   T27] Workqueue: writeback wb_workfn (flush-7:0)
[  256.897642][   T27] Call Trace:
[  256.901264][   T27]  <TASK>
[  256.904501][   T27]  __schedule+0x12c4/0x45b0
[  256.910420][   T27]  ? release_firmware_map_entry+0x190/0x190
[  256.919120][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  256.925337][   T27]  ? print_irqtrace_events+0x210/0x210
[  256.930826][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[  256.944966][   T27]  ? wq_worker_sleeping+0x5d/0x200
[  256.950554][   T27]  schedule+0x11b/0x1f0
[  256.954789][   T27]  rwsem_down_write_slowpath+0xf0c/0x16a0
[  256.970932][   T27]  ? rwsem_write_trylock+0x210/0x210
[  256.978988][   T27]  ? read_lock_is_recursive+0x10/0x10
[  256.984665][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  256.990770][   T27]  ? rwsem_write_trylock+0x166/0x210
[  256.996323][   T27]  ? clear_nonspinnable+0x60/0x60
[  257.001420][   T27]  ? has_not_enough_free_secs+0x3e3/0x920
[  257.007359][   T27]  f2fs_balance_fs+0x4d4/0x6a0
[  257.012599][   T27]  ? f2fs_commit_inmem_pages+0xc00/0xc00
[  257.018797][   T27]  ? __get_node_page+0x42c/0x820
[  257.023777][   T27]  ? unlock_page+0x172/0x200
[  257.028488][   T27]  ? f2fs_put_page+0x1f0/0x380
[  257.039061][   T27]  f2fs_write_inode+0x4c3/0x540
[  257.044091][   T27]  __writeback_single_inode+0x644/0xe30
[  257.053381][   T27]  writeback_sb_inodes+0xbce/0x1a40
[  257.063644][   T27]  ? queue_io+0x560/0x560
[  257.071764][   T27]  ? __writeback_inodes_wb+0x400/0x400
[  257.083200][   T27]  __writeback_inodes_wb+0x114/0x400
[  257.094486][   T27]  wb_writeback+0x465/0xc50
[  257.104160][   T27]  ? rcu_lock_release+0x20/0x20
[  257.113708][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  257.123214][   T27]  ? cpumask_next+0xc3/0xf0
[  257.128017][   T27]  wb_workfn+0xd07/0x1130
[  257.132469][   T27]  ? mark_lock+0x98/0x340
[  257.137331][ T4320] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  257.145918][   T27]  ? inode_wait_for_writeback+0x280/0x280
[  257.154160][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  257.160456][   T27]  ? print_irqtrace_events+0x210/0x210
[  257.166086][   T27]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  257.172129][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  257.187823][   T27]  process_one_work+0x8a1/0x10c0
[  257.192828][   T27]  ? print_irqtrace_events+0x210/0x210
[  257.208693][   T27]  ? worker_detach_from_pool+0x260/0x260
[  257.214491][   T27]  ? _raw_spin_lock_irqsave+0x120/0x120
[  257.221177][   T27]  ? kthread_data+0x4e/0xc0
[  257.226473][   T27]  ? wq_worker_running+0x97/0x170
[  257.231889][   T27]  worker_thread+0xaca/0x1280
[  257.236967][   T27]  kthread+0x3f6/0x4f0
[  257.241082][   T27]  ? rcu_lock_release+0x20/0x20
[  257.246115][   T27]  ? kthread_blkcg+0xd0/0xd0
[  257.250735][   T27]  ret_from_fork+0x1f/0x30
[  257.255338][   T27]  </TASK>
[  257.265652][   T27] INFO: task syz.0.150:4299 blocked for more than 143 seconds.
[  257.281906][   T27]       Not tainted 5.15.168-syzkaller #0
[  257.313940][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  257.329731][   T27] task:syz.0.150       state:D stack:22752 pid: 4299 ppid:  3693 flags:0x00004004
[  257.354485][   T27] Call Trace:
[  257.364609][   T27]  <TASK>
[  257.378479][   T27]  __schedule+0x12c4/0x45b0
[  257.383072][   T27]  ? release_firmware_map_entry+0x190/0x190
[  257.409583][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  257.425446][   T27]  ? print_irqtrace_events+0x210/0x210
[  257.438795][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[  257.449582][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  257.465286][   T27]  schedule+0x11b/0x1f0
[  257.469734][   T27]  rwsem_down_write_slowpath+0xf0c/0x16a0
[  257.485035][   T27]  ? rwsem_write_trylock+0x210/0x210
[  257.495250][   T27]  ? read_lock_is_recursive+0x10/0x10
[  257.505179][   T27]  ? rwsem_write_trylock+0x166/0x210
[  257.510515][   T27]  ? clear_nonspinnable+0x60/0x60
[  257.521044][   T27]  process_measurement+0x443/0x21c0
[  257.527591][   T27]  ? mark_lock+0x98/0x340
[  257.532059][   T27]  ? mark_lock+0x98/0x340
[  257.536822][   T27]  ? ima_file_mmap+0x1c0/0x1c0
[  257.541811][   T27]  ? apparmor_task_getsecid+0xb2/0x110
[  257.549671][   T27]  ima_file_check+0xf3/0x180
[  257.554466][   T27]  ? do_dentry_open+0xc15/0xfb0
[  257.559779][   T27]  ? ima_bprm_check+0x2b0/0x2b0
[  257.564825][   T27]  path_openat+0x2748/0x2f20
[  257.573121][   T27]  ? do_filp_open+0x460/0x460
[  257.581630][   T27]  do_filp_open+0x21c/0x460
[  257.592474][   T27]  ? vfs_tmpfile+0x2e0/0x2e0
[  257.600898][   T27]  ? _raw_spin_unlock+0x24/0x40
[  257.610782][   T27]  ? alloc_fd+0x598/0x630
[  257.619145][   T27]  do_sys_openat2+0x13b/0x4f0
[  257.624349][   T27]  ? do_sys_open+0x220/0x220
[  257.635710][   T27]  __x64_sys_openat+0x243/0x290
[  257.640611][   T27]  ? __ia32_sys_open+0x270/0x270
[  257.653348][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  257.663423][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  257.669815][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  257.676342][   T27]  do_syscall_64+0x3b/0xb0
[  257.680787][   T27]  ? clear_bhb_loop+0x15/0x70
[  257.686676][ T4632] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  257.693132][ T4632] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  257.701548][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  257.707806][   T27] RIP: 0033:0x7f52063b3ff9
[  257.712393][ T4632] cdc_ncm 1-1:1.0: setting rx_max = 2048
[  257.718467][   T27] RSP: 002b:00007f520482c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  257.730804][   T27] RAX: ffffffffffffffda RBX: 00007f520656bf80 RCX: 00007f52063b3ff9
[  257.742782][   T27] RDX: 0000000000020242 RSI: 0000000020000380 RDI: ffffffffffffff9c
[  257.755308][   T27] RBP: 00007f5206426296 R08: 0000000000000000 R09: 0000000000000000
[  257.763316][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  257.773981][   T27] R13: 0000000000000000 R14: 00007f520656bf80 R15: 00007fffad2009f8
[  257.782421][   T27]  </TASK>
[  257.785849][   T27] INFO: task syz.0.150:4315 blocked for more than 144 seconds.
[  257.793638][   T27]       Not tainted 5.15.168-syzkaller #0
[  257.800742][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  257.809884][   T27] task:syz.0.150       state:D stack:24096 pid: 4315 ppid:  3693 flags:0x00004004
[  257.819741][   T27] Call Trace:
[  257.823038][   T27]  <TASK>
[  257.826489][   T27]  __schedule+0x12c4/0x45b0
[  257.832182][   T27]  ? release_firmware_map_entry+0x190/0x190
[  257.838596][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  257.844698][   T27]  ? print_irqtrace_events+0x210/0x210
[  257.851067][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[  257.856648][   T27]  ? do_raw_spin_unlock+0x137/0x8b0
[  257.861971][   T27]  schedule+0x11b/0x1f0
[  257.866906][   T27]  rwsem_down_write_slowpath+0xf0c/0x16a0
[  257.872739][   T27]  ? rwsem_write_trylock+0x210/0x210
[  257.880504][   T27]  ? read_lock_is_recursive+0x10/0x10
[  257.886340][   T27]  ? __lock_acquire+0x1295/0x1ff0
[  257.892100][   T27]  ? rwsem_write_trylock+0x166/0x210
[  257.905127][   T27]  ? clear_nonspinnable+0x60/0x60
[  257.910213][   T27]  f2fs_issue_checkpoint+0x2c8/0x4c0
[  257.916677][ T4632] cdc_ncm 1-1:1.0: setting tx_max = 60
[  257.924123][ T4632] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  257.941374][   T27]  ? f2fs_destroy_checkpoint_caches+0x20/0x20
[  257.950247][   T27]  ? d_instantiate_new+0x7b/0x110
[  257.963164][   T27]  ? f2fs_create+0xa80/0x14a0
[  257.963710][ T4632] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  257.970812][   T27]  ? __lock_acquire+0x1ff0/0x1ff0
[  257.994789][   T27]  ? f2fs_sync_fs+0x1f9/0x3c0
[  258.001811][ T4632] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42
[  258.002798][   T27]  f2fs_create+0xb3b/0x14a0
[  258.025067][   T27]  ? f2fs_lookup+0xa10/0xa10
[  258.029903][   T27]  path_openat+0x130a/0x2f20
[  258.045028][   T27]  ? do_filp_open+0x460/0x460
[  258.049902][   T27]  do_filp_open+0x21c/0x460
[  258.054554][   T27]  ? vfs_tmpfile+0x2e0/0x2e0
[  258.071254][   T27]  ? _raw_spin_unlock+0x24/0x40
[  258.078576][ T4632] usb 1-1: USB disconnect, device number 15
[  258.081222][   T27]  ? alloc_fd+0x598/0x630
[  258.085837][ T4632] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM
[  258.098617][   T27]  do_sys_openat2+0x13b/0x4f0
[  258.111295][   T27]  ? do_sys_open+0x220/0x220
[  258.119734][   T27]  __x64_sys_openat+0x243/0x290
[  258.124804][   T27]  ? __ia32_sys_open+0x270/0x270
[  258.134824][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  258.151938][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  258.158695][   T27]  ? syscall_enter_from_user_mode+0x2e/0x240
[  258.164899][   T27]  do_syscall_64+0x3b/0xb0
[  258.177976][   T27]  ? clear_bhb_loop+0x15/0x70
[  258.182777][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  258.195121][   T27] RIP: 0033:0x7f52063b3ff9
[  258.199700][   T27] RSP: 002b:00007f520480b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  258.209442][   T27] RAX: ffffffffffffffda RBX: 00007f520656c058 RCX: 00007f52063b3ff9
[  258.218449][   T27] RDX: 000000000000275a RSI: 00000000200000c0 RDI: ffffffffffffff9c
[  258.226776][   T27] RBP: 00007f5206426296 R08: 0000000000000000 R09: 0000000000000000
[  258.235067][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  258.244611][   T27] R13: 0000000000000000 R14: 00007f520656c058 R15: 00007fffad2009f8
[  258.252811][   T27]  </TASK>
[  258.256179][   T27] 
[  258.256179][   T27] Showing all locks held in the system:
[  258.264055][   T27] 1 lock held by khungtaskd/27:
[  258.279797][   T27]  #0: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  258.295124][   T27] 2 locks held by getty/3331:
[  258.300307][   T27]  #0: ffff88814ab8a098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  258.310950][   T27]  #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0
[  258.322369][   T27] 4 locks held by udevd/3563:
[  258.327417][   T27]  #0: ffff888054c548b8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10
[  258.337025][   T27]  #1: ffff88806185cc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x50/0x3b0
[  258.347979][   T27]  #2: ffff8880283d32c0 (kn->active#78){++++}-{0:0}, at: kernfs_seq_start+0x6f/0x3b0
[  258.358729][   T27]  #3: ffff888020a93220 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90
[  258.369041][   T27] 2 locks held by kworker/0:3/3612:
[  258.374279][   T27]  #0: ffff888017072138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  258.388321][   T27]  #1: ffffc90003247d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  258.401020][   T27] 3 locks held by kworker/1:7/3614:
[  258.407294][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  258.425466][   T27]  #1: ffffc90003267d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  258.445075][   T27]  #2: ffffffff8c9241e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740
[  258.463894][   T27] 4 locks held by udevd/3681:
[  258.479205][   T27]  #0: ffff888023d32790 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xae/0xd10
[  258.495051][   T27]  #1: ffff888024836088 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x50/0x3b0
[  258.517451][   T27]  #2: ffff88801bdb1cb8 (kn->active#78){++++}-{0:0}, at: kernfs_seq_start+0x6f/0x3b0
[  258.538758][   T27]  #3: ffff888076efa220 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x22/0x90
[  258.560248][   T27] 2 locks held by kworker/1:10/3934:
[  258.572477][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  258.596131][   T27]  #1: ffffc90003087d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  258.623865][   T27] 4 locks held by kworker/u4:12/3956:
[  258.638126][   T27]  #0: ffff888019ff1138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  258.651128][   T27]  #1: ffffc90002f27d20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  258.664159][   T27]  #2: ffff8880740a80e0 (&type->s_umount_key#49){++++}-{3:3}, at: trylock_super+0x1b/0xf0
[  258.675092][   T27]  #3: ffff888077be11b0 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x4d4/0x6a0
[  258.684862][   T27] 4 locks held by syz-executor/4285:
[  258.690800][   T27]  #0: ffff8880798940e0 (&type->s_umount_key#63){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  258.702117][   T27]  #1: ffffffff8ce023c8 (uuid_mutex){+.+.}-{3:3}, at: btrfs_close_devices+0xbc/0x5c0
[  258.712580][   T27]  #2: ffff8880211e7518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790
[  258.722916][   T27]  #3: ffff88802127a468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xbe0
[  258.740905][   T27] 2 locks held by syz.0.150/4299:
[  258.761105][   T27]  #0: ffff8880740a8460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  258.781643][   T27]  #1: ffff888061ded6d0 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: process_measurement+0x443/0x21c0
[  258.803481][   T27] 3 locks held by syz.0.150/4315:
[  258.809016][   T27]  #0: ffff8880740a8460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  258.828766][   T27]  #1: ffff888061decd50 (&type->i_mutex_dir_key#9){++++}-{3:3}, at: path_openat+0x824/0x2f20
[  258.849731][   T27]  #2: ffff888077be11b0 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_issue_checkpoint+0x2c8/0x4c0
[  258.876612][   T27] 4 locks held by syz.0.150/4318:
[  258.881819][   T27] 6 locks held by kworker/0:18/4320:
[  258.905116][   T27]  #0: ffff88801c67d538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  258.916757][   T27]  #1: ffffc90003b97d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  258.928802][   T27]  #2: ffff8881476fe220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0
[  258.938120][   T27]  #3: ffff888020a93220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  258.948311][   T27]  #4: ffff888020a911a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  258.958520][   T27]  #5: ffff8880682e40d0 (&d->usb_mutex){+.+.}-{3:3}, at: rtl28xxu_ctrl_msg+0x57/0x650
[  258.970770][   T27] 2 locks held by kworker/1:16/4379:
[  258.976537][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  258.988217][   T27]  #1: ffffc90003157d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  259.002545][   T27] 2 locks held by kworker/1:17/4380:
[  259.012338][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  259.033751][   T27]  #1: ffffc900031b7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  259.055298][   T27] 7 locks held by kworker/0:19/4632:
[  259.061083][   T27]  #0: ffff88801c67d538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  259.081815][   T27]  #1: ffffc90003b77d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  259.097726][   T27]  #2: ffff8881477e5220 (&dev->mutex){....}-{3:3}, at: hub_event+0x208/0x54c0
[  259.112003][   T27]  #3: ffff888076efa220 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0xfa/0x8c0
[  259.125087][   T27]  #4: ffff888020a921a8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xc2/0x7f0
[  259.143195][   T27]  #5: ffffffff8da32188 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdev+0x79/0x210
[  259.154739][   T27]  #6: ffffffff8c9241e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740
[  259.175330][   T27] 2 locks held by kworker/1:18/4718:
[  259.180826][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  259.201005][   T27]  #1: ffffc90003fdfd20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  259.215243][   T27] 2 locks held by kworker/1:19/4825:
[  259.220709][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  259.238705][   T27]  #1: ffffc90003327d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  259.259954][   T27] 2 locks held by kworker/1:20/4908:
[  259.271857][   T27]  #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  259.288574][   T27]  #1: ffffc90002ec7d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  259.311718][   T27] 3 locks held by syz.1.393/5492:
[  259.319698][   T27]  #0: ffff8880197b4028 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x181/0x700
[  259.335347][   T27]  #1: ffff88807b178558 (sb_pagefaults#5){.+.+}-{0:0}, at: do_page_mkwrite+0x1a9/0x440
[  259.353276][   T27]  #2: ffff888061d935a8 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x4a2/0xd60
[  259.364750][   T27] 2 locks held by btrfs-cleaner/5487:
[  259.371573][   T27]  #0: ffff88807b178460 (sb_writers#18){.+.+}-{0:0}, at: cleaner_kthread+0x205/0x390
[  259.381288][   T27]  #1: ffff888061d93720 (&sb->s_type->i_mutex_key#26){+.+.}-{3:3}, at: btrfs_inode_lock+0x49/0xd0
[  259.398683][ T4632] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1
[  259.407560][   T27] 
[  259.409990][   T27] =============================================
[  259.409990][   T27] 
[  259.431765][   T27] NMI backtrace for cpu 0
[  259.436135][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0
[  259.444138][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  259.454255][   T27] Call Trace:
[  259.457560][   T27]  <TASK>
[  259.460511][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  259.465216][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  259.470879][   T27]  ? panic+0x860/0x860
[  259.474985][   T27]  ? nmi_cpu_backtrace+0x23b/0x4a0
[  259.480127][   T27]  nmi_cpu_backtrace+0x46a/0x4a0
[  259.485090][   T27]  ? __wake_up_klogd+0xd5/0x100
[  259.489966][   T27]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  259.496136][   T27]  ? _printk+0xd1/0x120
[  259.500310][   T27]  ? panic+0x860/0x860
[  259.504400][   T27]  ? __wake_up_klogd+0xcc/0x100
[  259.509290][   T27]  ? panic+0x860/0x860
[  259.513383][   T27]  ? __rcu_read_unlock+0x92/0x100
[  259.518428][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  259.524607][   T27]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  259.530733][   T27]  watchdog+0xe72/0xeb0
[  259.534927][   T27]  kthread+0x3f6/0x4f0
[  259.539023][   T27]  ? hungtask_pm_notify+0x50/0x50
[  259.544069][   T27]  ? kthread_blkcg+0xd0/0xd0
[  259.548691][   T27]  ret_from_fork+0x1f/0x30
[  259.553154][   T27]  </TASK>
[  259.556223][    C0] vkms_vblank_simulate: vblank timer overrun
[  259.562913][   T27] Sending NMI from CPU 0 to CPUs 1:
[  259.568448][    C1] NMI backtrace for cpu 1
[  259.568469][    C1] CPU: 1 PID: 4349 Comm: kworker/u4:13 Not tainted 5.15.168-syzkaller #0
[  259.568488][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  259.568498][    C1] Workqueue: phy29 ieee80211_iface_work
[  259.568526][    C1] RIP: 0010:debug_check_no_obj_freed+0xf7/0x4e0
[  259.568547][    C1] Code: 96 48 89 7c 24 18 e8 48 98 2f 06 48 89 44 24 10 48 89 dd 48 c1 ed 03 42 80 7c 25 00 00 74 08 48 89 df e8 ac f1 bb fd 48 8b 03 <48> 85 c0 0f 84 3f 03 00 00 48 89 6c 24 30 48 89 5c 24 38 4c 89 7c
[  259.568562][    C1] RSP: 0018:ffffc90002e07878 EFLAGS: 00000046
[  259.568575][    C1] RAX: 0000000000000000 RBX: ffffffff96a7a338 RCX: 0000000000000001
[  259.568587][    C1] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90002e07760
[  259.568599][    C1] RBP: 1ffffffff2d4f467 R08: dffffc0000000000 R09: 0000000000000003
[  259.568610][    C1] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000
[  259.568623][    C1] R13: ffff888017041dc0 R14: ffff88807a67b400 R15: ffff88807a67b000
[  259.568636][    C1] FS:  0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  259.568650][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.568662][    C1] CR2: 000055e101f982a0 CR3: 0000000026006000 CR4: 00000000003506e0
[  259.568677][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  259.568687][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  259.568697][    C1] Call Trace:
[  259.568703][    C1]  <NMI>
[  259.568708][    C1]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  259.568728][    C1]  ? read_lock_is_recursive+0x10/0x10
[  259.568747][    C1]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  259.568765][    C1]  ? unknown_nmi_error+0xd0/0xd0
[  259.568790][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  259.568808][    C1]  ? nmi_handle+0xf7/0x370
[  259.568825][    C1]  ? debug_check_no_obj_freed+0xf7/0x4e0
[  259.568841][    C1]  ? default_do_nmi+0x62/0x150
[  259.568860][    C1]  ? exc_nmi+0xa8/0x100
[  259.568876][    C1]  ? end_repeat_nmi+0x16/0x31
[  259.568897][    C1]  ? debug_check_no_obj_freed+0xf7/0x4e0
[  259.568913][    C1]  ? debug_check_no_obj_freed+0xf7/0x4e0
[  259.568931][    C1]  ? debug_check_no_obj_freed+0xf7/0x4e0
[  259.568947][    C1]  </NMI>
[  259.568952][    C1]  <TASK>
[  259.568963][    C1]  slab_free_freelist_hook+0x86/0x160
[  259.568985][    C1]  ? ieee80211_ibss_rx_queued_mgmt+0x192b/0x2af0
[  259.569006][    C1]  kfree+0xf1/0x270
[  259.569025][    C1]  ieee80211_ibss_rx_queued_mgmt+0x192b/0x2af0
[  259.569046][    C1]  ? mark_lock+0x98/0x340
[  259.569070][    C1]  ? ieee80211_ibss_rx_no_sta+0x720/0x720
[  259.569089][    C1]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  259.569108][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  259.569127][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  259.569146][    C1]  ? _raw_spin_unlock+0x40/0x40
[  259.569164][    C1]  ? kcov_remote_start+0x6f/0x480
[  259.569185][    C1]  ? kcov_remote_start+0xf2/0x480
[  259.569204][    C1]  ieee80211_iface_work+0x78f/0xcc0
[  259.569228][    C1]  process_one_work+0x8a1/0x10c0
[  259.569254][    C1]  ? worker_detach_from_pool+0x260/0x260
[  259.569275][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  259.569293][    C1]  ? kthread_data+0x4e/0xc0
[  259.569309][    C1]  ? wq_worker_running+0x97/0x170
[  259.569326][    C1]  worker_thread+0xaca/0x1280
[  259.569356][    C1]  kthread+0x3f6/0x4f0
[  259.569371][    C1]  ? rcu_lock_release+0x20/0x20
[  259.569387][    C1]  ? kthread_blkcg+0xd0/0xd0
[  259.569404][    C1]  ret_from_fork+0x1f/0x30
[  259.569428][    C1]  </TASK>
[  259.580156][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  259.921816][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0
[  259.929815][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  259.939888][   T27] Call Trace:
[  259.943186][   T27]  <TASK>
[  259.946133][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  259.950840][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  259.956504][   T27]  ? panic+0x860/0x860
[  259.960617][   T27]  panic+0x318/0x860
[  259.964538][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  259.970194][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  259.976379][   T27]  ? fb_is_primary_device+0xd0/0xd0
[  259.981608][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  259.987714][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  259.993896][   T27]  ? nmi_trigger_cpumask_backtrace+0x281/0x2a0
[  260.000077][   T27]  ? nmi_trigger_cpumask_backtrace+0x286/0x2a0
[  260.006256][   T27]  watchdog+0xeb0/0xeb0
[  260.010444][   T27]  kthread+0x3f6/0x4f0
[  260.014543][   T27]  ? hungtask_pm_notify+0x50/0x50
[  260.019589][   T27]  ? kthread_blkcg+0xd0/0xd0
[  260.024205][   T27]  ret_from_fork+0x1f/0x30
[  260.028651][   T27]  </TASK>
[  260.031955][   T27] Kernel Offset: disabled
[  260.036310][   T27] Rebooting in 86400 seconds..