last executing test programs:

5.926022799s ago: executing program 4:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "00e1f809"}]}}, 0x0}, 0x0)

3.952796922s ago: executing program 4:
syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000000040)='./file1\x00', 0x884, &(0x7f0000000000)={[{@quota}, {@grpid}]}, 0x1, 0x989c, &(0x7f000000ac80)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x281000}], 0x2, 0x101000, 0x0, 0x8)

3.828414341s ago: executing program 0:
openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r0=>0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
io_submit(r0, 0x1, &(0x7f0000000c00)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

3.476176155s ago: executing program 1:
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, 0x0, 0x0)

3.412860475s ago: executing program 1:
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@umask={'umask', 0x3d, 0x9}}, {@utf8}, {@discard}, {@errors_continue}, {}, {}, {@errors_remount}, {@utf8}, {@errors_continue}]}, 0x1, 0x1528, &(0x7f0000001f80)="$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")
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f00000018c0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c756d61736b3d30303030303030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030303430312c636f6465706167653d69736f383835392d322c757466382c6572726f72733d72656d6f756e742d726f2ce46d61736b3d30303030303030303030303030303030303030303030302c6e616d65636173653d312c757466382c6e616d65636173653d312c00"], 0x1, 0x1515, &(0x7f00000002c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)

3.408918376s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf4, &(0x7f0000000500)=""/244}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x0, 0x0, 0x21, 0x0, "cbfea29368cc608bff856ae471fe261fdfb44a306ea8d6896bbcb8eb45d73158"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.129169119s ago: executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000005e00)={0x1, 0x0, 0x0, 0x10001})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0))

2.869366489s ago: executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000101010200000000000000000a000000180002801400018008000100e000010000000000000000000c0019800800020002"], 0x38}}, 0x0)

2.869081649s ago: executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x5d)

2.774604453s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0)

2.735696729s ago: executing program 0:
syz_usb_connect(0x0, 0x45, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000e44d2082104350312960000000109023300010000000009040000000202ff0005240000000d240f01000000000000000000062413"], 0x0)

2.591460302s ago: executing program 4:
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2008410, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0], 0xfd, 0x557d, &(0x7f00000057c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
setreuid(0xee00, 0x0)
r1 = getuid()
setreuid(0xee00, r1)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

2.569805615s ago: executing program 3:
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='shortname=win95,shortname=win95,quiet,check=strict,nonumtail=0,nonumtail=0,rodir,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e39352c696f636861727365743d63703934392c001f68e1bcbae6eafd1e6847f659a0192b5c09d5b774ccacc33787bc313ab74147abcdd4b725e0db482efc6bd59bb24140efbc124c313d042ddc539056e27d9d14b1136ed771831c716a077f4bb32148b71521e18c36d6516c4e2ba5357c5a3122df5cb3660fb3d03748458ddb64dbef7f26fc3c366495671e7635fde9c3445080a75c9b70c7f60a7c791be69a"], 0x1, 0x217, &(0x7f0000000480)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.496778046s ago: executing program 2:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031c0081006000000002000020d3"])

2.416358358s ago: executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000540)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b)

2.182433534s ago: executing program 3:
socket$inet6(0xa, 0x800000000000002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xb}, 0x48)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, 0x0, 0x0)

2.057384993s ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000000, &(0x7f00000000c0)={[{@errors_remount}]}, 0xfe, 0x53d, &(0x7f0000000540)="$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")
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./bus/file0\x00', 0x1c917, &(0x7f0000000380)={[{}, {@noblock_validity}, {@usrquota}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x500, &(0x7f0000001440)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000320, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

1.2980976s ago: executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
ftruncate(r0, 0x8979)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080))

1.206763634s ago: executing program 2:
msgget$private(0x0, 0x8d)
msgsnd(0x0, &(0x7f00000000c0)={0x3, "df64d9"}, 0xb, 0x0)
msgget(0x1, 0x0)
msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0)
msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000440)=""/185)
r0 = msgget(0x1, 0x2b0)
msgsnd(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000725c568c76eedec4bc59aafe78213b51acf076b42c736f21bf7969fd30b356"], 0x9d, 0x0)
msgget$private(0x0, 0x0)
msgget$private(0x0, 0x2)
r1 = msgget(0x1, 0x0)
msgsnd(r0, 0x0, 0x0, 0x0)
semctl$GETNCNT(r1, 0x0, 0xe, 0x0)
msgctl$IPC_RMID(0x0, 0x0)

1.116996218s ago: executing program 2:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r5, r2, 0x2, 0x0, 0x4000}, 0x10)

1.082746423s ago: executing program 4:
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000440)=""/247, 0x26)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x840000088}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc0105303, &(0x7f0000000100))
tkill(r0, 0x7)

1.063311806s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
read$FUSE(r2, &(0x7f000000d440)={0x2020}, 0x2020)
write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0x200002e6)
fcntl$setpipe(r3, 0x407, 0x7000000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

975.737219ms ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x90)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"])
ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045505, 0x0)

906.06377ms ago: executing program 1:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801)
recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2002)

741.112675ms ago: executing program 3:
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5432027d, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x17, 0x1, 0x0, "5c30de6470c3e288a88b2c3fa8dae61600004000000000c80715224a1914d000"})

569.824692ms ago: executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031c0081006000000002000020d3"])

539.375987ms ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

298.530524ms ago: executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x1f9, &(0x7f0000000540)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)
sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b)

49.479102ms ago: executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x8)

0s ago: executing program 3:
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x541b, 0x0)

kernel console output (not intermixed with test programs):

T4410] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  105.099735][ T4410] F2FS-fs (loop4): Found nat_bits in checkpoint
[  105.334283][ T4410] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  105.359712][ T4410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  105.478410][ T4323] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.517542][ T4323] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.565397][ T4323] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.620938][ T4323] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.954620][ T4447] loop2: detected capacity change from 0 to 256
[  105.975562][ T4323] 8021q: adding VLAN 0 to HW filter on device bond0
[  106.043781][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.044497][ T4431] loop1: detected capacity change from 0 to 40427
[  106.054095][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.098500][ T4431] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  106.105289][ T4323] 8021q: adding VLAN 0 to HW filter on device team0
[  106.159654][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.160576][ T4431] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  106.185672][ T3938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.222186][ T4451] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  106.240998][ T3938] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.248176][ T3938] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.264348][ T4431] F2FS-fs (loop1): Found nat_bits in checkpoint
[  106.326049][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.335267][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.390065][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.445214][ T3940] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.452552][ T3940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.453047][ T4431] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  106.487505][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  106.521958][ T4431] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  106.534798][ T4431] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  106.540505][ T3940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  106.606565][ T4463] loop2: detected capacity change from 0 to 1024
[  106.626143][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  106.657864][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  106.658638][ T4463] EXT4-fs: quotafile must be on filesystem root
[  106.718629][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  106.742134][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  106.759882][ T4464] overlayfs: failed to resolve './file0': -2
[  106.764634][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  106.774322][ T3586] Bluetooth: hci3: command tx timeout
[  106.795175][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.815470][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.828747][ T4323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  106.868918][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  106.900604][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.909210][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  107.073653][ T4470] loop2: detected capacity change from 0 to 1024
[  107.139799][ T4470] hfsplus: bad catalog entry type
[  107.258764][   T93] hfsplus: b-tree write err: -5, ino 4
[  107.651853][ T4483] loop0: detected capacity change from 0 to 1024
[  107.652874][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  107.682038][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  107.695756][ T4048] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  107.718731][ T4323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  107.754877][ T4483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  107.828653][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  107.847330][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  107.946959][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  107.963382][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  107.964443][ T4490] loop1: detected capacity change from 0 to 1024
[  107.977716][ T4323] device veth0_vlan entered promiscuous mode
[  107.996164][ T4490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  108.006426][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.032896][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.046137][ T4323] device veth1_vlan entered promiscuous mode
[  108.046547][ T4490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  108.079253][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  108.120501][ T4048] usb 3-1: config 0 has an invalid interface number: 18 but max is 0
[  108.128760][ T4048] usb 3-1: config 0 has no interface number 0
[  108.142068][ T4048] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.153239][ T4048] usb 3-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.169180][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  108.206506][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.231845][ T4323] device veth0_macvtap entered promiscuous mode
[  108.241678][ T4048] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10
[  108.255738][ T4048] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  108.267858][ T4323] device veth1_macvtap entered promiscuous mode
[  108.274799][ T4048] usb 3-1: Manufacturer: syz
[  108.288425][ T3573] EXT4-fs (loop1): unmounting filesystem.
[  108.312840][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.319085][ T4048] usb 3-1: config 0 descriptor??
[  108.329447][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.344882][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.356280][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.413552][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.424258][ T4494] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  108.455940][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.516219][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.563725][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.605942][ T3681] EXT4-fs (loop0): unmounting filesystem.
[  108.618037][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.658208][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  108.673197][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  108.695860][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.727049][ T3939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  108.752349][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.780217][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.813366][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.834674][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.845197][ T4500] loop4: detected capacity change from 0 to 256
[  108.852537][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.871753][ T3586] Bluetooth: hci3: command tx timeout
[  108.912127][ T4048] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.18/0003:054C:03D5.0004/input/input10
[  108.944487][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.977939][ T4323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.995006][ T3618] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  109.000274][ T4323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.023692][ T4048] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.2-1/input18
[  109.042318][ T4323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.077335][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.097557][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.114688][ T4048] usb 3-1: USB disconnect, device number 6
[  109.138701][ T4323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.160293][ T4323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.169524][ T4323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.241387][ T4323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.380380][ T3618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.396097][ T3618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.397314][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.416071][ T3618] usb 1-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  109.436862][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.453886][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.462607][ T3618] usb 1-1: config 0 descriptor??
[  109.481156][ T3939] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  109.520953][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.531766][ T3662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.547168][ T3662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.566348][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.730344][ T3939] usb 5-1: Using ep0 maxpacket: 8
[  109.850652][ T3939] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  109.866694][ T3939] usb 5-1: config 1 has no interface number 1
[  109.882205][ T3939] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.895194][ T4496] loop1: detected capacity change from 0 to 65536
[  109.934156][ T3618] wacom 0003:056A:00BA.0005: Unknown device_type for 'HID 056a:00ba'. Assuming pen.
[  109.983474][ T3618] wacom 0003:056A:00BA.0005: hidraw0: USB HID v0.00 Device [HID 056a:00ba] on usb-dummy_hcd.0-1/input0
[  109.985342][ T4496] XFS (loop1): Mounting V5 Filesystem
[  110.014094][ T3618] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BA.0005/input/input11
[  110.082076][ T3939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.109565][ T3939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.111110][ T4496] XFS (loop1): Ending clean mount
[  110.172738][ T3939] usb 5-1: Product: syz
[  110.193234][ T3939] usb 5-1: Manufacturer: syz
[  110.209309][ T3939] usb 5-1: SerialNumber: syz
[  110.234499][ T3620] usb 1-1: USB disconnect, device number 3
[  110.262162][ T3573] XFS (loop1): Unmounting Filesystem
[  110.379934][ T4505] loop3: detected capacity change from 0 to 32768
[  110.426981][ T4505] XFS: ikeep mount option is deprecated.
[  110.458288][ T4505] XFS: ikeep mount option is deprecated.
[  110.477843][ T4505] XFS (loop3): Mounting V5 Filesystem
[  110.540497][ T3939] usb 5-1: 2:1 : format type 0 is detected, processed as PCM
[  110.568332][ T4507] loop2: detected capacity change from 0 to 32768
[  110.597257][ T4505] XFS (loop3): Ending clean mount
[  110.610604][ T3939] usb 5-1: 2:1: cannot set freq 5590914 to ep 0x82
[  110.647419][ T4507] XFS (loop2): Mounting V5 Filesystem
[  110.806133][   T26] audit: type=1804 audit(1717469025.177:18): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3106905946/syzkaller.zvVhuJ/0/file0/bus" dev="loop3" ino=9289 res=1 errno=0
[  110.917910][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  110.947074][ T3939] usb 5-1: USB disconnect, device number 5
[  110.965618][   T26] audit: type=1804 audit(1717469025.217:19): pid=4533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3106905946/syzkaller.zvVhuJ/0/file0/bus" dev="loop3" ino=9289 res=1 errno=0
[  111.030630][ T4507] XFS (loop2): Ending clean mount
[  111.066210][ T4507] XFS (loop2): Quotacheck needed: Please wait.
[  111.145284][ T4540] loop4: detected capacity change from 0 to 512
[  111.189539][ T4540] ext4: Unknown parameter 'fowner<00000000000000000000'
[  111.221293][ T4507] XFS (loop2): Quotacheck: Done.
[  111.508806][ T3587] XFS (loop2): Unmounting Filesystem
[  111.664938][ T4323] XFS (loop3): Unmounting Filesystem
[  111.760537][ T4558] loop4: detected capacity change from 0 to 64
[  111.801339][   T38] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.866245][ T4558] hfs: request for non-existent node 1280 in B*Tree
[  111.886424][ T4558] hfs: request for non-existent node 1280 in B*Tree
[  111.914713][   T38] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.938531][ T4558] hfs: request for non-existent node 1280 in B*Tree
[  111.956400][ T4558] hfs: request for non-existent node 1280 in B*Tree
[  112.017502][ T4564] loop2: detected capacity change from 0 to 1024
[  112.027840][   T38] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.082956][ T4564] hfsplus: bad catalog entry type
[  112.134603][   T38] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.148038][   T11] hfsplus: b-tree write err: -5, ino 4
[  112.190676][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  112.600850][ T3620] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  112.628225][ T4569] loop1: detected capacity change from 0 to 32768
[  112.645978][ T4569] XFS: ikeep mount option is deprecated.
[  112.682290][ T4569] XFS: ikeep mount option is deprecated.
[  112.697380][ T4569] XFS (loop1): Mounting V5 Filesystem
[  112.851498][ T3620] usb 5-1: Using ep0 maxpacket: 16
[  112.955695][ T4569] XFS (loop1): Ending clean mount
[  113.010743][ T3620] usb 5-1: unable to get BOS descriptor or descriptor too short
[  113.042074][ T4588] loop2: detected capacity change from 0 to 256
[  113.101026][ T3620] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.137493][ T3620] usb 5-1: config 1 interface 0 has no altsetting 0
[  113.174385][   T26] audit: type=1804 audit(1717469027.547:20): pid=4592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir688683527/syzkaller.gXYjQ3/59/file0/bus" dev="loop1" ino=9289 res=1 errno=0
[  113.286311][   T26] audit: type=1804 audit(1717469027.657:21): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir688683527/syzkaller.gXYjQ3/59/file0/bus" dev="loop1" ino=9289 res=1 errno=0
[  113.322473][ T3620] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.344225][ T3620] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.370713][ T3620] usb 5-1: Product: syz
[  113.392577][ T3620] usb 5-1: Manufacturer: syz
[  113.397745][ T3620] usb 5-1: SerialNumber: syz
[  113.620129][   T38] device hsr_slave_0 left promiscuous mode
[  113.990547][ T3620] usb 5-1: bad CDC descriptors
[  114.368419][ T3620] usb 5-1: USB disconnect, device number 6
[  114.415909][   T38] device hsr_slave_1 left promiscuous mode
[  114.456382][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.492785][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.533241][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.550017][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.579929][   T38] device bridge_slave_1 left promiscuous mode
[  114.594331][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.614185][   T38] device bridge_slave_0 left promiscuous mode
[  114.628828][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.659155][ T3590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.672076][   T38] device veth1_macvtap left promiscuous mode
[  114.672487][ T3590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.678146][   T38] device veth0_macvtap left promiscuous mode
[  114.692999][ T3590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.693082][   T38] device veth1_vlan left promiscuous mode
[  114.712506][ T3590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.722257][   T38] device veth0_vlan left promiscuous mode
[  114.742807][ T3590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  114.750518][ T3590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.041517][ T3620] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  115.195226][   T38] team0 (unregistering): Port device team_slave_1 removed
[  115.233933][   T38] team0 (unregistering): Port device team_slave_0 removed
[  115.247997][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.271065][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.281524][ T3620] usb 5-1: Using ep0 maxpacket: 8
[  115.343866][   T38] bond0 (unregistering): Released all slaves
[  115.400504][ T3620] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  115.412969][ T3620] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  115.422681][ T3620] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  115.432895][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.449675][ T3620] usb 5-1: config 0 descriptor??
[  115.654253][ T3573] XFS (loop1): Unmounting Filesystem
[  115.809965][ T3618] usb 5-1: USB disconnect, device number 7
[  115.957766][ T4607] chnl_net:caif_netlink_parms(): no params data found
[  116.196180][ T4632] loop0: detected capacity change from 0 to 512
[  116.320090][ T4607] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.333093][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.347256][ T4632] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[  116.358123][ T4607] device bridge_slave_0 entered promiscuous mode
[  116.412156][ T4607] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.414298][ T4632] EXT4-fs (loop0): 1 orphan inode deleted
[  116.421058][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.438604][    T9] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  116.455340][ T4632] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  116.459097][    T9] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:0: Failed to release dquot type 1
[  116.483502][ T4632] ext4 filesystem being mounted at /root/syzkaller-testdir2933064715/syzkaller.ALXofY/46/file1 supports timestamps until 2038 (0x7fffffff)
[  116.491903][ T4607] device bridge_slave_1 entered promiscuous mode
[  116.644801][ T4607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.688789][ T4607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.700950][ T3681] EXT4-fs (loop0): unmounting filesystem.
[  116.732730][ T3663] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  116.752890][ T3663] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:7: Failed to release dquot type 1
[  116.777834][ T4607] team0: Port device team_slave_0 added
[  116.851325][ T3590] Bluetooth: hci1: command tx timeout
[  116.867162][ T4607] team0: Port device team_slave_1 added
[  116.880590][ T3941] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  117.058307][ T4643] team0 (unregistering): Port device team_slave_0 removed
[  117.116232][ T4643] team0 (unregistering): Port device team_slave_1 removed
[  117.135502][ T3586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  117.154144][ T3586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  117.166591][ T3586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  117.190794][ T3586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  117.210611][ T3586] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  117.218015][ T3586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  117.256458][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.263653][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.270644][ T3941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  117.289804][ T4607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.314537][ T4607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.322265][ T4607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.349425][ T4607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.408268][ T3941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  117.434351][ T3941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  117.447698][ T3941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  117.463234][ T3941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.485393][ T3941] usb 5-1: config 0 descriptor??
[  117.510694][ T4639] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  117.587392][ T4607] device hsr_slave_0 entered promiscuous mode
[  117.593608][   T26] audit: type=1326 audit(1717469031.957:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4656 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c0047cf69 code=0x0
[  117.616869][ T4607] device hsr_slave_1 entered promiscuous mode
[  117.624202][ T4607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.634258][ T4607] Cannot create hsr debugfs directory
[  117.973914][ T3941] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[  117.998064][ T3941] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  118.023379][ T3941] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  118.085590][ T4648] chnl_net:caif_netlink_parms(): no params data found
[  118.092804][    T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  118.200435][ T3939] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  118.234831][ T4648] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.243623][ T3941] usb 5-1: USB disconnect, device number 8
[  118.248947][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.262857][ T4648] device bridge_slave_0 entered promiscuous mode
[  118.323449][ T4648] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.339676][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.347183][    T7] usb 1-1: Using ep0 maxpacket: 16
[  118.362839][ T4648] device bridge_slave_1 entered promiscuous mode
[  118.436332][ T4648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.460489][ T3939] usb 3-1: Using ep0 maxpacket: 8
[  118.478524][ T4648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.510641][    T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  118.520346][    T7] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  118.530608][    T7] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  118.540522][    T7] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  118.550636][    T7] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  118.572853][ T4648] team0: Port device team_slave_0 added
[  118.573110][    T7] usb 1-1: config 1 interface 0 has no altsetting 0
[  118.586238][ T3939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.592033][    T7] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  118.608826][ T3939] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  118.610561][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.622409][ T4648] team0: Port device team_slave_1 added
[  118.632277][ T3939] usb 3-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  118.642020][ T3939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.666406][ T3939] usb 3-1: config 0 descriptor??
[  118.699288][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.711484][    T7] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  118.720477][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.746793][ T4648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.771894][ T4607] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  118.790557][ T4648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.798010][ T4648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.836270][ T4648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.863532][ T4607] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  118.901801][ T4648] device hsr_slave_0 entered promiscuous mode
[  118.909875][ T4648] device hsr_slave_1 entered promiscuous mode
[  118.930580][ T3586] Bluetooth: hci1: command tx timeout
[  118.958550][ T4648] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  118.969069][ T4648] Cannot create hsr debugfs directory
[  118.986486][ T4607] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.021657][    T7] ums-sddr09: probe of 1-1:1.0 failed with error -22
[  119.033506][    T7] usb 1-1: USB disconnect, device number 4
[  119.049403][ T3619] usb 3-1: USB disconnect, device number 7
[  119.073342][ T4607] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.171695][   T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.248254][   T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.260671][ T3586] Bluetooth: hci3: command tx timeout
[  119.318051][ T4681] loop4: detected capacity change from 0 to 2048
[  119.357989][   T38] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.379400][ T4681] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.435206][   T38] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.438988][ T4681] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  119.474144][ T4681] EXT4-fs (loop4): Remounting filesystem read-only
[  119.477253][ T4607] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.563690][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  119.592573][ T3930] EXT4-fs (loop4): unmounting filesystem.
[  119.592999][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  119.620124][ T4607] 8021q: adding VLAN 0 to HW filter on device team0
[  119.683726][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.693204][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.723927][ T3619] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.731163][ T3619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.772311][ T4685] loop4: detected capacity change from 0 to 512
[  119.781859][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.800930][ T4685] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  119.815597][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.826333][ T3619] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.833547][ T3619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.841831][ T4685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002]
[  119.841882][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.856565][ T4685] EXT4-fs (loop4): orphan cleanup on readonly fs
[  119.876282][ T4685] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz-executor.4: attempt to clear invalid blocks 1024 len 1
[  119.897023][ T4685] EXT4-fs (loop4): Remounting filesystem read-only
[  119.911447][ T4685] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor.4: bg 0: block 361: padding at end of block bitmap is not set
[  119.933441][ T4685] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6171: Corrupt filesystem
[  119.946537][ T4685] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1811939328 (level 0)
[  119.967655][ T4685] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 2185560079 (level 1)
[  119.995995][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  120.001328][ T4685] EXT4-fs (loop4): 1 truncate cleaned up
[  120.004438][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  120.018688][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  120.021668][ T4685] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  120.041743][ T3940] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  120.044486][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  120.059674][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  120.069617][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  120.117021][ T4607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  120.138406][ T4607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.152921][ T3930] EXT4-fs (loop4): unmounting filesystem.
[  120.156899][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  120.167928][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.183373][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.198132][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.207154][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.216465][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  120.410654][ T3940] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.430739][ T3940] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.616394][ T3940] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  120.639391][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.648040][ T3940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.653391][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.667886][ T4648] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  120.680342][ T3940] usb 1-1: Product: syz
[  120.684555][ T3940] usb 1-1: Manufacturer: syz
[  120.714002][ T3940] usb 1-1: SerialNumber: syz
[  120.730768][ T4607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.765686][ T4648] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  120.789637][ T4648] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  120.864954][ T4648] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  120.894656][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.933878][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  121.010558][ T3586] Bluetooth: hci1: command tx timeout
[  121.019229][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  121.029229][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  121.049643][ T4607] device veth0_vlan entered promiscuous mode
[  121.074933][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  121.083151][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  121.128868][ T4607] device veth1_vlan entered promiscuous mode
[  121.181842][   T38] device hsr_slave_0 left promiscuous mode
[  121.188506][   T38] device hsr_slave_1 left promiscuous mode
[  121.194915][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  121.205353][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.213250][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  121.223429][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  121.231674][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  121.242043][   T38] device bridge_slave_1 left promiscuous mode
[  121.248518][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.260148][ T4703] loop4: detected capacity change from 0 to 32768
[  121.267501][   T38] device bridge_slave_0 left promiscuous mode
[  121.275722][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.300720][   T38] device veth1_macvtap left promiscuous mode
[  121.307050][   T38] device veth0_macvtap left promiscuous mode
[  121.315372][   T38] device veth1_vlan left promiscuous mode
[  121.322451][   T38] device veth0_vlan left promiscuous mode
[  121.328685][ T4703] XFS (loop4): Mounting V5 Filesystem
[  121.334896][ T3586] Bluetooth: hci3: command tx timeout
[  121.402900][ T4703] XFS (loop4): Ending clean mount
[  121.495915][ T3930] XFS (loop4): Unmounting Filesystem
[  121.611372][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  121.627600][   T38] team0 (unregistering): Port device team_slave_1 removed
[  121.641908][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  121.657393][   T38] team0 (unregistering): Port device team_slave_0 removed
[  121.664943][    T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  121.664990][    T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  121.665014][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.678186][    T7] usb 3-1: config 0 descriptor??
[  121.704251][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  121.730017][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  121.749079][ T4707] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  121.848032][   T38] bond0 (unregistering): Released all slaves
[  121.880447][ T3940] cdc_ncm 1-1:1.0: bind() failure
[  121.940377][ T3940] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  121.944994][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.956200][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  121.965958][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.967414][ T3940] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  121.977290][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.994197][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.005439][ T4607] device veth0_macvtap entered promiscuous mode
[  122.025753][ T3940] usbtest: probe of 1-1:1.1 failed with error -71
[  122.030531][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  122.042209][ T3940] usb 1-1: USB disconnect, device number 5
[  122.050161][ T4607] device veth1_macvtap entered promiscuous mode
[  122.070689][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.089180][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.127427][ T4648] 8021q: adding VLAN 0 to HW filter on device team0
[  122.158054][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.175361][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.189545][    T7] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  122.208586][    T7] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  122.217859][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.241413][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.257040][    T7] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  122.270839][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.286006][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.297637][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.331109][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.339899][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.356216][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.366340][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.380937][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.388074][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.396202][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  122.405184][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  122.414160][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.421422][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.429599][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.445565][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.461496][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.484130][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.500460][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.500623][   T22] usb 3-1: USB disconnect, device number 8
[  122.516358][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.527418][ T4607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.549341][ T4607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.579279][ T4607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.594501][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.611041][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.619978][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.648969][ T4607] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.664131][ T4607] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.673319][ T4607] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.683011][ T4607] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.695394][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.716620][ T4720] loop4: detected capacity change from 0 to 32768
[  122.727822][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.745351][ T4720] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4720)
[  122.800460][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.808565][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.819927][ T4720] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  122.837864][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.846866][ T4720] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  122.865435][ T4720] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  122.878559][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.906389][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.914743][ T4720] BTRFS info (device loop4): use zstd compression, level 3
[  122.923270][ T4720] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  122.941377][ T4720] BTRFS info (device loop4): use lzo compression, level 0
[  122.948663][ T4720] BTRFS info (device loop4): using free space tree
[  122.969275][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.978821][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.008889][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.090729][ T3586] Bluetooth: hci1: command tx timeout
[  123.189941][ T4601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.198588][ T3941] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  123.231433][ T4601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.263307][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.324965][ T4601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.340765][ T4601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.355859][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.409815][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.417684][ T3590] Bluetooth: hci3: command tx timeout
[  123.426208][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.450347][ T3941] usb 1-1: Using ep0 maxpacket: 8
[  123.476589][ T4648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.490867][   T22] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  123.501317][ T4752] loop3: detected capacity change from 0 to 64
[  123.537164][ T4752] hfs: request for non-existent node 1280 in B*Tree
[  123.554263][ T3930] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  123.564745][ T4752] hfs: request for non-existent node 1280 in B*Tree
[  123.564944][ T4752] hfs: request for non-existent node 1280 in B*Tree
[  123.572086][ T3941] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.605113][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.613712][ T4752] hfs: request for non-existent node 1280 in B*Tree
[  123.615035][ T3941] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  123.631348][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.642601][ T3941] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  123.671859][ T3941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.672442][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.717504][ T3941] usb 1-1: config 0 descriptor??
[  123.733224][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.737543][   T22] usb 3-1: Using ep0 maxpacket: 8
[  123.761967][ T4648] device veth0_vlan entered promiscuous mode
[  123.798781][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.814035][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.847666][ T4648] device veth1_vlan entered promiscuous mode
[  123.864641][   T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.906448][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.923776][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.982166][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.992362][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  124.030469][   T22] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  124.031408][ T4648] device veth0_macvtap entered promiscuous mode
[  124.053285][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.076849][ T4048] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.089573][ T4648] device veth1_macvtap entered promiscuous mode
[  124.089584][   T22] usb 3-1: Product: syz
[  124.105031][ T3619] usb 1-1: USB disconnect, device number 6
[  124.125532][   T22] usb 3-1: Manufacturer: syz
[  124.140652][   T22] usb 3-1: SerialNumber: syz
[  124.162253][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.193757][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.204822][   T22] cdc_ether 3-1:1.0: invalid descriptor buffer length
[  124.209893][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.215854][   T22] cdc_ether: probe of 3-1:1.0 failed with error -22
[  124.224511][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.287813][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.298740][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.309004][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.323571][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.337867][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.352516][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.372810][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.389028][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.423079][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.433418][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.449240][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.467403][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.481861][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.498760][ T4048] usb 3-1: USB disconnect, device number 9
[  124.525486][ T4648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.538298][ T4648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.554814][ T4648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.569663][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.583911][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.599235][ T4648] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.612906][ T4648] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.625879][ T4648] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.636343][ T4648] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.851277][ T4601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.882650][ T4601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.944735][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  124.984846][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.038463][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.102662][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.491448][ T3590] Bluetooth: hci3: command tx timeout
[  125.497917][ T4790] loop0: detected capacity change from 0 to 1024
[  125.578231][ T4790] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  125.580627][ T4794] loop3: detected capacity change from 0 to 128
[  125.619270][ T4790] hfsplus: xattr search failed
[  125.659796][ T4794] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  125.708060][ T4794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.883838][ T4807] loop4: detected capacity change from 0 to 64
[  126.331428][ T4819] loop1: detected capacity change from 0 to 1024
[  126.336865][ T4047] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  126.391494][ T4819] hfsplus: failed to load root directory
[  126.611006][ T4047] usb 1-1: Using ep0 maxpacket: 8
[  126.740608][ T4047] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.763670][ T4828] loop1: detected capacity change from 0 to 1024
[  126.792534][ T4786] loop2: detected capacity change from 0 to 32768
[  126.842382][  T120] block nbd4: Attempted send on invalid socket
[  126.848892][  T120] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  126.861103][ T4830] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32
[  126.875070][ T4828] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  126.882027][ T4828] hfsplus: xattr search failed
[  126.930879][ T4047] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.943552][ T4047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.951715][ T4047] usb 1-1: Product: syz
[  126.955933][ T4047] usb 1-1: Manufacturer: syz
[  126.959685][ T4786] XFS (loop2): Mounting V5 Filesystem
[  126.960842][ T4047] usb 1-1: SerialNumber: syz
[  127.002599][ T4047] cdc_ether 1-1:1.0: invalid descriptor buffer length
[  127.011171][ T4047] cdc_ether: probe of 1-1:1.0 failed with error -22
[  127.152230][ T4786] XFS (loop2): Ending clean mount
[  127.188708][ T4786] XFS (loop2): Quotacheck needed: Please wait.
[  127.263356][ T3618] usb 1-1: USB disconnect, device number 7
[  127.297463][ T4786] XFS (loop2): Quotacheck: Done.
[  127.339718][ T4846] loop4: detected capacity change from 0 to 64
[  127.443863][ T4047] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  127.607472][ T3587] XFS (loop2): Unmounting Filesystem
[  127.700578][ T4047] usb 2-1: Using ep0 maxpacket: 8
[  128.053737][ T4047] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=32.a3
[  128.070738][ T4047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.088966][ T4047] usb 2-1: Product: syz
[  128.093752][ T4047] usb 2-1: Manufacturer: syz
[  128.098618][ T4047] usb 2-1: SerialNumber: syz
[  128.117873][ T4047] usb 2-1: config 0 descriptor??
[  128.286663][ T4868] loop2: detected capacity change from 0 to 1024
[  128.394678][ T4047] msi2500 2-1:0.0: Registered as swradio16
[  128.406703][ T4047] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  128.438683][ T4868] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  128.469678][ T4868] hfsplus: xattr search failed
[  128.478723][ T4047] usb 2-1: USB disconnect, device number 6
[  128.801909][ T4860] loop3: detected capacity change from 0 to 32768
[  128.831885][ T4860] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4860)
[  128.877013][ T4860] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  128.913274][ T4860] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  128.933446][ T3619] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  128.940358][ T4860] BTRFS info (device loop3): force clearing of disk cache
[  128.948230][ T4860] BTRFS info (device loop3): setting nodatasum
[  128.970314][ T4860] BTRFS info (device loop3): allowing degraded mounts
[  128.977163][ T4860] BTRFS info (device loop3): enabling disk space caching
[  129.030262][ T4860] BTRFS info (device loop3): disk space caching is enabled
[  129.118176][ T4882] loop1: detected capacity change from 0 to 128
[  129.198677][ T4860] BTRFS info (device loop3): rebuilding free space tree
[  129.291290][ T4860] BTRFS info (device loop3): disabling free space tree
[  129.306187][ T4860] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.340480][ T3619] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  129.354457][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.379646][ T3619] usb 3-1: config 0 descriptor??
[  129.389600][ T4860] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.442293][ T3619] cp210x 3-1:0.0: cp210x converter detected
[  129.578298][ T4902] block device autoloading is deprecated and will be removed.
[  129.637548][ T4607] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  129.864051][ T3619] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  129.967708][ T4908] loop1: detected capacity change from 0 to 164
[  130.041405][ T4908] rock: directory entry would overflow storage
[  130.048571][ T4908] rock: sig=0x4f50, size=4, remaining=3
[  130.100739][ T4908] isofs: Unable to find the ".." directory for NFS.
[  130.135281][ T3619] usb 3-1: cp210x converter now attached to ttyUSB0
[  130.343590][ T4047] usb 3-1: USB disconnect, device number 10
[  130.359009][ T4047] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  130.375472][ T4047] cp210x 3-1:0.0: device disconnected
[  130.436273][ T4923] loop0: detected capacity change from 0 to 128
[  130.543705][ T4925] loop3: detected capacity change from 0 to 256
[  130.552373][ T3621] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  130.627991][ T4925] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  130.744978][ T4910] loop4: detected capacity change from 0 to 32768
[  130.778764][ T4910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4910)
[  130.810448][ T3621] usb 2-1: Using ep0 maxpacket: 8
[  130.845529][ T4910] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.895421][ T4910] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  130.925488][ T4910] BTRFS info (device loop4): using free space tree
[  130.932705][ T3621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.932758][ T3621] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  130.932780][ T3621] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.969931][ T3621] usb 2-1: config 0 descriptor??
[  131.032973][ T3621] gspca_main: vc032x-2.14.0 probing 046d:0892
[  131.085689][ T4941] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  131.228911][ T4941] device bond2 entered promiscuous mode
[  131.309724][ T4910] BTRFS info (device loop4): enabling ssd optimizations
[  131.317329][ T4950] 8021q: adding VLAN 0 to HW filter on device bond3
[  131.355599][ T4910] fs-verity: sha512 using implementation "sha512-avx2"
[  131.827655][ T4950] bond2: (slave bond3): Enslaving as an active interface with a down link
[  131.937347][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  131.954187][ T4954] bond2 (unregistering): (slave bond3): Releasing active interface
[  131.962945][ T4910] fs-verity (loop4, inode 258): Error -4 building Merkle tree
[  132.017404][ T4954] bond2 (unregistering): Released all slaves
[  132.132057][ T3930] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.380416][ T3621] gspca_vc032x: reg_r err -71
[  132.385230][ T3621] vc032x: probe of 2-1:0.0 failed with error -71
[  132.418531][ T3621] usb 2-1: USB disconnect, device number 7
[  132.718194][ T4935] loop3: detected capacity change from 0 to 32768
[  132.763362][ T4370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4370)
[  132.802599][ T4935] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.839149][ T4935] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  132.860939][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  132.867407][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  132.874003][ T4935] BTRFS info (device loop3): using free space tree
[  133.047047][ T4935] BTRFS info (device loop3): enabling ssd optimizations
[  133.179891][ T5000] loop4: detected capacity change from 0 to 64
[  133.229878][ T4972] loop0: detected capacity change from 0 to 32768
[  133.320596][ T4607] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.362062][ T4972] XFS (loop0): Mounting V5 Filesystem
[  133.631989][ T4972] XFS (loop0): Ending clean mount
[  133.639646][ T4972] XFS (loop0): Quotacheck needed: Please wait.
[  133.810595][ T4972] XFS (loop0): Quotacheck: Done.
[  133.988904][ T3681] XFS (loop0): Unmounting Filesystem
[  134.483259][ T5031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  134.547818][ T5031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.566412][ T3619] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  134.605804][ T5031] bond0 (unregistering): Released all slaves
[  134.667251][ T5033] loop0: detected capacity change from 0 to 2048
[  134.943489][ T5033] hpfs: filesystem error: improperly stopped; already mounted read-only
[  134.953370][ T5033] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  134.981288][ T3619] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  134.997766][ T3619] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  135.050325][ T3619] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  135.059586][ T3619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.131193][ T5039] loop2: detected capacity change from 0 to 256
[  135.190282][ T3661] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  135.226706][ T5039] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  135.430543][ T3661] usb 5-1: Using ep0 maxpacket: 8
[  135.480670][ T3619] usb 4-1: string descriptor 0 read error: -22
[  135.482147][ T5025] loop1: detected capacity change from 0 to 65536
[  135.550363][ T3661] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.564185][ T3661] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  135.574279][ T3661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.591553][ T3661] usb 5-1: config 0 descriptor??
[  135.606847][ T5025] XFS (loop1): Mounting V5 Filesystem
[  135.632124][ T3661] gspca_main: vc032x-2.14.0 probing 046d:0892
[  135.678669][ T5025] XFS (loop1): Ending clean mount
[  135.688380][ T3619] usb 4-1: USB disconnect, device number 2
[  135.879298][ T4648] XFS (loop1): Unmounting Filesystem
[  136.140341][ T3621] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  136.234701][   T26] audit: type=1326 audit(1717469050.607:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.275660][   T26] audit: type=1326 audit(1717469050.607:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.306274][   T26] audit: type=1326 audit(1717469050.637:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.329705][   T26] audit: type=1326 audit(1717469050.637:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.354770][   T26] audit: type=1326 audit(1717469050.637:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.377896][   T26] audit: type=1326 audit(1717469050.637:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.402358][ T3621] usb 3-1: Using ep0 maxpacket: 32
[  136.407638][   T26] audit: type=1326 audit(1717469050.637:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86c2c7cf69 code=0x7ffc0000
[  136.433162][   T26] audit: type=1326 audit(1717469050.637:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86c2c7a6e7 code=0x7ffc0000
[  136.457443][   T26] audit: type=1326 audit(1717469050.637:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86c2c403c9 code=0x7ffc0000
[  136.481132][   T26] audit: type=1326 audit(1717469050.637:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5072 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86c2c7a6e7 code=0x7ffc0000
[  136.481893][  T938] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  136.540777][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  136.556935][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  136.720688][ T3621] usb 3-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  136.739615][ T3621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.747969][ T3661] gspca_vc032x: reg_r err -71
[  136.753041][ T3661] vc032x: probe of 5-1:0.0 failed with error -71
[  136.769033][ T3661] usb 5-1: USB disconnect, device number 9
[  136.777442][ T3621] usb 3-1: Product: syz
[  136.785157][ T3621] usb 3-1: Manufacturer: syz
[  136.790889][  T938] usb 2-1: Using ep0 maxpacket: 32
[  136.798182][ T3621] usb 3-1: SerialNumber: syz
[  136.818896][ T3621] usb 3-1: config 0 descriptor??
[  136.875321][ T3621] usb 3-1: Found UVC 0.00 device syz (0408:3090)
[  136.882765][ T3621] usb 3-1: No valid video chain found.
[  136.898065][ T5082] loop3: detected capacity change from 0 to 32768
[  136.910885][  T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  136.936646][ T5086] block device autoloading is deprecated and will be removed.
[  136.976725][ T5082] XFS (loop3): Mounting V5 Filesystem
[  137.035747][ T5095] loop0: detected capacity change from 0 to 512
[  137.054269][ T5082] XFS (loop3): Ending clean mount
[  137.064860][ T5082] XFS (loop3): Quotacheck needed: Please wait.
[  137.092983][ T3619] usb 3-1: USB disconnect, device number 11
[  137.122455][ T5082] XFS (loop3): Quotacheck: Done.
[  137.130756][  T938] usb 2-1: New USB device found, idVendor=04cb, idProduct=0123, bcdDevice=88.b9
[  137.142208][ T5095] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2760: inode #12: comm syz-executor.0: corrupted xattr block 142
[  137.163348][  T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.166295][ T5095] EXT4-fs (loop0): Remounting filesystem read-only
[  137.179646][ T5095] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2810: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  137.185164][  T938] usb 2-1: Product: syz
[  137.192963][ T5095] EXT4-fs (loop0): 1 truncate cleaned up
[  137.202932][ T5095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  137.207810][  T938] usb 2-1: Manufacturer: syz
[  137.247090][  T938] usb 2-1: SerialNumber: syz
[  137.284080][  T938] usb 2-1: config 0 descriptor??
[  137.358952][  T938] gspca_main: finepix-2.14.0 probing 04cb:0123
[  137.464235][ T4607] XFS (loop3): Unmounting Filesystem
[  137.508550][ T3681] EXT4-fs (loop0): unmounting filesystem.
[  137.642998][  T938] usb 2-1: USB disconnect, device number 8
[  137.799041][ T5115] loop2: detected capacity change from 0 to 2048
[  137.864376][ T5115] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  137.915976][ T5115] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  138.200377][ T3332] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  138.247038][ T5133] IPv6: NLM_F_CREATE should be specified when creating new route
[  138.265468][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  138.570503][ T3332] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.589036][ T3332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  138.616704][ T3332] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.820466][ T3332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  138.840950][ T3332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.849122][ T5128] loop2: detected capacity change from 0 to 32768
[  138.867339][ T3332] usb 1-1: Product: syz
[  138.869732][ T5128] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5128)
[  138.881715][ T3332] usb 1-1: Manufacturer: syz
[  138.920430][ T3332] usb 1-1: SerialNumber: syz
[  138.933590][ T5128] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.966476][ T3332] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  138.967910][ T5128] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  138.976838][ T3332] cdc_ncm 1-1:1.0: bind() failure
[  139.003801][ T5128] BTRFS info (device loop2): doing ref verification
[  139.017428][ T5128] BTRFS info (device loop2): enabling ssd optimizations
[  139.044000][ T5128] BTRFS info (device loop2): max_inline at 4096
[  139.063640][ T5128] BTRFS info (device loop2): max_inline at 3
[  139.064986][ T5135] loop3: detected capacity change from 0 to 32768
[  139.078220][ T5128] BTRFS info (device loop2): not using ssd optimizations
[  139.085848][ T5128] BTRFS info (device loop2): using free space tree
[  139.113171][ T5135] XFS (loop3): Mounting V5 Filesystem
[  139.170316][ T5135] XFS (loop3): Ending clean mount
[  139.180440][ T5135] XFS (loop3): Quotacheck needed: Please wait.
[  139.270837][ T5135] XFS (loop3): Quotacheck: Done.
[  139.331816][ T3649] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  139.432114][ T5150] loop1: detected capacity change from 0 to 32768
[  139.455105][ T5150] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun"
[  139.464642][ T5150] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)...
[  139.485790][ T3587] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.565337][ T5150] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms
[  139.575637][ T3649] usb 5-1: Using ep0 maxpacket: 32
[  139.642637][ T3332] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use
[  139.659078][ T3332] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal...
[  139.696033][ T4607] XFS (loop3): Unmounting Filesystem
[  139.735559][ T3649] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  139.766551][ T3332] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 107ms
[  139.777870][ T3332] gfs2: fsid=_dev_net_tun.0: jid=0: Done
[  139.786092][ T5150] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount
[  139.954065][ T3649] usb 5-1: New USB device found, idVendor=04cb, idProduct=0123, bcdDevice=88.b9
[  139.963694][ T3649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.972402][ T3649] usb 5-1: Product: syz
[  139.976604][ T3649] usb 5-1: Manufacturer: syz
[  139.984303][ T3649] usb 5-1: SerialNumber: syz
[  139.990962][ T3649] usb 5-1: config 0 descriptor??
[  140.039303][ T5192] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'.
[  140.042180][ T3649] gspca_main: finepix-2.14.0 probing 04cb:0123
[  140.055282][ T5192] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'.
[  140.281866][ T3649] usb 5-1: USB disconnect, device number 10
[  140.402068][ T5207] loop3: detected capacity change from 0 to 4096
[  140.418674][ T5206] loop2: detected capacity change from 0 to 4096
[  140.424803][ T5207] ntfs: volume version 3.1.
[  140.660722][ T5218] loop2: detected capacity change from 0 to 512
[  140.680079][ T5217] loop3: detected capacity change from 0 to 2048
[  140.699409][ T5218] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2760: inode #12: comm syz-executor.2: corrupted xattr block 142
[  140.713092][ T5218] EXT4-fs (loop2): Remounting filesystem read-only
[  140.719814][ T5218] EXT4-fs (loop2): 1 truncate cleaned up
[  140.725980][ T5218] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  140.737840][ T5217] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  140.836873][ T4607] EXT4-fs (loop3): unmounting filesystem.
[  140.928724][ T3649] usb 1-1: USB disconnect, device number 8
[  141.009214][ T3587] EXT4-fs (loop2): unmounting filesystem.
[  141.306749][ T5254] loop3: detected capacity change from 0 to 2048
[  141.359287][ T5254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  141.379700][ T5249] loop0: detected capacity change from 0 to 4096
[  141.401695][ T5249] __ntfs_warning: 36 callbacks suppressed
[  141.401713][ T5249] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  141.432220][ T5249] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  141.465516][ T5249] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  141.512135][ T5249] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  141.545656][ T4607] EXT4-fs (loop3): unmounting filesystem.
[  141.552329][ T5249] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  141.580496][ T5249] ntfs: (device loop0): read_ntfs_boot_sector(): Using backup boot sector.
[  141.610352][ T3649] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  141.627798][ T5249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  141.650365][ T5249] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  141.700371][ T5249] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  141.709372][ T5249] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  141.739423][ T5249] ntfs: volume version 3.1.
[  141.816293][ T5263] loop3: detected capacity change from 0 to 512
[  141.873875][ T5243] loop4: detected capacity change from 0 to 32768
[  141.880419][ T5263] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2760: inode #12: comm syz-executor.3: corrupted xattr block 142
[  141.900425][ T5263] EXT4-fs (loop3): Remounting filesystem read-only
[  141.907149][ T5263] EXT4-fs (loop3): 1 truncate cleaned up
[  141.913256][ T5263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  141.947914][ T5243] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  141.966725][ T5243] XFS (loop4): Mounting V5 Filesystem
[  142.010681][ T3649] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.044123][ T3649] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.100365][ T3649] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  142.125803][ T5243] XFS (loop4): Ending clean mount
[  142.156375][ T5243] XFS (loop4): Quotacheck needed: Please wait.
[  142.224879][ T5243] XFS (loop4): Quotacheck: Done.
[  142.239494][ T4607] EXT4-fs (loop3): unmounting filesystem.
[  142.292219][ T3930] XFS (loop4): Unmounting Filesystem
[  142.329719][ T3649] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.356974][ T3649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.369028][ T3649] usb 2-1: Product: syz
[  142.377632][ T3649] usb 2-1: Manufacturer: syz
[  142.390070][ T3649] usb 2-1: SerialNumber: syz
[  142.451720][ T3649] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  142.458581][ T3649] cdc_ncm 2-1:1.0: bind() failure
[  143.197009][ T3649] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  144.150367][ T3649] usb 5-1: Using ep0 maxpacket: 8
[  144.157209][ T5302] loop0: detected capacity change from 0 to 40427
[  144.227196][ T5302] F2FS-fs (loop0): Found nat_bits in checkpoint
[  144.296412][ T3649] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.311651][ T5319] loop2: detected capacity change from 0 to 32768
[  144.318777][ T3649] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.320942][ T5302] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  144.332030][ T3649] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  144.379055][ T3649] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  144.406664][ T3649] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  144.421079][ T3649] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  144.435213][ T4048] usb 2-1: USB disconnect, device number 9
[  144.472397][ T5319] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  144.504301][ T5319] XFS (loop2): Mounting V5 Filesystem
[  144.791696][ T5343] syz-executor.0: attempt to access beyond end of device
[  144.791696][ T5343] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427
[  145.252272][ T5319] XFS (loop2): Ending clean mount
[  145.265664][ T5319] XFS (loop2): Quotacheck needed: Please wait.
[  145.333256][ T3649] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.342937][ T3649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.351056][ T3649] usb 5-1: Product: syz
[  145.355247][ T3649] usb 5-1: Manufacturer: syz
[  145.359853][ T3649] usb 5-1: SerialNumber: syz
[  145.373209][ T3681] syz-executor.0: attempt to access beyond end of device
[  145.373209][ T3681] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  145.388547][ T5319] XFS (loop2): Quotacheck: Done.
[  145.473055][ T5327] loop3: detected capacity change from 0 to 32768
[  145.501421][ T5327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5327)
[  145.525303][ T3587] XFS (loop2): Unmounting Filesystem
[  145.572530][ T5327] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.583244][ T5347] ieee802154 phy0 wpan0: encryption failed: -90
[  145.592058][ T5327] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  145.601292][ T5327] BTRFS info (device loop3): using free space tree
[  145.640688][ T3649] cdc_ncm 5-1:1.0: bind() failure
[  145.651118][ T3649] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  145.677553][ T3649] cdc_ncm 5-1:1.1: bind() failure
[  145.694816][ T3649] usb 5-1: USB disconnect, device number 11
[  145.857924][ T5327] BTRFS info (device loop3): enabling ssd optimizations
[  145.913033][ T5376] netlink: 428 bytes leftover after parsing attributes in process `syz-executor.1'.
[  145.935049][ T5376] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'.
[  146.137918][ T4607] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.219262][ T5385] option changes via remount are deprecated (pid=5383 comm=syz-executor.2)
[  146.515628][ T5395] loop4: detected capacity change from 0 to 256
[  146.588032][ T5395] FAT-fs (loop4): Directory bread(block 64) failed
[  146.604527][ T5395] FAT-fs (loop4): Directory bread(block 65) failed
[  146.664823][ T5395] FAT-fs (loop4): Directory bread(block 66) failed
[  146.672683][ T5395] FAT-fs (loop4): Directory bread(block 67) failed
[  146.679428][ T5395] FAT-fs (loop4): Directory bread(block 68) failed
[  146.719970][ T5395] FAT-fs (loop4): Directory bread(block 69) failed
[  146.729764][ T5395] FAT-fs (loop4): Directory bread(block 70) failed
[  146.746302][ T5395] FAT-fs (loop4): Directory bread(block 71) failed
[  146.755683][ T5395] FAT-fs (loop4): Directory bread(block 72) failed
[  146.772623][ T5395] FAT-fs (loop4): Directory bread(block 73) failed
[  146.874895][ T5405] loop3: detected capacity change from 0 to 24
[  146.889185][ T5405] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  146.909472][ T5405] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  147.513478][ T3332] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.760398][ T3332] usb 1-1: Using ep0 maxpacket: 8
[  147.778890][ T5426] loop4: detected capacity change from 0 to 4096
[  147.802081][ T5426] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  147.881111][ T3332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.916937][ T5417] loop3: detected capacity change from 0 to 32768
[  147.920413][ T3332] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.936187][ T5417] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5417)
[  147.943108][ T5426] ntfs3: loop4: failed to convert "c46c" to iso8859-2
[  147.973212][ T3332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  148.012399][ T3332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  148.043359][ T3332] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  148.063814][ T3332] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  148.094715][ T5417] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.118509][ T5417] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  148.135856][ T5419] loop1: detected capacity change from 0 to 40427
[  148.150393][ T5417] BTRFS info (device loop3): turning off barriers
[  148.156960][ T5417] BTRFS info (device loop3): enabling auto defrag
[  148.174526][ T5419] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0xf2082010)
[  148.188133][ T5419] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  148.196624][ T5417] BTRFS info (device loop3): force clearing of disk cache
[  148.213337][ T5419] F2FS-fs (loop1): invalid crc value
[  148.214469][ T5417] BTRFS info (device loop3): allowing degraded mounts
[  148.229810][ T5417] BTRFS info (device loop3): enabling disk space caching
[  148.238614][ T5417] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  148.253334][ T3332] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.264848][ T3332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.277129][ T5419] F2FS-fs (loop1): Found nat_bits in checkpoint
[  148.277589][ T5417] BTRFS info (device loop3): use lzo compression, level 0
[  148.296169][ T3332] usb 1-1: Product: syz
[  148.301739][ T3332] usb 1-1: Manufacturer: syz
[  148.306455][ T3332] usb 1-1: SerialNumber: syz
[  148.319662][ T5417] BTRFS info (device loop3): disk space caching is enabled
[  148.355555][ T5419] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  148.363326][ T5419] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  148.481663][ T4648] syz-executor.1: attempt to access beyond end of device
[  148.481663][ T4648] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  148.510513][ T5417] BTRFS info (device loop3): enabling ssd optimizations
[  148.518549][ T5417] BTRFS info (device loop3): rebuilding free space tree
[  148.557440][ T5417] BTRFS info (device loop3): disabling free space tree
[  148.573819][ T5417] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  148.600608][ T3332] cdc_ncm 1-1:1.0: bind() failure
[  148.606321][ T5453] loop4: detected capacity change from 0 to 256
[  148.608407][ T3332] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  148.619857][ T3332] cdc_ncm 1-1:1.1: bind() failure
[  148.624186][ T5417] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  148.627938][ T3332] usb 1-1: USB disconnect, device number 9
[  148.675646][ T5453] FAT-fs (loop4): Directory bread(block 64) failed
[  148.700865][ T5417] BTRFS info (device loop3): checking UUID tree
[  148.707449][ T5453] FAT-fs (loop4): Directory bread(block 65) failed
[  148.719951][ T5453] FAT-fs (loop4): Directory bread(block 66) failed
[  148.727485][ T5453] FAT-fs (loop4): Directory bread(block 67) failed
[  148.741100][ T5453] FAT-fs (loop4): Directory bread(block 68) failed
[  148.748648][ T5453] FAT-fs (loop4): Directory bread(block 69) failed
[  148.773712][ T5453] FAT-fs (loop4): Directory bread(block 70) failed
[  148.790697][ T5453] FAT-fs (loop4): Directory bread(block 71) failed
[  148.813640][ T5453] FAT-fs (loop4): Directory bread(block 72) failed
[  148.832834][ T5453] FAT-fs (loop4): Directory bread(block 73) failed
[  148.957083][ T4607] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.269638][ T5468] loop1: detected capacity change from 0 to 256
[  150.315718][ T5468] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011eee, chksum : 0x5374553f, utbl_chksum : 0xe619d30d)
[  150.356388][ T3583] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  150.554331][ T5482] loop3: detected capacity change from 0 to 256
[  150.574084][ T5484] loop0: detected capacity change from 0 to 256
[  150.606765][ T5484] FAT-fs (loop0): Directory bread(block 64) failed
[  150.613559][ T3583] usb 5-1: Using ep0 maxpacket: 8
[  150.624564][ T5484] FAT-fs (loop0): Directory bread(block 65) failed
[  150.629371][ T5482] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  150.638365][ T5484] FAT-fs (loop0): Directory bread(block 66) failed
[  150.653425][ T5484] FAT-fs (loop0): Directory bread(block 67) failed
[  150.660603][ T5484] FAT-fs (loop0): Directory bread(block 68) failed
[  150.667390][ T5484] FAT-fs (loop0): Directory bread(block 69) failed
[  150.674870][ T5484] FAT-fs (loop0): Directory bread(block 70) failed
[  150.682067][ T5484] FAT-fs (loop0): Directory bread(block 71) failed
[  150.688908][ T5484] FAT-fs (loop0): Directory bread(block 72) failed
[  150.706988][ T5484] FAT-fs (loop0): Directory bread(block 73) failed
[  150.730584][ T3583] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  150.745106][ T3583] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  150.764053][ T3583] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  150.787126][ T3583] usb 5-1: config 250 has no interface number 0
[  150.801663][ T3583] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  150.819936][ T3583] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  150.835020][ T3583] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  150.846288][ T3583] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  150.860613][ T3583] usb 5-1: config 250 interface 228 has no altsetting 0
[  151.042612][ T3583] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  151.051822][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  151.067027][ T3583] usb 5-1: Product: syz
[  151.079704][ T3616] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  151.111654][ T3583] usb 5-1: SerialNumber: syz
[  151.171216][ T3583] hub 5-1:250.228: bad descriptor, ignoring hub
[  151.177527][ T3583] hub: probe of 5-1:250.228 failed with error -5
[  151.340283][ T3616] usb 2-1: Using ep0 maxpacket: 8
[  151.416819][ T3583] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  151.460484][ T3616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.480273][ T3616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.500246][ T3616] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.510127][ T3616] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  151.520049][ T3616] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  151.529783][ T3616] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  151.690534][ T3616] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.703049][ T3616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.720132][ T3616] usb 2-1: Product: syz
[  151.730857][ T3616] usb 2-1: Manufacturer: syz
[  151.740706][ T3616] usb 2-1: SerialNumber: syz
[  151.760558][ T4047] usb 5-1: USB disconnect, device number 12
[  151.786715][ T4047] usblp0: removed
[  151.804858][ T5504] loop3: detected capacity change from 0 to 256
[  151.817498][ T5504] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011eee, chksum : 0x5374553f, utbl_chksum : 0xe619d30d)
[  151.956461][ T5510] loop3: detected capacity change from 0 to 512
[  151.971042][ T5510] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15
[  151.986593][ T5510] ext4_test_bit(bit=14, block=5) = 0
[  151.992028][ T5510] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  152.028753][ T4607] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 20: comm syz-executor.3: path /root/syzkaller-testdir1494892402/syzkaller.ZE1itp/58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  152.056417][ T3616] cdc_ncm 2-1:1.0: bind() failure
[  152.061563][ T3583] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  152.069255][ T3332] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  152.080756][ T3616] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  152.087859][ T3616] cdc_ncm 2-1:1.1: bind() failure
[  152.095141][ T4607] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 20: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  152.096968][ T3616] usb 2-1: USB disconnect, device number 10
[  152.126120][ T4607] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 20: comm syz-executor.3: path /root/syzkaller-testdir1494892402/syzkaller.ZE1itp/58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  152.158495][ T4607] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 20: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  152.192599][ T4607] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 20: comm syz-executor.3: path /root/syzkaller-testdir1494892402/syzkaller.ZE1itp/58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  152.224759][ T4607] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 20: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  152.251639][ T4607] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 20: comm syz-executor.3: path /root/syzkaller-testdir1494892402/syzkaller.ZE1itp/58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  152.287427][ T4607] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 20: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  152.316622][ T4607] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 20: comm syz-executor.3: path /root/syzkaller-testdir1494892402/syzkaller.ZE1itp/58/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  152.330379][ T3583] usb 3-1: Using ep0 maxpacket: 32
[  152.356402][ T4607] EXT4-fs error (device loop3): ext4_empty_dir:3131: inode #11: block 20: comm syz-executor.3: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  152.400378][ T3332] usb 1-1: Using ep0 maxpacket: 8
[  152.470504][ T3583] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  152.479787][ T3583] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.523863][ T3332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.551374][ T3583] usb 3-1: config 0 descriptor??
[  152.556780][ T3332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.575549][ T3332] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  152.591841][ T3583] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[  152.640046][ T3583] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  152.648627][ T3332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.663919][ T3583] dvb_usb_anysee: probe of 3-1:0.0 failed with error -22
[  152.673886][ T3332] usb 1-1: config 0 descriptor??
[  152.794173][ T3661] usb 3-1: USB disconnect, device number 12
[  153.000719][ T4607] EXT4-fs (loop3): unmounting filesystem.
[  153.126181][ T4964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.152212][ T3332] kone 0003:1E7D:2CED.0008: collection stack underflow
[  153.159143][ T3332] kone 0003:1E7D:2CED.0008: item 0 1 0 12 parsing failed
[  153.189190][ T3332] kone 0003:1E7D:2CED.0008: parse failed
[  153.214109][ T3332] kone: probe of 0003:1E7D:2CED.0008 failed with error -22
[  153.219419][ T4964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.314651][ T4964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.359977][ T3661] usb 1-1: USB disconnect, device number 10
[  153.407851][ T4964] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.740142][ T3590] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.756106][ T3590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.771177][ T3590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.772435][ T5529] loop4: detected capacity change from 0 to 40427
[  153.794032][ T3590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.802984][ T3590] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  153.817317][ T3590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.844368][ T5529] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  153.880241][ T5529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  153.925662][ T5529] F2FS-fs (loop4): invalid crc value
[  154.024164][ T5529] F2FS-fs (loop4): Found nat_bits in checkpoint
[  154.193538][ T5529] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  154.201089][ T5529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  154.232502][ T5529] syz-executor.4: attempt to access beyond end of device
[  154.232502][ T5529] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  154.338859][ T5541] chnl_net:caif_netlink_parms(): no params data found
[  154.361421][ T5538] loop1: detected capacity change from 0 to 40427
[  154.394418][ T5538] F2FS-fs (loop1): invalid crc value
[  154.430152][   T38] kworker/u4:2: attempt to access beyond end of device
[  154.430152][   T38] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  154.439268][ T5538] F2FS-fs (loop1): Found nat_bits in checkpoint
[  154.557800][ T5538] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  154.593221][ T5538] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  154.671144][ T5541] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.678306][ T5541] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.722848][ T5541] device bridge_slave_0 entered promiscuous mode
[  154.757261][ T5541] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.764838][ T4648] syz-executor.1: attempt to access beyond end of device
[  154.764838][ T4648] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.788623][ T5541] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.808844][ T5541] device bridge_slave_1 entered promiscuous mode
[  154.932763][ T5551] loop2: detected capacity change from 0 to 40427
[  154.956723][ T5541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.016119][ T4964] device hsr_slave_0 left promiscuous mode
[  155.031648][ T4964] device hsr_slave_1 left promiscuous mode
[  155.061067][ T4964] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.068519][ T4964] batman_adv: batadv0: Removing interface: batadv_slave_0
[  155.107980][ T4964] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.135588][ T4964] batman_adv: batadv0: Removing interface: batadv_slave_1
[  155.179660][ T4964] device bridge_slave_1 left promiscuous mode
[  155.206700][ T4964] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.261173][ T4964] device bridge_slave_0 left promiscuous mode
[  155.267445][ T4964] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.278886][ T5554] loop0: detected capacity change from 0 to 40427
[  155.299046][ T4964] device veth1_macvtap left promiscuous mode
[  155.305332][ T4964] device veth0_macvtap left promiscuous mode
[  155.317590][ T4964] device veth1_vlan left promiscuous mode
[  155.323687][ T5554] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  155.331091][ T4964] device veth0_vlan left promiscuous mode
[  155.360521][ T5554] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  155.403169][ T5554] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.536997][ T5554] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  155.545802][ T5554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.809520][ T4964] team0 (unregistering): Port device team_slave_1 removed
[  155.843019][ T4964] team0 (unregistering): Port device team_slave_0 removed
[  155.880804][ T4964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.891850][ T3586] Bluetooth: hci1: command tx timeout
[  155.944324][ T4964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.150427][ T4973] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  156.166866][ T4964] bond0 (unregistering): Released all slaves
[  156.230276][ T5541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.363847][ T5541] team0: Port device team_slave_0 added
[  156.392500][ T5541] team0: Port device team_slave_1 added
[  156.395501][ T5582] loop2: detected capacity change from 0 to 32768
[  156.431313][ T4973] usb 5-1: Using ep0 maxpacket: 8
[  156.464022][   T26] kauditd_printk_skb: 17 callbacks suppressed
[  156.464038][   T26] audit: type=1800 audit(1717469070.837:50): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="overlay" ino=1940 res=0 errno=0
[  156.520474][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.536154][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.563498][ T5541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.588202][ T5541] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.595656][ T5541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.625791][ T4973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.654863][ T4973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.666307][ T4973] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  156.677292][ T5541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.688224][ T4973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.702600][ T4973] usb 5-1: config 0 descriptor??
[  156.786174][ T5541] device hsr_slave_0 entered promiscuous mode
[  156.827895][ T5541] device hsr_slave_1 entered promiscuous mode
[  157.202291][ T4973] kone 0003:1E7D:2CED.0009: collection stack underflow
[  157.209340][ T4973] kone 0003:1E7D:2CED.0009: item 0 1 0 12 parsing failed
[  157.233459][ T4973] kone 0003:1E7D:2CED.0009: parse failed
[  157.239177][ T4973] kone: probe of 0003:1E7D:2CED.0009 failed with error -22
[  157.307646][ T5615] loop2: detected capacity change from 0 to 8192
[  157.335060][ T5615] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  157.350358][ T5615] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  157.367611][ T5615] REISERFS warning (device loop2):  reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device
[  157.403407][ T5615] REISERFS warning (device loop2):  reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition
[  157.419723][ T4973] usb 5-1: USB disconnect, device number 13
[  157.460138][ T5615] REISERFS warning (device loop2):  reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to
[  157.575855][ T5541] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.607322][ T5541] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.630477][ T5541] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.655801][ T5541] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  157.705742][ T5606] loop1: detected capacity change from 0 to 32768
[  157.779139][ T5606] XFS (loop1): Mounting V5 Filesystem
[  157.810010][ T5541] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.834695][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  157.845770][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  157.895106][ T5541] 8021q: adding VLAN 0 to HW filter on device team0
[  157.906876][ T5606] XFS (loop1): Ending clean mount
[  157.917454][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  157.926322][ T5606] XFS (loop1): Quotacheck needed: Please wait.
[  157.943029][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.963596][ T4973] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.970776][ T4973] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.978518][ T3586] Bluetooth: hci1: command tx timeout
[  158.033296][ T5606] XFS (loop1): Quotacheck: Done.
[  158.039297][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  158.045912][   T26] audit: type=1800 audit(1717469072.417:51): pid=5606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1066 res=0 errno=0
[  158.048156][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  158.083475][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  158.099419][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.106591][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.128039][ T4648] XFS (loop1): Unmounting Filesystem
[  158.130897][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  158.151272][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  158.177510][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  158.191082][ T4039] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  158.255013][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  158.321998][ T5541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  158.354827][ T5541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  158.393435][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  158.407329][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  158.439720][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  158.496766][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  158.537700][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  158.556109][ T4039] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  158.564626][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  158.578926][ T4039] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  158.591311][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  158.601681][ T4039] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  158.624437][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  158.631134][ T4039] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.690668][ T5626] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  158.891121][ T5646] loop1: detected capacity change from 0 to 2048
[  158.905402][ T3332] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  158.920043][ T5646] UDF-fs: bad mount option "anchor000000$1�z" or missing value
[  158.934789][ T4039] usb 3-1: USB disconnect, device number 13
[  159.108806][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  159.117380][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  159.133894][ T5541] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.157482][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.158778][ T5630] loop4: detected capacity change from 0 to 32768
[  159.167544][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  159.207999][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  159.216878][   T26] audit: type=1800 audit(1717469073.577:52): pid=5630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="overlay" ino=1964 res=0 errno=0
[  159.244379][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  159.261235][ T5541] device veth0_vlan entered promiscuous mode
[  159.270515][ T3332] usb 1-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.0f
[  159.277708][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  159.287481][ T3332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.290084][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  159.310821][ T5541] device veth1_vlan entered promiscuous mode
[  159.320524][ T3332] usb 1-1: config 0 descriptor??
[  159.351071][ T3661] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  159.366757][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  159.371514][ T3332] usb-storage 1-1:0.0: USB Mass Storage device detected
[  159.381041][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  159.394707][ T3332] usb-storage 1-1:0.0: Quirks match for vid 05ab pid 0060: 2
[  159.396689][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  159.421494][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  159.439933][ T5541] device veth0_macvtap entered promiscuous mode
[  159.458329][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.489136][ T5541] device veth1_macvtap entered promiscuous mode
[  159.537276][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.565464][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.577760][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.583856][ T3616] usb 1-1: USB disconnect, device number 11
[  159.588544][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.604147][ T3661] usb 2-1: Using ep0 maxpacket: 16
[  159.616315][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.626924][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.652968][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.684788][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.716537][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.740520][ T3661] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97
[  159.753984][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.766324][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.772538][ T3661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.783478][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.803588][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.809090][ T3661] usb 2-1: config 0 descriptor??
[  159.829872][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.854320][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.862082][ T3661] gspca_main: sq905c-2.14.0 probing 2770:9050
[  159.873303][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.900226][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.910081][ T5541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.927823][ T5541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.939182][ T5541] batman_adv: batadv0: Interface activated: batadv_slave_1
[  159.961039][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  159.977312][ T3649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  160.002522][ T5541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.011633][ T5541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.020670][ T5541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.029640][ T5541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.066335][ T3586] Bluetooth: hci1: command tx timeout
[  160.090350][ T3661] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  160.114241][ T3661] sq905c 2-1:0.0: Get version command failed
[  160.140286][ T3661] sq905c: probe of 2-1:0.0 failed with error -71
[  160.170441][ T3661] usb 2-1: USB disconnect, device number 11
[  160.272885][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.288060][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.329644][ T3332] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  160.348892][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.357265][ T5662] loop0: detected capacity change from 0 to 8192
[  160.367256][ T5662] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  160.384881][ T5662] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  160.393984][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.402340][ T5662] REISERFS warning (device loop0):  reiserfs_fill_super: Filesystem cannot be mounted because it is bigger than the device
[  160.409465][ T3661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  160.420950][ T5662] REISERFS warning (device loop0):  reiserfs_fill_super: You may need to run fsck or increase size of your LVM partition
[  160.435521][ T5662] REISERFS warning (device loop0):  reiserfs_fill_super: Or may be you forgot to reboot after fdisk when it told you to
[  160.511484][ T5665] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  160.519019][ T5665] vhci_hcd: invalid port number 129
[  160.529968][ T5665] vhci_hcd: invalid port number 129
[  160.565489][ T5654] loop2: detected capacity change from 0 to 40427
[  160.573803][ T5654] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  160.583101][ T5654] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  160.630563][ T5654] F2FS-fs (loop2): Found nat_bits in checkpoint
[  160.691949][ T5654] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  160.699034][ T5654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  160.704426][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  160.792599][ T5674] loop0: detected capacity change from 0 to 8192
[  160.834102][ T5674]  loop0: p1 < > p2 p4 < p5 >
[  160.846691][ T5674] loop0: partition table partially beyond EOD, truncated
[  160.855163][ T5674] loop0: p1 start 8388864 is beyond EOD, truncated
[  160.863300][ T5674] loop0: p2 size 31064064 extends beyond EOD, truncated
[  160.884949][ T5674] loop0: p5 size 31064064 extends beyond EOD, truncated
[  160.891222][ T3661] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  161.140277][ T3661] usb 4-1: Using ep0 maxpacket: 8
[  161.220479][ T3620] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  161.260395][ T3661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.280401][ T3661] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.290356][ T3661] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  161.299652][ T3661] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.309441][ T3661] usb 4-1: config 0 descriptor??
[  161.338012][ T5686] loop0: detected capacity change from 0 to 32768
[  161.354952][ T5686] XFS (loop0): Mounting V5 Filesystem
[  161.360661][ T3649] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  161.397148][ T5686] XFS (loop0): Ending clean mount
[  161.406725][ T5686] XFS (loop0): Quotacheck needed: Please wait.
[  161.441668][ T5686] XFS (loop0): Quotacheck: Done.
[  161.462666][   T26] audit: type=1800 audit(1717469075.837:53): pid=5686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1066 res=0 errno=0
[  161.494961][ T3681] XFS (loop0): Unmounting Filesystem
[  161.549859][ T5698] loop1: detected capacity change from 0 to 64
[  161.600595][ T3620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.612856][ T3620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.623596][ T3620] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  161.633664][ T3620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.652955][ T3620] usb 5-1: config 0 descriptor??
[  161.745721][ T3649] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  161.750134][ T5701] loop1: detected capacity change from 0 to 1024
[  161.764158][ T3649] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  161.786200][ T3649] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  161.796513][ T3649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.797946][ T5701] hfsplus: filesystem is marked journaled, leaving read-only.
[  161.817652][ T3661] kone 0003:1E7D:2CED.000A: collection stack underflow
[  161.826750][ T3661] kone 0003:1E7D:2CED.000A: item 0 1 0 12 parsing failed
[  161.834385][ T5688] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  161.841029][ T3661] kone 0003:1E7D:2CED.000A: parse failed
[  161.859450][ T3661] kone: probe of 0003:1E7D:2CED.000A failed with error -22
[  161.942374][ T5707] loop1: detected capacity change from 0 to 256
[  161.949889][ T5707] FAT-fs (loop1): Unrecognized mount option "B1��q���鞳��+d'��#.Ԓͯ�?o�\�
[  161.949889][ T5707] ��18446744073709551615" or missing value
[  161.999075][ T5709] loop0: detected capacity change from 0 to 4096
[  162.040722][ T3649] usb 4-1: USB disconnect, device number 3
[  162.106185][ T3661] usb 3-1: USB disconnect, device number 14
[  162.140677][ T3586] Bluetooth: hci1: command tx timeout
[  162.144389][ T3620] wacom 0003:056A:00F8.000B: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0
[  162.367319][ T3621] usb 5-1: USB disconnect, device number 14
[  162.764153][ T5713] loop0: detected capacity change from 0 to 40427
[  162.782010][ T5713] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  162.796828][ T5713] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  162.823295][ T5721] loop3: detected capacity change from 0 to 8192
[  162.841029][ T5713] F2FS-fs (loop0): Found nat_bits in checkpoint
[  162.871152][ T5721]  loop3: p1 < > p2 p4 < p5 >
[  162.876083][ T5721] loop3: partition table partially beyond EOD, truncated
[  162.910382][ T5721] loop3: p1 start 8388864 is beyond EOD, truncated
[  162.920782][ T5721] loop3: p2 size 31064064 extends beyond EOD, truncated
[  162.933999][ T5713] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  162.941591][ T5713] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  162.961470][ T5721] loop3: p5 size 31064064 extends beyond EOD, truncated
[  163.039053][ T5719] loop1: detected capacity change from 0 to 40427
[  163.070674][ T3649] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  163.186191][ T5731] loop3: detected capacity change from 0 to 256
[  163.345496][ T3649] usb 3-1: Using ep0 maxpacket: 8
[  163.500426][ T3649] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.513435][ T5739] loop1: detected capacity change from 0 to 256
[  163.520323][ T3649] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8
[  163.530162][ T5739] exfat: Deprecated parameter 'utf8'
[  163.540673][ T3649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.549051][ T5739] exfat: Deprecated parameter 'utf8'
[  163.559326][ T3649] usb 3-1: config 0 descriptor??
[  163.583647][ T5739] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  163.601719][ T3649] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  163.609836][ T3649] usb 3-1: Detected SIO
[  163.630123][ T3649] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  163.676088][ T5743] kvm: pic: non byte write
[  163.694556][ T5743] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4325376 ns). Using initial count to start timer.
[  163.818402][ T4047] usb 3-1: USB disconnect, device number 15
[  163.818603][ T5729] loop4: detected capacity change from 0 to 32768
[  163.841538][ T4047] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  163.861934][ T4047] ftdi_sio 3-1:0.0: device disconnected
[  163.915848][ T5729] XFS (loop4): Mounting V5 Filesystem
[  163.957165][ T5735] loop3: detected capacity change from 0 to 32768
[  163.965964][ T5735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5735)
[  163.989291][ T5735] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.999691][ T5735] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  164.010468][ T5735] BTRFS info (device loop3): using free space tree
[  164.063741][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.080409][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  164.096749][ T5729] XFS (loop4): Ending clean mount
[  164.104074][ T5735] BTRFS info (device loop3): enabling ssd optimizations
[  164.137870][ T5729] XFS (loop4): Quotacheck needed: Please wait.
[  164.196674][ T5729] XFS (loop4): Quotacheck: Done.
[  164.240042][   T26] audit: type=1800 audit(1717469078.607:54): pid=5729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1066 res=0 errno=0
[  164.266970][ T3930] XFS (loop4): Unmounting Filesystem
[  164.285854][ T5541] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.396282][ T5782] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  164.407391][ T5782] vhci_hcd: invalid port number 129
[  164.412978][ T5782] vhci_hcd: invalid port number 129
[  164.480509][ T3649] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  164.485093][ T3661] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  164.526900][ T5784] loop2: detected capacity change from 0 to 16
[  164.607403][ T5784] erofs: (device loop2): mounted with root inode @ nid 36.
[  164.639058][ T5786] loop3: detected capacity change from 0 to 256
[  164.655636][ T5784] syz-executor.2: attempt to access beyond end of device
[  164.655636][ T5784] loop2: rw=0, sector=40, nr_sectors = 8 limit=16
[  164.699779][ T5787] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  164.718779][ T5787] syz-executor.2: attempt to access beyond end of device
[  164.718779][ T5787] loop2: rw=0, sector=296, nr_sectors = 8 limit=16
[  164.740632][ T3661] usb 1-1: Using ep0 maxpacket: 8
[  164.746160][ T5787] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  164.759506][ T5787] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36
[  164.856595][ T5793] loop3: detected capacity change from 0 to 512
[  164.863552][ T3661] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  164.880789][ T3649] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  164.884248][ T3661] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=96.12
[  164.898722][ T3649] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  164.924695][ T5793] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 2048
[  164.927903][ T3661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.944303][ T3649] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  164.958977][ T3661] usb 1-1: config 0 descriptor??
[  164.971523][ T3649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.010959][ T5777] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  165.016926][ T3661] usb 1-1: bad CDC descriptors
[  165.033175][ T3661] usb 1-1: bad CDC descriptors
[  165.171923][ T5793] loop3: detected capacity change from 0 to 512
[  165.240062][ T3649] usb 1-1: USB disconnect, device number 12
[  165.294562][ T4047] usb 2-1: USB disconnect, device number 12
[  165.515012][ T5791] loop4: detected capacity change from 0 to 40427
[  165.529248][ T5784] syz-executor.2 (5784): drop_caches: 2
[  165.536892][ T5793] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  165.547714][ T5791] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  165.561933][ T5791] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  165.585053][ T5793] EXT4-fs (loop3): orphan cleanup on readonly fs
[  165.607572][ T5793] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters
[  165.638166][ T5791] F2FS-fs (loop4): Found nat_bits in checkpoint
[  165.676048][ T5793] Quota error (device loop3): write_blk: dquota write failed
[  165.687398][ T5793] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  165.707013][ T5791] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  165.709862][ T5793] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor.3: Failed to acquire dquot type 0
[  165.714707][ T5791] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.754238][ T5793] EXT4-fs (loop3): 1 truncate cleaned up
[  165.793794][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  165.829543][ T5793] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  165.862519][ T5793] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  166.116949][ T5541] EXT4-fs (loop3): unmounting filesystem.
[  166.352794][ T5823] loop3: detected capacity change from 0 to 1024
[  166.359938][ T5823] EXT4-fs: Ignoring removed orlov option
[  166.366384][ T5823] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.390320][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.406503][ T5821] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  166.431174][ T5823] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  166.441903][ T5821] vhci_hcd: invalid port number 129
[  166.454864][ T5821] vhci_hcd: invalid port number 129
[  166.535816][ T5823] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:69: inode #12: comm syz-executor.3: corrupt xattr in inline inode
[  166.576713][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.731347][ T5823] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.3: corrupted in-inode xattr
[  166.786019][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.786472][ T5830] loop4: detected capacity change from 0 to 16
[  166.865304][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.905265][ T5541] ==================================================================
[  166.913359][ T5541] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  166.921452][ T5541] Read of size 4 at addr ffff88806398e000 by task syz-executor.3/5541
[  166.929689][ T5541] 
[  166.932011][ T5541] CPU: 1 PID: 5541 Comm: syz-executor.3 Not tainted 6.1.92-syzkaller #0
[  166.940319][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  166.950362][ T5541] Call Trace:
[  166.953641][ T5541]  <TASK>
[  166.956559][ T5541]  dump_stack_lvl+0x1e3/0x2cb
[  166.961239][ T5541]  ? nf_tcp_handle_invalid+0x642/0x642
[  166.966687][ T5541]  ? panic+0x764/0x764
[  166.970736][ T5541]  ? _printk+0xd1/0x111
[  166.974873][ T5541]  ? __virt_addr_valid+0x17f/0x520
[  166.979993][ T5541]  ? __virt_addr_valid+0x17f/0x520
[  166.985208][ T5541]  print_report+0x15f/0x4f0
[  166.989827][ T5541]  ? __virt_addr_valid+0x17f/0x520
[  166.994971][ T5541]  ? __virt_addr_valid+0x17f/0x520
[  167.000077][ T5541]  ? __virt_addr_valid+0x44a/0x520
[  167.005178][ T5541]  ? __phys_addr+0xb6/0x170
[  167.009664][ T5541]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  167.015297][ T5541]  kasan_report+0x136/0x160
[  167.019791][ T5541]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  167.025427][ T5541]  ext4_xattr_delete_inode+0xcd0/0xce0
[  167.030891][ T5541]  ? ext4_blocks_for_truncate+0x270/0x270
[  167.036599][ T5541]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  167.042746][ T5541]  ? rcu_read_lock_any_held+0xb3/0x160
[  167.048191][ T5541]  ? ext4_inode_is_fast_symlink+0x262/0x390
[  167.054155][ T5541]  ext4_evict_inode+0xc77/0x1150
[  167.059075][ T5541]  ? _raw_spin_unlock+0x24/0x40
[  167.063921][ T5541]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  167.069800][ T5541]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  167.075688][ T5541]  evict+0x2a4/0x620
[  167.079674][ T5541]  vfs_rmdir+0x381/0x4b0
[  167.083941][ T5541]  do_rmdir+0x3a2/0x590
[  167.088082][ T5541]  ? d_delete_notify+0x150/0x150
[  167.093011][ T5541]  ? syscall_enter_from_user_mode+0x2e/0x230
[  167.098973][ T5541]  __x64_sys_unlinkat+0xdc/0xf0
[  167.103830][ T5541]  do_syscall_64+0x3b/0xb0
[  167.108244][ T5541]  ? clear_bhb_loop+0x45/0xa0
[  167.112914][ T5541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.118803][ T5541] RIP: 0033:0x7fae9c67c747
[  167.123215][ T5541] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  167.142892][ T5541] RSP: 002b:00007ffe3d191598 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  167.151286][ T5541] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fae9c67c747
[  167.159253][ T5541] RDX: 0000000000000200 RSI: 00007ffe3d192740 RDI: 00000000ffffff9c
[  167.167214][ T5541] RBP: 00007fae9c6d963e R08: 0000000000000000 R09: 0000000000000000
[  167.175171][ T5541] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffe3d192740
[  167.183125][ T5541] R13: 00007fae9c6d963e R14: 000000000002899b R15: 0000000000000009
[  167.191117][ T5541]  </TASK>
[  167.194129][ T5541] 
[  167.196432][ T5541] The buggy address belongs to the physical page:
[  167.202828][ T5541] page:ffffea00018e6380 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6398e
[  167.212964][ T5541] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  167.220070][ T5541] raw: 00fff00000000000 ffffea00018e63c8 ffffea00018e49c8 0000000000000000
[  167.228647][ T5541] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  167.237210][ T5541] page dumped because: kasan: bad access detected
[  167.243611][ T5541] page_owner tracks the page as freed
[  167.248967][ T5541] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5822, tgid 5822 (syz-executor.3), ts 166344417647, free_ts 166848866043
[  167.267045][ T5541]  post_alloc_hook+0x18d/0x1b0
[  167.271807][ T5541]  get_page_from_freelist+0x31a1/0x3320
[  167.277332][ T5541]  __alloc_pages+0x28d/0x770
[  167.281902][ T5541]  __folio_alloc+0xf/0x30
[  167.286213][ T5541]  vma_alloc_folio+0x486/0x990
[  167.290986][ T5541]  wp_page_copy+0x291/0x18c0
[  167.295576][ T5541]  handle_mm_fault+0x2525/0x5340
[  167.300507][ T5541]  exc_page_fault+0x26f/0x660
[  167.305178][ T5541]  asm_exc_page_fault+0x22/0x30
[  167.310011][ T5541] page last free stack trace:
[  167.314696][ T5541]  free_unref_page_prepare+0xf63/0x1120
[  167.320228][ T5541]  free_unref_page_list+0x663/0x900
[  167.325514][ T5541]  release_pages+0x2836/0x2b40
[  167.330592][ T5541]  tlb_flush_mmu+0xfc/0x210
[  167.335078][ T5541]  tlb_finish_mmu+0xce/0x1f0
[  167.339736][ T5541]  exit_mmap+0x3c3/0x9f0
[  167.343958][ T5541]  __mmput+0x115/0x3c0
[  167.348024][ T5541]  exit_mm+0x226/0x300
[  167.352080][ T5541]  do_exit+0x9f6/0x26a0
[  167.356218][ T5541]  do_group_exit+0x202/0x2b0
[  167.360800][ T5541]  __x64_sys_exit_group+0x3b/0x40
[  167.365840][ T5541]  do_syscall_64+0x3b/0xb0
[  167.370267][ T5541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  167.376146][ T5541] 
[  167.378450][ T5541] Memory state around the buggy address:
[  167.384057][ T5541]  ffff88806398df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  167.392104][ T5541]  ffff88806398df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  167.400241][ T5541] >ffff88806398e000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  167.408285][ T5541]                    ^
2024/06/04 02:44:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  167.412336][ T5541]  ffff88806398e080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  167.420378][ T5541]  ffff88806398e100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  167.428536][ T5541] ==================================================================
[  167.481397][ T5830] erofs: (device loop4): mounted with root inode @ nid 36.
[  167.503440][ T5830] syz-executor.4: attempt to access beyond end of device
[  167.503440][ T5830] loop4: rw=0, sector=40, nr_sectors = 8 limit=16
[  167.964704][ T5541] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  167.972033][ T5541] CPU: 0 PID: 5541 Comm: syz-executor.3 Not tainted 6.1.92-syzkaller #0
[  167.980478][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  167.990637][ T5541] Call Trace:
[  167.993922][ T5541]  <TASK>
[  167.996876][ T5541]  dump_stack_lvl+0x1e3/0x2cb
[  168.001571][ T5541]  ? nf_tcp_handle_invalid+0x642/0x642
[  168.007044][ T5541]  ? panic+0x764/0x764
[  168.011124][ T5541]  ? preempt_schedule_common+0xa6/0xd0
[  168.016600][ T5541]  ? vscnprintf+0x59/0x80
[  168.021116][ T5541]  panic+0x318/0x764
[  168.025020][ T5541]  ? check_panic_on_warn+0x1d/0xa0
[  168.030141][ T5541]  ? memcpy_page_flushcache+0xfc/0xfc
[  168.035524][ T5541]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  168.041522][ T5541]  ? _raw_spin_unlock+0x40/0x40
[  168.046386][ T5541]  ? print_report+0x4a3/0x4f0
[  168.051080][ T5541]  check_panic_on_warn+0x7e/0xa0
[  168.056029][ T5541]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  168.061699][ T5541]  end_report+0x66/