last executing test programs:

6.292638946s ago: executing program 1 (id=2184):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0xa, "e7e03604"}, @local=@item_012={0x2, 0x2, 0x2, "9011"}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @global=@item_4={0x3, 0x1, 0x0, "e097383c"}]}}, 0x0}, 0x0)

5.006804366s ago: executing program 4 (id=2193):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TCFLSH(r0, 0x804c4700, 0x20000004)

4.682852514s ago: executing program 4 (id=2197):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0x7fffdff1d000}, 0x1})

4.275775261s ago: executing program 4 (id=2201):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = fsopen(&(0x7f0000000000)='fuse\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='sync\x00', &(0x7f0000000080)=':', 0xfe5d)

3.925727416s ago: executing program 4 (id=2203):
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x8, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x18)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)

3.653258687s ago: executing program 4 (id=2207):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a227536350102f0010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x0, 0x0, 0x2, "37ff"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

3.462882351s ago: executing program 2 (id=2209):
r0 = msgget$private(0x0, 0x0)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xee00, 0x0, 0xffffffffffffffff}})
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x800)

3.332882048s ago: executing program 1 (id=2210):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x2d)
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00?'], 0x48}}, 0x0)

3.266365539s ago: executing program 5 (id=2211):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)={0x3c, r1, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

3.123370514s ago: executing program 2 (id=2214):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

3.045167021s ago: executing program 5 (id=2215):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[], 0x81, 0x1505, &(0x7f0000002180)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

2.767686473s ago: executing program 2 (id=2218):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)

2.713771659s ago: executing program 1 (id=2220):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000003c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd3f503f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32ccd508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f71105c4a42e9b979fcee1f628d1cec3462830606bb612bfed912c1cdc907bb91a2e86de2ad5", @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

2.552877018s ago: executing program 5 (id=2222):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x2c040044)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}]}, 0x20}}, 0x0)

2.502721188s ago: executing program 2 (id=2223):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[@cred={{0x1c}}], 0x20}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

2.354344166s ago: executing program 3 (id=2224):
syz_mount_image$minix(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES16=0x0], 0x1, 0x191, &(0x7f0000000bc0)="$eJzs29tOGlEUxvFvOLSUtvR8SK+atGl6I6NCFO7kLbwlMBLioEa8EGIiPopPpg8AF76AY7IZwyEwjCYwIP9fYvZK1qzstRMXMxAQgLW1J8mSpZQkz/Muz/9a+h11UwAWwvPXew/A+okz+sCa6pXi5v5/K+nm7qLS9f9SIZ8feqWYWTuSukP1b8LWX1lm/ZUYrU9Lehtcarbwrvv1/8b2fxdu++RjkB6rfx+6//75//8Zrc9I+iDpo6RPkj5L+iLpq6RvE85fHdv/Z8j9AQAAAAAIw1J2Vj7wgpgO6q6zOTWfNPmtqflXJr89I5+b0FjHLK9NPls5dqtBbQKYIPbk+fcHzxcfmf/+Z1kauiIxY/4BRKfZah+WXdc5XepgPyMtQRsEU4MV+UciCB1E/coEYN7ss8aJ3Wy1N+qNcs2pOUe7hXy+WMjtFG3zYG8Hv70HsMIGN/2oOwEAAAAAAAAAAAAAAM/1XdKPqJsAAAAAsBCD7/9ac/s5UdRnBAAAAAAAAAAAAADgpXsIAAD//0wTSao=")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
fstat(r0, &(0x7f0000000180))

2.268497222s ago: executing program 5 (id=2225):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000540)=[{&(0x7f0000000200)="f234f40bffe0a901b9772412c055179d06bac36810378fd63312b775d7d941855c99250abbda74299d7e599e8b4771c03e1c90532dca", 0x36}, {&(0x7f00000002c0)="1bfe492d3faf07562c1a49e8e6e856ed988cb28ffce3a452c8badf7ced1d922ee8fcdd809535df9eb4658c85f7f0c9cac47bf58f7d3422fd9533", 0x3a}], 0x2)

2.219821635s ago: executing program 2 (id=2226):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x4810, &(0x7f0000000140)=ANY=[], 0x11, 0x693, &(0x7f0000000880)="$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")
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x4)

2.21481996s ago: executing program 0 (id=2227):
rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000340)="2437460f1c2bc4a2f99c9022000000c4a2f10027460f38e741c44240f29a3b470000a5c43b3be5c436fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000300))
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0)

1.90445497s ago: executing program 5 (id=2228):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000880)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortad}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f0000001080)="$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")
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x46842, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

1.904167952s ago: executing program 3 (id=2229):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x22}])

1.897999088s ago: executing program 0 (id=2230):
r0 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040))

1.751258285s ago: executing program 2 (id=2231):
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.594342123s ago: executing program 1 (id=2232):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x379}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}}, 0x24000040)

1.55486979s ago: executing program 0 (id=2233):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f0000002280)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.362937319s ago: executing program 3 (id=2234):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001880)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590)
setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108)

1.190821548s ago: executing program 5 (id=2235):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x44e, 0x1215, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4000, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xdf, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x17, {0x17, 0x0, "a7ea3163fdfa964eccac45d3456808f1e3fe0c472c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.141553518s ago: executing program 3 (id=2236):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0)

949.218154ms ago: executing program 1 (id=2237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x2c)

909.062528ms ago: executing program 0 (id=2238):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}}, 0x0)

882.76481ms ago: executing program 3 (id=2239):
syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00f0ea3e7305b16f28aa4d590119da50c0b3bfa2f3d59c8f93ec3622a63a5160966d7498cff9cb4b2dc5c94d8cdaeb826f708fa6b28ce41a7fcf2e6526727c88631c3689733d9244c15a64ce61e7ed53b4b856afea94096c1d651b3e51b74aa3aa007bbfad8414c5fc1a223cc3e9dce0226ea5fc03fe6a5b07000000874c595090"], 0x1, 0xa7, &(0x7f0000000c00)="$eJzszsGJwkAYBeCXsLALC9kC9rAdpIctRTyJ3jwpgo3Ygq1Ygh148OolEqIg5KQBRfg+mBneDI/5d6ftb6qkWSdN63K05ovldDTr9vQU/SveTplJPpN8Jfmr2pwc/ru3Il3eH1fj60ry8eqZAQCAx5Spk2xuc31P+3vQ783PoDoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE5wDAAD//yRDI3k=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
sync()
write$FUSE_IOCTL(r0, &(0x7f00000000c0)={0x20}, 0x20)

514.08065ms ago: executing program 1 (id=2240):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0xc020660b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1ff})

383.434427ms ago: executing program 0 (id=2241):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10)

381.916097ms ago: executing program 4 (id=2242):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)='\v', 0x1)

63.454535ms ago: executing program 0 (id=2243):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000880)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid})

0s ago: executing program 3 (id=2244):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x20, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

[ T8396] netlink: 'syz.2.1219': attribute type 11 has an invalid length.
[  239.350089][    T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  239.361071][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  239.378210][    T8] usb 4-1: SerialNumber: syz
[  239.627701][    T8] usb 4-1: 0:2 : does not exist
[  239.633770][    T8] usb 4-1: unit 49 not found!
[  239.733177][    T8] usb 4-1: USB disconnect, device number 10
[  239.990110][ T5373] udevd[5373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.082950][ T8412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  240.602034][ T8426] Zero length message leads to an empty skb
[  240.942944][ T5336] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  241.165185][ T5336] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  241.204985][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.253263][ T5336] usb 4-1: config 0 descriptor??
[  241.280426][ T5336] cp210x 4-1:0.0: cp210x converter detected
[  241.334672][ T8446] netlink: 'syz.5.1243': attribute type 3 has an invalid length.
[  241.882540][ T5336] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  241.915506][ T5336] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  241.955698][ T5336] usb 4-1: cp210x converter now attached to ttyUSB0
[  242.004119][ T5336] usb 4-1: USB disconnect, device number 11
[  242.056198][ T5336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  242.095765][ T5336] cp210x 4-1:0.0: device disconnected
[  242.414837][ T8442] loop2: detected capacity change from 0 to 32768
[  242.441398][ T8442] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1241 (8442)
[  242.553795][ T8442] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.592893][ T8442] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  242.601448][ T8442] BTRFS info (device loop2): using free-space-tree
[  242.830190][ T8454] loop5: detected capacity change from 0 to 32768
[  242.922889][ T8471] loop1: detected capacity change from 0 to 2048
[  243.136868][   T45] read_mapping_page failed!
[  243.141851][   T45] ERROR: (device loop5): txCommit: 
[  243.141851][   T45] 
[  243.203190][   T45] jfs_write_inode: jfs_commit_inode failed!
[  243.245212][ T8471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.392987][ T8471] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.465914][ T8442] BTRFS warning (device loop2): failed to trim 3 block group(s), last error -512
[  243.563065][ T5239] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  243.758121][ T8442] BTRFS warning (device loop2): failed to trim 1 device(s), last error -512
[  243.802874][ T5239] usb 5-1: Using ep0 maxpacket: 16
[  243.811617][ T7009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.846652][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.872788][ T5239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.903093][ T5239] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  243.912290][ T5239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.940138][ T5242] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.985480][ T5239] usb 5-1: config 0 descriptor??
[  244.017918][ T8474] loop0: detected capacity change from 0 to 32768
[  244.049108][ T8474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1255 (8474)
[  244.138655][ T8474] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.161385][ T8474] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  244.183917][ T8474] BTRFS info (device loop0): using free-space-tree
[  244.454089][ T5239] aquacomputer_d5next 0003:0C70:F00D.002A: unknown main item tag 0x0
[  244.493346][ T5239] aquacomputer_d5next 0003:0C70:F00D.002A: unknown main item tag 0x0
[  244.501542][ T5239] aquacomputer_d5next 0003:0C70:F00D.002A: unknown main item tag 0x0
[  244.550006][ T5239] aquacomputer_d5next 0003:0C70:F00D.002A: unknown main item tag 0x0
[  244.598149][ T5239] aquacomputer_d5next 0003:0C70:F00D.002A: unknown main item tag 0x0
[  244.666157][ T8538] loop5: detected capacity change from 0 to 128
[  244.727342][ T8538] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978)
[  244.738223][ T5239] aquacomputer_d5next 0003:0C70:F00D.002A: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.4-1/input0
[  244.777506][ T8540] loop3: detected capacity change from 0 to 1024
[  244.805670][ T8541] loop2: detected capacity change from 0 to 1024
[  244.816693][ T8538] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  244.887071][ T8540] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  244.942616][ T8540] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  244.963564][ T5232] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.009778][ T5239] usb 5-1: USB disconnect, device number 15
[  245.041476][ T8540] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  245.044464][   T30] audit: type=1800 audit(1723889208.116:14): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1264" name="file2" dev="loop2" ino=21 res=0 errno=0
[  245.114557][ T8540] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: inode #5: comm syz.3.1269: unexpected bad inode w/o EXT4_IGET_BAD
[  245.184431][ T8540] EXT4-fs (loop3): no journal found
[  245.220128][ T8540] EXT4-fs (loop3): can't get journal size
[  245.297221][ T8540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  245.432816][ T5336] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  245.665026][ T5336] usb 2-1: Using ep0 maxpacket: 32
[  245.734800][ T5231] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  245.780278][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.795483][ T5336] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  245.835454][ T5336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.923328][ T5336] usb 2-1: Product: syz
[  245.927569][ T5336] usb 2-1: Manufacturer: syz
[  245.932183][ T5336] usb 2-1: SerialNumber: syz
[  246.044055][ T5336] usb 2-1: config 0 descriptor??
[  246.099987][ T8560] netlink: 'syz.2.1277': attribute type 29 has an invalid length.
[  246.153182][ T8567] netlink: 'syz.2.1277': attribute type 29 has an invalid length.
[  246.649394][ T5336] airspy 2-1:0.0: Board ID: 00
[  246.671274][ T5336] airspy 2-1:0.0: Firmware version: 
[  246.798660][ T8575] loop5: detected capacity change from 0 to 4096
[  246.840149][ T8575] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  246.883561][ T5336] airspy 2-1:0.0: usb_control_msg() failed -71 request 11
[  246.963842][ T5336] airspy 2-1:0.0: Registered as swradio16
[  247.005545][ T8575] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  247.018948][ T5336] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  247.093271][ T5336] usb 2-1: USB disconnect, device number 7
[  247.137602][ T8575] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  248.067454][ T8607] loop4: detected capacity change from 0 to 128
[  248.173631][ T8605] loop5: detected capacity change from 0 to 4096
[  248.254163][ T8605] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  248.638125][ T8619] netlink: 'syz.1.1302': attribute type 3 has an invalid length.
[  249.238803][ T8599] loop0: detected capacity change from 0 to 32768
[  249.697727][ T8612] loop2: detected capacity change from 0 to 32768
[  249.769883][ T8612] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1299 (8612)
[  249.866269][ T8645] loop3: detected capacity change from 0 to 1024
[  249.894261][ T8612] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  249.949700][ T8612] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  249.990712][ T8612] BTRFS info (device loop2): using free-space-tree
[  250.022641][ T8645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  250.366470][   T30] audit: type=1326 audit(1723889213.446:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.4.1320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b58379e79 code=0x0
[  250.388144][    C1] vkms_vblank_simulate: vblank timer overrun
[  250.394149][ T8612] BTRFS error (device loop2): unable to set label with more than 255 bytes
[  250.465936][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.488374][ T8678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1322'.
[  250.521070][ T5242] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  250.563726][ T8680] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1322'.
[  250.720188][ T8684] loop3: detected capacity change from 0 to 64
[  250.806368][ T8684] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  251.771268][ T8712] loop0: detected capacity change from 0 to 128
[  252.127187][ T8658] loop1: detected capacity change from 0 to 32768
[  252.150055][ T8658] XFS: noikeep mount option is deprecated.
[  252.321454][ T8658] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  252.729639][ T8658] XFS (loop1): Ending clean mount
[  252.785294][ T8658] XFS (loop1): Quotacheck needed: Please wait.
[  252.821358][ T8746] loop4: detected capacity change from 0 to 512
[  252.828568][ T8740] loop5: detected capacity change from 0 to 4096
[  252.847316][ T8748] loop3: detected capacity change from 0 to 512
[  252.861748][ T8740] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  252.922514][ T8748] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1349: corrupted in-inode xattr: e_name out of bounds
[  252.958634][ T8658] XFS (loop1): Quotacheck: Done.
[  252.966192][ T8740] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  252.990244][ T8746] EXT4-fs (loop4): 1 orphan inode deleted
[  253.040812][ T8748] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1349: couldn't read orphan inode 15 (err -117)
[  253.073258][ T8746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.087997][ T8748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.157567][ T8740] ntfs3: loop5: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  253.303408][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.380931][ T7009] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  253.550757][ T8753] loop0: detected capacity change from 0 to 2048
[  253.646566][ T8753] NILFS (loop0): invalid segment: Checksum error in segment payload
[  253.670748][ T8753] NILFS (loop0): trying rollback from an earlier position
[  253.714531][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.734600][ T8758] loop5: detected capacity change from 0 to 1024
[  253.780612][ T8716] loop2: detected capacity change from 0 to 32768
[  253.800370][ T8753] NILFS (loop0): recovery complete
[  253.832390][ T8759] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  254.061717][ T2543] hfsplus: b-tree write err: -5, ino 4
[  254.275375][ T8761] loop4: detected capacity change from 0 to 1024
[  254.592105][ T8770] loop3: detected capacity change from 0 to 256
[  254.797452][ T8770] FAT-fs (loop3): Directory bread(block 64) failed
[  254.831971][ T8770] FAT-fs (loop3): Directory bread(block 65) failed
[  254.842241][ T8770] FAT-fs (loop3): Directory bread(block 66) failed
[  254.862889][ T8770] FAT-fs (loop3): Directory bread(block 67) failed
[  254.869587][ T8770] FAT-fs (loop3): Directory bread(block 68) failed
[  254.892895][ T8770] FAT-fs (loop3): Directory bread(block 69) failed
[  254.899581][ T8770] FAT-fs (loop3): Directory bread(block 70) failed
[  254.934928][ T8770] FAT-fs (loop3): Directory bread(block 71) failed
[  254.941715][ T8770] FAT-fs (loop3): Directory bread(block 72) failed
[  254.974538][ T8770] FAT-fs (loop3): Directory bread(block 73) failed
[  255.402305][ T8777] loop5: detected capacity change from 0 to 1024
[  255.586006][ T8777] hfsplus: request for non-existent node 3080192 in B*Tree
[  255.634622][ T8777] hfsplus: request for non-existent node 3080192 in B*Tree
[  255.642547][ T8777] hfsplus: xattr searching failed
[  255.713324][   T30] audit: type=1800 audit(1723889218.796:16): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1363" name="file0" dev="loop5" ino=26 res=0 errno=0
[  255.848656][   T11] hfsplus: b-tree write err: -5, ino 4
[  255.955350][ T8795] loop0: detected capacity change from 0 to 1024
[  255.997745][ T8795] EXT4-fs: Ignoring removed oldalloc option
[  256.100724][ T8795] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.142851][ T5296] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  256.233642][   T30] audit: type=1800 audit(1723889219.316:17): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1370" name="bus" dev="loop0" ino=18 res=0 errno=0
[  256.375298][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  256.398807][ T5296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  256.436289][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  256.478646][ T5296] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  256.504450][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.518455][ T5296] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  256.559496][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.589075][ T5296] usb 3-1: config 0 descriptor??
[  256.859159][ T5296] hdpvr 3-1:0.0: firmware version 0x5b dated �7vi0�
[  256.859159][ T5296] �����pY3���LR������<�<��$�4���
[  256.905118][ T5296] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  257.413072][ T5296] hdpvr 3-1:0.0: Could not setup controls
[  257.452524][ T5296] hdpvr 3-1:0.0: registering videodev failed
[  257.508955][ T5296] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -71
[  257.600339][ T5296] usb 3-1: USB disconnect, device number 16
[  257.658511][ T8798] loop5: detected capacity change from 0 to 32768
[  257.771029][ T8798] ERROR: (device loop5): diWrite: ixpxd invalid
[  257.771029][ T8798] 
[  257.823515][ T8798] ERROR: (device loop5): remounting filesystem as read-only
[  257.856689][ T8840] loop3: detected capacity change from 0 to 512
[  257.872119][ T8798] ERROR: (device loop5): txCommit: 
[  257.872119][ T8798] 
[  257.961197][ T8840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.999140][ T8840] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  258.290005][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.342841][ T5296] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  258.398474][ T8851] netlink: 'syz.1.1394': attribute type 3 has an invalid length.
[  258.559536][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.599900][ T5296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.623770][ T5296] usb 1-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.07
[  258.632958][ T8857] netlink: 'syz.3.1397': attribute type 1 has an invalid length.
[  258.632987][ T8857] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.1397'.
[  258.667826][ T5296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.683444][ T5296] usb 1-1: config 0 descriptor??
[  258.897249][ T8861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1393'.
[  259.058393][ T5336] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  259.144672][ T5296] wacom 0003:056A:00B8.002B: Unknown device_type for 'HID 056a:00b8'. Assuming pen.
[  259.215704][ T5296] wacom 0003:056A:00B8.002B: hidraw0: USB HID v0.00 Device [HID 056a:00b8] on usb-dummy_hcd.0-1/input0
[  259.261787][ T5296] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B8.002B/input/input24
[  259.295844][ T8871] loop2: detected capacity change from 0 to 1024
[  259.313715][ T5336] usb 4-1: Using ep0 maxpacket: 8
[  259.321472][ T5336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.342888][ T5336] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.356573][ T5296] usb 1-1: USB disconnect, device number 16
[  259.371757][ T5336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  259.405647][ T5336] usb 4-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00
[  259.454556][ T8873] loop1: detected capacity change from 0 to 512
[  259.482817][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.532874][ T5336] usb 4-1: config 0 descriptor??
[  259.731650][ T8873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.852278][ T8873] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.923889][ T8880] loop2: detected capacity change from 0 to 256
[  260.050533][ T5336] maltron 0003:058F:9410.002C: unknown main item tag 0x0
[  260.095313][ T5336] maltron 0003:058F:9410.002C: unknown main item tag 0x0
[  260.126633][ T5336] maltron 0003:058F:9410.002C: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.3-1/input0
[  260.330295][ T5239] usb 4-1: USB disconnect, device number 12
[  260.461272][ T8886] loop0: detected capacity change from 0 to 128
[  260.466621][ T7009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.871151][ T8869] loop5: detected capacity change from 0 to 32768
[  261.011188][ T8869] ERROR: (device loop5): diWrite: ixpxd invalid
[  261.011188][ T8869] 
[  261.105578][ T8869] ERROR: (device loop5): remounting filesystem as read-only
[  261.122885][ T8869] ERROR: (device loop5): txCommit: 
[  261.122885][ T8869] 
[  261.207300][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  261.214721][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  261.238769][ T8902] loop4: detected capacity change from 0 to 1024
[  261.388261][ T8902] hfsplus: bad catalog entry type
[  261.535019][ T8910] loop2: detected capacity change from 0 to 1024
[  261.659852][ T8910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.792809][ T8910] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.992418][ T8910] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none.
[  262.158158][ T8923] loop4: detected capacity change from 0 to 512
[  262.260602][ T8923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.373256][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.393689][ T8932] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'.
[  262.422626][ T8923] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.716738][ T8939] loop3: detected capacity change from 0 to 512
[  262.753040][ T5296] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  262.843899][ T8939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.905115][ T8939] ext4 filesystem being mounted at /256/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.971785][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.982775][ T5296] usb 6-1: Using ep0 maxpacket: 16
[  262.995361][ T5296] usb 6-1: config 0 has no interfaces?
[  263.005755][ T5296] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  263.041426][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.103910][ T5296] usb 6-1: config 0 descriptor??
[  263.160050][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.238898][ T8951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'.
[  263.283744][ T5239] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  263.369046][    T8] usb 6-1: USB disconnect, device number 17
[  263.535066][ T8956] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1439'.
[  263.550832][ T5239] usb 2-1: Using ep0 maxpacket: 16
[  263.636902][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.662433][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.704010][ T5239] usb 2-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  263.754156][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.786130][ T5239] usb 2-1: config 0 descriptor??
[  264.037717][ T8968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1443'.
[  264.154470][ T5233] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  264.353692][ T5239] ntrig 0003:1B96:0008.002D: unbalanced delimiter at end of report description
[  264.379152][ T5233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.398265][ T5239] ntrig 0003:1B96:0008.002D: parse failed
[  264.433681][ T5233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.444343][ T5239] ntrig 0003:1B96:0008.002D: probe with driver ntrig failed with error -22
[  264.468379][ T5233] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  264.486492][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.495489][ T5296] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  264.509019][ T5233] usb 4-1: config 0 descriptor??
[  264.688076][    T8] usb 2-1: USB disconnect, device number 8
[  264.692923][ T5296] usb 6-1: Using ep0 maxpacket: 16
[  264.709241][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.718317][ T8982] loop2: detected capacity change from 0 to 256
[  264.755450][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.817311][ T5296] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  264.872578][ T5296] usb 6-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00
[  264.882448][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.887551][ T8982] FAT-fs (loop2): Directory bread(block 64) failed
[  264.925367][ T8982] FAT-fs (loop2): Directory bread(block 65) failed
[  264.949653][ T8982] FAT-fs (loop2): Directory bread(block 66) failed
[  264.950320][ T5233] uclogic 0003:28BD:0074.002E: interface is invalid, ignoring
[  264.973125][ T5296] usb 6-1: config 0 descriptor??
[  265.000481][ T8982] FAT-fs (loop2): Directory bread(block 67) failed
[  265.038565][ T8982] FAT-fs (loop2): Directory bread(block 68) failed
[  265.078215][ T8982] FAT-fs (loop2): Directory bread(block 69) failed
[  265.088445][ T8982] FAT-fs (loop2): Directory bread(block 70) failed
[  265.107045][ T8982] FAT-fs (loop2): Directory bread(block 71) failed
[  265.117256][ T8982] FAT-fs (loop2): Directory bread(block 72) failed
[  265.128814][ T8982] FAT-fs (loop2): Directory bread(block 73) failed
[  265.274301][ T5233] usb 4-1: USB disconnect, device number 13
[  265.414359][ T5296] wacom 0003:056A:0022.002F: collection stack underflow
[  265.421384][ T5296] wacom 0003:056A:0022.002F: item 0 2 0 12 parsing failed
[  265.452144][ T5296] wacom 0003:056A:0022.002F: parse failed
[  265.458386][ T5296] wacom 0003:056A:0022.002F: probe with driver wacom failed with error -22
[  265.636321][   T58] usb 6-1: USB disconnect, device number 18
[  265.839270][ T8992] nbd: illegal input index -1
[  265.858934][ T8979] loop0: detected capacity change from 0 to 32768
[  265.906371][ T8979] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1451 (8979)
[  266.012842][ T8979] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  266.043129][ T8979] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  266.056299][ T8979] BTRFS info (device loop0): using free-space-tree
[  266.307432][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1460'.
[  266.563159][ T9023] smb3: Bad value for 'gid'
[  266.567747][ T9023] smb3: Bad value for 'gid'
[  266.583000][ T8979] BTRFS info (device loop0 state M): max_inline set to 0
[  266.916095][ T5232] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  267.207560][ T9041] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  267.284100][ T9041] CIFS mount error: No usable UNC path provided in device string!
[  267.284100][ T9041] 
[  267.344980][ T9041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  267.472804][   T58] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  267.602609][ T9048] loop5: detected capacity change from 0 to 64
[  267.621318][ T9046] program syz.4.1476 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  267.675237][ T9049] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  267.715467][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.760208][   T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.798838][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  267.835645][   T58] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  267.903063][    C1] sd 0:0:1:0: [sda] tag#4361 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  267.907828][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.913675][    C1] sd 0:0:1:0: [sda] tag#4361 CDB: Read(6) 08 00 00 00 00 00
[  268.015605][   T58] usb 4-1: config 0 descriptor??
[  268.044895][    T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  268.075134][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.154116][    T9] usb 3-1: config 0 descriptor??
[  268.290251][ T9054] Process accounting resumed
[  268.516871][ T9054] Process accounting resumed
[  268.533579][   T58] hid-multitouch 0003:0EEF:72D0.0030: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.3-1/input0
[  268.649815][    T9] gs_usb 3-1:0.0: Configuring for 198 interfaces
[  268.682724][    T9] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  268.732239][ T9063] loop0: detected capacity change from 0 to 2048
[  268.739009][    T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  268.777184][    T9] usb 4-1: USB disconnect, device number 14
[  268.780333][ T9063] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  268.867915][ T9069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  268.868206][ T5239] usb 3-1: USB disconnect, device number 17
[  268.984191][ T9063] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  269.056104][ T9063] Remounting filesystem read-only
[  270.660514][ T9119] loop3: detected capacity change from 0 to 256
[  270.791406][ T9121] loop4: detected capacity change from 0 to 8
[  270.879995][ T9121] unable to read inode lookup table
[  270.929774][ T9124] loop2: detected capacity change from 0 to 1024
[  270.953385][ T9121] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  271.001906][ T9124] hfsplus: uid requires an argument
[  271.032805][ T9124] hfsplus: unable to parse mount options
[  271.259734][ T9128] loop0: detected capacity change from 0 to 256
[  271.466084][ T9128] FAT-fs (loop0): Directory bread(block 64) failed
[  271.491448][ T9128] FAT-fs (loop0): Directory bread(block 65) failed
[  271.517147][ T9128] FAT-fs (loop0): Directory bread(block 66) failed
[  271.533998][ T9128] FAT-fs (loop0): Directory bread(block 67) failed
[  271.543308][ T9128] FAT-fs (loop0): Directory bread(block 68) failed
[  271.561732][ T9128] FAT-fs (loop0): Directory bread(block 69) failed
[  271.571393][ T9128] FAT-fs (loop0): Directory bread(block 70) failed
[  271.587620][ T9128] FAT-fs (loop0): Directory bread(block 71) failed
[  271.598970][ T9128] FAT-fs (loop0): Directory bread(block 72) failed
[  271.612823][ T9128] FAT-fs (loop0): Directory bread(block 73) failed
[  271.652918][   T58] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  271.777203][ T9105] loop5: detected capacity change from 0 to 32768
[  271.862939][   T58] usb 3-1: Using ep0 maxpacket: 16
[  271.875248][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.893700][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.919074][   T58] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  271.978302][ T9105] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  272.007676][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.066079][   T58] usb 3-1: config 0 descriptor??
[  272.282210][ T9105] XFS (loop5): Ending clean mount
[  272.370527][ T9105] XFS (loop5): Quotacheck needed: Please wait.
[  272.564378][   T58] bigben 0003:146B:0902.0031: unexpected rdesc, please submit for review
[  272.603094][ T9105] XFS (loop5): Quotacheck: Done.
[  272.659210][   T58] bigben 0003:146B:0902.0031: item fetching failed at offset 1/5
[  272.689785][   T58] bigben 0003:146B:0902.0031: parse failed
[  272.728392][   T58] bigben 0003:146B:0902.0031: probe with driver bigben failed with error -22
[  272.744834][ T5296] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  272.795372][   T58] usb 3-1: USB disconnect, device number 18
[  272.859630][ T5231] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  272.983678][ T5296] usb 5-1: Using ep0 maxpacket: 8
[  273.010514][ T5296] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  273.037890][ T5296] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  273.051768][ T5296] usb 5-1: Product: syz
[  273.077024][ T5296] usb 5-1: Manufacturer: syz
[  273.098682][ T5296] usb 5-1: SerialNumber: syz
[  273.155296][ T5296] usb 5-1: config 0 descriptor??
[  273.229483][ T5296] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  273.923389][ T5296] gspca_zc3xx: reg_w_i err -71
[  273.928908][ T5296] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  273.960634][ T5296] usb 5-1: USB disconnect, device number 16
[  274.138445][ T9184] loop3: detected capacity change from 0 to 2048
[  274.235976][ T9184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.275320][ T9189] loop5: detected capacity change from 0 to 4096
[  274.313540][ T9184] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.359063][ T9191] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.691821][ T9170] loop0: detected capacity change from 0 to 32768
[  274.709577][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.758199][ T9170] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1528 (9170)
[  274.853447][ T9170] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  274.897476][ T9170] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  274.935373][ T9170] BTRFS info (device loop0): using free-space-tree
[  275.804074][ T5232] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  276.121843][ T9236] loop3: detected capacity change from 0 to 4096
[  276.159105][ T9236] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512).
[  276.210612][    T9] kernel write not supported for file /612/loginuid (pid: 9 comm: kworker/0:1)
[  276.384486][ T9236] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  276.667491][ T9255] loop2: detected capacity change from 0 to 512
[  276.744231][ T9255] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1560: casefold flag without casefold feature
[  276.795448][ T9255] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1560: couldn't read orphan inode 15 (err -117)
[  276.812462][ T9255] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.992864][ T5336] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  277.105595][ T9267] loop1: detected capacity change from 0 to 1024
[  277.121808][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.144134][ T9267] EXT4-fs: Ignoring removed nomblk_io_submit option
[  277.192861][ T5336] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  277.236828][ T5336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.252999][ T5336] usb 1-1: Product: syz
[  277.257228][ T5336] usb 1-1: Manufacturer: syz
[  277.262004][ T5336] usb 1-1: SerialNumber: syz
[  277.303764][ T5336] usb 1-1: config 0 descriptor??
[  277.329106][ T5336] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 017
[  277.357146][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'.
[  277.408620][ T9275] loop2: detected capacity change from 0 to 2048
[  277.469045][ T9275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.491392][ T9267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.536577][ T9279] loop3: detected capacity change from 0 to 512
[  277.548984][ T9279] EXT4-fs: Ignoring removed nobh option
[  277.555543][ T9279] EXT4-fs: Ignoring removed nobh option
[  277.617625][ T9279] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  277.634556][ T9279] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1570: invalid indirect mapped block 2683928664 (level 1)
[  277.785741][ T9279] EXT4-fs (loop3): 1 truncate cleaned up
[  277.825181][ T9279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.962331][ T9286] netlink: 'syz.4.1572': attribute type 4 has an invalid length.
[  277.971829][ T7009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.982380][ T5336] i2c i2c-1: failure reading functionality
[  278.015020][ T9286] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1572'.
[  278.025854][ T5336] i2c i2c-1: connected i2c-tiny-usb device
[  278.071844][ T5336] usb 1-1: USB disconnect, device number 17
[  278.137898][ T5230] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  278.228120][ T5230] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz-executor: Invalid block bitmap block 3 in block_group 0
[  278.279549][ T5230] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  278.356018][ T5230] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  278.431014][ T5230] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: e_value out of bounds
[  278.930615][ T9277] loop5: detected capacity change from 0 to 32768
[  278.955832][ T9277] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1568 (9277)
[  279.047420][ T9277] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  279.074781][ T5230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.096626][ T9277] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  279.116140][ T9277] BTRFS info (device loop5): using free-space-tree
[  279.630330][ T2579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.791307][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'.
[  279.987798][ T2579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.008955][ T5231] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  280.546672][ T2579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.889646][ T9358] loop0: detected capacity change from 0 to 512
[  280.893216][ T2579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  280.933044][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  280.944595][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  280.954627][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  280.978636][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  280.985974][ T9358] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1599: invalid block
[  280.990729][ T9358] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1599: invalid indirect mapped block 4294967295 (level 1)
[  281.023542][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  281.031068][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  281.072844][ T9358] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1599: invalid indirect mapped block 4294967295 (level 1)
[  281.093355][ T9358] EXT4-fs (loop0): 2 truncates cleaned up
[  281.212365][ T9358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.441212][ T9358] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1403: inode #12: block 7: comm syz.0.1599: path /286/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  281.564836][ T9374] dccp_invalid_packet: P.Data Offset(4) too small
[  281.664321][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.833824][ T9377] loop2: detected capacity change from 0 to 512
[  281.890560][ T9381] loop5: detected capacity change from 0 to 164
[  281.931310][ T9377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.971724][ T2579] bridge_slave_1: left allmulticast mode
[  281.989544][ T9377] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.995938][ T2579] bridge_slave_1: left promiscuous mode
[  282.068775][ T2579] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.095165][ T9386] Quota error (device loop2): do_check_range: Getting block 4128768 out of range 0-5
[  282.106482][ T9381] Unable to read rock-ridge attributes
[  282.143974][ T2579] bridge_slave_0: left allmulticast mode
[  282.166913][ T2579] bridge_slave_0: left promiscuous mode
[  282.186196][ T2579] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.457879][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.522111][ T9395] loop4: detected capacity change from 0 to 256
[  282.644457][ T9395] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x73fca6c6, utbl_chksum : 0xe619d30d)
[  283.001584][ T9404] netlink: 'syz.0.1616': attribute type 142 has an invalid length.
[  283.123200][ T5235] Bluetooth: hci1: command tx timeout
[  283.405849][ T9368] loop1: detected capacity change from 0 to 40427
[  283.433606][ T9416] loop2: detected capacity change from 0 to 256
[  283.467023][ T9368] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  283.477038][ T9416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1621'.
[  283.504723][ T9368] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  283.608689][ T9368] F2FS-fs (loop1): Found nat_bits in checkpoint
[  284.014572][ T9426] loop2: detected capacity change from 0 to 1024
[  284.019003][ T9368] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  284.078681][ T9368] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  284.244872][ T5296] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  284.363709][ T9430] netlink: 'syz.2.1627': attribute type 12 has an invalid length.
[  284.371887][ T9430] netlink: 'syz.2.1627': attribute type 11 has an invalid length.
[  284.420163][ T9430] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.1627'.
[  284.464647][ T5296] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  284.512915][ T5296] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  284.522029][ T5296] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.595897][ T5296] gspca_main: stv0680-2.14.0 probing 041e:4007
[  284.679416][ T9436] loop2: detected capacity change from 0 to 512
[  284.751187][ T2579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.799381][ T9436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.873647][ T2579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.879215][ T9436] ext4 filesystem being mounted at /282/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.987026][ T2579] bond0 (unregistering): Released all slaves
[  285.094353][ T5242] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.208984][ T5235] Bluetooth: hci1: command tx timeout
[  285.348482][ T2579] tipc: Left network mode
[  285.717969][ T5296] stv0680 5-1:4.0: STV(e): camera ping failed!!
[  285.910201][ T9355] chnl_net:caif_netlink_parms(): no params data found
[  285.927745][ T5296] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  285.972768][ T5296] stv0680 5-1:4.0: last error: 173,  command = 0xa9
[  285.994394][ T5296] usb 5-1: USB disconnect, device number 17
[  286.015756][   T58] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  286.273432][   T58] usb 2-1: Using ep0 maxpacket: 32
[  286.314651][   T58] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.356188][   T58] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.398156][   T58] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  286.412136][   T58] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  286.430916][   T58] usb 2-1: Product: syz
[  286.441064][   T58] usb 2-1: Manufacturer: syz
[  286.446047][ T5296] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  286.471204][   T58] hub 2-1:4.0: USB hub found
[  286.504522][ T5398] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  286.659296][ T2579] hsr_slave_0: left promiscuous mode
[  286.679930][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  286.730777][ T2579] hsr_slave_1: left promiscuous mode
[  286.732885][ T5296] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  286.749749][   T58] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  286.752857][ T5398] usb 3-1: Using ep0 maxpacket: 32
[  286.782837][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  286.798615][ T2579] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.817912][ T5398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.830660][ T5296] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  286.852868][ T2579] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.863708][ T5398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.892832][ T5296] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  286.922871][ T2579] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.924525][ T5398] usb 3-1: New USB device found, idVendor=2006, idProduct=2418, bcdDevice=cd.91
[  286.943116][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.960874][ T2579] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.979715][ T5296] usb 6-1: config 0 descriptor??
[  286.988272][ T5398] usb 3-1: New USB device strings: Mfr=126, Product=0, SerialNumber=0
[  287.022985][ T5398] usb 3-1: Manufacturer: syz
[  287.048054][ T5398] usb 3-1: config 0 descriptor??
[  287.128007][ T2579] veth1_macvtap: left promiscuous mode
[  287.136076][ T2579] veth0_macvtap: left promiscuous mode
[  287.142002][ T2579] veth1_vlan: left promiscuous mode
[  287.149669][ T2579] veth0_vlan: left promiscuous mode
[  287.233808][ T5239] usb 2-1: USB disconnect, device number 9
[  287.246034][ T5296] hdpvr 6-1:0.0: firmware version 0x5b dated �7vi0�
[  287.246034][ T5296] �����pY3���LR������<�<��$�4���
[  287.283007][ T5235] Bluetooth: hci1: command tx timeout
[  287.283021][ T5296] hdpvr 6-1:0.0: untested firmware, the driver might not work.
[  287.424185][ T9490] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  287.471087][ T9490] overlayfs: missing 'lowerdir'
[  287.550167][ T5398] hid-generic 0003:2006:2418.0032: unbalanced delimiter at end of report description
[  287.575888][ T5398] hid-generic 0003:2006:2418.0032: probe with driver hid-generic failed with error -22
[  287.728777][ T5296] hdpvr 6-1:0.0: Could not setup controls
[  287.753566][ T5296] hdpvr 6-1:0.0: registering videodev failed
[  287.835695][ T5296] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71
[  287.887775][    T9] usb 3-1: USB disconnect, device number 19
[  287.925635][ T5296] usb 6-1: USB disconnect, device number 19
[  288.243278][ T5336] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  288.301328][ T9504] loop0: detected capacity change from 0 to 4096
[  288.323089][ T5398] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  288.363007][ T9504] NILFS (loop0): invalid segment: Checksum error in segment payload
[  288.371481][ T9504] NILFS (loop0): trying rollback from an earlier position
[  288.411068][ T9504] NILFS (loop0): recovery complete
[  288.423266][ T9505] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  288.446851][ T5336] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  288.497447][ T5336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.542845][ T5398] usb 2-1: Using ep0 maxpacket: 8
[  288.555725][ T5336] usb 5-1: config 0 descriptor??
[  288.608352][ T5398] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  288.683769][ T5398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.747919][ T5398] usb 2-1: Product: syz
[  288.773541][ T5398] usb 2-1: Manufacturer: syz
[  288.783394][ T5398] usb 2-1: SerialNumber: syz
[  288.805991][ T5398] usb 2-1: config 0 descriptor??
[  288.834920][ T5398] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244)
[  288.943211][   T58] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  289.182879][   T58] usb 3-1: Using ep0 maxpacket: 16
[  289.201050][ T5336] ath6kl: Failed to read usb control message: -71
[  289.214813][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.227787][ T9517] Bluetooth: MGMT ver 1.23
[  289.232483][ T5336] ath6kl: Unable to read the bmi data from the device: -71
[  289.243334][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.264248][ T5336] ath6kl: unable to read target info byte count: -71
[  289.274405][   T58] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  289.300885][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.346556][   T58] usb 3-1: config 0 descriptor??
[  289.350854][ T5336] ath6kl: Failed to init ath6kl core: -71
[  289.371399][ T5235] Bluetooth: hci1: command tx timeout
[  289.413871][ T5336] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  289.513491][ T5398] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  289.527585][ T5336] usb 5-1: USB disconnect, device number 18
[  289.544653][ T5398] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  289.604579][ T5398] usb 2-1: USB disconnect, device number 10
[  289.833998][   T58] hid-led 0003:1294:1320.0033: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0
[  289.892958][   T58] hid-led 0003:1294:1320.0033: Riso Kagaku Webmail Notifier initialized
[  289.985632][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1661'.
[  290.024484][ T9527] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1661'.
[  290.034370][ T9527] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1661'.
[  290.136825][   T58] usb 3-1: USB disconnect, device number 20
[  290.207466][    T9] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  290.238791][    T9] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  290.291801][    T8] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  290.409916][ T2579] team0 (unregistering): Port device team_slave_1 removed
[  290.454735][   T30] audit: type=1326 audit(1723889253.536:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cc579e79 code=0x7ffc0000
[  290.527838][   T30] audit: type=1326 audit(1723889253.536:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cc579e79 code=0x7ffc0000
[  290.587258][   T30] audit: type=1326 audit(1723889253.556:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f28cc579e79 code=0x7ffc0000
[  290.649209][ T2579] team0 (unregistering): Port device team_slave_0 removed
[  290.658553][   T30] audit: type=1326 audit(1723889253.556:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cc579e79 code=0x7ffc0000
[  290.746865][   T30] audit: type=1326 audit(1723889253.556:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9533 comm="syz.1.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28cc579e79 code=0x7ffc0000
[  290.782827][    T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  290.967576][ T9546] loop1: detected capacity change from 0 to 2048
[  291.023048][    T9] usb 5-1: Using ep0 maxpacket: 8
[  291.035030][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  291.065844][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.071745][ T9546]  loop1: p1 < > p3 p4 < >
[  291.101571][    T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  291.134925][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.189189][    T9] usb 5-1: config 0 descriptor??
[  291.198389][ T9546] loop1: p3 start 4284289 is beyond EOD, truncated
[  291.830608][    T9] usb 5-1: string descriptor 0 read error: -71
[  291.846692][    T9] uclogic 0003:256C:006E.0034: failed retrieving string descriptor #200: -71
[  291.870540][    T9] uclogic 0003:256C:006E.0034: failed retrieving pen parameters: -71
[  291.892637][    T9] uclogic 0003:256C:006E.0034: failed probing pen v2 parameters: -71
[  291.918186][    T9] uclogic 0003:256C:006E.0034: failed probing parameters: -71
[  291.942092][    T9] uclogic 0003:256C:006E.0034: probe with driver uclogic failed with error -71
[  291.954669][    T9] usb 5-1: USB disconnect, device number 19
[  292.325979][ T9355] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.352838][ T9355] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.360154][ T9355] bridge_slave_0: entered allmulticast mode
[  292.385037][ T9355] bridge_slave_0: entered promiscuous mode
[  292.473749][ T9355] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.481230][ T9355] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.509423][ T9355] bridge_slave_1: entered allmulticast mode
[  292.540819][ T9355] bridge_slave_1: entered promiscuous mode
[  292.873006][ T9355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.924081][ T9355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.924101][ T9546] loop1: detected capacity change from 0 to 128
[  292.934111][ T5336] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  293.178426][ T9568] loop4: detected capacity change from 0 to 2048
[  293.193031][ T5336] usb 1-1: Using ep0 maxpacket: 16
[  293.229072][ T5336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.270252][ T9355] team0: Port device team_slave_0 added
[  293.271609][ T5336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.340838][ T5336] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  293.342287][ T9355] team0: Port device team_slave_1 added
[  293.357373][ T9568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  293.412136][ T5336] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  293.485241][ T5336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.531612][ T5336] usb 1-1: config 0 descriptor??
[  293.732161][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.754341][ T9582] netlink: 173 bytes leftover after parsing attributes in process `syz.2.1686'.
[  293.782755][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  293.910025][ T9585] loop5: detected capacity change from 0 to 1024
[  293.911567][ T9355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.978928][ T9355] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.987209][ T5336] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0
[  294.006137][ T5254] Bluetooth: hci6: command 0x0406 tx timeout
[  294.012874][ T5336] microsoft 0003:045E:07DA.0035: ignoring exceeding usage max
[  294.035582][ T5336] microsoft 0003:045E:07DA.0035: unsupported Resolution Multiplier 0
[  294.037053][ T9585] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.051549][ T5336] microsoft 0003:045E:07DA.0035: unsupported Resolution Multiplier 0
[  294.065531][ T5336] microsoft 0003:045E:07DA.0035: No inputs registered, leaving
[  294.078883][ T5336] microsoft 0003:045E:07DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  294.087712][ T9355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.092077][ T5336] microsoft 0003:045E:07DA.0035: no inputs found
[  294.125096][ T9585] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.207493][ T9355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.247805][ T9585] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1688: corrupted xattr block 128: overlapping e_value 
[  294.253572][ T5336] microsoft 0003:045E:07DA.0035: could not initialize ff, continuing anyway
[  294.336931][ T5336] usb 1-1: USB disconnect, device number 18
[  294.486830][ T5231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.548712][ T9355] hsr_slave_0: entered promiscuous mode
[  294.579104][ T9355] hsr_slave_1: entered promiscuous mode
[  294.653023][ T9355] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  294.660736][ T9355] Cannot create hsr debugfs directory
[  295.232092][ T9618] loop4: detected capacity change from 0 to 512
[  295.293764][ T9618] EXT4-fs: Ignoring removed nobh option
[  295.384590][ T9618] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  295.482967][ T9618] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it
[  295.553576][ T9618] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1697: Corrupt directory, running e2fsck is recommended
[  295.593084][ T5296] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  295.702399][ T9618] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  295.742974][ T9618] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1697: corrupted in-inode xattr: invalid ea_ino
[  295.784344][ T9618] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1697: couldn't read orphan inode 15 (err -117)
[  295.830972][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  295.857476][ T5296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.871325][ T9618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  295.890305][ T9608] loop5: detected capacity change from 0 to 32768
[  295.908576][ T9608] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1692 (9608)
[  295.942554][ T5296] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  295.987433][ T5296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.012390][ T9608] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  296.015417][ T5296] usb 3-1: config 0 descriptor??
[  296.031100][ T9618] EXT4-fs error (device loop4): ext4_xattr_set_entry:1668: inode #2: comm syz.4.1697: corrupted xattr entries
[  296.080246][ T9608] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  296.085785][ T5296] hub 3-1:0.0: USB hub found
[  296.132795][ T9608] BTRFS info (device loop5): using free-space-tree
[  296.221847][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.333082][ T5296] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[  296.550771][ T5296] usbhid 3-1:0.0: can't add hid device: -71
[  296.567378][ T5296] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  296.655047][ T5296] usb 3-1: USB disconnect, device number 21
[  296.842370][ T9614] loop0: detected capacity change from 0 to 32768
[  296.916606][ T9614] ERROR: (device loop0): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  296.916606][ T9614] 
[  296.927234][ T5231] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  296.982617][ T9614] ERROR: (device loop0): remounting filesystem as read-only
[  297.023045][ T9614] jfs_readdir: unexpected rc = -5 from dtReadNext
[  298.365707][ T9355] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  298.491104][ T9355] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  298.517401][ T9654] loop4: detected capacity change from 0 to 32768
[  298.586270][ T9355] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  298.714645][ T9355] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  298.922874][ T5398] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  298.956742][ T9681] loop1: detected capacity change from 0 to 128
[  299.105277][ T9660] loop2: detected capacity change from 0 to 32768
[  299.126841][ T5398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.148086][ T5398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.158875][ T5398] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  299.168389][ T5398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.179440][ T5398] usb 1-1: config 0 descriptor??
[  299.223890][ T9681] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.253992][   T30] audit: type=1800 audit(1723889262.336:23): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1703" name="bus" dev="loop2" ino=7 res=0 errno=0
[  299.360372][ T9355] 8021q: adding VLAN 0 to HW filter on device bond0
[  299.383130][ T9681] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  299.518443][ T9355] 8021q: adding VLAN 0 to HW filter on device team0
[  299.630896][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.638129][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  299.686392][ T5398] magicmouse 0003:05AC:0265.0036: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.0-1/input0
[  299.693654][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.705230][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.926529][ T7009] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  299.935809][ T5398] usb 1-1: USB disconnect, device number 19
[  300.745801][ T9719] loop0: detected capacity change from 0 to 256
[  300.757857][ T9355] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.766663][ T9688] loop5: detected capacity change from 0 to 32768
[  300.809864][ T9719] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  300.813316][ T9688] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1713 (9688)
[  300.944373][ T9688] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  301.012424][ T9688] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  301.046545][ T9355] veth0_vlan: entered promiscuous mode
[  301.073301][ T9688] BTRFS info (device loop5): using free-space-tree
[  301.120265][ T9355] veth1_vlan: entered promiscuous mode
[  301.248299][ T9355] veth0_macvtap: entered promiscuous mode
[  301.310378][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1722'.
[  301.372325][ T9733] loop4: detected capacity change from 0 to 128
[  301.386532][ T9355] veth1_macvtap: entered promiscuous mode
[  301.577721][   T30] audit: type=1800 audit(1723889264.656:24): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1724" name="file0" dev="loop4" ino=1048832 res=0 errno=0
[  301.580106][ T9754] netlink: 'syz.0.1727': attribute type 1 has an invalid length.
[  301.694031][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.725294][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.802868][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.846633][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.914343][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  301.954357][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  301.993884][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.042834][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.092950][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.120361][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.150288][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.168984][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.205935][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.250747][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.305605][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.340732][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.379132][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.395523][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.422365][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.439434][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1731'.
[  302.453668][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.482911][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.518477][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.553844][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.602791][ T9355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.640003][ T9355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.658917][ T9773] loop4: detected capacity change from 0 to 512
[  302.674352][ T5231] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  302.689365][ T9355] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.827021][ T9773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  302.840873][ T9355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.883574][ T9773] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  302.899623][ T9355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.945355][ T9355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.962859][ T5299] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  302.971742][ T9355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.134756][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.197460][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.252111][ T5299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.303487][ T5299] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00
[  303.351216][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.451209][ T5299] usb 1-1: config 0 descriptor??
[  303.543480][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.589540][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.884355][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.903106][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.970829][ T5299] stadia 0003:18D1:9400.0037: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0
[  304.047107][ T5299] stadia 0003:18D1:9400.0037: no inputs found
[  304.065321][ T5299] stadia 0003:18D1:9400.0037: force feedback init failed
[  304.154731][ T5299] usb 1-1: USB disconnect, device number 20
[  304.448284][ T9808] loop5: detected capacity change from 0 to 8
[  304.472828][   T58] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  304.684178][   T58] usb 5-1: Using ep0 maxpacket: 16
[  304.710664][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.775472][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.832990][   T58] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  304.884144][   T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.931077][   T58] usb 5-1: config 0 descriptor??
[  305.076616][ T9817] loop0: detected capacity change from 0 to 512
[  305.175638][ T9817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.248218][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1745'.
[  305.258475][ T9789] loop2: detected capacity change from 0 to 32768
[  305.266962][ T9817] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  305.381469][ T9789] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  305.398897][   T58] elan 0003:04F3:0755.0038: failed to start in urb: -90
[  305.414821][   T58] elan 0003:04F3:0755.0038: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  305.623296][   T58] usb 5-1: USB disconnect, device number 20
[  305.760439][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.770069][ T9789] XFS (loop2): Ending clean mount
[  305.773558][ T9789] XFS (loop2): Quotacheck needed: Please wait.
[  305.982798][ T9789] XFS (loop2): Quotacheck: Done.
[  306.097747][ T9842] loop0: detected capacity change from 0 to 256
[  306.219300][ T9812] loop3: detected capacity change from 0 to 32768
[  306.300533][ T9842] FAT-fs (loop0): Directory bread(block 64) failed
[  306.338562][ T9812] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  306.350804][ T9842] FAT-fs (loop0): Directory bread(block 65) failed
[  306.369504][ T9853] netlink: 'syz.5.1750': attribute type 1 has an invalid length.
[  306.395902][ T9842] FAT-fs (loop0): Directory bread(block 66) failed
[  306.432304][ T5242] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  306.450514][ T9842] FAT-fs (loop0): Directory bread(block 67) failed
[  306.504948][ T9842] FAT-fs (loop0): Directory bread(block 68) failed
[  306.511645][ T9842] FAT-fs (loop0): Directory bread(block 69) failed
[  306.564287][ T9842] FAT-fs (loop0): Directory bread(block 70) failed
[  306.636819][ T9842] FAT-fs (loop0): Directory bread(block 71) failed
[  306.694403][ T9842] FAT-fs (loop0): Directory bread(block 72) failed
[  306.755727][ T9842] FAT-fs (loop0): Directory bread(block 73) failed
[  306.769733][ T9812] XFS (loop3): Ending clean mount
[  306.819257][ T9812] XFS (loop3): Quotacheck needed: Please wait.
[  307.005936][ T9812] XFS (loop3): Quotacheck: Done.
[  307.315146][ T9355] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  307.564501][ T5336] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  307.806755][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.853056][ T5336] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.872758][ T5336] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  307.902811][ T5336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.936979][ T5336] usb 5-1: config 0 descriptor??
[  308.182914][   T58] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  308.396366][ T5336] logitech 0003:046D:C623.0039: unknown main item tag 0x0
[  308.432768][   T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  308.447375][ T5336] logitech 0003:046D:C623.0039: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0
[  308.462938][   T58] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  308.501298][   T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  308.559733][   T58] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  308.601405][   T58] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  308.623081][ T5296] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  308.652362][   T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.688865][ T5239] usb 5-1: USB disconnect, device number 21
[  308.742760][   T58] usb 1-1: config 0 descriptor??
[  308.813405][ T5296] usb 6-1: Using ep0 maxpacket: 8
[  308.847663][ T5296] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  308.883019][ T5296] usb 6-1: config 179 has no interface number 0
[  308.889378][ T5296] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  308.949146][ T5296] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  308.969917][   T58] hdpvr 1-1:0.0: firmware version 0x8 dated �)��˟��=�J�+n�oKܐo5��f�o�ɠ����O��bL
[  308.970891][ T5296] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  309.001884][ T5296] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  309.052788][ T5296] usb 6-1: config 179 interface 65 has no altsetting 0
[  309.082918][ T5296] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  309.130803][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.179920][ T9911] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  309.299105][ T5296] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input27
[  309.381431][ T9930] loop3: detected capacity change from 0 to 736
[  309.419332][ T4660] input input27: unable to receive magic message: -110
[  309.513274][   T58] hdpvr 1-1:0.0: Could not setup controls
[  309.523525][ T4660] input input27: unable to receive magic message: -32
[  309.563958][   T58] hdpvr 1-1:0.0: registering videodev failed
[  309.565013][ T9911] loop5: detected capacity change from 0 to 1024
[  309.671395][ T4660] input input27: unable to receive magic message: -32
[  309.681440][   T58] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[  309.737819][ T5352] input input27: unable to receive magic message: -32
[  309.778712][   T58] usb 1-1: USB disconnect, device number 21
[  309.817336][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1779'.
[  309.973112][ T4660] input input27: unable to receive magic message: -32
[  310.103112][ T4660] input input27: unable to receive magic message: -32
[  310.248314][ T5296] usb 6-1: USB disconnect, device number 20
[  310.248396][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  310.316276][ T5296] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  310.950613][ T9959] loop2: detected capacity change from 0 to 1024
[  311.051256][ T9955] loop1: detected capacity change from 0 to 4096
[  311.322693][ T2543] hfsplus: b-tree write err: -5, ino 4
[  311.654061][ T9973] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1795'.
[  311.698517][ T9973] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  311.963037][ T5398] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  312.134207][ T9950] loop0: detected capacity change from 0 to 32768
[  312.204838][ T5398] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  312.222757][ T5398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.230804][ T5398] usb 6-1: Product: syz
[  312.249566][ T5398] usb 6-1: Manufacturer: syz
[  312.256514][ T5398] usb 6-1: SerialNumber: syz
[  312.264245][ T5239] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  312.273973][ T5398] usb 6-1: config 0 descriptor??
[  312.334995][ T9950] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.360710][ T9995] loop3: detected capacity change from 0 to 256
[  312.374137][ T9993] netlink: 'syz.4.1804': attribute type 3 has an invalid length.
[  312.395222][ T9995] exfat: Deprecated parameter 'utf8'
[  312.400704][ T9995] exfat: Deprecated parameter 'utf8'
[  312.416308][ T9993] netlink: 'syz.4.1804': attribute type 1 has an invalid length.
[  312.448883][ T9995] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  312.453772][ T9993] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1804'.
[  312.461691][ T5239] usb 3-1: Using ep0 maxpacket: 16
[  312.576933][ T9950] XFS (loop0): Ending clean mount
[  312.584361][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.627140][ T5239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.649085][ T5239] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  312.669477][ T5239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.709798][ T5239] usb 3-1: config 0 descriptor??
[  312.763179][ T5398] mos7840 6-1:0.0: required endpoints missing
[  312.821267][ T5398] usb 6-1: USB disconnect, device number 21
[  312.888121][ T5232] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.253259][ T5239] wacom 0003:056A:5000.003A: unknown main item tag 0x0
[  313.280782][ T5239] wacom 0003:056A:5000.003A: unknown main item tag 0x0
[  313.312586][ T5239] wacom 0003:056A:5000.003A: unknown main item tag 0x0
[  313.343000][ T5239] wacom 0003:056A:5000.003A: unknown main item tag 0x0
[  313.350135][ T5239] wacom 0003:056A:5000.003A: unknown main item tag 0x0
[  313.402811][ T5239] wacom 0003:056A:5000.003A: unknown main item tag 0x0
[  313.451396][ T5239] wacom 0003:056A:5000.003A: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.2-1/input0
[  313.497190][ T5239] usb 3-1: USB disconnect, device number 22
[  313.497775][T10010] loop4: detected capacity change from 0 to 1024
[  313.673046][T10010] hfsplus: bad catalog entry type
[  313.941406][   T63] hfsplus: b-tree write err: -5, ino 4
[  314.344243][T10029] loop0: detected capacity change from 0 to 512
[  314.453382][T10029] EXT4-fs (loop0): DAX unsupported by block device.
[  314.497231][T10003] loop3: detected capacity change from 0 to 32768
[  314.571108][T10003] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1808 (10003)
[  314.640040][T10003] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  314.694616][T10003] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  314.720097][T10003] BTRFS info (device loop3): disk space caching is enabled
[  314.757648][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'.
[  314.778077][T10003] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  314.843017][ T5239] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  314.920182][T10051] loop5: detected capacity change from 0 to 512
[  314.985686][T10051] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  315.079682][ T5239] usb 1-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config
[  315.155323][T10051] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.196113][ T5239] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  315.226642][T10003] BTRFS info (device loop3): rebuilding free space tree
[  315.279882][ T5239] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  315.320270][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  315.364729][T10003] BTRFS info (device loop3): disabling free space tree
[  315.366010][ T5239] usb 1-1: SerialNumber: syz
[  315.396486][T10051] EXT4-fs error (device loop5): ext4_add_entry:2435: inode #2: comm syz.5.1825: Directory hole found for htree leaf block 0
[  315.414969][T10003] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  315.433817][T10073] netlink: 'syz.4.1828': attribute type 1 has an invalid length.
[  315.456418][T10003] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  315.463105][T10073] netlink: 9388 bytes leftover after parsing attributes in process `syz.4.1828'.
[  315.505031][T10074] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  315.651581][ T5239] usb 1-1: 0:2 : does not exist
[  315.667038][ T5239] usb 1-1: unit 109 not found!
[  315.671854][ T5239] usb 1-1: unit 247 not found!
[  315.712927][ T5239] usb 1-1: unit 73 not found!
[  315.717696][ T5239] usb 1-1: unit 189 not found!
[  315.722522][ T5239] usb 1-1: unit 147 not found!
[  315.792950][ T5239] usb 1-1: unit 254 not found!
[  315.797807][ T5239] usb 1-1: unit 85 not found!
[  315.802507][ T5239] usb 1-1: unit 204 not found!
[  315.834838][ T5231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.888985][ T9355] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  315.995048][ T5239] usb 1-1: USB disconnect, device number 22
[  316.170507][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1834'.
[  316.198413][ T5373] udevd[5373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  316.354510][T10085] loop2: detected capacity change from 0 to 4096
[  316.405410][T10085] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  316.474026][T10090] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1837'.
[  316.701745][T10094] loop0: detected capacity change from 0 to 64
[  316.829243][T10096] loop5: detected capacity change from 0 to 256
[  316.873795][T10096] exfat: Deprecated parameter 'utf8'
[  316.912922][T10096] exfat: Deprecated parameter 'utf8'
[  316.981879][T10096] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  317.046927][T10100] loop3: detected capacity change from 0 to 512
[  317.131099][T10100] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8
[  317.466749][T10106] loop0: detected capacity change from 0 to 4096
[  317.693393][T10120] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  317.724188][ T5239] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  317.803737][T10121] loop2: detected capacity change from 0 to 64
[  317.945652][ T5239] usb 6-1: Using ep0 maxpacket: 16
[  317.996468][ T5239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.041153][ T5239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.092761][ T5239] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  318.134405][ T5239] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  318.178671][T10129] loop3: detected capacity change from 0 to 64
[  318.185766][ T5239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.281451][ T5239] usb 6-1: config 0 descriptor??
[  318.767040][ T5239] microsoft 0003:045E:07DA.003B: unbalanced collection at end of report description
[  318.824005][ T5239] microsoft 0003:045E:07DA.003B: parse failed
[  318.830310][ T5239] microsoft 0003:045E:07DA.003B: probe with driver microsoft failed with error -22
[  318.923587][ T5233] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  319.009617][ T5239] usb 6-1: USB disconnect, device number 22
[  319.133249][ T5233] usb 5-1: Using ep0 maxpacket: 16
[  319.146162][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.158643][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.182149][ T5233] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  319.207287][ T5233] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  319.230672][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.269470][ T5233] usb 5-1: config 0 descriptor??
[  319.283260][    T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  319.304510][   T58] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  319.506112][   T58] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  319.514529][ T5299] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  319.524529][    T8] usb 3-1: config index 0 descriptor too short (expected 37, got 36)
[  319.543179][   T58] usb 4-1: config 0 has no interface number 0
[  319.553147][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.573408][   T58] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.612791][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.624444][   T58] usb 4-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.643206][    T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.657901][   T58] usb 4-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.689476][    T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  319.709082][   T58] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  319.718726][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.733060][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.752769][ T5299] usb 2-1: Using ep0 maxpacket: 16
[  319.767358][ T5233] shield 0003:0955:7214.003C: unknown main item tag 0x0
[  319.769321][    T8] usb 3-1: config 0 descriptor??
[  319.783300][   T58] usb 4-1: config 0 descriptor??
[  319.818422][ T5233] input: HID 0955:7214 Haptics as /devices/virtual/input/input31
[  319.853332][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.886143][ T5299] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.931713][ T5299] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00
[  319.970097][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.041345][ T5299] usb 2-1: config 0 descriptor??
[  320.051238][    C0] hrtimer: interrupt took 172580 ns
[  320.093170][ T5233] shield 0003:0955:7214.003C: Registered Thunderstrike controller
[  320.157304][ T5233] shield 0003:0955:7214.003C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0
[  320.232269][   T58] uclogic 0003:28BD:1903.003D: interface is invalid, ignoring
[  320.303043][ T5233] usb 5-1: USB disconnect, device number 22
[  320.305406][    T8] pyra 0003:1E7D:2C24.003E: item fetching failed at offset 1/5
[  320.323781][ T5239] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  320.335186][    T8] pyra 0003:1E7D:2C24.003E: parse failed
[  320.361757][   T58] thermal thermal_zone0: Temperature check failed (-19)
[  320.384234][    T8] pyra 0003:1E7D:2C24.003E: probe with driver pyra failed with error -22
[  320.392937][ T5239] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  320.393164][ T5239] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  320.393247][ T5239] shield 0003:0955:7214.003C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  320.451240][   T58] usb 4-1: USB disconnect, device number 15
[  320.529249][    T8] usb 3-1: USB disconnect, device number 23
[  320.642320][ T5299] apple 0003:05AC:0274.003F: unknown main item tag 0x0
[  320.713664][ T5299] apple 0003:05AC:0274.003F: hidraw0: USB HID v0.00 Device [HID 05ac:0274] on usb-dummy_hcd.1-1/input0
[  320.726800][T10170] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1875'.
[  320.848958][T10172] netlink: 134716 bytes leftover after parsing attributes in process `syz.0.1876'.
[  320.944061][T10172] openvswitch: netlink: Message has 5 unknown bytes.
[  320.999798][T10174] loop4: detected capacity change from 0 to 1024
[  321.053456][    T8] usb 2-1: USB disconnect, device number 11
[  321.381879][ T1116] hfsplus: b-tree write err: -5, ino 4
[  321.653117][   T58] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  321.872701][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.922719][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.982840][   T58] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  321.997479][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.047422][   T58] usb 3-1: config 0 descriptor??
[  322.253530][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1891'.
[  322.393055][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  322.506888][   T58] hid-multitouch 0003:0EEF:72D0.0040: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0
[  322.623663][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.648117][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  322.657062][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  322.672811][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.722271][    T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  322.747813][ T5296] usb 3-1: USB disconnect, device number 24
[  322.751991][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.807911][    T9] usb 1-1: config 0 descriptor??
[  323.073021][T10219] netlink: 'syz.3.1899': attribute type 10 has an invalid length.
[  323.102826][T10219] netlink: 181292 bytes leftover after parsing attributes in process `syz.3.1899'.
[  323.143134][T10219] openvswitch: netlink: Message has 4 unknown bytes.
[  323.287099][    T9] arvo 0003:1E7D:30D4.0041: unknown main item tag 0x0
[  323.334974][    T9] arvo 0003:1E7D:30D4.0041: unknown main item tag 0x0
[  323.387297][    T9] arvo 0003:1E7D:30D4.0041: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0
[  323.551504][    T9] usb 1-1: USB disconnect, device number 23
[  323.842048][T10230] macvlan2: entered promiscuous mode
[  323.912176][T10230] macvlan2: entered allmulticast mode
[  323.924847][T10232] affs: No valid root block on device nbd1
[  324.327050][T10208] loop4: detected capacity change from 0 to 32768
[  324.446470][T10208] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  324.566583][T10252] loop5: detected capacity change from 0 to 2048
[  324.655101][T10252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.749502][T10208] XFS (loop4): Ending clean mount
[  324.953170][ T5231] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  324.995835][ T5234] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  326.085818][T10289] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  326.177194][T10288] netlink: 'syz.1.1925': attribute type 4 has an invalid length.
[  326.827596][T10304] tmpfs: Cannot enable quota on remount
[  327.025863][T10311] loop3: detected capacity change from 0 to 512
[  327.072866][ T5336] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  327.126358][T10311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  327.163709][T10311] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  327.258014][T10283] loop5: detected capacity change from 0 to 32768
[  327.282317][T10319] [U] 	
[  327.292947][ T5336] usb 2-1: Using ep0 maxpacket: 16
[  327.356603][ T5336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.416094][ T5336] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.481970][ T5336] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  327.525821][ T9355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.532862][T10283] ERROR: (device loop5): dbAllocNext: Corrupt dmap page
[  327.532862][T10283] 
[  327.575556][ T5336] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  327.612818][ T5336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.623552][T10283] ERROR: (device loop5): remounting filesystem as read-only
[  327.654015][ T5336] usb 2-1: config 0 descriptor??
[  327.657717][T10283] blkno = 0, nblocks = 1
[  327.709224][T10283] ERROR: (device loop5): dbFree: block to be freed is outside the map
[  327.709224][T10283] 
[  327.782624][T10283] ialloc: diAlloc returned -5!
[  328.159220][T10328] loop3: detected capacity change from 0 to 4096
[  328.165063][T10322] loop4: detected capacity change from 0 to 8192
[  328.226584][T10328] ntfs3: loop3: Failed to load $MFT.
[  328.244176][ T5336] microsoft 0003:045E:07DA.0042: report is too long
[  328.283904][ T5336] microsoft 0003:045E:07DA.0042: item 0 4 0 8 parsing failed
[  328.313455][T10328] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1942'.
[  328.348268][ T5336] microsoft 0003:045E:07DA.0042: parse failed
[  328.374266][ T5336] microsoft 0003:045E:07DA.0042: probe with driver microsoft failed with error -22
[  328.586342][ T5336] usb 2-1: USB disconnect, device number 12
[  328.663533][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'.
[  329.251053][T10349] loop3: detected capacity change from 0 to 2048
[  329.334760][T10349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.392911][T10351] mkiss: ax0: crc mode is auto.
[  329.577877][T10349] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  329.676499][T10349] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28
[  329.756743][T10349] EXT4-fs (loop3): This should not happen!! Data will be lost
[  329.756743][T10349] 
[  329.803497][T10349] EXT4-fs (loop3): Total free blocks count 0
[  329.833162][T10349] EXT4-fs (loop3): Free/Dirty block details
[  329.855682][T10349] EXT4-fs (loop3): free_blocks=2415919104
[  329.880741][T10349] EXT4-fs (loop3): dirty_blocks=16
[  329.916677][T10349] EXT4-fs (loop3): Block reservation details
[  329.954611][T10349] EXT4-fs (loop3): i_reserved_data_blocks=1
[  330.157116][T10373] loop2: detected capacity change from 0 to 256
[  330.258701][ T9355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.531311][ T5336] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  330.750675][T10347] loop0: detected capacity change from 0 to 32768
[  330.765059][ T5336] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  330.791203][ T5336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.840214][T10347] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  330.852799][ T5299] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  330.864569][ T5336] usb 2-1: config 0 descriptor??
[  330.949563][T10347] XFS (loop0): Ending clean mount
[  331.004833][ T5336] cp210x 2-1:0.0: cp210x converter detected
[  331.053341][ T5299] usb 6-1: Using ep0 maxpacket: 16
[  331.068812][ T5232] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  331.103525][ T5299] usb 6-1: config 0 has an invalid interface number: 32 but max is 0
[  331.153196][ T5299] usb 6-1: config 0 has no interface number 0
[  331.159457][ T5299] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.230272][ T5299] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.263412][ T5299] usb 6-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00
[  331.289606][T10398] netlink: 'syz.2.1973': attribute type 29 has an invalid length.
[  331.298901][ T5299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.328073][ T5299] usb 6-1: config 0 descriptor??
[  331.333645][T10398] netlink: 'syz.2.1973': attribute type 29 has an invalid length.
[  331.480723][ T5336] usb 2-1: cp210x converter now attached to ttyUSB0
[  331.799289][ T5336] usb 2-1: USB disconnect, device number 13
[  331.826496][ T5299] uclogic 0003:5543:0081.0043: interface is invalid, ignoring
[  331.834039][ T5336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  331.913227][ T5336] cp210x 2-1:0.0: device disconnected
[  332.114713][ T5299] usb 6-1: USB disconnect, device number 23
[  332.569421][T10413] loop3: detected capacity change from 0 to 4096
[  332.602302][T10417] loop2: detected capacity change from 0 to 1024
[  332.726914][T10419] loop0: detected capacity change from 0 to 64
[  333.403706][T10424] loop5: detected capacity change from 0 to 4096
[  333.462353][T10424] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  333.510761][T10433] overlayfs: missing 'lowerdir'
[  333.622803][ T5239] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  333.630021][T10424] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  333.840434][ T5239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  333.875056][ T5239] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.930446][ T5239] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  333.965096][ T5239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.022815][ T5239] usb 1-1: config 0 descriptor??
[  334.504597][ T5299] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  334.552845][ T5239] wacom 0003:056A:032C.0044: hidraw0: USB HID v0.00 Device [HID 056a:032c] on usb-dummy_hcd.0-1/input0
[  334.628112][T10450] loop3: detected capacity change from 0 to 1024
[  334.722913][ T5299] usb 6-1: Using ep0 maxpacket: 8
[  334.741455][   T58] usb 1-1: USB disconnect, device number 24
[  334.743153][T10450] hfsplus: bad catalog entry type
[  334.750156][ T5299] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  334.803408][ T5299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  334.875263][ T5299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  334.929025][ T5299] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  334.972488][   T11] hfsplus: b-tree write err: -5, ino 4
[  335.003082][ T5299] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  335.044766][ T5299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.094353][ T5299] usb 6-1: config 0 descriptor??
[  335.167562][T10454] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2002'.
[  335.524781][ T5299] hid (null): report_id 0 is invalid
[  335.536620][ T5299] uclogic 0003:2179:0077.0045: interface is invalid, ignoring
[  335.777566][T10461] loop3: detected capacity change from 0 to 4096
[  335.806811][   T58] usb 6-1: USB disconnect, device number 24
[  335.867897][T10461] ntfs3: loop3: Failed to load $Extend (-22).
[  335.897607][T10461] ntfs3: loop3: Failed to initialize $Extend.
[  336.065633][T10461] ntfs3: loop3: ino=5, "/" directory corrupted
[  336.904013][T10489] loop1: detected capacity change from 0 to 256
[  337.023306][T10489] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  337.674946][T10472] loop2: detected capacity change from 0 to 32768
[  337.917571][T10465] loop0: detected capacity change from 0 to 40427
[  337.950168][T10465] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  337.960507][T10465] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  337.992893][ T5296] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  338.027510][T10465] F2FS-fs (loop0): Found nat_bits in checkpoint
[  338.212812][ T5296] usb 6-1: Using ep0 maxpacket: 8
[  338.227422][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.261454][T10465] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  338.276671][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.281984][T10515] loop3: detected capacity change from 0 to 512
[  338.302819][T10465] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  338.329272][T10515] EXT4-fs: Ignoring removed mblk_io_submit option
[  338.333772][ T5296] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  338.388093][   T30] audit: type=1326 audit(1723889301.456:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.4.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b58379e79 code=0x7fc00000
[  338.410632][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.440898][T10515] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002]
[  338.448616][ T5296] usb 6-1: config 0 descriptor??
[  338.462979][T10515] System zones: 1-12
[  338.533101][T10515] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.2026: corrupted in-inode xattr: e_value size too large
[  338.631188][T10515] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2026: couldn't read orphan inode 15 (err -117)
[  338.665025][T10515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.906028][ T9355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.973495][ T5296] pantherlord 0003:0810:0001.0046: unknown main item tag 0x0
[  339.002830][   T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  339.053308][ T5296] pantherlord 0003:0810:0001.0046: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.5-1/input0
[  339.132966][ T5296] pantherlord 0003:0810:0001.0046: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula <anssi.hannula@gmail.com>
[  339.188538][ T5296] usb 6-1: USB disconnect, device number 25
[  339.326185][   T58] usb 2-1: Using ep0 maxpacket: 8
[  339.362082][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.422747][   T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.472848][   T58] usb 2-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00
[  339.516170][   T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.564618][   T58] usb 2-1: config 0 descriptor??
[  340.098726][   T58] lenovo 0003:17EF:60A3.0047: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.1-1/input0
[  340.403031][ T5239] usb 2-1: USB disconnect, device number 14
[  340.453561][T10550] loop0: detected capacity change from 0 to 4096
[  340.763029][ T5299] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  341.027370][ T5299] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc
[  341.062922][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.124072][ T5299] usb 3-1: config 0 descriptor??
[  341.218599][ T5299] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35
[  341.407948][ T4660] bcm5974 3-1:0.0: could not read from device
[  341.501256][ T4660] bcm5974 3-1:0.0: could not read from device
[  341.523278][ T5299] usb 3-1: USB disconnect, device number 25
[  341.550231][ T4660] bcm5974 3-1:0.0: could not read from device
[  341.605355][ T4660] bcm5974 3-1:0.0: could not read from device
[  341.741567][T10542] loop3: detected capacity change from 0 to 32768
[  341.790521][T10542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2037 (10542)
[  341.849384][T10542] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.882968][T10542] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  341.933134][T10542] BTRFS info (device loop3): using free-space-tree
[  342.172150][T10584] loop0: detected capacity change from 0 to 2048
[  342.300547][T10584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  342.316566][T10584] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.338088][T10584] fscrypt (loop0, inode 13): Error -61 getting encryption context
[  342.381571][T10558] loop5: detected capacity change from 0 to 32768
[  342.533305][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.557220][T10558] ERROR: (device loop5): diRead: i_ino != di_number
[  342.557220][T10558] 
[  342.639568][ T9355] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  342.765094][T10597] loop0: detected capacity change from 0 to 512
[  342.772975][T10597] EXT4-fs: Ignoring removed nobh option
[  342.896878][T10597] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  342.943456][T10597] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61
[  343.044175][T10597] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.2055: casefold flag without casefold feature
[  343.138732][T10597] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2055: couldn't read orphan inode 13 (err -117)
[  343.239664][T10597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.341813][T10597] fscrypt (loop0, inode 2): Error -61 getting encryption context
[  343.546678][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.629753][T10610] loop1: detected capacity change from 0 to 1024
[  343.891434][T10610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.157126][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2068'.
[  344.184397][T10627] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  344.235874][T10629] loop5: detected capacity change from 0 to 256
[  344.334059][    T9] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  344.394498][ T7009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.548576][T10639] loop3: detected capacity change from 0 to 512
[  344.552551][T10637] loop0: detected capacity change from 0 to 256
[  344.576023][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  344.584255][    T9] usb 3-1: config 0 has no interface number 0
[  344.593529][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  344.605818][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 168, setting to 8
[  344.617578][    T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  344.628133][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.716690][T10639] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  344.753197][T10639] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2075: invalid indirect mapped block 1 (level 1)
[  344.774035][    T9] usb 3-1: config 0 descriptor??
[  344.787767][T10637] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  344.840216][T10639] EXT4-fs (loop3): 1 truncate cleaned up
[  344.840288][T10625] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  344.874349][T10639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.928161][    T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  345.202037][ T9355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.340408][T10650] netlink: 'syz.4.2079': attribute type 1 has an invalid length.
[  345.394426][ T5299] usb 3-1: USB disconnect, device number 26
[  345.430340][ T5299] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected
[  345.539579][T10647] loop1: detected capacity change from 0 to 4096
[  345.661632][T10647] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  345.794184][T10647] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  345.866305][ T5352] udevd[5352]: incorrect nilfs2 checksum on /dev/loop1
[  346.010041][T10664] [U] ^@�
[  346.033308][T10669] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  346.552835][    T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  346.785921][    T9] usb 1-1: Using ep0 maxpacket: 16
[  346.805120][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.839061][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.874103][    T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[  346.906948][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.914707][T10689] loop5: detected capacity change from 0 to 1024
[  346.964275][    T9] usb 1-1: config 0 descriptor??
[  347.021608][T10693] loop3: detected capacity change from 0 to 256
[  347.104004][T10693] exfat: Deprecated parameter 'utf8'
[  347.109431][T10693] exfat: Deprecated parameter 'utf8'
[  347.186918][T10693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  347.355104][T10697] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2101'.
[  347.447512][    T9] kye 0003:0458:5017.0048: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  347.497963][    T9] kye 0003:0458:5017.0048: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0
[  347.523096][    T9] kye 0003:0458:5017.0048: tablet-enabling feature report not found
[  347.549498][    T9] kye 0003:0458:5017.0048: tablet enabling failed
[  347.745649][   T58] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  347.769353][    T9] usb 1-1: USB disconnect, device number 25
[  347.965572][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.987815][   T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.022837][   T58] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  348.052385][   T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.074030][   T58] usb 3-1: config 0 descriptor??
[  348.167498][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2111'.
[  348.442972][ T5296] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  348.531366][   T58] steelseries 0003:1038:1410.0049: not enough fields in HID_OUTPUT_REPORT 0
[  348.662818][ T5296] usb 6-1: Using ep0 maxpacket: 8
[  348.676388][ T5296] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.718001][ T5296] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.745792][T10723] loop0: detected capacity change from 0 to 8
[  348.758771][ T5296] usb 6-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  348.788929][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.813047][ T5398] usb 3-1: USB disconnect, device number 27
[  348.861057][T10723] SQUASHFS error: lzo decompression failed, data probably corrupt
[  348.884539][T10723] SQUASHFS error: Failed to read block 0x71: -5
[  348.891243][T10723] SQUASHFS error: lzo decompression failed, data probably corrupt
[  348.920086][T10723] SQUASHFS error: Failed to read block 0x71: -5
[  348.927240][   T30] audit: type=1800 audit(1723889312.006:26): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2115" name="file0" dev="loop0" ino=3 res=0 errno=0
[  349.041517][T10726] loop1: detected capacity change from 0 to 1024
[  349.258675][ T5296] uclogic 0003:28BD:0075.004A: interface is invalid, ignoring
[  349.393152][T10726] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2116: bad orphan inode 2097152
[  349.515642][ T5239] usb 6-1: USB disconnect, device number 26
[  349.577390][T10726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.637896][T10739] netlink: 'syz.0.2121': attribute type 1 has an invalid length.
[  349.662225][T10739] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2121'.
[  349.909787][T10747] loop0: detected capacity change from 0 to 512
[  349.990882][T10747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.079110][T10747] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  350.275057][ T7009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.443218][ T5239] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  350.582526][ T5232] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.672977][ T5239] usb 6-1: Using ep0 maxpacket: 16
[  350.695288][ T5239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.733605][ T5239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.786511][ T5239] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00
[  350.819493][ T5239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.828500][T10762] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.2131'.
[  350.851020][T10762] openvswitch: netlink: Actions may not be safe on all matching packets
[  350.860964][ T5239] usb 6-1: config 0 descriptor??
[  351.329444][ T5239] corsair-psu 0003:1B1C:1C1E.004B: item fetching failed at offset 2/5
[  351.380649][ T5239] corsair-psu 0003:1B1C:1C1E.004B: probe with driver corsair-psu failed with error -22
[  351.574352][ T5239] usb 6-1: USB disconnect, device number 27
[  351.867650][T10775] syz.2.2137: attempt to access beyond end of device
[  351.867650][T10775] nbd2: rw=0, sector=16, nr_sectors = 8 limit=0
[  351.938076][T10775] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 2, size 4096)
[  351.951097][T10775] syz.2.2137: attempt to access beyond end of device
[  351.951097][T10775] nbd2: rw=0, sector=128, nr_sectors = 8 limit=0
[  351.964639][T10775] REISERFS warning (device nbd2): sh-2006 read_super_block: bread failed (dev nbd2, block 16, size 4096)
[  351.977732][T10775] REISERFS warning (device nbd2): sh-2021 reiserfs_fill_super: can not find reiserfs on nbd2
[  352.717070][T10787] loop5: detected capacity change from 0 to 4096
[  352.927801][T10787] ntfs3: loop5: failed to convert "0000" to iso8859-15
[  353.016868][T10787] ntfs3: loop5: failed to convert name for inode 1e.
[  353.299311][   T30] audit: type=1326 audit(1723889316.376:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10789 comm="syz.3.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2562179e79 code=0x7fc00000
[  353.622028][T10812] loop4: detected capacity change from 0 to 64
[  354.176289][T10822] sch_tbf: burst 1 is lower than device lo mtu (65550) !
[  354.223077][T10790] loop2: detected capacity change from 0 to 32768
[  354.291621][T10790] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  354.603297][T10790] XFS (loop2): Ending clean mount
[  354.634634][T10790] XFS (loop2): Quotacheck needed: Please wait.
[  354.790922][T10790] XFS (loop2): Quotacheck: Done.
[  355.063789][ T5242] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  355.423960][T10856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2171'.
[  355.472825][T10856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2171'.
[  356.826579][T10888] loop0: detected capacity change from 0 to 64
[  356.892822][ T5239] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  356.901351][   T58] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  356.994205][T10888] hfs: inconsistency in B*Tree (1,0,2,2,3)
[  357.103007][ T5239] usb 2-1: Using ep0 maxpacket: 16
[  357.140091][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.178281][   T58] usb 6-1: Using ep0 maxpacket: 8
[  357.196096][ T5239] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.221957][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.238458][ T5239] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  357.264826][   T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.312839][ T5239] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  357.320022][   T58] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  357.346523][T10894] netlink: 'syz.0.2189': attribute type 29 has an invalid length.
[  357.352115][ T5239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.405953][   T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.453334][ T5239] usb 2-1: config 0 descriptor??
[  357.453656][   T58] usb 6-1: config 0 descriptor??
[  357.468151][T10898] netlink: 'syz.0.2189': attribute type 29 has an invalid length.
[  357.999242][   T58] lenovo 0003:17EF:60EE.004C: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0
[  358.037154][ T5239] microsoft 0003:045E:07DA.004D: unbalanced collection at end of report description
[  358.123902][ T5239] microsoft 0003:045E:07DA.004D: parse failed
[  358.169426][ T5239] microsoft 0003:045E:07DA.004D: probe with driver microsoft failed with error -22
[  358.254627][ T5239] usb 2-1: USB disconnect, device number 15
[  358.257936][   T58] usb 6-1: USB disconnect, device number 28
[  358.332887][T10915] loop0: detected capacity change from 0 to 1024
[  358.480372][T10917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2200'.
[  358.590619][T10917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2200'.
[  359.031327][T10927] netlink: 'syz.0.2204': attribute type 21 has an invalid length.
[  359.126078][T10931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2206'.
[  359.722362][T10950] loop5: detected capacity change from 0 to 256
[  359.766302][T10950] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  359.843354][T10950] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d)
[  360.409262][T10966] loop3: detected capacity change from 0 to 64
[  360.427211][T10964] loop1: detected capacity change from 0 to 2048
[  360.528449][   T30] audit: type=1804 audit(1723889323.606:28): pid=10966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2224" name="/newroot/92/file0/bus" dev="loop3" ino=8 res=1 errno=0
[  360.567631][T10964] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.592318][T10971] loop2: detected capacity change from 0 to 1024
[  360.918883][T10975] loop5: detected capacity change from 0 to 2048
[  360.960890][T10977] program syz.0.2230 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  360.992525][T10975] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  361.077898][T10975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  361.215349][   T30] audit: type=1800 audit(1723889324.296:29): pid=10975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2228" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  361.272834][T10983] loop0: detected capacity change from 0 to 256
[  361.322879][   T58] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  361.412033][T10983] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  361.601225][   T58] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  361.626647][   T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.643229][   T58] usb 3-1: config 0 has no interface number 0
[  361.670801][   T58] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  361.712082][   T58] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.769118][   T58] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  361.808944][   T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.856927][   T58] usb 3-1: Product: syz
[  361.880067][   T58] usb 3-1: Manufacturer: syz
[  361.902586][   T58] usb 3-1: SerialNumber: syz
[  361.908520][    T9] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  361.920969][T10996] loop3: detected capacity change from 0 to 64
[  361.935921][   T58] usb 3-1: config 0 descriptor??
[  362.049985][T10997] netlink: 'syz.0.2238': attribute type 1 has an invalid length.
[  362.128343][    T9] usb 6-1: Using ep0 maxpacket: 8
[  362.168142][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11
[  362.199605][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.212570][    T9] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  362.262988][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.296900][    T9] usb 6-1: config 0 descriptor??
[  362.691226][ T5239] usb 3-1: USB disconnect, device number 28
[  362.771804][    T9] hid-alps 0003:044E:1215.004E: hidraw0: USB HID v40.00 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0
[  362.963725][ T5233] ------------[ cut here ]------------
[  362.969254][ T5233] workqueue: work disable count underflowed
[  362.975231][ T5233] WARNING: CPU: 1 PID: 5233 at kernel/workqueue.c:4290 enable_work+0x34d/0x360
[  362.984226][ T5233] Modules linked in:
[  362.988146][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/1:3 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0
[  362.997926][    T9] usb 6-1: USB disconnect, device number 29
[  362.998909][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  363.014985][ T5233] Workqueue: usb_hub_wq hub_event
[  363.020074][ T5233] RIP: 0010:enable_work+0x34d/0x360
[  363.025320][ T5233] Code: d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 cd 92 0a e8 68 17 36 00 c6 05 bf 2e a4 0e 01 90 48 c7 c7 80 10 0a 8c e8 a4 3e f8 ff 90 <0f> 0b 90 90 e9 56 ff ff ff e8 e5 25 59 0a 0f 1f 44 00 00 90 90 90
[  363.044970][ T5233] RSP: 0018:ffffc900042270c0 EFLAGS: 00010046
[  363.051074][ T5233] RAX: 022b146294645100 RBX: 0000000000000000 RCX: 0000000000100000
[  363.059079][ T5233] RDX: ffffc900177a9000 RSI: 00000000000fffff RDI: 0000000000100000
[  363.067081][ T5233] RBP: ffffc90004227190 R08: ffffffff8155b4d2 R09: 1ffff1101726519a
[  363.075081][ T5233] R10: dffffc0000000000 R11: ffffed101726519b R12: 1ffff92000844e1c
[  363.083171][ T5233] R13: 1ffff92000844e24 R14: 0000000000800001 R15: ffff88802d570738
[  363.091173][ T5233] FS:  0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[  363.100306][ T5233] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  363.106922][ T5233] CR2: 0000001b3321bff8 CR3: 000000005bbf0000 CR4: 0000000000350ef0
[  363.114927][ T5233] Call Trace:
[  363.118229][ T5233]  <TASK>
[  363.121184][ T5233]  ? __warn+0x163/0x4e0
[  363.125373][ T5233]  ? enable_work+0x34d/0x360
[  363.130001][ T5233]  ? report_bug+0x2b3/0x500
[  363.134536][ T5233]  ? enable_work+0x34d/0x360
[  363.139163][ T5233]  ? handle_bug+0x3e/0x70
[  363.143506][ T5233]  ? exc_invalid_op+0x1a/0x50
[  363.148197][ T5233]  ? asm_exc_invalid_op+0x1a/0x20
[  363.153255][ T5233]  ? __warn_printk+0x292/0x360
[  363.158036][ T5233]  ? enable_work+0x34d/0x360
[  363.162657][ T5233]  ? __pfx_enable_work+0x10/0x10
[  363.168068][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.173720][ T5233]  ? lockdep_hardirqs_on+0x99/0x150
[  363.178949][ T5233]  __cancel_work_sync+0xf5/0x110
[  363.183915][ T5233]  thermal_zone_device_unregister+0x296/0x3f0
[  363.190012][ T5233]  power_supply_unregister+0xe8/0x140
[  363.195414][ T5233]  ? __pfx_shield_remove+0x10/0x10
[  363.200543][ T5233]  shield_remove+0x72/0x120
[  363.205068][ T5233]  hid_device_remove+0x227/0x370
[  363.210038][ T5233]  ? __pfx_hid_device_remove+0x10/0x10
[  363.215515][ T5233]  device_release_driver_internal+0x4ab/0x7c0
[  363.221615][ T5233]  bus_remove_device+0x34f/0x420
[  363.226588][ T5233]  device_del+0x57a/0x9b0
[  363.230941][ T5233]  ? __pfx_device_del+0x10/0x10
[  363.235811][ T5233]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  363.242185][ T5233]  hid_destroy_device+0x68/0x100
[  363.247158][ T5233]  usbhid_disconnect+0x9e/0xc0
[  363.251949][ T5233]  usb_unbind_interface+0x260/0x940
[  363.257186][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.262845][ T5233]  ? __pfx_usb_unbind_interface+0x10/0x10
[  363.268586][ T5233]  device_release_driver_internal+0x505/0x7c0
[  363.274684][ T5233]  bus_remove_device+0x34f/0x420
[  363.279656][ T5233]  device_del+0x57a/0x9b0
[  363.284004][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.289656][ T5233]  ? kfree+0x149/0x360
[  363.293738][ T5233]  ? __pfx_device_del+0x10/0x10
[  363.298603][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.304351][ T5233]  ? kobject_put+0x44d/0x480
[  363.308969][ T5233]  usb_disable_device+0x3bf/0x850
[  363.314031][ T5233]  usb_disconnect+0x340/0x950
[  363.318740][ T5233]  hub_event+0x1ebc/0x5150
[  363.323204][ T5233]  ? debug_object_deactivate+0x2d5/0x390
[  363.328892][ T5233]  ? __pfx_hub_event+0x10/0x10
[  363.333684][ T5233]  ? __pfx_lock_acquire+0x10/0x10
[  363.338730][ T5233]  ? __entry_text_end+0xfe0c5/0x1020c9
[  363.344210][ T5233]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  363.350219][ T5233]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  363.356629][ T5233]  ? process_scheduled_works+0x945/0x1830
[  363.362389][ T5233]  process_scheduled_works+0xa2e/0x1830
[  363.368013][ T5233]  ? __pfx_process_scheduled_works+0x10/0x10
[  363.374043][ T5233]  ? assign_work+0x364/0x3d0
[  363.378676][ T5233]  worker_thread+0x86d/0xd40
[  363.383305][ T5233]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  363.389232][ T5233]  ? __kthread_parkme+0x169/0x1d0
[  363.394293][ T5233]  ? __pfx_worker_thread+0x10/0x10
[  363.399529][ T5233]  kthread+0x2f2/0x390
[  363.403643][ T5233]  ? __pfx_worker_thread+0x10/0x10
[  363.408800][ T5233]  ? __pfx_kthread+0x10/0x10
[  363.413431][ T5233]  ret_from_fork+0x4d/0x80
[  363.417878][ T5233]  ? __pfx_kthread+0x10/0x10
[  363.422498][ T5233]  ret_from_fork_asm+0x1a/0x30
[  363.427319][ T5233]  </TASK>
[  363.430348][ T5233] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  363.437635][ T5233] CPU: 1 UID: 0 PID: 5233 Comm: kworker/1:3 Not tainted 6.11.0-rc3-syzkaller-00279-ge5fa841af679 #0
[  363.448405][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  363.458477][ T5233] Workqueue: usb_hub_wq hub_event
[  363.463546][ T5233] Call Trace:
[  363.466830][ T5233]  <TASK>
[  363.469764][ T5233]  dump_stack_lvl+0x241/0x360
[  363.474466][ T5233]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.479681][ T5233]  ? __pfx__printk+0x10/0x10
[  363.484307][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.489963][ T5233]  ? vscnprintf+0x5d/0x90
[  363.494333][ T5233]  panic+0x349/0x860
[  363.498263][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.503937][ T5233]  ? __warn+0x172/0x4e0
[  363.508122][ T5233]  ? __pfx_panic+0x10/0x10
[  363.512579][ T5233]  ? ret_from_fork_asm+0x1a/0x30
[  363.517561][ T5233]  __warn+0x346/0x4e0
[  363.521564][ T5233]  ? enable_work+0x34d/0x360
[  363.526200][ T5233]  report_bug+0x2b3/0x500
[  363.530662][ T5233]  ? enable_work+0x34d/0x360
[  363.535299][ T5233]  handle_bug+0x3e/0x70
[  363.539501][ T5233]  exc_invalid_op+0x1a/0x50
[  363.544041][ T5233]  asm_exc_invalid_op+0x1a/0x20
[  363.548923][ T5233] RIP: 0010:enable_work+0x34d/0x360
[  363.554268][ T5233] Code: d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 cd 92 0a e8 68 17 36 00 c6 05 bf 2e a4 0e 01 90 48 c7 c7 80 10 0a 8c e8 a4 3e f8 ff 90 <0f> 0b 90 90 e9 56 ff ff ff e8 e5 25 59 0a 0f 1f 44 00 00 90 90 90
[  363.573933][ T5233] RSP: 0018:ffffc900042270c0 EFLAGS: 00010046
[  363.580045][ T5233] RAX: 022b146294645100 RBX: 0000000000000000 RCX: 0000000000100000
[  363.588041][ T5233] RDX: ffffc900177a9000 RSI: 00000000000fffff RDI: 0000000000100000
[  363.596035][ T5233] RBP: ffffc90004227190 R08: ffffffff8155b4d2 R09: 1ffff1101726519a
[  363.604034][ T5233] R10: dffffc0000000000 R11: ffffed101726519b R12: 1ffff92000844e1c
[  363.612032][ T5233] R13: 1ffff92000844e24 R14: 0000000000800001 R15: ffff88802d570738
[  363.620058][ T5233]  ? __warn_printk+0x292/0x360
[  363.624910][ T5233]  ? __pfx_enable_work+0x10/0x10
[  363.629918][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.635602][ T5233]  ? lockdep_hardirqs_on+0x99/0x150
[  363.640886][ T5233]  __cancel_work_sync+0xf5/0x110
[  363.645919][ T5233]  thermal_zone_device_unregister+0x296/0x3f0
[  363.652569][ T5233]  power_supply_unregister+0xe8/0x140
[  363.657996][ T5233]  ? __pfx_shield_remove+0x10/0x10
[  363.663143][ T5233]  shield_remove+0x72/0x120
[  363.667685][ T5233]  hid_device_remove+0x227/0x370
[  363.672661][ T5233]  ? __pfx_hid_device_remove+0x10/0x10
[  363.678147][ T5233]  device_release_driver_internal+0x4ab/0x7c0
[  363.684258][ T5233]  bus_remove_device+0x34f/0x420
[  363.689268][ T5233]  device_del+0x57a/0x9b0
[  363.693649][ T5233]  ? __pfx_device_del+0x10/0x10
[  363.698609][ T5233]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  363.704974][ T5233]  hid_destroy_device+0x68/0x100
[  363.709951][ T5233]  usbhid_disconnect+0x9e/0xc0
[  363.714762][ T5233]  usb_unbind_interface+0x260/0x940
[  363.720009][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.725688][ T5233]  ? __pfx_usb_unbind_interface+0x10/0x10
[  363.731447][ T5233]  device_release_driver_internal+0x505/0x7c0
[  363.737571][ T5233]  bus_remove_device+0x34f/0x420
[  363.742562][ T5233]  device_del+0x57a/0x9b0
[  363.746922][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.752582][ T5233]  ? kfree+0x149/0x360
[  363.756673][ T5233]  ? __pfx_device_del+0x10/0x10
[  363.761542][ T5233]  ? srso_alias_return_thunk+0x5/0xfbef5
[  363.767197][ T5233]  ? kobject_put+0x44d/0x480
[  363.771819][ T5233]  usb_disable_device+0x3bf/0x850
[  363.776888][ T5233]  usb_disconnect+0x340/0x950
[  363.781602][ T5233]  hub_event+0x1ebc/0x5150
[  363.786073][ T5233]  ? debug_object_deactivate+0x2d5/0x390
[  363.791853][ T5233]  ? __pfx_hub_event+0x10/0x10
[  363.796645][ T5233]  ? __pfx_lock_acquire+0x10/0x10
[  363.801699][ T5233]  ? __entry_text_end+0xfe0c5/0x1020c9
[  363.807182][ T5233]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  363.813211][ T5233]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  363.819608][ T5233]  ? process_scheduled_works+0x945/0x1830
[  363.825358][ T5233]  process_scheduled_works+0xa2e/0x1830
[  363.830967][ T5233]  ? __pfx_process_scheduled_works+0x10/0x10
[  363.836988][ T5233]  ? assign_work+0x364/0x3d0
[  363.841610][ T5233]  worker_thread+0x86d/0xd40
[  363.846245][ T5233]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  363.852183][ T5233]  ? __kthread_parkme+0x169/0x1d0
[  363.857338][ T5233]  ? __pfx_worker_thread+0x10/0x10
[  363.862560][ T5233]  kthread+0x2f2/0x390
[  363.866662][ T5233]  ? __pfx_worker_thread+0x10/0x10
[  363.871800][ T5233]  ? __pfx_kthread+0x10/0x10
[  363.876440][ T5233]  ret_from_fork+0x4d/0x80
[  363.881065][ T5233]  ? __pfx_kthread+0x10/0x10
[  363.885688][ T5233]  ret_from_fork_asm+0x1a/0x30
[  363.890524][ T5233]  </TASK>
[  363.893870][ T5233] Kernel Offset: disabled
[  363.898309][ T5233] Rebooting in 86400 seconds..