last executing test programs:

2m23.490705858s ago: executing program 1 (id=2032):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040)
io_uring_setup(0x4a86, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)

2m20.947590397s ago: executing program 1 (id=2035):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m17.767029866s ago: executing program 1 (id=2044):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, &(0x7f00000006c0)=0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040)
io_uring_setup(0x4a86, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r4, &(0x7f0000003240), 0x4000000000000e4, 0x0)

2m16.758529507s ago: executing program 1 (id=2046):
syz_mount_image$exfat(&(0x7f00000041c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)

2m16.418847928s ago: executing program 1 (id=2047):
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f00000000c0)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'cp850'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@part={'part', 0x3d, 0x7ff}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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")
mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)

2m16.164498946s ago: executing program 1 (id=2048):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000590760205f0501d0928c000000010902120001100000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000200)={0x0, 0xb, 0x2, "4c1e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2m15.792686427s ago: executing program 32 (id=2048):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000590760205f0501d0928c000000010902120001100000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000200)={0x0, 0xb, 0x2, "4c1e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

13.84048341s ago: executing program 2 (id=2281):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x74, 0xeb, 0x78, 0x40, 0x1bcf, 0xb40, 0x4abf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x67, 0x4, 0x10, 0xf, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0xe, 0x1, 0x0, 0x96}}]}}]}}, 0x0)
r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7})
syz_usb_disconnect(r0)

12.978362207s ago: executing program 4 (id=2283):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040))

12.191255061s ago: executing program 3 (id=2284):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1, 0x3, 0x0, 0x7, 0xff, 0x2, 0x0, 0x93}, 0xe)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)

11.669305578s ago: executing program 2 (id=2285):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
sync_file_range(r0, 0xba79, 0x9b, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file0/../file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x1000811, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1])
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x128, 0x11, 0x148, 0x128, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0xffffffff, 'wg1\x00', 'virt_wifi0\x00', {0x99380e6a96eb266d}, {0xff}, 0xff, 0x3}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0xffffffffffffffff, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x5, 0x2, 0x3, 0x1], 0x1, 0x4}, {0xfffd, [0x0, 0x7, 0x0, 0x7, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
chroot(&(0x7f0000000200)='./file0\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8)
umount2(&(0x7f00000004c0)='./file1/file0/../file0\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340), &(0x7f0000000000), &(0x7f0000000180))
io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r7, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x4, 0x25}, {0x0, 0x7}, 0x6, 0x0, 0x9})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x0, @time={0x7f, 0x10}, 0xf8, {0xc, 0xe3}, 0x2, 0x0, 0xf9})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x5, 0xfb, 0x8, 0x7fffffff}, {0xb22, 0x7, 0xea, 0x6}, {0x1, 0x1, 0x3, 0x3}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000002c0))

11.59122825s ago: executing program 3 (id=2286):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4)
setsockopt$sock_attach_bpf(r4, 0x1, 0x1b, &(0x7f0000000800), 0x4)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = io_uring_setup(0x818, &(0x7f0000000300)={0x0, 0x81f, 0x0, 0x3, 0x259, 0x0, r2})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800010000000000000000f30900000000000000040004003b77f90e67394f88d2b2692adde7975c8593e9c3ff60ebf0c0e16f8cb1f8a3f4594730d56874e30d153cc27eb79bb5074464d04fd3fe6d015d2bf5bc4a7f3dae1a7bf8df8ead72fe60cf0eaa92e82b9602c934a2afcd77f373109e88518052b5fa78e3b905e12c19b73c54765926158d5ece5567c13e13"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
r8 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/102], 0x210)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0)
mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffff}}, 0x18)

10.490152845s ago: executing program 0 (id=2287):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast2}, &(0x7f00000002c0)=0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1000)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)

10.489847665s ago: executing program 4 (id=2288):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast2}, &(0x7f00000002c0)=0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1000)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000180)=0xf0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, &(0x7f0000000240)={[0x2]}, 0x8)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf25011f88104e"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000)

9.451572917s ago: executing program 4 (id=2289):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000fc0)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

9.403371268s ago: executing program 2 (id=2290):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4)
r5 = io_uring_setup(0x818, &(0x7f0000000300)={0x0, 0x81f, 0x0, 0x3, 0x259, 0x0, r2})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800010000000000000000f30900000000000000040004003b77f90e67394f88d2b2692adde7975c8593e9c3ff60ebf0c0e16f8cb1f8a3f4594730d56874e30d153cc27eb79bb5074464d04fd3fe6d015d2bf5bc4a7f3dae1a7bf8df8ead72fe60cf0eaa92e82b9602c934a2afcd77f373109e88518052b5fa78e3b905e12c19b73c54765926158d5ece5567c13e13"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
r8 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x210)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0)

8.595787383s ago: executing program 3 (id=2291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0)

6.632349644s ago: executing program 0 (id=2292):
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@private, @in=@local}}, {{@in6=@private1}, 0x0, @in6}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}})

6.596264096s ago: executing program 3 (id=2293):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000200), 0x0, 0x4040)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)

6.161342469s ago: executing program 4 (id=2294):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x74, 0xeb, 0x78, 0x40, 0x1bcf, 0xb40, 0x4abf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x67, 0x4, 0x10, 0xf, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0xe, 0x1, 0x0, 0x96}}]}}]}}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0)
syz_usb_disconnect(r0)

6.160484339s ago: executing program 2 (id=2295):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000440)='./file0\x00', 0x300000a, &(0x7f00000004c0)={[{@nodatacow}, {@datasum}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@discard_sync}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@autodefrag}, {@ssd_spread}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000780)={0x2, 0x7, {0x3ff, @struct={0xe, 0x3ff}, 0x0, 0x1, 0x9, 0x9, 0x5, 0x6bd, 0x21, @usage=0x80000001, 0x0, 0xb83c, [0xfffffffffffffd6e, 0x20008b08, 0x2, 0x80, 0x6, 0x40]}, {0x7fff, @struct={0x1, 0x10000001}, 0x0, 0x3, 0xffffffff, 0xcc, 0x8, 0x0, 0x20, @usage=0x4, 0x9, 0x372f2380, [0x4, 0xb25, 0xd, 0x1d52b6d3, 0x81, 0x5]}, {0x3, @struct={0x100, 0x4}, 0x0, 0x62c, 0x6, 0x0, 0x8, 0x8, 0x300, @usage, 0xb31, 0x3, [0xffffffffffffffd1, 0x6, 0x1000000000000006, 0xe9, 0x9, 0xffffffffffffffff]}, {0x2, 0x745, 0x9}})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0)

5.509416409s ago: executing program 0 (id=2296):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000ac0)=""/102392, 0x18ff8)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fanotify_init(0x1d, 0x800)

3.938854658s ago: executing program 0 (id=2297):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast2}, &(0x7f00000002c0)=0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1000)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)
ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000180)=0xf0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r5, 0x0, 0x0)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, &(0x7f0000000240)={[0x2]}, 0x8)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a4bd7000fddbdf25011f88104e"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x40000)

2.977596758s ago: executing program 3 (id=2298):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80)
sync_file_range(r0, 0xba79, 0x9b, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file0/../file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000480), 0x1000811, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1])
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x128, 0x11, 0x148, 0x128, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0xffffffff, 'wg1\x00', 'virt_wifi0\x00', {0x99380e6a96eb266d}, {0xff}, 0xff, 0x3}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0xffffffffffffffff, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x5, 0x2, 0x3, 0x1], 0x1, 0x4}, {0xfffd, [0x0, 0x7, 0x0, 0x7, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280)
chroot(&(0x7f0000000200)='./file0\x00')
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f00000003c0)="eb1ef98073e4ba21ffa3cf1050f0", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa8)
umount2(&(0x7f00000004c0)='./file1/file0/../file0\x00', 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340), &(0x7f0000000000), &(0x7f0000000180))
io_uring_enter(r6, 0x1, 0x1, 0x1, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r7, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x4, 0x25}, {0x0, 0x7}, 0x6, 0x0, 0x9})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x0, @time={0x7f, 0x10}, 0xf8, {0xc, 0xe3}, 0x2, 0x0, 0xf9})
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x5, 0xfb, 0x8, 0x7fffffff}, {0xb22, 0x7, 0xea, 0x6}, {0x1, 0x1, 0x3, 0x3}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000002c0))

2.292729589s ago: executing program 4 (id=2299):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
pipe(0x0)
socket$inet(0x2b, 0x801, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000000), 0x0}, 0x20)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80)
r5 = epoll_create1(0x0)
fcntl$dupfd(r5, 0x25, 0xffffffffffffffff)
io_uring_setup(0x4d3f, &(0x7f0000000140)={0x0, 0xb18d, 0x8, 0x3, 0x105})

2.27710825s ago: executing program 0 (id=2300):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x30000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@mcast2}, &(0x7f00000002c0)=0x14)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
preadv(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x1000)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)

2.147534574s ago: executing program 2 (id=2301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x0)

1.128628745s ago: executing program 4 (id=2302):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0x17, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000012c0)={0x44, &(0x7f0000000fc0)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

850.892934ms ago: executing program 3 (id=2303):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20fffe82)

324.477201ms ago: executing program 0 (id=2304):
socket$inet_smc(0x2b, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x2c, &(0x7f0000000100), 0x4)
r5 = io_uring_setup(0x818, &(0x7f0000000300)={0x0, 0x81f, 0x0, 0x3, 0x259, 0x0, r2})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/9, 0x9}], 0x1)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000006800010000000000000000f30900000000000000040004003b77f90e67394f88d2b2692adde7975c8593e9c3ff60ebf0c0e16f8cb1f8a3f4594730d56874e30d153cc27eb79bb5074464d04fd3fe6d015d2bf5bc4a7f3dae1a7bf8df8ead72fe60cf0eaa92e82b9602c934a2afcd77f373109e88518052b5fa78e3b905e12c19b73c54765926158d5ece5567c13e13"], 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0)
r8 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x210)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0)
mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
r9 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0)

0s ago: executing program 2 (id=2305):
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
socket(0x2, 0x80000, 0x100)
r0 = fanotify_init(0x0, 0x181000)
r1 = fanotify_init(0x4, 0x1000)
fanotify_mark(r1, 0x1, 0x48000000, r0, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x12000021)
readv(r2, &(0x7f00000012c0)=[{0x0}], 0x1)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
socket$netlink(0x10, 0x3, 0xf)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x2c)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
ioctl$TIOCL_SETVESABLANK(r5, 0x560e, 0x0)
ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, 0x0)

kernel console output (not intermixed with test programs):

cted capacity change from 0 to 1024
[  800.246842][T13776] UBIFS error (pid: 13776): cannot open "ubifs", error -22
[  801.314484][T13758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  801.368786][T13758] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  801.395421][   T23] usb 3-1: USB disconnect, device number 117
[  802.007704][   T23] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  802.502526][   T23] usb 3-1: Using ep0 maxpacket: 16
[  802.531914][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024
[  802.568009][   T23] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40
[  802.592042][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.648610][   T23] usb 3-1: config 0 descriptor??
[  802.748418][   T23] usb 3-1: can't set config #0, error -71
[  802.801798][   T23] usb 3-1: USB disconnect, device number 118
[  804.837030][  T968] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  805.126833][  T968] usb 4-1: Using ep0 maxpacket: 32
[  805.213673][  T968] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  805.320501][  T968] usb 4-1: config 0 has no interface number 0
[  805.379529][  T968] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  805.534433][  T968] usb 4-1: config 0 interface 85 has no altsetting 0
[  805.559123][T13801] overlayfs: missing 'workdir'
[  805.586401][  T968] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  805.610296][  T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.677021][  T968] usb 4-1: Product: syz
[  805.681258][  T968] usb 4-1: Manufacturer: syz
[  805.685888][  T968] usb 4-1: SerialNumber: syz
[  805.759312][  T968] usb 4-1: config 0 descriptor??
[  806.256921][   T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  806.707499][   T27] usb 1-1: config 0 has no interfaces?
[  806.726611][   T27] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  806.758047][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  806.771998][T13819] fuse: Bad value for 'fd'
[  806.807817][   T27] usb 1-1: config 0 descriptor??
[  807.057692][T13813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  807.093149][T13813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  807.131940][   T27] usb 1-1: USB disconnect, device number 13
[  807.776820][   T27] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  807.996724][   T27] usb 1-1: Using ep0 maxpacket: 16
[  808.020474][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024
[  808.035933][  T968] appletouch 4-1:0.85: Failed to request geyser raw mode
[  808.044167][  T968] appletouch: probe of 4-1:0.85 failed with error -5
[  808.062097][  T968] usb 4-1: USB disconnect, device number 41
[  808.097301][   T27] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40
[  808.149247][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.181292][   T27] usb 1-1: config 0 descriptor??
[  808.201997][   T27] powermate: probe of 1-1:0.0 failed with error -5
[  808.296748][T13836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1990'.
[  808.314950][   T27] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  808.509451][   T27] usb 1-1: USB disconnect, device number 14
[  808.621922][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  808.628915][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  809.491711][ T8688] udevd[8688]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  809.656726][  T968] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  809.875300][  T968] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  809.917124][  T968] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  809.982151][  T968] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  810.012043][  T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.037255][  T968] usb 2-1: Product: syz
[  810.057096][  T968] usb 2-1: Manufacturer: syz
[  810.061748][  T968] usb 2-1: SerialNumber: syz
[  810.305247][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  810.332530][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  810.390418][  T968] cdc_ether: probe of 2-1:1.0 failed with error -22
[  810.443709][  T968] usb 2-1: USB disconnect, device number 6
[  810.966652][  T968] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  811.926684][  T968] usb 2-1: Using ep0 maxpacket: 8
[  811.935947][  T968] usb 2-1: config index 0 descriptor too short (expected 301, got 72)
[  811.966757][  T968] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  811.987078][  T968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  812.014747][  T968] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  812.035918][  T968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64
[  812.076646][  T968] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  812.103000][  T968] usb 2-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  812.138105][  T968] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  812.174549][  T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.259008][  T968] usbtmc 2-1:16.0: bulk endpoints not found
[  812.314226][T13864] loop0: detected capacity change from 0 to 40427
[  812.357436][T13864] F2FS-fs (loop0): LFS is not compatible with checkpoint=disable
[  812.497514][ T8688] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  812.619739][ T1186] usb 2-1: USB disconnect, device number 7
[  813.756798][ T1186] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  813.806917][T11712] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  813.949781][T13895] fuse: Bad value for 'fd'
[  813.961275][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  814.005301][ T1186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  814.043672][T11712] usb 4-1: config 0 has no interfaces?
[  814.050183][ T1186] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  814.060730][T11712] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  814.070654][ T1186] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  814.085018][T11712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.101332][ T1186] usb 2-1: Manufacturer: syz
[  814.120501][ T1186] usb 2-1: config 0 descriptor??
[  814.133004][T11712] usb 4-1: config 0 descriptor??
[  814.374323][T13890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.416059][T13890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.448607][T13888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  814.488309][T11712] usb 4-1: USB disconnect, device number 42
[  814.496471][T13888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.710987][ T1186] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  814.732745][ T1186] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  814.746774][ T1186] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  814.764199][ T1186] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  814.776780][ T1186] cougar 0003:060B:700A.001A: unknown main item tag 0x0
[  814.797686][ T1186] cougar 0003:060B:700A.001A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  814.917042][  T968] usb 2-1: USB disconnect, device number 8
[  815.020778][T13909] fido_id[13909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  815.358148][T13903] loop2: detected capacity change from 0 to 32768
[  815.414301][T13903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  815.432424][T13903] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  815.462115][T13903] BTRFS info (device loop2): setting nodatacow, compression disabled
[  815.490639][T13903] BTRFS info (device loop2): enabling auto defrag
[  815.516762][T13903] BTRFS info (device loop2): max_inline at 0
[  815.546849][T13903] BTRFS info (device loop2): using free space tree
[  815.730684][T13903] BTRFS info (device loop2): auto enabling async discard
[  816.384014][ T5771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  817.465186][T13929] loop1: detected capacity change from 0 to 32768
[  817.579215][T13929] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  817.654026][T13929] JBD2: Ignoring recovery information on journal
[  817.732320][T13929] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  817.919145][    T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  818.140740][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  818.185526][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  818.232108][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  818.251626][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.281956][    T9] usb 4-1: Product: syz
[  818.286218][    T9] usb 4-1: Manufacturer: syz
[  818.291870][ T5780] ocfs2: Unmounting device (7,1) on (node local)
[  818.306416][    T9] usb 4-1: SerialNumber: syz
[  818.558227][T13945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  818.588224][T13945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  818.638222][    T9] cdc_ether: probe of 4-1:1.0 failed with error -22
[  818.660795][    T9] usb 4-1: USB disconnect, device number 43
[  819.064099][   T28] audit: type=1326 audit(1779268545.800:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  819.422170][   T28] audit: type=1326 audit(1779268545.810:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  819.869840][   T28] audit: type=1326 audit(1779268545.810:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.107539][   T28] audit: type=1326 audit(1779268545.810:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.198109][   T28] audit: type=1326 audit(1779268545.850:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.296801][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  820.305096][   T28] audit: type=1326 audit(1779268545.860:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.347402][   T28] audit: type=1326 audit(1779268545.860:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.425899][   T28] audit: type=1326 audit(1779268545.860:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.487204][T13720] Bluetooth: hci0: unexpected event for opcode 0x007f
[  820.519685][    T9] usb 1-1: config 0 has no interfaces?
[  820.525318][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  820.597937][   T28] audit: type=1326 audit(1779268545.880:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.634735][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.696466][    T9] usb 1-1: config 0 descriptor??
[  820.746672][   T28] audit: type=1326 audit(1779268545.900:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13965 comm="syz.2.2011" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ca039ce59 code=0x7ffc0000
[  820.944906][T13975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  820.989230][T13975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.024611][  T968] usb 1-1: USB disconnect, device number 15
[  821.467052][   T27] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  821.550493][T13997] loop3: detected capacity change from 0 to 32768
[  821.563930][T13997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2017 (13997)
[  821.594591][T13997] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  821.606983][T13997] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  821.615828][T13997] BTRFS info (device loop3): allowing degraded mounts
[  821.623873][T13997] BTRFS info (device loop3): turning on flush-on-commit
[  821.631849][T13997] BTRFS info (device loop3): max_inline at 0
[  821.638399][T13997] BTRFS info (device loop3): setting nodatasum
[  821.644707][T13997] BTRFS info (device loop3): turning on sync discard
[  821.652072][T13997] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  821.664261][T13997] BTRFS info (device loop3): trying to use backup root at mount time
[  821.674902][T13997] BTRFS info (device loop3): using free space tree
[  821.683715][   T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.700410][   T27] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  821.709767][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.721067][   T27] usb 3-1: config 0 descriptor??
[  821.734687][   T27] pwc: Askey VC010 type 2 USB webcam detected.
[  821.776784][  T968] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  821.810659][T13997] BTRFS info (device loop3): enabling ssd optimizations
[  821.970513][T14033] syzkaller0: entered promiscuous mode
[  821.976328][T14033] syzkaller0: entered allmulticast mode
[  821.984081][  T968] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  822.004318][  T968] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  822.054851][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  822.085107][  T968] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  822.094562][  T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.112596][  T968] usb 2-1: Product: syz
[  822.120994][  T968] usb 2-1: Manufacturer: syz
[  822.125685][  T968] usb 2-1: SerialNumber: syz
[  822.143984][   T27] pwc: recv_control_msg error -32 req 02 val 2b00
[  822.372767][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  822.387461][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  822.418656][ T8688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (8688)
[  822.442730][  T968] cdc_ether: probe of 2-1:1.0 failed with error -22
[  822.468675][  T968] usb 2-1: USB disconnect, device number 9
[  822.657745][    T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  822.715680][   T27] pwc: recv_control_msg error -71 req 04 val 1000
[  822.723521][   T27] pwc: recv_control_msg error -71 req 04 val 1300
[  822.730499][   T27] pwc: recv_control_msg error -71 req 04 val 1400
[  822.737455][   T27] pwc: recv_control_msg error -71 req 02 val 2000
[  822.745360][   T27] pwc: recv_control_msg error -71 req 02 val 2100
[  822.752357][   T27] pwc: recv_control_msg error -71 req 04 val 1500
[  822.759350][   T27] pwc: recv_control_msg error -71 req 02 val 2500
[  822.766230][   T27] pwc: recv_control_msg error -71 req 02 val 2400
[  822.790991][   T27] pwc: recv_control_msg error -71 req 02 val 2600
[  822.799051][   T27] pwc: recv_control_msg error -71 req 02 val 2900
[  822.806700][   T27] pwc: recv_control_msg error -71 req 02 val 2800
[  822.815553][   T27] pwc: recv_control_msg error -71 req 04 val 1100
[  823.050029][   T27] pwc: recv_control_msg error -71 req 04 val 1200
[  823.230331][   T27] pwc: Registered as video103.
[  823.400282][   T27] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input51
[  823.523160][   T27] usb 3-1: USB disconnect, device number 119
[  824.129873][T11712] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  824.326931][T11712] usb 2-1: Using ep0 maxpacket: 8
[  824.342170][T11712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  824.363545][T11712] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  824.383239][T11712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  824.414330][T11712] usb 2-1: config 0 descriptor??
[  824.579519][T14047] loop2: detected capacity change from 0 to 32768
[  824.673606][T11712] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  824.768873][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  824.778361][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.786453][    T9] usb 4-1: Product: syz
[  824.791726][    T9] usb 4-1: Manufacturer: syz
[  824.796418][    T9] usb 4-1: SerialNumber: syz
[  825.156476][T11712] usb 2-1: USB disconnect, device number 10
[  825.287729][    T9] net_ratelimit: 10 callbacks suppressed
[  825.287839][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  828.609946][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71
[  828.625024][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  828.745533][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  828.786470][    T9] lan78xx: probe of 4-1:1.0 failed with error -71
[  828.832669][    T9] usb 4-1: USB disconnect, device number 44
[  829.148561][T14076] hub 8-0:1.0: USB hub found
[  829.159222][T14076] hub 8-0:1.0: 1 port detected
[  829.770724][T14079] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  829.874167][T14081] sch_fq: defrate 2 ignored.
[  829.896732][ T1186] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  829.977471][T14083] loop2: detected capacity change from 0 to 1024
[  830.015478][T14083] EXT4-fs: Ignoring removed bh option
[  830.077765][T14083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  830.161705][T14083] EXT4-fs (loop2): Online resizing not supported with bigalloc
[  830.241696][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  830.293726][ T1186] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  830.316912][ T1186] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  830.339420][ T1186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  830.363657][ T1186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  830.398291][T14093] loop2: detected capacity change from 0 to 8
[  830.404473][ T1186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  830.430898][ T1186] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  830.450983][ T1186] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  830.466353][ T1186] usb 2-1: Product: syz
[  830.474911][ T1186] usb 2-1: Manufacturer: syz
[  830.535665][ T1186] cdc_wdm 2-1:1.0: skipping garbage
[  830.568047][ T1186] cdc_wdm 2-1:1.0: skipping garbage
[  830.606487][ T1186] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  830.640282][ T1186] cdc_wdm 2-1:1.0: Unknown control protocol
[  830.742462][T14094] SQUASHFS error: lzo decompression failed, data probably corrupt
[  830.751937][T14094] SQUASHFS error: Failed to read block 0x0: -5
[  830.753878][T14090] loop0: detected capacity change from 0 to 32768
[  830.758452][T14094] SQUASHFS error: Failed to read block 0xff: -5
[  830.771636][T14094] SQUASHFS error: lzo decompression failed, data probably corrupt
[  830.779619][T14094] SQUASHFS error: Failed to read block 0x0: -5
[  830.786118][   T28] kauditd_printk_skb: 25 callbacks suppressed
[  830.786187][   T28] audit: type=1800 audit(1779268557.530:689): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2041" name="file2" dev="loop2" ino=3 res=0 errno=0
[  830.916683][T14090] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  830.936159][T14090] JBD2: Ignoring recovery information on journal
[  831.019565][T14090] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  831.064873][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.071758][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.078213][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.084866][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.092120][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.098784][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.105249][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.111897][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.118269][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.124939][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.132220][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.138872][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.145499][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.152160][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.161601][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.168248][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.174608][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.181254][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.187953][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  831.194677][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  831.201728][    T9] usb 2-1: USB disconnect, device number 11
[  831.207755][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  831.283672][T14090] syz.0.2040 (14090) used greatest stack depth: 18224 bytes left
[  831.297223][   T27] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  831.371820][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  831.493436][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  831.504817][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  831.527876][   T27] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  831.550886][   T27] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  831.573924][   T27] usb 4-1: Manufacturer: syz
[  831.581346][   T27] usb 4-1: config 0 descriptor??
[  831.836696][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  831.864289][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  831.879190][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  832.665469][   T27] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  832.699772][   T27] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  832.709151][   T27] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  832.716236][   T27] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  832.724301][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  832.744305][   T27] cougar 0003:060B:700A.001B: unknown main item tag 0x0
[  832.754566][   T27] cougar 0003:060B:700A.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  832.792694][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  832.829864][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  832.840172][   T27] usb 4-1: USB disconnect, device number 45
[  832.847063][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.862335][    T9] usb 1-1: Product: syz
[  832.871731][T14110] loop1: detected capacity change from 0 to 256
[  832.878281][    T9] usb 1-1: Manufacturer: syz
[  832.882935][    T9] usb 1-1: SerialNumber: syz
[  832.897618][T14110] exfat: Deprecated parameter 'utf8'
[  832.923867][T14110] exfat: Deprecated parameter 'utf8'
[  832.944106][T14110] exfat: Deprecated parameter 'utf8'
[  832.983463][T14110] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  833.072498][T14111] fido_id[14111]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  833.132971][T14101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.169390][T14101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.201600][    T9] cdc_ether: probe of 1-1:1.0 failed with error -22
[  833.212123][    T9] usb 1-1: USB disconnect, device number 16
[  833.471037][ T3009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.637916][ T3009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.727685][ T5834] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  833.778273][ T3009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  833.796693][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  833.836376][T14117] loop2: detected capacity change from 0 to 256
[  833.911625][ T3009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  834.091030][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.116887][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.139846][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  834.855891][    T9] usb 1-1: Using ep0 maxpacket: 8
[  834.861309][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  834.870690][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.880040][    T9] usb 1-1: device descriptor read/all, error -71
[  834.890496][ T5834] usb 4-1: config 0 descriptor??
[  835.167608][ T3009] tipc: Left network mode
[  835.418626][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  835.431441][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  835.592014][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  835.608348][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  835.638847][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  835.658666][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  835.774144][T14114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  836.032649][T14114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  836.333298][ T5834] usbhid 4-1:0.0: can't add hid device: -71
[  836.342027][ T5834] usbhid: probe of 4-1:0.0 failed with error -71
[  836.351014][ T5834] usb 4-1: USB disconnect, device number 46
[  836.416121][T14124] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  836.813841][T14152] loop2: detected capacity change from 0 to 32768
[  836.828594][T14152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2055 (14152)
[  836.878055][T14152] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  836.888442][T14152] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  836.897252][T14152] BTRFS info (device loop2): turning on async discard
[  836.904056][T14152] BTRFS info (device loop2): metadata ratio 0
[  836.910224][T14152] BTRFS info (device loop2): setting nodatasum
[  836.916384][T14152] BTRFS info (device loop2): using free space tree
[  837.011123][T14152] BTRFS info (device loop2): enabling ssd optimizations
[  838.172029][ T5779] Bluetooth: hci3: command tx timeout
[  838.390007][T14135] lo speed is unknown, defaulting to 1000
[  838.487806][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  838.804016][T14192] loop2: detected capacity change from 0 to 512
[  838.977826][T14192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  839.048879][ T1186] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  839.051476][T14192] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  839.415396][ T1186] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  839.439047][ T1186] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  839.458043][ T1186] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  839.467612][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.475701][ T1186] usb 1-1: Product: syz
[  839.480439][ T1186] usb 1-1: Manufacturer: syz
[  839.485105][ T1186] usb 1-1: SerialNumber: syz
[  840.129229][T14198] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  840.165792][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.175910][T14204] xt_CT: No such helper "syz0"
[  840.183516][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.218056][ T5779] Bluetooth: hci3: command tx timeout
[  840.314644][ T1186] cdc_ether: probe of 1-1:1.0 failed with error -22
[  840.326219][ T1186] usb 1-1: USB disconnect, device number 19
[  840.344458][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.649507][T14217] loop3: detected capacity change from 0 to 256
[  840.670343][T14217] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3855f621, utbl_chksum : 0xe619d30d)
[  840.867059][ T1186] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  841.210823][ T1186] usb 1-1: Using ep0 maxpacket: 8
[  841.305552][ T1186] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[  841.515389][ T1186] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  841.568012][ T1186] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  841.583072][ T1186] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  841.623514][ T1186] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  841.669006][ T1186] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.729633][ T1186] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  841.807403][T14227] syzkaller0: entered promiscuous mode
[  841.812965][T14227] syzkaller0: entered allmulticast mode
[  841.947524][ T1186] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  841.957336][ T1186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.969010][ T1186] usb 1-1: can't set config #16, error -71
[  841.978404][ T1186] usb 1-1: USB disconnect, device number 20
[  842.306702][ T5779] Bluetooth: hci3: command tx timeout
[  842.455447][T14233] loop0: detected capacity change from 0 to 2048
[  842.886448][T14233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  843.262109][T14135] chnl_net:caif_netlink_parms(): no params data found
[  843.989813][   T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  844.117612][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 28
[  844.207161][   T12] EXT4-fs (loop0): This should not happen!! Data will be lost
[  844.207161][   T12] 
[  844.243307][   T12] EXT4-fs (loop0): Total free blocks count 0
[  844.273410][ T3009] hsr_slave_0: left promiscuous mode
[  844.286844][   T12] EXT4-fs (loop0): Free/Dirty block details
[  844.292876][   T12] EXT4-fs (loop0): free_blocks=4096
[  844.308841][ T3009] hsr_slave_1: left promiscuous mode
[  844.333954][   T12] EXT4-fs (loop0): dirty_blocks=144
[  844.339295][   T12] EXT4-fs (loop0): Block reservation details
[  844.345308][   T12] EXT4-fs (loop0): i_reserved_data_blocks=9
[  844.388830][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  844.398633][ T5779] Bluetooth: hci3: command tx timeout
[  844.457830][   T39] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  844.496628][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_0
[  844.542291][ T3009] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  844.614058][ T3009] batman_adv: batadv0: Removing interface: batadv_slave_1
[  844.736645][ T5834] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  845.004686][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  845.221880][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  845.275437][ T5834] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  845.302231][ T5834] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  845.311318][ T5834] usb 3-1: Manufacturer: syz
[  845.323281][ T3009] veth1_macvtap: left promiscuous mode
[  845.330088][ T3009] veth0_macvtap: left promiscuous mode
[  845.335800][ T3009] veth1_vlan: left promiscuous mode
[  845.342872][ T3009] veth0_vlan: left promiscuous mode
[  845.349294][ T5834] usb 3-1: config 0 descriptor??
[  845.474601][ T3009] infiniband syz1: set down
[  845.574318][T14252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.585790][T14252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.812255][ T5834] cougar 0003:060B:700A.001C: unknown main item tag 0x0
[  845.825931][ T5834] cougar 0003:060B:700A.001C: unknown main item tag 0x0
[  845.852163][ T5834] cougar 0003:060B:700A.001C: unknown main item tag 0x0
[  845.889610][ T3009] bond4 (unregistering): Released all slaves
[  845.913777][ T5834] cougar 0003:060B:700A.001C: unknown main item tag 0x0
[  845.921240][ T5834] cougar 0003:060B:700A.001C: unknown main item tag 0x0
[  845.933037][ T5834] cougar 0003:060B:700A.001C: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  846.014998][ T5834] usb 3-1: USB disconnect, device number 120
[  846.162236][T14271] fido_id[14271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  846.305482][ T3009] bond3 (unregistering): Released all slaves
[  846.698638][ T3009] bond2 (unregistering): Released all slaves
[  848.031241][ T3009] bond1 (unregistering): Released all slaves
[  849.042954][T12515] smc: removing ib device syz1
[  849.278328][T14298] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2078'.
[  849.375672][ T3009] team0 (unregistering): Port device team_slave_1 removed
[  849.522345][ T3009] team0 (unregistering): Port device team_slave_0 removed
[  849.550059][T14303] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  849.621150][T14303] overlayfs: failed to look up (tracing) for ino (-66)
[  849.665193][ T3009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  849.725949][ T3009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  850.215953][ T3009] bond0 (unregistering): Released all slaves
[  851.103523][    T9] infiniband syz1: ib_query_port failed (-19)
[  852.753625][T14318] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  852.763457][T14318] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  852.773187][T14318] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  852.811491][   T28] audit: type=1800 audit(1779268579.500:690): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2081" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  853.057605][T14135] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.064888][T14135] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.111558][T14324] loop2: detected capacity change from 0 to 256
[  853.122853][T14135] bridge_slave_0: entered allmulticast mode
[  853.172126][T14135] bridge_slave_0: entered promiscuous mode
[  853.201601][T14135] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.219352][T14135] bridge0: port 2(bridge_slave_1) entered disabled state
[  853.241743][T14324] FAT-fs (loop2): Unrecognized mount option "shortnaed" or missing value
[  853.250405][T14135] bridge_slave_1: entered allmulticast mode
[  853.253526][T14135] bridge_slave_1: entered promiscuous mode
[  854.558547][T14135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.746122][T14135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  855.116728][T14135] team0: Port device team_slave_0 added
[  855.198015][T14135] team0: Port device team_slave_1 added
[  856.207413][T14135] batman_adv: batadv0: Adding interface: batadv_slave_0
[  856.214436][T14135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  856.315641][T14135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  856.381537][T14135] batman_adv: batadv0: Adding interface: batadv_slave_1
[  856.390172][T14356] loop3: detected capacity change from 0 to 64
[  856.415606][T14135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  856.506999][T14135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.772863][T14342] loop0: detected capacity change from 0 to 32768
[  856.816137][T14342] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  856.932394][T14360] bridge0: port 2(bridge_slave_1) entered listening state
[  856.988744][T14360] bridge0: port 2(bridge_slave_1) entered disabled state
[  857.068384][T14135] hsr_slave_0: entered promiscuous mode
[  857.090148][T14135] hsr_slave_1: entered promiscuous mode
[  857.135338][T14135] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  857.187598][T14135] Cannot create hsr debugfs directory
[  857.212661][ T8688] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[  857.651865][T14366] syzkaller0: entered promiscuous mode
[  857.669949][T14366] syzkaller0: entered allmulticast mode
[  857.826642][    T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  858.027199][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  858.072767][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  858.104018][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  858.146797][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  858.156079][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.183938][T14135] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  858.200148][    T9] usb 4-1: config 0 descriptor??
[  858.227669][T14135] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  858.251257][T14135] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  858.260611][T14373] loop2: detected capacity change from 0 to 32768
[  858.272618][T14135] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  858.281759][T14373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2094 (14373)
[  858.338174][T11712] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  858.341052][T14373] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  858.415141][T14373] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  858.433324][T14373] BTRFS info (device loop2): using free space tree
[  858.538980][T11712] usb 1-1: config 0 has no interfaces?
[  858.544538][T11712] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  858.553694][T11712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.568186][T14373] BTRFS info (device loop2): enabling ssd optimizations
[  858.577640][T11712] usb 1-1: config 0 descriptor??
[  858.597504][T14373] BTRFS info (device loop2): auto enabling async discard
[  858.618459][T14135] 8021q: adding VLAN 0 to HW filter on device bond0
[  858.698443][T14135] 8021q: adding VLAN 0 to HW filter on device team0
[  858.735975][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.743295][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  858.763250][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  858.795557][ T7419] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.802785][ T7419] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.822231][T14386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  858.834096][T14386] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  858.847475][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  858.856374][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  858.866357][T11712] usb 1-1: USB disconnect, device number 21
[  858.899245][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  858.906444][    T9] usbhid: probe of 4-1:0.0 failed with error -71
[  858.975465][    T9] usb 4-1: USB disconnect, device number 47
[  859.486916][T11712] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  859.788008][T11712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024
[  859.944895][T11712] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  859.972386][T11712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.987349][T11712] usb 1-1: config 0 descriptor??
[  860.211059][T11712] usbhid 1-1:0.0: can't add hid device: -71
[  860.235562][T11712] usbhid: probe of 1-1:0.0 failed with error -71
[  860.262877][T11712] usb 1-1: USB disconnect, device number 22
[  860.347008][T14135] 8021q: adding VLAN 0 to HW filter on device batadv0
[  860.428920][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2098'.
[  860.900953][T14440] loop0: detected capacity change from 0 to 256
[  860.921179][T14440] exfat: Deprecated parameter 'utf8'
[  860.950034][T14440] exfat: Deprecated parameter 'namecase'
[  860.962679][T14440] exfat: Deprecated parameter 'namecase'
[  860.986505][T14440] exfat: Deprecated parameter 'utf8'
[  861.054953][T14440] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  861.143450][T14423] loop3: detected capacity change from 0 to 32768
[  861.165101][T14423] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  861.181667][T14135] veth0_vlan: entered promiscuous mode
[  861.205607][T14423] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  861.223275][T14135] veth1_vlan: entered promiscuous mode
[  861.233783][T14423] BTRFS info (device loop3): setting nodatasum
[  861.281584][T14423] BTRFS info (device loop3): force zlib compression, level 3
[  861.312188][T14423] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  861.333110][T14135] veth0_macvtap: entered promiscuous mode
[  861.352809][T14423] BTRFS info (device loop3): use lzo compression, level 0
[  861.387739][T14135] veth1_macvtap: entered promiscuous mode
[  861.393675][T14423] BTRFS info (device loop3): turning on flush-on-commit
[  861.408787][T14423] BTRFS info (device loop3): enabling auto defrag
[  861.436246][T14423] BTRFS info (device loop3): max_inline at 4096
[  861.448582][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  861.461942][T14423] BTRFS info (device loop3): using free space tree
[  861.480366][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  861.500709][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  861.511499][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  861.676105][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  861.721069][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  861.841870][T14135] batman_adv: batadv0: Interface activated: batadv_slave_0
[  862.052223][T14423] BTRFS info (device loop3): enabling ssd optimizations
[  862.232641][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  862.324489][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  862.365159][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  862.389892][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  862.408364][T14135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  862.434346][T14135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  862.473143][T14135] batman_adv: batadv0: Interface activated: batadv_slave_1
[  862.529855][T14135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  862.563634][T14135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  862.586589][T14135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  862.595361][T14135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  862.657103][T14470] syzkaller0: entered promiscuous mode
[  862.681182][T14470] syzkaller0: entered allmulticast mode
[  862.689160][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  862.956839][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  862.996902][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  863.163211][T14466] loop0: detected capacity change from 0 to 32768
[  863.215372][ T7419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  863.247238][T14466] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  863.311046][ T7419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  863.438709][T14466] JBD2: Ignoring recovery information on journal
[  863.655750][T14466] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  866.837179][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  867.027802][    T9] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  867.256612][    T9] usb 3-1: Using ep0 maxpacket: 32
[  867.364461][    T9] usb 3-1: config 157 has too many interfaces: 246, using maximum allowed: 32
[  867.536378][    T9] usb 3-1: config 157 has 1 interface, different from the descriptor's value: 246
[  867.786664][    T9] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  867.844019][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.862465][    T9] usb 3-1: Product: syz
[  867.887990][    T9] usb 3-1: Manufacturer: syz
[  867.892656][    T9] usb 3-1: SerialNumber: syz
[  867.930004][T14511] syzkaller0: entered promiscuous mode
[  867.935578][T14511] syzkaller0: entered allmulticast mode
[  868.164635][    T9] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  869.568091][    T9] usb 3-1: reset high-speed USB device number 121 using dummy_hcd
[  869.810992][    T9] usb 3-1: device descriptor read/all, error -71
[  870.051120][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  870.060874][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  871.043072][  T968] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  871.722210][    T9] usb 3-1: [UEAGLE-ATM] interface 1 not found
[  871.730028][    T9] ueagle-atm 3-1:157.0: usbatm_usb_probe: bind failed: -19!
[  871.740648][    T9] usb 3-1: USB disconnect, device number 121
[  871.911782][  T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  871.933608][  T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  872.046308][T14543] loop2: detected capacity change from 0 to 32768
[  872.138526][T14543] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  872.156319][  T968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  872.169345][  T968] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  872.179268][  T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.192991][T14543] JBD2: Ignoring recovery information on journal
[  872.245758][  T968] usb 4-1: config 0 descriptor??
[  872.355370][T14543] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  872.687482][ T5771] ocfs2: Unmounting device (7,2) on (node local)
[  872.712922][  T968] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving
[  872.744436][  T968] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  873.069851][  T968] usb 4-1: USB disconnect, device number 48
[  874.606211][T14571] fido_id[14571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  875.515856][T14582] loop2: detected capacity change from 0 to 2048
[  875.527799][T14582] ext4: Unknown parameter 'fowner'
[  875.546693][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  875.765448][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  875.839222][    T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  875.868630][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.708017][    T9] usb 4-1: config 0 descriptor??
[  876.751743][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  876.862064][T14590] syzkaller0: entered promiscuous mode
[  876.877010][T14590] syzkaller0: entered allmulticast mode
[  877.152436][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  877.764210][T14594] loop2: detected capacity change from 0 to 32768
[  877.794432][T14594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2125 (14594)
[  877.878619][T14594] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  877.930802][T14594] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  877.958332][    T9] pwc: recv_control_msg error -71 req 04 val 1000
[  877.965831][    T9] pwc: recv_control_msg error -71 req 04 val 1300
[  877.972665][T14594] BTRFS info (device loop2): setting nodatasum
[  877.979101][    T9] pwc: recv_control_msg error -71 req 04 val 1400
[  877.985745][T14594] BTRFS info (device loop2): force zlib compression, level 3
[  877.993456][    T9] pwc: recv_control_msg error -71 req 02 val 2000
[  878.000109][T14594] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  878.009753][T14594] BTRFS info (device loop2): use lzo compression, level 0
[  878.017087][    T9] pwc: recv_control_msg error -71 req 02 val 2100
[  878.023798][T14594] BTRFS info (device loop2): turning on flush-on-commit
[  878.033930][    T9] pwc: recv_control_msg error -71 req 04 val 1500
[  878.045103][T14594] BTRFS info (device loop2): enabling auto defrag
[  878.054675][    T9] pwc: recv_control_msg error -71 req 02 val 2500
[  878.067209][T14594] BTRFS info (device loop2): max_inline at 4096
[  878.073516][T14594] BTRFS info (device loop2): using free space tree
[  878.086688][    T9] pwc: recv_control_msg error -71 req 02 val 2400
[  878.107145][    T9] pwc: recv_control_msg error -71 req 02 val 2600
[  878.114288][    T9] pwc: recv_control_msg error -71 req 02 val 2900
[  878.128684][    T9] pwc: recv_control_msg error -71 req 02 val 2800
[  878.256915][    T9] pwc: recv_control_msg error -71 req 04 val 1100
[  878.263823][    T9] pwc: recv_control_msg error -71 req 04 val 1200
[  878.272623][    T9] pwc: Registered as video103.
[  878.281840][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52
[  878.310595][    T9] usb 4-1: USB disconnect, device number 49
[  878.480099][T14594] BTRFS info (device loop2): enabling ssd optimizations
[  878.896103][ T5834] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  879.570011][ T5834] usb 1-1: Using ep0 maxpacket: 16
[  879.597341][ T5834] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping
[  879.648007][ T5771] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  879.669623][ T5834] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  879.679781][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.702257][ T5834] usb 1-1: Product: syz
[  879.723210][ T5834] usb 1-1: Manufacturer: syz
[  879.737518][ T5834] usb 1-1: SerialNumber: syz
[  879.807964][ T5834] usb 1-1: config 0 descriptor??
[  881.051680][   T23] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  881.239376][   T23] usb 3-1: Using ep0 maxpacket: 32
[  881.264928][   T23] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  881.292212][   T23] usb 3-1: config 0 has no interface number 0
[  881.322449][   T23] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  881.356662][   T23] usb 3-1: config 0 interface 196 has no altsetting 0
[  881.432837][   T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  881.447630][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.455694][   T23] usb 3-1: Product: syz
[  881.482299][   T23] usb 3-1: Manufacturer: syz
[  881.502559][   T23] usb 3-1: SerialNumber: syz
[  881.527250][   T23] usb 3-1: config 0 descriptor??
[  881.532872][T14638] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  881.565599][  T968] usb 1-1: USB disconnect, device number 23
[  882.171632][   T23] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  882.285760][   T23] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  882.391059][T14652] syzkaller0: entered promiscuous mode
[  882.420605][T14652] syzkaller0: entered allmulticast mode
[  882.668683][T14644] loop0: detected capacity change from 0 to 32768
[  883.056924][ T5834] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  883.272695][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  883.309935][ T5834] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  883.333659][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  883.408751][ T5834] usb 4-1: config 0 descriptor??
[  883.441626][ T5834] pwc: Askey VC010 type 2 USB webcam detected.
[  883.617679][    C0] ipheth 3-1:0.196: ipheth_rcvbulk_callback: callback retval: -22
[  883.862143][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00
[  883.891615][T11712] usb 3-1: USB disconnect, device number 122
[  884.357242][ T5834] pwc: recv_control_msg error -71 req 04 val 1000
[  884.385138][ T5834] pwc: recv_control_msg error -71 req 04 val 1300
[  884.407127][    T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  884.418055][ T5834] pwc: recv_control_msg error -71 req 04 val 1400
[  884.438114][ T5834] pwc: recv_control_msg error -71 req 02 val 2000
[  884.452576][ T5834] pwc: recv_control_msg error -71 req 02 val 2100
[  884.480347][ T5834] pwc: recv_control_msg error -71 req 04 val 1500
[  884.499963][ T5834] pwc: recv_control_msg error -71 req 02 val 2500
[  884.520988][ T5834] pwc: recv_control_msg error -71 req 02 val 2400
[  884.538991][ T5834] pwc: recv_control_msg error -71 req 02 val 2600
[  884.621195][ T5834] pwc: recv_control_msg error -71 req 02 val 2900
[  884.633916][    T9] usb 1-1: config 0 has no interfaces?
[  884.640509][ T5834] pwc: recv_control_msg error -71 req 02 val 2800
[  884.652086][    T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  884.669511][ T5834] pwc: recv_control_msg error -71 req 04 val 1100
[  884.688706][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.707730][ T5834] pwc: recv_control_msg error -71 req 04 val 1200
[  884.725274][ T5834] pwc: Registered as video103.
[  884.728570][T11712] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  884.738021][    T9] usb 1-1: config 0 descriptor??
[  884.745773][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53
[  884.761269][ T5834] usb 4-1: USB disconnect, device number 50
[  884.968536][T14686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  885.009349][T14686] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  885.041823][T11856] usb 1-1: USB disconnect, device number 24
[  885.095642][T14682] loop4: detected capacity change from 0 to 32768
[  885.142970][T14682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.2138 (14682)
[  885.198255][T14703] autofs4:pid:14703:autofs_fill_super: called with bogus options
[  885.210008][T14682] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  885.255697][T14682] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  885.298664][T14682] BTRFS info (device loop4): setting nodatasum
[  885.337736][T14682] BTRFS info (device loop4): force zlib compression, level 3
[  885.367456][T14682] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  885.391290][T14682] BTRFS info (device loop4): use lzo compression, level 0
[  885.416638][T14682] BTRFS info (device loop4): turning on flush-on-commit
[  885.438528][T14682] BTRFS info (device loop4): enabling auto defrag
[  885.458571][T14682] BTRFS info (device loop4): max_inline at 4096
[  885.476076][T14682] BTRFS info (device loop4): using free space tree
[  885.558211][T14682] BTRFS info (device loop4): enabling ssd optimizations
[  885.666934][T11856] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  885.726975][T11712] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[  885.751525][T14135] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  885.884374][T11856] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024
[  885.916799][T11856] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  885.934685][T11712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  885.972290][T11856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.991836][T11712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  886.031381][T11856] usb 1-1: config 0 descriptor??
[  886.044479][T11712] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  886.112288][T11712] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  886.143339][T14735] syzkaller0: entered promiscuous mode
[  886.159008][T11712] usb 3-1: Manufacturer: syz
[  886.166497][ T8688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (8688)
[  886.168403][T14735] syzkaller0: entered allmulticast mode
[  886.199403][T11712] usb 3-1: config 0 descriptor??
[  886.296860][T11856] usbhid 1-1:0.0: can't add hid device: -71
[  886.302926][T11856] usbhid: probe of 1-1:0.0 failed with error -71
[  886.328169][T11856] usb 1-1: USB disconnect, device number 25
[  886.413380][T14710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  886.482824][T14710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  886.792822][T11712] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[  886.844845][T11712] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[  886.939120][T11712] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[  887.066301][T11712] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[  887.170795][T11712] cougar 0003:060B:700A.001E: unknown main item tag 0x0
[  887.338972][T11712] cougar 0003:060B:700A.001E: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  887.607094][T11712] usb 3-1: USB disconnect, device number 123
[  888.093785][T14758] fido_id[14758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  888.736654][T11856] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  888.808080][T14775] loop0: detected capacity change from 0 to 8
[  888.928450][T11856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  888.947787][T11856] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  888.967745][T11856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.995189][T11856] usb 4-1: config 0 descriptor??
[  889.030210][T11856] pwc: Askey VC010 type 2 USB webcam detected.
[  889.445266][T11856] pwc: recv_control_msg error -32 req 02 val 2b00
[  889.871007][T11856] pwc: recv_control_msg error -71 req 04 val 1000
[  889.882258][T11856] pwc: recv_control_msg error -71 req 04 val 1300
[  889.930796][T11856] pwc: recv_control_msg error -71 req 04 val 1400
[  889.961183][T11856] pwc: recv_control_msg error -71 req 02 val 2000
[  889.996114][T11856] pwc: recv_control_msg error -71 req 02 val 2100
[  890.016887][T11856] pwc: recv_control_msg error -71 req 04 val 1500
[  890.226753][T14798] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  890.377825][   T23] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  890.567157][   T23] usb 3-1: Using ep0 maxpacket: 8
[  890.719448][   T23] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  890.761411][   T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  890.826712][   T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  890.880972][   T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  890.946732][   T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  890.984677][T11856] pwc: recv_control_msg error -71 req 02 val 2500
[  890.992726][T11856] pwc: recv_control_msg error -71 req 02 val 2400
[  891.000340][T11856] pwc: recv_control_msg error -71 req 02 val 2600
[  891.008061][T11856] pwc: recv_control_msg error -71 req 02 val 2900
[  891.016762][T11856] pwc: recv_control_msg error -71 req 02 val 2800
[  891.023782][T11856] pwc: recv_control_msg error -71 req 04 val 1100
[  891.030744][T11856] pwc: recv_control_msg error -71 req 04 val 1200
[  891.041577][   T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  891.052247][T11856] pwc: Registered as video103.
[  891.071974][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.091442][T11856] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54
[  891.127413][T11712] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  891.159960][T11856] usb 4-1: USB disconnect, device number 51
[  891.329682][   T23] usb 3-1: usb_control_msg returned -32
[  891.335345][   T23] usbtmc 3-1:16.0: can't read capabilities
[  891.359914][T11712] usb 5-1: config 0 has no interfaces?
[  891.372286][T11712] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  891.392316][T11712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.416689][T11712] usb 5-1: config 0 descriptor??
[  891.644669][T11856] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  891.870817][T14801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  891.883799][T14815] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90
[  891.976996][T14801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.051721][T11856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  892.074491][ T5834] usb 5-1: USB disconnect, device number 2
[  892.141072][T11856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  892.253430][T11856] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  892.330020][T11856] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  892.423271][T11856] usb 4-1: Manufacturer: syz
[  892.451581][T14819] loop0: detected capacity change from 0 to 512
[  892.453693][T11856] usb 4-1: config 0 descriptor??
[  892.468636][T14819] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  892.481957][T14819] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  892.493222][T14819] EXT4-fs (loop0): can't mount with commit=1, fs mounted w/o journal
[  892.686748][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  892.736005][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.749442][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.933242][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33837, setting to 1024
[  893.100690][ T5834] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  893.110212][T11856] cougar 0003:060B:700A.001F: unknown main item tag 0x0
[  893.239576][T11856] cougar 0003:060B:700A.001F: unknown main item tag 0x0
[  893.346020][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.377436][T11856] cougar 0003:060B:700A.001F: unknown main item tag 0x0
[  893.384467][T11856] cougar 0003:060B:700A.001F: unknown main item tag 0x0
[  893.405722][ T5834] usb 5-1: config 0 descriptor??
[  893.447536][    T9] usb 3-1: USB disconnect, device number 124
[  893.486419][T11856] cougar 0003:060B:700A.001F: unknown main item tag 0x0
[  893.558294][T11856] cougar 0003:060B:700A.001F: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  893.624110][T14829] loop0: detected capacity change from 0 to 8
[  893.631038][T11856] usb 4-1: USB disconnect, device number 52
[  893.667851][ T5834] usbhid 5-1:0.0: can't add hid device: -71
[  893.691406][ T5834] usbhid: probe of 5-1:0.0 failed with error -71
[  893.725402][ T5834] usb 5-1: USB disconnect, device number 3
[  893.957931][T14833] fido_id[14833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  894.460109][T14838] loop3: detected capacity change from 0 to 8
[  894.497681][T14838] squashfs: Unknown parameter '#! 
[  894.497681][T14838] Ó	'
[  894.563770][ T9662] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  894.727687][T14838] kvm: kvm [14837]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  894.886878][   T23] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  895.288496][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  895.299696][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  895.316622][   T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  895.329628][   T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  895.338822][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.361549][   T23] usb 1-1: config 0 descriptor??
[  895.435918][T14863] 9pnet_fd: Insufficient options for proto=fd
[  895.803007][   T23] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving
[  895.827084][   T23] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  896.842192][ T5866] usb 1-1: USB disconnect, device number 26
[  896.916455][T14872] fido_id[14872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  897.316800][ T1186] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  898.546839][ T1186] usb 3-1: Using ep0 maxpacket: 16
[  898.554413][ T1186] usb 3-1: config 254 has an invalid interface number: 235 but max is 0
[  898.574555][ T1186] usb 3-1: config 254 has no interface number 0
[  898.591836][ T1186] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  898.687093][   T23] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  898.747459][ T1186] usb 3-1: config 254 interface 235 altsetting 2 has an invalid endpoint with address 0xFF, skipping
[  898.902755][ T1186] usb 3-1: config 254 interface 235 has no altsetting 0
[  898.969023][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  899.132240][ T1186] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  899.287247][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  899.316089][ T1186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.348467][ T1186] usb 3-1: Product: syz
[  899.356715][   T23] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  899.369481][ T1186] usb 3-1: Manufacturer: syz
[  899.374153][ T1186] usb 3-1: SerialNumber: syz
[  899.389589][   T23] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  899.420445][   T23] usb 4-1: Manufacturer: syz
[  899.440621][T14882] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  899.464141][   T23] usb 4-1: config 0 descriptor??
[  899.471730][ T1186] usbtest 3-1:254.235: couldn't get endpoints, -22
[  899.518721][ T1186] usbtest: probe of 3-1:254.235 failed with error -22
[  899.715911][T14894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  899.728516][ T1186] usb 3-1: USB disconnect, device number 125
[  899.806431][T14894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  900.059768][   T23] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  900.107010][   T23] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  900.114045][   T23] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  900.176035][   T23] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  900.217467][   T23] cougar 0003:060B:700A.0021: unknown main item tag 0x0
[  900.245390][   T23] cougar 0003:060B:700A.0021: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  900.349241][   T23] usb 4-1: USB disconnect, device number 53
[  900.748630][T14910] fido_id[14910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  903.337457][T14918] loop0: detected capacity change from 0 to 32768
[  903.466900][T14918] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  903.562206][T14918] JBD2: Ignoring recovery information on journal
[  903.750618][T14918] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  904.090483][ T5772] ocfs2: Unmounting device (7,0) on (node local)
[  904.513016][T14938] loop2: detected capacity change from 0 to 32768
[  904.532613][T14938] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2179 (14938)
[  904.547798][T14955] loop0: detected capacity change from 0 to 512
[  904.587832][ T5834] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  904.602090][T14938] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  904.628313][T14955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  904.641380][T14938] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  904.650719][T14938] BTRFS info (device loop2): setting nodatacow, compression disabled
[  904.657252][T14955] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  904.660079][T14938] BTRFS info (device loop2): setting datasum, datacow enabled
[  904.677240][T14938] BTRFS info (device loop2): force clearing of disk cache
[  904.684408][T14938] BTRFS info (device loop2): enabling ssd optimizations
[  904.692883][T14938] BTRFS info (device loop2): using spread ssd allocation scheme
[  904.700929][T14938] BTRFS info (device loop2): turning on sync discard
[  904.708138][T14938] BTRFS info (device loop2): turning off barriers
[  904.714632][T14938] BTRFS info (device loop2): enabling auto defrag
[  904.721714][T14938] BTRFS info (device loop2): not using ssd optimizations
[  904.729202][T14938] BTRFS info (device loop2): not using spread ssd allocation scheme
[  904.738130][T14938] BTRFS info (device loop2): using free space tree
[  904.806917][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  904.822881][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  904.833868][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  904.864730][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  904.889049][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  904.956974][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.992285][ T5834] usb 4-1: config 0 descriptor??
[  905.062270][T14938] BTRFS info (device loop2): rebuilding free space tree
[  905.224141][   T28] audit: type=1800 audit(1779268631.970:691): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2179" name="file1" dev="loop2" ino=260 res=0 errno=0
[  905.289447][T14938] BTRFS info (device loop2): balance: start -sconvert=raid0,soft
[  905.389398][T14938] BTRFS info (device loop2): relocating block group 1048576 flags system
[  905.447484][   T23] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  905.464242][ T5834] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving
[  905.493659][ T5834] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  905.645007][T14938] BTRFS info (device loop2): balance: ended with status: 0
[  905.826766][   T23] usb 1-1: Using ep0 maxpacket: 8
[  905.835452][   T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  905.845500][   T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  905.855469][   T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  905.865376][ T5834] usb 4-1: USB disconnect, device number 54
[  905.896467][T11712] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  906.187226][T11712] usb 3-1: Using ep0 maxpacket: 16
[  906.202623][   T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  906.239373][T11712] usb 3-1: config 0 has no interfaces?
[  906.372472][T11712] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  906.521098][   T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  906.544116][T11712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.574507][   T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  906.591349][T11712] usb 3-1: Product: syz
[  906.597289][T11712] usb 3-1: Manufacturer: syz
[  906.605990][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.637165][T11712] usb 3-1: SerialNumber: syz
[  906.659669][T11712] usb 3-1: config 0 descriptor??
[  906.795830][T11712] usb 3-1: can't set config #0, error -71
[  906.814594][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  906.833861][T11712] usb 3-1: USB disconnect, device number 126
[  906.921377][   T23] usb 1-1: GET_CAPABILITIES returned 0
[  906.968712][   T23] usbtmc 1-1:16.0: can't read capabilities
[  907.226948][T11712] usb 1-1: USB disconnect, device number 27
[  908.378771][ T5834] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  908.733308][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  908.760965][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  908.802763][ T5834] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  908.826754][ T5834] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  908.845244][ T5834] usb 4-1: Manufacturer: syz
[  909.071230][ T5834] usb 4-1: config 0 descriptor??
[  909.385907][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.494676][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.905106][ T5834] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[  909.926764][ T5834] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[  909.933792][ T5834] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[  909.946564][ T5834] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[  909.953563][ T5834] cougar 0003:060B:700A.0023: unknown main item tag 0x0
[  909.965265][ T5834] cougar 0003:060B:700A.0023: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  910.056914][T11856] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  910.120341][T11712] usb 4-1: USB disconnect, device number 55
[  910.170188][T15025] fido_id[15025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  910.266608][T11856] usb 5-1: Using ep0 maxpacket: 32
[  910.275266][T11856] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  910.296617][T11856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  910.317594][T11856] usb 5-1: config 0 descriptor??
[  910.531941][T11856] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  910.554901][T11856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  910.577557][T11856] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  910.584858][T11856] usb 5-1: media controller created
[  910.634705][T15032] loop0: detected capacity change from 0 to 512
[  910.646373][T11856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  910.662383][T15032] EXT4-fs: Mount option(s) incompatible with ext3
[  910.772952][T15032] loop0: detected capacity change from 0 to 1024
[  910.837353][T15012] loop4: detected capacity change from 0 to 1024
[  910.873864][T15012] hfsplus: invalid btree flag
[  910.884641][   T28] audit: type=1800 audit(1779268637.630:692): pid=15032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2194" name="file1" dev="loop0" ino=20 res=0 errno=0
[  910.903883][T15012] hfsplus: failed to load catalog file
[  911.187074][T11856] az6027: usb out operation failed. (-71)
[  911.204062][T11856] az6027: usb out operation failed. (-71)
[  911.210017][T11856] stb0899_attach: Driver disabled by Kconfig
[  911.216070][T11856] az6027: no front-end attached
[  911.216070][T11856] 
[  911.223661][T11856] az6027: usb out operation failed. (-71)
[  911.229576][T11856] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  911.238937][T11856] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input55
[  911.253670][T11856] dvb-usb: schedule remote query interval to 400 msecs.
[  911.261007][T11856] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  911.272548][T11856] usb 5-1: USB disconnect, device number 4
[  913.641194][T11856] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  914.857298][  T968] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  915.206826][  T968] usb 3-1: Using ep0 maxpacket: 8
[  915.272530][  T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  915.361016][  T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  915.456694][  T968] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  916.422688][  T968] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  916.433376][  T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  916.458947][  T968] usb 3-1: config 0 descriptor??
[  916.466367][ T8790] hfsplus: b-tree write err: -5, ino 25
[  916.487147][ T8790] hfsplus: b-tree write err: -5, ino 4
[  916.493070][ T8790] hfsplus: b-tree write err: -5, ino 2
[  916.714374][T15060] loop4: detected capacity change from 0 to 512
[  916.737904][T15060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  916.776145][T15060] EXT4-fs (loop4): DAX unsupported by block device.
[  917.112437][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.164121][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.182315][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.206634][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.226755][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.237126][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.244305][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.252043][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.259289][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.266602][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.273864][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.281086][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.288799][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.296092][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.303395][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.310625][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.317873][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.325036][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.332346][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.339698][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.346935][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.354099][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.376849][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.400875][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.411138][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.420556][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.427824][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.435106][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.442344][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.471633][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.499996][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.515510][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.704151][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  917.736606][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  918.718856][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  918.726421][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  920.460755][  T968] zydacron 0003:13EC:0006.0024: unknown main item tag 0x0
[  920.506456][  T968] zydacron 0003:13EC:0006.0024: hidraw0: USB HID v0.0b Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0
[  920.638044][  T968] usb 3-1: USB disconnect, device number 127
[  920.993162][T15079] fido_id[15079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  921.489395][T15080] loop2: detected capacity change from 0 to 32768
[  921.540124][T15080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2205 (15080)
[  921.627497][T15080] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  921.686768][T15080] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  921.726895][T15080] BTRFS info (device loop2): setting nodatacow, compression disabled
[  921.735041][T15080] BTRFS info (device loop2): setting datasum, datacow enabled
[  921.802218][T15080] BTRFS info (device loop2): force clearing of disk cache
[  921.851169][T15080] BTRFS info (device loop2): enabling ssd optimizations
[  921.879998][T15080] BTRFS info (device loop2): using spread ssd allocation scheme
[  921.916736][T15080] BTRFS info (device loop2): turning on sync discard
[  921.923495][T15080] BTRFS info (device loop2): turning off barriers
[  921.942680][T15080] BTRFS info (device loop2): enabling auto defrag
[  921.953723][T15080] BTRFS info (device loop2): not using ssd optimizations
[  921.975012][T15080] BTRFS info (device loop2): not using spread ssd allocation scheme
[  922.013031][T15080] BTRFS info (device loop2): using free space tree
[  922.196621][   T23] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  922.423620][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.452735][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  922.462792][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  922.476239][   T23] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  922.512824][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.858624][T15080] BTRFS info (device loop2): rebuilding free space tree
[  922.888325][   T23] usb 4-1: config 0 descriptor??
[  923.051260][   T28] audit: type=1800 audit(1779268649.800:693): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2205" name="file1" dev="loop2" ino=260 res=0 errno=0
[  923.147323][T15080] BTRFS info (device loop2): balance: start -sconvert=raid0,soft
[  923.177994][T15080] BTRFS info (device loop2): relocating block group 1048576 flags system
[  923.349442][T15080] BTRFS info (device loop2): balance: ended with status: 0
[  923.835535][T15120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  923.856134][   T23] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[  924.138506][T15120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  924.159119][   T23] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  924.207955][T11856] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  924.265659][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  924.332863][T15125] loop4: detected capacity change from 0 to 512
[  924.400526][T15125] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  924.455726][  T968] usb 4-1: USB disconnect, device number 56
[  924.466611][T15120] plantronics 0003:047F:FFFF.0025: usb_submit_urb(ctrl) failed: -19
[  924.496650][   T23] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  924.511053][T15125] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.2213: iget: bad i_size value: 38620345925642
[  924.617071][T15125] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.2213: couldn't read orphan inode 15 (err -117)
[  924.665080][T15125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  924.680331][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  924.704733][T15129] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  924.711543][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  924.790734][   T23] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  924.816817][   T23] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  924.841753][   T23] usb 1-1: Manufacturer: syz
[  924.855439][   T23] usb 1-1: config 0 descriptor??
[  924.893762][T15132] loop2: detected capacity change from 0 to 512
[  924.912881][T14135] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.014995][T15132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  925.028021][T15132] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  925.296762][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.335148][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  926.136566][T15135] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  926.239764][T15141] xt_CT: No such helper "syz0"
[  926.359419][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  926.366217][   T23] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[  926.387763][   T23] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[  926.394778][   T23] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[  926.403504][   T23] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[  926.410602][   T23] cougar 0003:060B:700A.0026: unknown main item tag 0x0
[  926.421825][   T23] cougar 0003:060B:700A.0026: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  926.467683][T11856] usb 1-1: USB disconnect, device number 28
[  926.778271][T15149] fido_id[15149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  927.802051][T15159] loop2: detected capacity change from 0 to 764
[  929.029313][T15161] loop3: detected capacity change from 0 to 32768
[  929.066720][T15161] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2222 (15161)
[  929.100605][T15161] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  929.121092][T15161] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  929.145426][T15161] BTRFS info (device loop3): setting nodatacow, compression disabled
[  929.175534][T15161] BTRFS info (device loop3): setting datasum, datacow enabled
[  929.196892][T15161] BTRFS info (device loop3): force clearing of disk cache
[  929.204081][T15161] BTRFS info (device loop3): enabling ssd optimizations
[  929.228249][T15161] BTRFS info (device loop3): using spread ssd allocation scheme
[  929.238148][T15161] BTRFS info (device loop3): turning on sync discard
[  929.244880][T15161] BTRFS info (device loop3): turning off barriers
[  929.251845][T15161] BTRFS info (device loop3): enabling auto defrag
[  929.258646][T15161] BTRFS info (device loop3): not using ssd optimizations
[  929.265852][T15161] BTRFS info (device loop3): not using spread ssd allocation scheme
[  929.274589][T15161] BTRFS info (device loop3): using free space tree
[  929.417051][T15167] loop0: detected capacity change from 0 to 32768
[  929.445933][T15167] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2223 (15167)
[  929.493692][T15167] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  929.652444][T15167] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  929.938161][T15167] BTRFS info (device loop0): force clearing of disk cache
[  930.198909][T15167] BTRFS info (device loop0): metadata ratio 0
[  930.205080][T15167] BTRFS info (device loop0): enabling disk space caching
[  930.221765][T15161] BTRFS info (device loop3): rebuilding free space tree
[  930.258686][T15167] BTRFS info (device loop0): disk space caching is enabled
[  930.417412][   T28] audit: type=1800 audit(1779268657.150:694): pid=15161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2222" name="file1" dev="loop3" ino=260 res=0 errno=0
[  930.463050][T15161] BTRFS info (device loop3): balance: start -sconvert=raid0,soft
[  930.529757][T15161] BTRFS info (device loop3): relocating block group 1048576 flags system
[  930.590542][T15167] BTRFS info (device loop0): enabling ssd optimizations
[  930.608339][   T28] audit: type=1800 audit(1779268657.360:695): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2222" name="file1" dev="loop3" ino=260 res=0 errno=0
[  930.666559][T15167] BTRFS info (device loop0): auto enabling async discard
[  930.732526][T15167] BTRFS info (device loop0): rebuilding free space tree
[  930.839358][T15167] BTRFS info (device loop0): disabling free space tree
[  930.892212][T15167] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  930.948082][   T23] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  930.963208][T15167] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  930.997394][T15161] BTRFS info (device loop3): balance: ended with status: 0
[  931.124194][   T28] audit: type=1800 audit(1779268657.870:696): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2223" name="bus" dev="loop0" ino=263 res=0 errno=0
[  931.207231][   T23] usb 4-1: Using ep0 maxpacket: 16
[  931.247238][   T23] usb 4-1: config 0 has no interfaces?
[  931.307073][   T28] audit: type=1800 audit(1779268657.870:697): pid=15167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2223" name="bus" dev="loop0" ino=263 res=0 errno=0
[  931.346469][   T23] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  931.355582][   T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.437708][   T23] usb 4-1: Product: syz
[  931.441957][   T23] usb 4-1: Manufacturer: syz
[  931.508095][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  931.514478][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  931.534587][   T23] usb 4-1: SerialNumber: syz
[  931.597244][   T23] usb 4-1: config 0 descriptor??
[  931.641782][T15179] loop4: detected capacity change from 0 to 32768
[  931.706583][T15179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.2226 (15179)
[  931.751370][  T968] usb 4-1: USB disconnect, device number 57
[  931.768568][T15179] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  931.791207][T15179] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  931.801533][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  931.830756][T15179] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  931.871556][T15179] BTRFS info (device loop4): use zstd compression, level 3
[  931.915515][T15179] BTRFS info (device loop4): using free space tree
[  931.929741][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  932.066645][T11856] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  932.077574][T15179] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  932.078597][T15179] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  932.117627][T15179] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  932.180459][T15179] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  932.192582][T15179] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  932.247614][T15179] BTRFS error (device loop4): open_ctree failed: -12
[  932.299838][T15239] loop3: detected capacity change from 0 to 8
[  932.317844][T11856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  932.376393][T11856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  932.468954][T11856] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  932.520548][T11856] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  932.566052][T11856] usb 3-1: Manufacturer: syz
[  932.587808][T11856] usb 3-1: config 0 descriptor??
[  932.812820][T15219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  932.851188][T15219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.137995][T11856] cougar 0003:060B:700A.0027: unknown main item tag 0x0
[  933.145042][T11856] cougar 0003:060B:700A.0027: unknown main item tag 0x0
[  933.201870][T11856] cougar 0003:060B:700A.0027: unknown main item tag 0x0
[  933.224926][T11856] cougar 0003:060B:700A.0027: unknown main item tag 0x0
[  933.240500][T11856] cougar 0003:060B:700A.0027: unknown main item tag 0x0
[  933.257122][T11856] cougar 0003:060B:700A.0027: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  933.364938][T11856] usb 3-1: USB disconnect, device number 3
[  933.645142][T15249] fido_id[15249]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  934.027182][T15251] loop3: detected capacity change from 0 to 40427
[  934.036775][T15251] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  934.044563][T15251] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  934.057738][T15251] F2FS-fs (loop3): invalid crc value
[  934.160713][T15251] F2FS-fs (loop3): Found nat_bits in checkpoint
[  934.249869][T15251] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  934.257110][T15251] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  936.278685][T15267] ALSA: mixer_oss: invalid OSS volume 'Destination'
[  936.322605][T15267] ALSA: mixer_oss: invalid OSS volume 'sit0'
[  936.757638][T15269] syzkaller0: entered promiscuous mode
[  936.785552][T15269] syzkaller0: entered allmulticast mode
[  937.931702][T15272] loop3: detected capacity change from 0 to 32768
[  937.960217][T15272] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2237 (15272)
[  938.020699][T15272] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  938.043647][T15272] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  938.069399][T15272] BTRFS info (device loop3): setting nodatacow, compression disabled
[  938.103451][T15272] BTRFS info (device loop3): setting datasum, datacow enabled
[  938.113585][T15272] BTRFS info (device loop3): force clearing of disk cache
[  938.126087][   T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  938.143951][T15272] BTRFS info (device loop3): enabling ssd optimizations
[  938.153635][T15272] BTRFS info (device loop3): using spread ssd allocation scheme
[  938.168344][T15272] BTRFS info (device loop3): turning on sync discard
[  938.175500][T15272] BTRFS info (device loop3): turning off barriers
[  938.187751][T15272] BTRFS info (device loop3): enabling auto defrag
[  938.194242][T15272] BTRFS info (device loop3): not using ssd optimizations
[  938.221763][T15276] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2241'.
[  938.222507][T15272] BTRFS info (device loop3): not using spread ssd allocation scheme
[  938.259583][T15272] BTRFS info (device loop3): using free space tree
[  938.337981][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  938.356988][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  938.375225][   T23] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  938.394119][   T23] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  938.420700][   T23] usb 3-1: Manufacturer: syz
[  938.452795][T15272] BTRFS info (device loop3): rebuilding free space tree
[  938.467193][   T23] usb 3-1: config 0 descriptor??
[  938.577136][   T28] audit: type=1800 audit(1779268665.331:698): pid=15272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2237" name="file1" dev="loop3" ino=260 res=0 errno=0
[  938.621091][T15272] BTRFS info (device loop3): balance: start -sconvert=raid0,soft
[  938.634496][T15272] BTRFS info (device loop3): relocating block group 1048576 flags system
[  938.655568][   T28] audit: type=1800 audit(1779268665.401:699): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2237" name="file1" dev="loop3" ino=260 res=0 errno=0
[  938.686142][T11712] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  938.709962][T15283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  938.726849][T15283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  938.773130][T15272] BTRFS info (device loop3): balance: ended with status: 0
[  938.856701][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  938.908672][T11712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  938.919817][T11712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  938.930802][T11712] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  938.944709][T11712] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  938.956008][T11712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  938.968131][   T23] cougar 0003:060B:700A.0028: unknown main item tag 0x0
[  938.975114][   T23] cougar 0003:060B:700A.0028: unknown main item tag 0x0
[  938.983679][T11712] usb 1-1: config 0 descriptor??
[  938.989034][   T23] cougar 0003:060B:700A.0028: unknown main item tag 0x0
[  938.996697][   T27] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  939.008523][   T23] cougar 0003:060B:700A.0028: unknown main item tag 0x0
[  939.015574][   T23] cougar 0003:060B:700A.0028: unknown main item tag 0x0
[  939.028856][   T23] cougar 0003:060B:700A.0028: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  939.046650][    T9] usb 5-1: Using ep0 maxpacket: 32
[  939.062119][    T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  939.072329][    T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  939.089889][    T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  939.104159][    T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  939.125144][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  939.134822][    T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  939.149073][    T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  939.166220][ T5834] usb 3-1: USB disconnect, device number 4
[  939.184388][    T9] usb 5-1: Product: syz
[  939.194030][    T9] usb 5-1: Manufacturer: syz
[  939.196233][   T27] usb 4-1: Using ep0 maxpacket: 16
[  939.209386][    T9] usb 5-1: SerialNumber: syz
[  939.219397][   T27] usb 4-1: config 0 has no interfaces?
[  939.225667][    T9] usb 5-1: config 0 descriptor??
[  939.238402][   T27] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  939.250150][    T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  939.256287][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  939.277900][   T27] usb 4-1: Product: syz
[  939.282163][   T27] usb 4-1: Manufacturer: syz
[  939.282627][    T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  939.297946][T15309] fido_id[15309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  939.313436][   T27] usb 4-1: SerialNumber: syz
[  939.323230][   T27] usb 4-1: config 0 descriptor??
[  939.441988][T11712] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving
[  939.467584][T11712] plantronics 0003:047F:FFFF.0029: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  939.510234][T11712] usb 5-1: USB disconnect, device number 5
[  939.525319][T11712] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  939.542479][ T5834] usb 4-1: USB disconnect, device number 58
[  939.644824][T15302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  939.653764][T15302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  939.670445][    T9] usb 1-1: USB disconnect, device number 29
[  940.113949][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  940.138044][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2249'.
[  941.720709][T15329] usb usb7: usbfs: process 15329 (syz.2.2254) did not claim interface 0 before use
[  943.586570][T15332] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2255'.
[  944.687500][T15336] loop2: detected capacity change from 0 to 32768
[  944.702131][T15336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2257 (15336)
[  944.863341][T15336] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  944.883345][T15336] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  944.902932][T15336] BTRFS info (device loop2): turning on sync discard
[  944.933306][T15336] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  944.966055][T15336] BTRFS info (device loop2): use zstd compression, level 3
[  944.983535][T15336] BTRFS info (device loop2): turning on async discard
[  944.999997][T15336] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  945.034821][T15336] BTRFS info (device loop2): trying to use backup root at mount time
[  945.065127][T15336] BTRFS info (device loop2): enabling auto defrag
[  945.094027][T15336] BTRFS info (device loop2): use zlib compression, level 3
[  945.119086][T15336] BTRFS info (device loop2): using free space tree
[  945.151395][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  945.156551][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  945.199635][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  945.239956][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  945.259146][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  945.272276][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  945.540220][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  946.247892][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  946.298070][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  946.371148][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  946.425745][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  946.471504][T15336] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  946.624284][T15336] BTRFS error (device loop2): open_ctree failed: -12
[  946.812625][T15347] loop0: detected capacity change from 0 to 32768
[  946.850587][T15347] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2259 (15347)
[  946.964966][T15347] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  947.066874][T15347] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  947.145059][T15347] BTRFS info (device loop0): setting nodatacow, compression disabled
[  947.190399][T15347] BTRFS info (device loop0): setting datasum, datacow enabled
[  947.255713][T15347] BTRFS info (device loop0): force clearing of disk cache
[  947.295622][T15347] BTRFS info (device loop0): enabling ssd optimizations
[  947.345611][T15347] BTRFS info (device loop0): using spread ssd allocation scheme
[  947.385575][T15347] BTRFS info (device loop0): turning on sync discard
[  947.435693][T15347] BTRFS info (device loop0): turning off barriers
[  947.442224][T15347] BTRFS info (device loop0): enabling auto defrag
[  947.485944][T15347] BTRFS info (device loop0): not using ssd optimizations
[  947.533874][T15347] BTRFS info (device loop0): not using spread ssd allocation scheme
[  947.592565][T15347] BTRFS info (device loop0): using free space tree
[  947.636496][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  947.664196][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  947.715018][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  947.782551][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  947.851523][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  947.866590][T15371] loop3: detected capacity change from 0 to 32768
[  947.885957][T15371] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.2263 (15371)
[  947.900154][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  947.900918][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  947.941812][T15371] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  947.986248][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  947.986978][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  948.054952][T15371] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  948.061644][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  948.066972][T15371] BTRFS info (device loop3): using free space tree
[  948.124563][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  948.125200][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  948.194279][T15347] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  948.208809][T15347] BTRFS error (device loop0): open_ctree failed: -12
[  948.426269][T15371] BTRFS info (device loop3): enabling ssd optimizations
[  948.451768][T15371] BTRFS info (device loop3): auto enabling async discard
[  948.480581][T15410] syzkaller0: entered promiscuous mode
[  948.506914][T15410] syzkaller0: entered allmulticast mode
[  948.805040][ T5775] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  948.840814][T15075] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (15075)
[  948.923033][T15419] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[  949.692367][T15081] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 9 /dev/loop3 scanned by udevd (15081)
[  950.330560][ T5779] Bluetooth: hci3: command tx timeout
[  950.895986][   T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  951.065414][   T27] usb 3-1: device descriptor read/64, error -71
[  951.345330][   T27] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  951.515665][   T27] usb 3-1: device descriptor read/64, error -71
[  951.535333][T15438] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2274'.
[  951.636183][   T27] usb usb3-port1: attempt power cycle
[  954.830081][   T27] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  955.168196][   T27] usb 3-1: device descriptor read/8, error -71
[  955.443868][T15462] syzkaller0: entered promiscuous mode
[  955.469654][T15462] syzkaller0: entered allmulticast mode
[  955.595148][ T1186] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  955.787907][ T1186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  955.828274][ T1186] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  955.856511][ T1186] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  955.883172][ T1186] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  955.920965][ T1186] usb 4-1: Manufacturer: syz
[  956.036629][ T1186] usb 4-1: config 0 descriptor??
[  956.094276][T15460] loop0: detected capacity change from 0 to 32768
[  956.215283][   T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  956.277923][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  956.298474][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  956.333033][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  956.341231][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  956.359507][   T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  956.388750][   T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  956.402678][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.431969][   T27] usb 3-1: config 0 descriptor??
[  956.516483][T15460] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  956.558427][T15460] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  956.582209][ T1186] cougar 0003:060B:700A.002A: unknown main item tag 0x0
[  956.592071][T15460] BTRFS info (device loop0): setting nodatacow, compression disabled
[  956.610493][ T1186] cougar 0003:060B:700A.002A: unknown main item tag 0x0
[  956.636245][T15460] BTRFS info (device loop0): setting datasum, datacow enabled
[  956.641457][ T1186] cougar 0003:060B:700A.002A: unknown main item tag 0x0
[  956.643767][T15460] BTRFS info (device loop0): force clearing of disk cache
[  956.643792][T15460] BTRFS info (device loop0): enabling ssd optimizations
[  956.682578][ T1186] cougar 0003:060B:700A.002A: unknown main item tag 0x0
[  956.691002][T15460] BTRFS info (device loop0): using spread ssd allocation scheme
[  956.705522][ T1186] cougar 0003:060B:700A.002A: unknown main item tag 0x0
[  956.722908][T15460] BTRFS info (device loop0): turning on sync discard
[  956.732417][T15460] BTRFS info (device loop0): turning off barriers
[  956.744102][T15460] BTRFS info (device loop0): enabling auto defrag
[  956.750064][ T1186] cougar 0003:060B:700A.002A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  956.760974][T15460] BTRFS info (device loop0): not using ssd optimizations
[  956.760996][T15460] BTRFS info (device loop0): not using spread ssd allocation scheme
[  956.781335][T15460] BTRFS info (device loop0): using free space tree
[  956.808702][ T1186] usb 4-1: USB disconnect, device number 59
[  956.859897][T15460] BTRFS info (device loop0): rebuilding free space tree
[  956.904074][   T27] plantronics 0003:047F:FFFF.002B: No inputs registered, leaving
[  956.944443][   T27] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  956.965845][T11856] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  956.978036][   T28] audit: type=1800 audit(1779268683.732:700): pid=15460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2278" name="file1" dev="loop0" ino=260 res=0 errno=0
[  957.014999][T15485] fido_id[15485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  957.093605][T15464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  957.108222][T15464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  957.119213][ T1186] usb 3-1: USB disconnect, device number 8
[  957.163440][T15486] fido_id[15486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  957.217098][T11856] usb 5-1: Using ep0 maxpacket: 8
[  957.224224][T11856] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  957.234620][T11856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  957.244502][T11856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  957.254947][T11856] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  957.268305][T11856] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  957.277699][ T5834] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  957.286192][T11856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.495169][ T5834] usb 1-1: Using ep0 maxpacket: 16
[  957.514199][ T5834] usb 1-1: config 0 has no interfaces?
[  957.525063][T11856] usb 5-1: GET_CAPABILITIES returned 0
[  957.533469][ T5834] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  957.542945][T11856] usbtmc 5-1:16.0: can't read capabilities
[  957.549890][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.559123][ T5834] usb 1-1: Product: syz
[  957.565411][ T5834] usb 1-1: Manufacturer: syz
[  957.580294][ T5834] usb 1-1: SerialNumber: syz
[  957.596243][ T5834] usb 1-1: config 0 descriptor??
[  957.736896][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  957.748818][ T1186] usb 5-1: USB disconnect, device number 6
[  957.808837][ T5866] usb 1-1: USB disconnect, device number 30
[  958.236793][T15491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2285'.
[  959.040366][ T5772] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  960.934956][ T1186] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  961.244815][ T1186] usb 5-1: device descriptor read/64, error -71
[  961.635665][ T1186] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  961.804976][ T1186] usb 5-1: device descriptor read/64, error -71
[  962.914875][ T1186] usb usb5-port1: attempt power cycle
[  963.522670][ T1186] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  963.744702][ T1186] usb 5-1: device not accepting address 9, error -71
[  963.920110][T15521] loop2: detected capacity change from 0 to 32768
[  963.935629][T15521] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.2295 (15521)
[  964.035361][T15521] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  964.060652][T15521] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  964.103227][T15521] BTRFS info (device loop2): setting nodatacow, compression disabled
[  964.125262][ T1186] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  964.138477][T15521] BTRFS info (device loop2): setting datasum, datacow enabled
[  964.164655][T15521] BTRFS info (device loop2): force clearing of disk cache
[  964.910431][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  964.921548][ T1186] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  964.932124][ T1186] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  964.944679][T15521] BTRFS info (device loop2): enabling ssd optimizations
[  964.945527][ T1186] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  964.961294][ T1186] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.979750][T15521] BTRFS info (device loop2): using spread ssd allocation scheme
[  965.085359][ T1186] usb 5-1: config 0 descriptor??
[  965.183424][T15521] BTRFS info (device loop2): turning on sync discard
[  965.362509][T15521] BTRFS info (device loop2): turning off barriers
[  965.461596][T15521] BTRFS info (device loop2): enabling auto defrag
[  965.552610][T15521] BTRFS info (device loop2): not using ssd optimizations
[  965.607020][ T1186] plantronics 0003:047F:FFFF.002C: No inputs registered, leaving
[  965.617932][T15521] BTRFS info (device loop2): not using spread ssd allocation scheme
[  965.642525][ T1186] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  965.674434][T15521] BTRFS info (device loop2): using free space tree
[  965.818762][T15523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  965.828396][T15523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.878230][T15521] BTRFS info (device loop2): rebuilding free space tree
[  965.990550][   T28] audit: type=1800 audit(1779268692.742:701): pid=15521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2295" name="file1" dev="loop2" ino=260 res=0 errno=0
[  966.014840][   T27] usb 5-1: USB disconnect, device number 10
[  966.264932][ T1186] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  967.273780][ T1186] usb 3-1: Using ep0 maxpacket: 16
[  967.305679][ T1186] usb 3-1: device descriptor read/all, error -71
[  967.385156][ T5771] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  968.387116][T15555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2298'.
[  968.814319][ T1186] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  968.974335][ T1186] usb 5-1: device descriptor read/64, error -71
[  969.137882][T15573] loop3: detected capacity change from 0 to 32768
[  969.151195][T15573] (syz.3.2303,15573,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  969.176301][T15573] (syz.3.2303,15573,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  969.211458][T15573] JBD2: Ignoring recovery information on journal
[  969.244442][ T1186] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  969.283423][T15573] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  969.353380][   T28] audit: type=1800 audit(1779268696.102:702): pid=15573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2303" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  969.410805][   T28] audit: type=1800 audit(1779268696.152:703): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2303" name="file1" dev="loop3" ino=16978 res=0 errno=0
[  969.585075][ T1186] usb 5-1: device descriptor read/64, error -71
[  969.688082][T15573] 
[  969.690482][T15573] ======================================================
[  969.697541][T15573] WARNING: possible circular locking dependency detected
[  969.704608][T15573] syzkaller #0 Not tainted
[  969.709050][T15573] ------------------------------------------------------
[  969.716091][T15573] syz.3.2303/15573 is trying to acquire lock:
[  969.722192][T15573] ffff88805de1d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  969.735252][T15573] 
[  969.735252][T15573] but task is already holding lock:
[  969.742638][T15573] ffff88805de1df58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  969.755912][T15573] 
[  969.755912][T15573] which lock already depends on the new lock.
[  969.755912][T15573] 
[  969.766418][T15573] 
[  969.766418][T15573] the existing dependency chain (in reverse order) is:
[  969.775441][T15573] 
[  969.775441][T15573] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}:
[  969.786006][T15573]        down_write+0x97/0x200
[  969.790915][T15573]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  969.797439][T15573]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  969.804313][T15573]        ocfs2_mknod+0xe8f/0x2300
[  969.809376][T15573]        ocfs2_mkdir+0x196/0x430
[  969.814348][T15573]        vfs_mkdir+0x296/0x440
[  969.819167][T15573]        do_mkdirat+0x1dc/0x450
[  969.824045][T15573]        __x64_sys_mkdirat+0x89/0xa0
[  969.829351][T15573]        do_syscall_64+0x55/0xb0
[  969.834336][T15573]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  969.840840][T15573] 
[  969.840840][T15573] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  969.851395][T15573]        down_write+0x97/0x200
[  969.856217][T15573]        ocfs2_evict_inode+0x1d84/0x41e0
[  969.861880][T15573]        evict+0x4ca/0x8d0
[  969.866409][T15573]        vfs_rmdir+0x39b/0x4d0
[  969.871197][T15573]        do_rmdir+0x29f/0x590
[  969.875896][T15573]        __x64_sys_unlinkat+0xc4/0xe0
[  969.881297][T15573]        do_syscall_64+0x55/0xb0
[  969.886256][T15573]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  969.892720][T15573] 
[  969.892720][T15573] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}:
[  969.903113][T15573]        __lock_acquire+0x2df1/0x7d40
[  969.908529][T15573]        lock_acquire+0x19e/0x420
[  969.913603][T15573]        down_write+0x97/0x200
[  969.918403][T15573]        ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  969.924782][T15573]        ocfs2_dio_end_io+0x1040/0x13c0
[  969.930385][T15573]        dio_complete+0x254/0x710
[  969.935443][T15573]        __blockdev_direct_IO+0x2ea8/0x3500
[  969.941374][T15573]        ocfs2_direct_IO+0x235/0x2a0
[  969.946700][T15573]        generic_file_direct_write+0x1d4/0x3e0
[  969.952885][T15573]        __generic_file_write_iter+0x11b/0x230
[  969.959077][T15573]        ocfs2_file_write_iter+0x167a/0x1e80
[  969.965122][T15573]        do_iter_write+0x738/0xc30
[  969.970271][T15573]        iter_file_splice_write+0x6a3/0xcb0
[  969.976197][T15573]        direct_splice_actor+0xe8/0x130
[  969.981788][T15573]        splice_direct_to_actor+0x304/0x8c0
[  969.987718][T15573]        do_splice_direct+0x1d5/0x2f0
[  969.993122][T15573]        do_sendfile+0x5f2/0xef0
[  969.998093][T15573]        __se_sys_sendfile64+0x145/0x1a0
[  970.003754][T15573]        do_syscall_64+0x55/0xb0
[  970.008720][T15573]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  970.015169][T15573] 
[  970.015169][T15573] other info that might help us debug this:
[  970.015169][T15573] 
[  970.025427][T15573] Chain exists of:
[  970.025427][T15573]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2
[  970.025427][T15573] 
[  970.046936][T15573]  Possible unsafe locking scenario:
[  970.046936][T15573] 
[  970.054414][T15573]        CPU0                    CPU1
[  970.059808][T15573]        ----                    ----
[  970.065190][T15573]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  970.072514][T15573]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  970.082360][T15573]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2);
[  970.092209][T15573]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]);
[  970.099349][T15573] 
[  970.099349][T15573]  *** DEADLOCK ***
[  970.099349][T15573] 
[  970.107525][T15573] 3 locks held by syz.3.2303/15573:
[  970.112742][T15573]  #0: ffff88802c906418 (sb_writers#23){.+.+}-{0:0}, at: do_sendfile+0x5cf/0xef0
[  970.121951][T15573]  #1: ffff88805de1a658 (&sb->s_type->i_mutex_key#26){++++}-{3:3}, at: ocfs2_file_write_iter+0x440/0x1e80
[  970.133341][T15573]  #2: ffff88805de1df58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  970.147066][T15573] 
[  970.147066][T15573] stack backtrace:
[  970.153004][T15573] CPU: 1 PID: 15573 Comm: syz.3.2303 Not tainted syzkaller #0
[  970.160495][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  970.170590][T15573] Call Trace:
[  970.173976][T15573]  <TASK>
[  970.177001][T15573]  dump_stack_lvl+0x18c/0x250
[  970.181774][T15573]  ? load_image+0x420/0x420
[  970.186365][T15573]  ? show_regs_print_info+0x20/0x20
[  970.191601][T15573]  ? print_circular_bug+0x12b/0x1a0
[  970.196854][T15573]  check_noncircular+0x2fc/0x400
[  970.201838][T15573]  ? print_deadlock_bug+0x5d0/0x5d0
[  970.207074][T15573]  ? lockdep_lock+0xf5/0x230
[  970.211708][T15573]  ? _find_first_zero_bit+0xd3/0x100
[  970.217061][T15573]  __lock_acquire+0x2df1/0x7d40
[  970.221957][T15573]  ? __lock_acquire+0x7d40/0x7d40
[  970.227027][T15573]  ? verify_lock_unused+0x140/0x140
[  970.232259][T15573]  ? preempt_schedule+0xc0/0xd0
[  970.237148][T15573]  ? preempt_schedule_common+0x82/0xc0
[  970.242642][T15573]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  970.248312][T15573]  ? do_raw_spin_lock+0x11f/0x2c0
[  970.253374][T15573]  ? mutex_unlock+0x10/0x10
[  970.257918][T15573]  lock_acquire+0x19e/0x420
[  970.262457][T15573]  ? ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  970.268479][T15573]  ? ocfs2_get_system_file_inode+0x202/0x850
[  970.274499][T15573]  ? __might_sleep+0xe0/0xe0
[  970.279122][T15573]  ? read_lock_is_recursive+0x20/0x20
[  970.284534][T15573]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  970.290756][T15573]  down_write+0x97/0x200
[  970.295148][T15573]  ? ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  970.301163][T15573]  ? down_read_killable+0x340/0x340
[  970.306398][T15573]  ocfs2_del_inode_from_orphan+0x12f/0x7a0
[  970.312249][T15573]  ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0
[  970.318089][T15573]  ? __lock_acquire+0x7d40/0x7d40
[  970.323150][T15573]  ? sb_end_intwrite+0xe9/0x1c0
[  970.328039][T15573]  ? ocfs2_commit_trans+0x134/0x250
[  970.333271][T15573]  ? sb_end_intwrite+0x1c0/0x1c0
[  970.338240][T15573]  ? up_write+0x1c3/0x410
[  970.342634][T15573]  ocfs2_dio_end_io+0x1040/0x13c0
[  970.347717][T15573]  ? verify_lock_unused+0x140/0x140
[  970.352952][T15573]  ? ocfs2_dio_wr_get_block+0x1820/0x1820
[  970.358713][T15573]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  970.364650][T15573]  ? ocfs2_initialize_journal_triggers+0x540/0x540
[  970.371359][T15573]  ? debug_check_no_obj_freed+0x51f/0x540
[  970.377161][T15573]  ? mark_lock+0x94/0x320
[  970.381525][T15573]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  970.387541][T15573]  ? lock_chain_count+0x20/0x20
[  970.392430][T15573]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  970.398363][T15573]  ? lockdep_hardirqs_on+0x98/0x150
[  970.403610][T15573]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  970.409540][T15573]  ? ocfs2_dio_wr_get_block+0x1820/0x1820
[  970.415296][T15573]  dio_complete+0x254/0x710
[  970.419840][T15573]  __blockdev_direct_IO+0x2ea8/0x3500
[  970.425247][T15573]  ? lock_chain_count+0x20/0x20
[  970.430149][T15573]  ? show_vfsstat+0x3c0/0x3c0
[  970.434860][T15573]  ? ocfs2_lock_get_block+0x60/0x60
[  970.440105][T15573]  ? filemap_write_and_wait_range+0x1a5/0x230
[  970.446215][T15573]  ? ocfs2_lock_get_block+0x60/0x60
[  970.452222][T15573]  ocfs2_direct_IO+0x235/0x2a0
[  970.457023][T15573]  generic_file_direct_write+0x1d4/0x3e0
[  970.462695][T15573]  __generic_file_write_iter+0x11b/0x230
[  970.468363][T15573]  ? ocfs2_file_write_iter+0x154a/0x1e80
[  970.474039][T15573]  ocfs2_file_write_iter+0x167a/0x1e80
[  970.479542][T15573]  ? __lock_acquire+0x7d40/0x7d40
[  970.484612][T15573]  ? ocfs2_file_read_iter+0xa90/0xa90
[  970.490031][T15573]  ? mark_lock+0x94/0x320
[  970.494399][T15573]  ? kasan_set_track+0x5f/0x70
[  970.499197][T15573]  ? aa_path_link+0xf70/0xf70
[  970.503948][T15573]  ? iter_file_splice_write+0x1a4/0xcb0
[  970.509544][T15573]  ? direct_splice_actor+0xe8/0x130
[  970.514791][T15573]  ? splice_direct_to_actor+0x304/0x8c0
[  970.520384][T15573]  ? do_splice_direct+0x1d5/0x2f0
[  970.525450][T15573]  ? do_sendfile+0x5f2/0xef0
[  970.530077][T15573]  ? __se_sys_sendfile64+0x145/0x1a0
[  970.535405][T15573]  ? do_syscall_64+0x55/0xb0
[  970.540031][T15573]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  970.546139][T15573]  ? end_current_label_crit_section+0x149/0x170
[  970.552426][T15573]  ? common_file_perm+0x198/0x1f0
[  970.557498][T15573]  do_iter_write+0x738/0xc30
[  970.562148][T15573]  ? vfs_iter_write+0xa0/0xa0
[  970.566868][T15573]  ? __asan_memset+0x22/0x40
[  970.571496][T15573]  ? iov_iter_bvec+0xd4/0x1b0
[  970.576199][T15573]  ? vfs_iter_write+0x6e/0xa0
[  970.580920][T15573]  iter_file_splice_write+0x6a3/0xcb0
[  970.586339][T15573]  ? filemap_splice_read+0x8ae/0xa30
[  970.591660][T15573]  ? splice_from_pipe+0x180/0x180
[  970.596734][T15573]  ? splice_folio_into_pipe+0xb10/0xb10
[  970.602313][T15573]  ? splice_from_pipe+0x180/0x180
[  970.607375][T15573]  direct_splice_actor+0xe8/0x130
[  970.612440][T15573]  splice_direct_to_actor+0x304/0x8c0
[  970.617859][T15573]  ? direct_file_splice_eof+0xb0/0xb0
[  970.623277][T15573]  ? warn_unsupported+0xc0/0xc0
[  970.628169][T15573]  ? fsnotify_perm+0x5d/0x5e0
[  970.632875][T15573]  ? security_file_permission+0x79/0xa0
[  970.638455][T15573]  do_splice_direct+0x1d5/0x2f0
[  970.643352][T15573]  ? splice_direct_to_actor+0x8c0/0x8c0
[  970.648939][T15573]  ? rcu_read_lock_any_held+0xb4/0x140
[  970.654433][T15573]  ? do_splice_direct+0x2f0/0x2f0
[  970.659506][T15573]  do_sendfile+0x5f2/0xef0
[  970.663970][T15573]  ? do_pwritev+0x3a0/0x3a0
[  970.668522][T15573]  __se_sys_sendfile64+0x145/0x1a0
[  970.673674][T15573]  ? lock_chain_count+0x20/0x20
[  970.678555][T15573]  ? __x64_sys_sendfile64+0xb0/0xb0
[  970.683796][T15573]  ? lockdep_hardirqs_on+0x98/0x150
[  970.689031][T15573]  do_syscall_64+0x55/0xb0
[  970.693489][T15573]  ? clear_bhb_loop+0x40/0x90
[  970.698237][T15573]  ? clear_bhb_loop+0x40/0x90
[  970.702952][T15573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  970.708889][T15573] RIP: 0033:0x7f862519ce59
[  970.713404][T15573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  970.733074][T15573] RSP: 002b:00007f862605c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  970.741529][T15573] RAX: ffffffffffffffda RBX: 00007f8625415fa0 RCX: 00007f862519ce59
[  970.749531][T15573] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[  970.757530][T15573] RBP: 00007f8625232d6f R08: 0000000000000000 R09: 0000000000000000
[  970.765525][T15573] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  970.773519][T15573] R13: 00007f8625416038 R14: 00007f8625415fa0 R15: 00007fff853d8aa8
[  970.781533][T15573]  </TASK>
[  970.993520][ T1186] usb usb5-port1: attempt power cycle
[  971.404654][ T1186] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  971.495346][ T1186] usb 5-1: device descriptor read/8, error -71
[  971.749295][T15573] (syz.3.2303,15573,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5
[  972.310365][ T5775] ocfs2: Unmounting device (7,3) on (node local)