last executing test programs:

38.459928941s ago: executing program 2 (id=328):
r0 = socket(0xa, 0x5, 0x0)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f0000000180)={&(0x7f0000000100)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000000)="be", 0x1}], 0x1, &(0x7f0000000440)=[@prinfo={0x18}], 0x18}, 0x4000040)

38.399882918s ago: executing program 2 (id=329):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000004000000000000001dd10000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x77}}, 0x30)
syz_emit_ethernet(0xbe, &(0x7f0000000540)=ANY=[], 0x0)

38.399761264s ago: executing program 2 (id=330):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
r0 = open(&(0x7f0000000100)='./bus\x00', 0xc442, 0x106)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x147142, 0xc1)
ftruncate(r1, 0x2007ffb)
fallocate(r0, 0x8, 0x0, 0x10000)

38.318367781s ago: executing program 2 (id=331):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'sit0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@mcast1, 0x60, r1})

38.261204469s ago: executing program 2 (id=332):
r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000200)={0x0, "63ff8791919a5b70f918110cd2e1f7fbd15ec7918e806deb14c0f82379b49307", 0x3, 0x1, 0x3, 0xcd5, 0x4, 0x4, 0x400, 0x4})

38.261028458s ago: executing program 2 (id=333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='E', 0x1)

23.241347577s ago: executing program 0 (id=459):
syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x50080, 0x173)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0})

23.223907972s ago: executing program 32 (id=333):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='E', 0x1)

22.986302706s ago: executing program 0 (id=461):
unshare(0x26020480)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc)

22.751114058s ago: executing program 0 (id=462):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

22.681148445s ago: executing program 0 (id=463):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000400)={0x40, 0x1, 0x2, "8081"}, 0x0, 0x0, 0x0, 0x0, 0x0})

21.277331577s ago: executing program 0 (id=468):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000ac0)={[{@resgid}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@nodelalloc}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x589, &(0x7f0000000b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x1, 0x1, 0x90001)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

21.123200327s ago: executing program 0 (id=470):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

16.014144434s ago: executing program 1 (id=485):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)

16.013971725s ago: executing program 1 (id=486):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr', 0x3)
shutdown(r1, 0x1)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)

15.941179977s ago: executing program 1 (id=487):
openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x129040, 0x0)
r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

15.940964189s ago: executing program 1 (id=488):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
socket$inet(0x2, 0x4000000000000001, 0x0)
userfaultfd(0x80001)
pwritev(r0, &(0x7f00000002c0), 0x0, 0x8, 0x3)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)='asymmetric\x00', 0x0)

15.781069909s ago: executing program 1 (id=489):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xfc, 0x3, 0x5, [{@loopback, 0x8}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x9}]}, @generic={0x7, 0x9, "cdf784f61db815"}, @generic={0x44, 0x2}]}}}], 0x58}}], 0x1, 0x8c)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880))
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080))
openat(0xffffffffffffffff, 0x0, 0x200, 0x8)

15.780928279s ago: executing program 1 (id=490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7)
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0xffdd)

5.997197816s ago: executing program 33 (id=470):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 34 (id=490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000180)=0x2cf7)
write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0xffdd)

kernel console output (not intermixed with test programs):

ys_futex+0x3a8/0x450
[   68.364147][ T5950]  ? prepare_creds+0x30/0x820
[   68.364165][ T5950]  ? prepare_creds+0x30/0x820
[   68.364181][ T5950]  ? __pfx_make_kuid+0x10/0x10
[   68.364196][ T5950]  prepare_creds+0x30/0x820
[   68.364216][ T5950]  __sys_setuid+0x96/0x580
[   68.364229][ T5950]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.364242][ T5950]  do_syscall_64+0x174/0x580
[   68.364257][ T5950]  ? trace_irq_disable+0x3b/0x140
[   68.364275][ T5950]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   68.364288][ T5950] RIP: 0033:0x7f833fd9e159
[   68.364300][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.364311][ T5950] RSP: 002b:00007f8340c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[   68.364326][ T5950] RAX: ffffffffffffffda RBX: 00007f8340025fa0 RCX: 00007f833fd9e159
[   68.364335][ T5950] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[   68.364342][ T5950] RBP: 00007f833fe3506b R08: 0000000000000000 R09: 0000000000000000
[   68.364350][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   68.364357][ T5950] R13: 00007f8340026038 R14: 00007f8340025fa0 R15: 00007ffc7796b0e8
[   68.364375][ T5950]  </TASK>
[   68.474069][ T4985] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   68.482579][ T4985] Bluetooth: hci1: Injecting HCI hardware error event
[   68.487937][ T4985] Bluetooth: hci1: hardware error 0x00
[   69.020093][ T5976] orangefs_devreq_open: device cannot be opened in blocking mode
[   69.154376][   T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   69.212290][ T5986] input: syz1 as /devices/virtual/input/input9
[   69.314193][   T31] usb 3-1: Using ep0 maxpacket: 8
[   69.318791][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[   69.323080][   T31] usb 3-1: config 6 has an invalid interface number: 73 but max is 0
[   69.326869][   T31] usb 3-1: config 6 has an invalid interface descriptor of length 2, skipping
[   69.330521][   T31] usb 3-1: config 6 has an invalid interface association descriptor of length 2, skipping
[   69.334887][   T31] usb 3-1: config 6 has no interface number 0
[   69.337462][   T31] usb 3-1: config 6 interface 73 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   69.342576][   T31] usb 3-1: config 6 interface 73 has no altsetting 0
[   69.349673][   T31] usb 3-1: New USB device found, idVendor=2001, idProduct=200c, bcdDevice=a6.b5
[   69.353301][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.356907][   T31] usb 3-1: Product: syz
[   69.358635][   T31] usb 3-1: Manufacturer: syz
[   69.360513][   T31] usb 3-1: SerialNumber: syz
[   69.491215][ T5988] Zero length message leads to an empty skb
[   69.583908][   T31] pegasus 3-1:6.73: Missing or invalid endpoints
[   69.597638][   T31] usb 3-1: USB disconnect, device number 4
[   69.837656][ T5996] futex_wake_op: syz.1.114 tries to shift op by 144; fix this program
[   69.844438][  T802] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   69.995936][  T802] usb 1-1: Using ep0 maxpacket: 16
[   70.001272][  T802] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.006291][  T802] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.009653][  T802] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.013750][  T802] usb 1-1: config 0 interface 0 has no altsetting 0
[   70.016800][  T802] usb 1-1: New USB device found, idVendor=046e, idProduct=5577, bcdDevice= 0.00
[   70.019768][  T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.026564][  T802] usb 1-1: config 0 descriptor??
[   70.049214][ T6003] netlink: 'syz.1.116': attribute type 9 has an invalid length.
[   70.051890][ T6003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.116'.
[   70.115926][ T6005] loop1: detected capacity change from 0 to 256
[   70.474258][  T802] input: HID 046e:5577 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046E:5577.0003/input/input10
[   70.590510][  T802] topseed 0003:046E:5577.0003: input,hidraw0: USB HID v0.00 Joystick [HID 046e:5577] on usb-dummy_hcd.0-1/input0
[   70.604728][ T4985] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   70.650158][  T802] usb 1-1: USB disconnect, device number 4
[   70.814223][   T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   70.968749][   T31] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   70.972329][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.975940][   T31] usb 2-1: Product: syz
[   70.977746][   T31] usb 2-1: Manufacturer: syz
[   70.979745][   T31] usb 2-1: SerialNumber: syz
[   70.984871][   T31] usb 2-1: config 0 descriptor??
[   70.996282][   T31] ch341 2-1:0.0: ch341-uart converter detected
[   71.417437][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[   71.421931][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[   71.459352][ T6041] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   71.470864][ T6041] CIFS mount error: No usable UNC path provided in device string!
[   71.470864][ T6041] 
[   71.476099][ T6041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   71.561589][ T6045] loop2: detected capacity change from 0 to 512
[   71.568087][ T6045] EXT4-fs: Ignoring removed mblk_io_submit option
[   71.571987][ T6045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   71.576773][ T6045] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   71.592581][ T6045] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   71.598692][ T6045] EXT4-fs (loop2): orphan cleanup on readonly fs
[   71.609235][ T6045] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.132: Invalid block bitmap block 0 in block_group 0
[   71.614791][ T6045] loop2: lost filesystem error report for type 5 error -117
[   71.617377][ T6045] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.132: Invalid block bitmap block 0 in block_group 0
[   71.625797][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   71.626514][    C0] EXT4-fs (loop2): last error at time 1789989572: ext4_read_block_bitmap_nowait:483
[   71.635130][ T6045] loop2: lost filesystem error report for type 5 error -117
[   71.636471][ T6045] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.132: Invalid block bitmap block 0 in block_group 0
[   71.645716][ T6045] loop2: lost filesystem error report for type 5 error -117
[   71.646313][ T6045] __quota_error: 56 callbacks suppressed
[   71.646324][ T6045] Quota error (device loop2): write_blk: dquota write failed
[   71.655225][ T6045] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   71.659587][ T6045] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.132: Failed to acquire dquot type 1
[   71.663941][ T6045] loop2: lost filesystem error report for type 5 error -28
[   71.665977][ T6045] EXT4-fs (loop2): 1 orphan inode deleted
[   71.676949][   T32] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[   71.681176][   T32] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u9:1: Failed to release dquot type 1
[   71.686541][   T32] loop2: lost filesystem error report for type 5 error -117
[   71.691560][ T6045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   71.725695][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.890992][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'.
[   72.018062][   T31] ch341-uart ttyUSB0: failed to read break control: -71
[   72.022186][   T31] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[   72.032021][   T31] usb 2-1: USB disconnect, device number 6
[   72.038686][   T31] ch341 2-1:0.0: device disconnected
[   72.743918][ T6065] loop0: detected capacity change from 0 to 32768
[   72.819316][ T6068] loop1: detected capacity change from 0 to 2048
[   72.857183][ T6068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.890863][ T6065] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.911333][ T6065] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   72.922780][ T6065] XFS (loop0): Starting recovery (logdev: internal)
[   72.933718][ T6065] XFS (loop0): Ending recovery (logdev: internal)
[   72.962586][ T5604] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.196659][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.486611][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   73.585908][ T6097] loop1: detected capacity change from 0 to 32768
[   73.598268][ T6097] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 69: extent list l_next_free_rec 3329 exceeds l_count 19
[   73.604249][ T6097] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   73.607271][ T6097] OCFS2: File system is now read-only.
[   73.608988][ T6097] (syz.1.151,6097,1):ocfs2_read_locked_inode:633 ERROR: status = -30
[   73.611587][ T6097] (syz.1.151,6097,1):_ocfs2_get_system_file_inode:141 ERROR: status = -30
[   73.614788][ T6097] (syz.1.151,6097,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[   73.617544][ T6097] (syz.1.151,6097,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 2, possibly corrupt fs?
[   73.617562][ T6097] (syz.1.151,6097,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[   73.623869][ T6097] (syz.1.151,6097,1):ocfs2_initialize_super:2195 ERROR: status = -30
[   73.627006][ T6097] (syz.1.151,6097,1):ocfs2_fill_super:1177 ERROR: status = -30
[   73.638993][    T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[   73.651698][    T9] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[   73.658546][ T5659] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   73.663266][    T9] usb 3-1: Product: syz
[   73.667130][    T9] usb 3-1: SerialNumber: syz
[   73.685100][    T9] usb 3-1: config 0 descriptor??
[   73.814279][ T5659] usb 1-1: Using ep0 maxpacket: 8
[   73.819031][ T5659] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   73.822586][ T5659] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   73.826679][ T5659] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   73.830662][ T5659] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   73.834699][ T5659] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   73.839934][ T5659] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   73.843616][ T5659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.895781][ T6100] loop1: detected capacity change from 0 to 32768
[   73.907936][ T6100] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   73.916341][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   73.922353][ T6100] XFS (loop1): Ending clean mount
[   73.931475][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   73.957551][ T5600] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.059028][ T5659] usb 1-1: usb_control_msg returned -32
[   74.061030][ T5659] usbtmc 1-1:16.0: can't read capabilities
[   74.150420][ T6083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.156424][ T6083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.161412][    T9] ldusb 3-1:0.0: Interrupt in endpoint not found
[   74.169579][    T9] usb 3-1: USB disconnect, device number 5
[   74.176240][ T6114] warning: `syz.1.155' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.262971][ T6121] Bluetooth: MGMT ver 1.23
[   74.301268][ T6123] netlink: 'syz.1.159': attribute type 1 has an invalid length.
[   74.303705][ T6123] netlink: 244 bytes leftover after parsing attributes in process `syz.1.159'.
[   74.308161][ T6123] NCSI netlink: No device for ifindex 1851879543
[   74.944286][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   75.094227][   T31] usb 3-1: Using ep0 maxpacket: 32
[   75.099729][   T31] usb 3-1: config 245 has an invalid interface number: 175 but max is 0
[   75.107612][   T31] usb 3-1: config 245 has no interface number 0
[   75.111801][   T31] usb 3-1: config 245 interface 175 has no altsetting 0
[   75.117729][   T31] usb 3-1: New USB device found, idVendor=04cb, idProduct=0121, bcdDevice=bc.b3
[   75.121458][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.125109][   T31] usb 3-1: Product: syz
[   75.126910][   T31] usb 3-1: Manufacturer: syz
[   75.128940][   T31] usb 3-1: SerialNumber: syz
[   75.192386][ T6134] loop1: detected capacity change from 0 to 32768
[   75.207349][ T6134] lmLogInit: exit(-22)
[   75.211228][ T6134] lmLogOpen: exit(-22)
[   75.344958][   T31] gspca_main: finepix-2.14.0 probing 04cb:0121
[   75.356401][   T31] usb 3-1: USB disconnect, device number 6
[   75.474237][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   75.627110][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.631602][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   75.639180][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   75.642685][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.646188][    T9] usb 2-1: Product: syz
[   75.648042][    T9] usb 2-1: Manufacturer: syz
[   75.649992][    T9] usb 2-1: SerialNumber: syz
[   75.660235][    T9] cdc_ncm 2-1:1.0: skipping garbage
[   75.662366][    T9] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[   75.665581][    T9] cdc_ncm 2-1:1.0: bind() failure
[   75.672012][    T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   75.675048][    T9] cdc_ncm 2-1:1.1: bind() failure
[   75.872395][    T9] usb 2-1: USB disconnect, device number 7
[   76.132091][ T6141] loop2: detected capacity change from 0 to 32768
[   76.160881][ T6141] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   76.180334][ T6141] XFS (loop2): Starting recovery (logdev: internal)
[   76.192168][ T6141] XFS (loop2): Ending recovery (logdev: internal)
[   76.480300][ T5659] usb 1-1: USB disconnect, device number 5
[   76.526173][ T6153] loop1: detected capacity change from 0 to 256
[   76.557475][ T6155] loop0: detected capacity change from 0 to 256
[   76.763354][   T33] audit: type=1800 audit(1789989577.199:68): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.166" name="file1" dev="loop2" ino=7430 res=0 errno=0
[   76.772210][ T6141] XFS (loop2): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[   76.778041][ T6141] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   76.781438][ T6141] XFS (loop2): Unmount and run xfs_repair
[   76.783182][ T6141] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   76.785656][ T6141] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[   76.789026][ T6141] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[   76.791599][ T6141] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[   76.795082][ T6141] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[   76.797489][ T6161] loop0: detected capacity change from 0 to 1024
[   76.798306][ T6141] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[   76.798324][ T6141] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   76.798330][ T6141] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   76.798336][ T6141] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   76.798446][ T6141] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[   76.804173][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   76.831472][ T5605] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   76.838919][ T5605] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[   76.995003][    T9] usb 2-1: Using ep0 maxpacket: 8
[   76.999858][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   77.003661][    T9] usb 2-1: config 0 has no interface number 0
[   77.009711][    T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 28276, setting to 1024
[   77.017297][    T9] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[   77.029605][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   77.033752][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.039333][    T9] usb 2-1: config 0 descriptor??
[   77.041629][ T6153] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   77.048226][    T9] iowarrior 2-1:0.1: no interrupt-in endpoint found
[   77.112158][ T6163] loop0: detected capacity change from 0 to 32768
[   77.125019][ T6163] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.174 (6163)
[   77.170837][ T6163] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   77.181038][ T6163] BTRFS info (device loop0): using sha256 checksum algorithm
[   77.251983][    T9] usb 2-1: USB disconnect, device number 8
[   77.387672][ T6163] BTRFS info (device loop0): turning off barriers
[   77.392553][ T6163] BTRFS info (device loop0): enabling free space tree
[   77.439519][ T5604] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[   77.678201][ T6188] loop0: detected capacity change from 0 to 4096
[   77.768223][ T6189] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.066006][ T6193] loop2: detected capacity change from 0 to 256
[   78.077389][ T6193] vfat: Unknown parameter 'ufi_xlate'
[   78.111203][ T6191] loop1: detected capacity change from 0 to 32768
[   78.122391][ T6191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.178 (6191)
[   78.131226][ T6191] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.136188][ T6191] BTRFS info (device loop1 state S): using crc32c checksum algorithm
[   78.216122][   T83] BTRFS warning (device loop1 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x54a13536 level 0, ignored
[   78.223067][ T6191] BTRFS warning (device loop1 state ES): devid 1 uuid ffe96fa6-2f75-4027-b40a-000000000000 is missing
[   78.230063][   T83] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x35a03d44 level 0, ignored
[   78.238003][   T62] BTRFS warning (device loop1 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xa652fa69 level 0, ignored
[   78.244934][ T6191] BTRFS error (device loop1 state ES): devid 1 path /dev/loop1 is registered but not found in chunk tree
[   78.250138][ T6191] BTRFS error (device loop1 state ES): remove the above devices or use 'btrfs device scan --forget <dev>' to unregister them before mount
[   78.272207][ T6191] BTRFS error (device loop1 state ES): open_ctree failed: -117
[   78.364344][ T5679] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   78.404253][  T802] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   78.450528][   T33] audit: type=1326 audit(1789989578.889:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.1.183" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ac199e159 code=0x0
[   78.537301][ T5679] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   78.540341][ T5679] usb 3-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config
[   78.543970][ T5679] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[   78.548293][ T5679] usb 3-1: config 1 has no interface number 0
[   78.550260][ T5679] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[   78.553908][ T5679] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[   78.556199][  T802] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   78.560927][ T5679] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.563446][  T802] usb 1-1: config 0 interface 0 has no altsetting 0
[   78.566975][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.570290][  T802] usb 1-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[   78.571911][ T5679] usb 3-1: Product: syz
[   78.575998][  T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.577320][ T5679] usb 3-1: Manufacturer: syz
[   78.582541][ T5679] usb 3-1: SerialNumber: syz
[   78.583396][  T802] usb 1-1: config 0 descriptor??
[   78.588013][ T5679] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[   78.588967][ T6203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   78.598693][ T5679] cdc_ncm 3-1:1.1: bind() failure
[   78.806941][    T9] usb 3-1: USB disconnect, device number 7
[   79.000703][  T802] hid_parser_main: 5 callbacks suppressed
[   79.000715][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.005543][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.007789][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.009994][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.012494][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.015672][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.018111][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.020480][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.022694][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.025900][  T802] elecom 0003:056E:00FF.0004: unknown main item tag 0x0
[   79.031917][  T802] elecom 0003:056E:00FF.0004: hidraw0: USB HID v9.42 Device [HID 056e:00ff] on usb-dummy_hcd.0-1/input0
[   79.206631][  T802] usb 1-1: USB disconnect, device number 6
[   79.449045][ T6216] loop1: detected capacity change from 0 to 32768
[   79.453535][ T6216] xfs: Deprecated parameter 'noattr2'
[   79.457682][ T6216] XFS: noattr2 mount option is deprecated.
[   79.472756][ T6216] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   79.488895][ T6216] XFS (loop1): Ending clean mount
[   79.527287][ T5600] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   79.604324][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   79.767540][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.777907][    T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   79.781059][ T5679] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   79.785142][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.792902][    T9] usb 3-1: Product: syz
[   79.797954][    T9] usb 3-1: Manufacturer: syz
[   79.804943][    T9] usb 3-1: SerialNumber: syz
[   79.812708][    T9] usb 3-1: config 0 descriptor??
[   79.824570][    T9] usb 3-1: ucan: probing device on interface #0
[   79.828454][    T9] usb 3-1: ucan: invalid EP count (0)
[   79.834884][    T9] usb 3-1: ucan: probe failed; try to update the device firmware
[   80.348275][ T6234] loop0: detected capacity change from 0 to 131072
[   80.358957][ T6234] F2FS-fs (loop0): invalid crc value
[   80.387577][ T6234] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.391620][ T6234] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[   80.408967][   T31] usb 3-1: USB disconnect, device number 8
[   80.497065][ T6238] loop1: detected capacity change from 0 to 131072
[   80.501213][ T6238] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[   80.503418][ T6238] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   80.507260][ T6238] F2FS-fs (loop1): invalid crc value
[   80.538898][ T6238] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.547244][ T6238] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   80.549818][ T6238] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   81.133463][ T6268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   81.150201][ T6270] loop1: detected capacity change from 0 to 128
[   81.152685][ T6270] EXT4-fs: Ignoring removed bh option
[   81.158239][ T6270] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   81.162196][ T6270] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   81.199536][ T5600] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   81.474271][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   81.645729][    T9] usb 1-1: Using ep0 maxpacket: 32
[   81.649568][    T9] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   81.653090][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.659493][    T9] usb 1-1: config 0 descriptor??
[   81.664672][   T31] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[   81.668994][   T24] cfg80211: failed to load regulatory.db
[   81.670038][    T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   81.825538][   T31] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[   81.830983][   T31] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e
[   81.834259][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.837267][   T31] usb 2-1: Product: syz
[   81.840335][   T31] usb 2-1: Manufacturer: syz
[   81.844206][   T31] usb 2-1: SerialNumber: syz
[   81.854194][   T31] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[   81.857596][   T31] dvb-usb: bulk message failed: -22 (3/0)
[   81.874449][    T9] gspca_vc032x: reg_r err -71
[   81.876045][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.877985][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.879634][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.881316][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.886004][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.888618][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.890343][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.891436][   T31] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   81.891943][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.898975][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.900835][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.902732][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.906611][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.906880][   T31] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[   81.908549][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.911616][   T31] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22
[   81.913158][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.919762][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.921999][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.923680][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.926036][    T9] gspca_vc032x: I2c Bus Busy Wait 00
[   81.929416][    T9] gspca_vc032x: Unknown sensor...
[   81.931503][    T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[   81.945569][    T9] usb 1-1: USB disconnect, device number 7
[   82.073227][ T5659] usb 2-1: USB disconnect, device number 9
[   82.194174][ T5679] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   82.349603][ T5679] usb 3-1: unable to get BOS descriptor or descriptor too short
[   82.355699][ T5679] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   82.360697][ T5679] usb 3-1: config 1 interface 0 has no altsetting 0
[   82.368877][ T5679] usb 3-1: string descriptor 0 read error: -22
[   82.371551][ T5679] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.40
[   82.375527][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.792156][ T5679] hid (null): nested delimiters
[   82.797645][ T5679] itetech 0003:06CB:73F6.0006: nested delimiters
[   82.800239][ T5679] itetech 0003:06CB:73F6.0006: item 0 1 2 10 parsing failed
[   82.803536][ T5679] itetech 0003:06CB:73F6.0006: probe with driver itetech failed with error -22
[   82.874197][  T802] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   83.006800][ T5679] usb 3-1: USB disconnect, device number 9
[   83.026443][  T802] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   83.030898][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   83.035121][  T802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 138, setting to 64
[   83.039098][  T802] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   83.042425][  T802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.057578][  T802] usb 2-1: config 0 descriptor??
[   83.061934][ T6294] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   83.270048][  T802] ath6kl: Failed to submit usb control message: -71
[   83.278989][  T802] ath6kl: unable to send the bmi data to the device: -71
[   83.281565][  T802] ath6kl: Unable to send get target info: -71
[   83.287287][  T802] ath6kl: Failed to init ath6kl core: -71
[   83.289510][  T802] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[   83.296963][  T802] usb 2-1: USB disconnect, device number 10
[   83.939133][ T6306] loop2: detected capacity change from 0 to 131072
[   83.946302][ T6306] F2FS-fs (loop2): invalid crc value
[   84.002506][ T6306] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.010598][ T6306] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   84.188448][ T6312] loop0: detected capacity change from 0 to 8192
[   84.212487][ T6314] capability: warning: `syz.1.220' uses 32-bit capabilities (legacy support in use)
[   84.219652][ T6314] program syz.1.220 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   84.244284][ T6312]  loop0: p1 p2 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 
[   84.244396][ T6312] loop0: p1 size 1342439424 extends beyond EOD, truncated
[   84.279599][ T6312] loop0: p3 start 67108864 is beyond EOD, truncated
[   84.282817][ T6312] loop0: p5 size 1342439424 extends beyond EOD, truncated
[   84.289114][ T6312] loop0: p6 start 67108864 is beyond EOD, truncated
[   84.291591][ T6312] loop0: p7 size 1342439424 extends beyond EOD, truncated
[   84.295399][ T6312] loop0: p8 start 67108864 is beyond EOD, truncated
[   84.298073][ T6312] loop0: p9 size 1342439424 extends beyond EOD, truncated
[   84.302041][ T6312] loop0: p10 start 67108864 is beyond EOD, truncated
[   84.305119][ T6312] loop0: p11 size 1342439424 extends beyond EOD, truncated
[   84.308089][ T6312] loop0: p12 start 67108864 is beyond EOD, truncated
[   84.310395][ T6312] loop0: p13 size 1342439424 extends beyond EOD, truncated
[   84.313954][ T6312] loop0: p14 start 67108864 is beyond EOD, truncated
[   84.316967][ T6312] loop0: p15 size 1342439424 extends beyond EOD, truncated
[   84.320372][ T6312] loop0: p16 start 67108864 is beyond EOD, truncated
[   84.323008][ T6312] loop0: p17 size 1342439424 extends beyond EOD, truncated
[   84.327045][ T6312] loop0: p18 start 67108864 is beyond EOD, truncated
[   84.329452][ T6312] loop0: p19 size 1342439424 extends beyond EOD, truncated
[   84.332753][ T6312] loop0: p20 start 67108864 is beyond EOD, truncated
[   84.335496][ T6312] loop0: p21 size 1342439424 extends beyond EOD, truncated
[   84.338503][ T6312] loop0: p22 start 67108864 is beyond EOD, truncated
[   84.340682][ T6312] loop0: p23 size 1342439424 extends beyond EOD, truncated
[   84.343505][ T6312] loop0: p24 start 67108864 is beyond EOD, truncated
[   84.346177][ T6312] loop0: p25 size 1342439424 extends beyond EOD, truncated
[   84.349453][ T6312] loop0: p26 start 67108864 is beyond EOD, truncated
[   84.351479][ T6312] loop0: p27 size 1342439424 extends beyond EOD, truncated
[   84.354630][ T6312] loop0: p28 start 67108864 is beyond EOD, truncated
[   84.356794][ T6312] loop0: p29 size 1342439424 extends beyond EOD, truncated
[   84.359885][ T6312] loop0: p30 start 67108864 is beyond EOD, truncated
[   84.361974][ T6312] loop0: p31 size 1342439424 extends beyond EOD, truncated
[   84.365309][ T6312] loop0: p32 start 67108864 is beyond EOD, truncated
[   84.367535][ T6312] loop0: p33 size 1342439424 extends beyond EOD, truncated
[   84.370436][ T6312] loop0: p34 start 67108864 is beyond EOD, truncated
[   84.372725][ T6312] loop0: p35 size 1342439424 extends beyond EOD, truncated
[   84.375755][ T6312] loop0: p36 start 67108864 is beyond EOD, truncated
[   84.377881][ T6312] loop0: p37 size 1342439424 extends beyond EOD, truncated
[   84.381679][ T6312] loop0: p38 start 67108864 is beyond EOD, truncated
[   84.384328][ T6312] loop0: p39 size 1342439424 extends beyond EOD, truncated
[   84.387734][ T6312] loop0: p40 start 67108864 is beyond EOD, truncated
[   84.390216][ T6312] loop0: p41 size 1342439424 extends beyond EOD, truncated
[   84.393641][ T6312] loop0: p42 start 67108864 is beyond EOD, truncated
[   84.396234][ T6312] loop0: p43 size 1342439424 extends beyond EOD, truncated
[   84.400271][ T6312] loop0: p44 start 67108864 is beyond EOD, truncated
[   84.402726][ T6312] loop0: p45 size 1342439424 extends beyond EOD, truncated
[   84.406204][ T6312] loop0: p46 start 67108864 is beyond EOD, truncated
[   84.408323][ T6312] loop0: p47 size 1342439424 extends beyond EOD, truncated
[   84.411217][ T6312] loop0: p48 start 67108864 is beyond EOD, truncated
[   84.413314][ T6312] loop0: p49 size 1342439424 extends beyond EOD, truncated
[   84.416474][ T6312] loop0: p50 start 67108864 is beyond EOD, truncated
[   84.418585][ T6312] loop0: p51 size 1342439424 extends beyond EOD, truncated
[   84.421437][ T6312] loop0: p52 start 67108864 is beyond EOD, truncated
[   84.423564][ T6312] loop0: p53 size 1342439424 extends beyond EOD, truncated
[   84.426518][ T6312] loop0: p54 start 67108864 is beyond EOD, truncated
[   84.428680][ T6312] loop0: p55 size 1342439424 extends beyond EOD, truncated
[   84.431573][ T6312] loop0: p56 start 67108864 is beyond EOD, truncated
[   84.433740][ T6312] loop0: p57 size 1342439424 extends beyond EOD, truncated
[   84.436908][ T6312] loop0: p58 start 67108864 is beyond EOD, truncated
[   84.439107][ T6312] loop0: p59 size 1342439424 extends beyond EOD, truncated
[   84.442091][ T6312] loop0: p60 start 67108864 is beyond EOD, truncated
[   84.444473][ T6312] loop0: p61 size 1342439424 extends beyond EOD, truncated
[   84.447449][ T6312] loop0: p62 start 67108864 is beyond EOD, truncated
[   84.449518][ T6312] loop0: p63 size 1342439424 extends beyond EOD, truncated
[   84.452350][ T6312] loop0: p64 start 67108864 is beyond EOD, truncated
[   84.455065][ T6312] loop0: p65 size 1342439424 extends beyond EOD, truncated
[   84.458406][ T6312] loop0: p66 start 67108864 is beyond EOD, truncated
[   84.460519][ T6312] loop0: p67 size 1342439424 extends beyond EOD, truncated
[   84.463331][ T6312] loop0: p68 start 67108864 is beyond EOD, truncated
[   84.465830][ T6312] loop0: p69 size 1342439424 extends beyond EOD, truncated
[   84.469043][ T6312] loop0: p70 start 67108864 is beyond EOD, truncated
[   84.471307][ T6312] loop0: p71 size 1342439424 extends beyond EOD, truncated
[   84.474882][ T6312] loop0: p72 start 67108864 is beyond EOD, truncated
[   84.477142][ T6312] loop0: p73 size 1342439424 extends beyond EOD, truncated
[   84.480077][ T6312] loop0: p74 start 67108864 is beyond EOD, truncated
[   84.482382][ T6312] loop0: p75 size 1342439424 extends beyond EOD, truncated
[   84.485972][ T6312] loop0: p76 start 67108864 is beyond EOD, truncated
[   84.488508][ T6312] loop0: p77 size 1342439424 extends beyond EOD, truncated
[   84.491481][ T6312] loop0: p78 start 67108864 is beyond EOD, truncated
[   84.493618][ T6312] loop0: p79 size 1342439424 extends beyond EOD, truncated
[   84.496683][ T6312] loop0: p80 start 67108864 is beyond EOD, truncated
[   84.499114][ T6312] loop0: p81 size 1342439424 extends beyond EOD, truncated
[   84.503270][ T6312] loop0: p82 start 67108864 is beyond EOD, truncated
[   84.505520][ T6312] loop0: p83 size 1342439424 extends beyond EOD, truncated
[   84.508434][ T6312] loop0: p84 start 67108864 is beyond EOD, truncated
[   84.510555][ T6312] loop0: p85 size 1342439424 extends beyond EOD, truncated
[   84.513438][ T6312] loop0: p86 start 67108864 is beyond EOD, truncated
[   84.515696][ T6312] loop0: p87 size 1342439424 extends beyond EOD, truncated
[   84.519011][ T6312] loop0: p88 start 67108864 is beyond EOD, truncated
[   84.521620][ T6312] loop0: p89 size 1342439424 extends beyond EOD, truncated
[   84.526723][ T6312] loop0: p90 start 67108864 is beyond EOD, truncated
[   84.529387][ T6312] loop0: p91 size 1342439424 extends beyond EOD, truncated
[   84.533223][ T6312] loop0: p92 start 67108864 is beyond EOD, truncated
[   84.536208][ T5679] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   84.538861][ T6312] loop0: p93 size 1342439424 extends beyond EOD, truncated
[   84.543328][ T6312] loop0: p94 start 67108864 is beyond EOD, truncated
[   84.545954][ T6312] loop0: p95 size 1342439424 extends beyond EOD, truncated
[   84.549493][ T6312] loop0: p96 start 67108864 is beyond EOD, truncated
[   84.551647][ T6312] loop0: p97 size 1342439424 extends beyond EOD, truncated
[   84.556260][ T6312] loop0: p98 start 67108864 is beyond EOD, truncated
[   84.559724][ T6312] loop0: p99 size 1342439424 extends beyond EOD, truncated
[   84.565288][ T6312] loop0: p100 start 67108864 is beyond EOD, truncated
[   84.568004][ T6312] loop0: p101 size 1342439424 extends beyond EOD, truncated
[   84.572158][ T6312] loop0: p102 start 67108864 is beyond EOD, truncated
[   84.575334][ T6312] loop0: p103 size 1342439424 extends beyond EOD, truncated
[   84.579254][ T6312] loop0: p104 start 67108864 is beyond EOD, truncated
[   84.583219][ T6312] loop0: p105 size 1342439424 extends beyond EOD, truncated
[   84.587494][ T6312] loop0: p106 start 67108864 is beyond EOD, truncated
[   84.590192][ T6312] loop0: p107 size 1342439424 extends beyond EOD, truncated
[   84.594440][ T6312] loop0: p108 start 67108864 is beyond EOD, truncated
[   84.597162][ T6312] loop0: p109 size 1342439424 extends beyond EOD, truncated
[   84.601254][ T6312] loop0: p110 start 67108864 is beyond EOD, truncated
[   84.603925][ T6312] loop0: p111 size 1342439424 extends beyond EOD, truncated
[   84.609939][ T6312] loop0: p112 start 67108864 is beyond EOD, truncated
[   84.613352][ T6312] loop0: p113 size 1342439424 extends beyond EOD, truncated
[   84.620415][ T6312] loop0: p114 start 67108864 is beyond EOD, truncated
[   84.623077][ T6312] loop0: p115 size 1342439424 extends beyond EOD, truncated
[   84.627086][ T6312] loop0: p116 start 67108864 is beyond EOD, truncated
[   84.630837][ T6312] loop0: p117 size 1342439424 extends beyond EOD, truncated
[   84.633674][ T6312] loop0: p118 start 67108864 is beyond EOD, truncated
[   84.636937][ T6312] loop0: p119 size 1342439424 extends beyond EOD, truncated
[   84.639846][ T6312] loop0: p120 start 67108864 is beyond EOD, truncated
[   84.641916][ T6312] loop0: p121 size 1342439424 extends beyond EOD, truncated
[   84.644978][ T6312] loop0: p122 start 67108864 is beyond EOD, truncated
[   84.647068][ T6312] loop0: p123 size 1342439424 extends beyond EOD, truncated
[   84.649964][ T6312] loop0: p124 start 67108864 is beyond EOD, truncated
[   84.652050][ T6312] loop0: p125 size 1342439424 extends beyond EOD, truncated
[   84.655034][ T6312] loop0: p126 start 67108864 is beyond EOD, truncated
[   84.657126][ T6312] loop0: p127 size 1342439424 extends beyond EOD, truncated
[   84.660083][ T6312] loop0: p128 start 67108864 is beyond EOD, truncated
[   84.662131][ T6312] loop0: p129 size 1342439424 extends beyond EOD, truncated
[   84.666644][ T6312] loop0: p130 start 67108864 is beyond EOD, truncated
[   84.668721][ T6312] loop0: p131 size 1342439424 extends beyond EOD, truncated
[   84.671627][ T6312] loop0: p132 start 67108864 is beyond EOD, truncated
[   84.673688][ T6312] loop0: p133 size 1342439424 extends beyond EOD, truncated
[   84.677577][ T6312] loop0: p134 start 67108864 is beyond EOD, truncated
[   84.679690][ T6312] loop0: p135 size 1342439424 extends beyond EOD, truncated
[   84.682727][ T6312] loop0: p136 start 67108864 is beyond EOD, truncated
[   84.685029][ T5679] usb 2-1: Using ep0 maxpacket: 32
[   84.686874][ T6312] loop0: p137 size 1342439424 extends beyond EOD, truncated
[   84.693469][ T5679] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=8c.92
[   84.697231][ T6312] loop0: p138 start 67108864 is beyond EOD, truncated
[   84.699381][ T5679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.701864][ T6312] loop0: p139 size 1342439424 extends beyond EOD, truncated
[   84.711628][ T5679] gspca_main: nw80x-2.14.0 probing 055f:d001
[   84.713815][ T6312] loop0: p140 start 67108864 is beyond EOD, truncated
[   84.716237][ T6312] loop0: p141 size 1342439424 extends beyond EOD, truncated
[   84.720003][ T6312] loop0: p142 start 67108864 is beyond EOD, truncated
[   84.722090][ T6312] loop0: p143 size 1342439424 extends beyond EOD, truncated
[   84.725601][ T6312] loop0: p144 start 67108864 is beyond EOD, truncated
[   84.727695][ T6312] loop0: p145 size 1342439424 extends beyond EOD, truncated
[   84.730843][ T6312] loop0: p146 start 67108864 is beyond EOD, truncated
[   84.733136][ T6312] loop0: p147 size 1342439424 extends beyond EOD, truncated
[   84.738077][ T6312] loop0: p148 start 67108864 is beyond EOD, truncated
[   84.740485][ T6312] loop0: p149 size 1342439424 extends beyond EOD, truncated
[   84.745174][ T6312] loop0: p150 start 67108864 is beyond EOD, truncated
[   84.747923][ T6312] loop0: p151 size 1342439424 extends beyond EOD, truncated
[   84.752331][ T6312] loop0: p152 start 67108864 is beyond EOD, truncated
[   84.754905][ T6312] loop0: p153 size 1342439424 extends beyond EOD, truncated
[   84.758038][ T6312] loop0: p154 start 67108864 is beyond EOD, truncated
[   84.760080][ T6312] loop0: p155 size 1342439424 extends beyond EOD, truncated
[   84.763172][ T6312] loop0: p156 start 67108864 is beyond EOD, truncated
[   84.765286][ T6312] loop0: p157 size 1342439424 extends beyond EOD, truncated
[   84.768690][ T6312] loop0: p158 start 67108864 is beyond EOD, truncated
[   84.770845][ T6312] loop0: p159 size 1342439424 extends beyond EOD, truncated
[   84.773929][ T6312] loop0: p160 start 67108864 is beyond EOD, truncated
[   84.776120][ T6312] loop0: p161 size 1342439424 extends beyond EOD, truncated
[   84.779300][ T6312] loop0: p162 start 67108864 is beyond EOD, truncated
[   84.781416][ T6312] loop0: p163 size 1342439424 extends beyond EOD, truncated
[   84.785370][ T6312] loop0: p164 start 67108864 is beyond EOD, truncated
[   84.787522][ T6312] loop0: p165 size 1342439424 extends beyond EOD, truncated
[   84.790713][ T6312] loop0: p166 start 67108864 is beyond EOD, truncated
[   84.793025][ T6312] loop0: p167 size 1342439424 extends beyond EOD, truncated
[   84.796427][ T6312] loop0: p168 start 67108864 is beyond EOD, truncated
[   84.798523][ T6312] loop0: p169 size 1342439424 extends beyond EOD, truncated
[   84.801807][ T6312] loop0: p170 start 67108864 is beyond EOD, truncated
[   84.803927][ T6312] loop0: p171 size 1342439424 extends beyond EOD, truncated
[   84.807299][ T6312] loop0: p172 start 67108864 is beyond EOD, truncated
[   84.810233][ T6312] loop0: p173 size 1342439424 extends beyond EOD, truncated
[   84.815526][ T6312] loop0: p174 start 67108864 is beyond EOD, truncated
[   84.817857][ T6312] loop0: p175 size 1342439424 extends beyond EOD, truncated
[   84.821806][ T6312] loop0: p176 start 67108864 is beyond EOD, truncated
[   84.824559][ T6312] loop0: p177 size 1342439424 extends beyond EOD, truncated
[   84.828449][ T6312] loop0: p178 start 67108864 is beyond EOD, truncated
[   84.830535][ T6312] loop0: p179 size 1342439424 extends beyond EOD, truncated
[   84.835799][ T6312] loop0: p180 start 67108864 is beyond EOD, truncated
[   84.837908][ T6312] loop0: p181 size 1342439424 extends beyond EOD, truncated
[   84.841152][ T6312] loop0: p182 start 67108864 is beyond EOD, truncated
[   84.843394][ T6312] loop0: p183 size 1342439424 extends beyond EOD, truncated
[   84.850936][ T6312] loop0: p184 start 67108864 is beyond EOD, truncated
[   84.853082][ T6312] loop0: p185 size 1342439424 extends beyond EOD, truncated
[   84.856757][ T6312] loop0: p186 start 67108864 is beyond EOD, truncated
[   84.859016][ T6312] loop0: p187 size 1342439424 extends beyond EOD, truncated
[   84.869717][ T6312] loop0: p188 start 67108864 is beyond EOD, truncated
[   84.871877][ T6312] loop0: p189 size 1342439424 extends beyond EOD, truncated
[   84.876589][ T6312] loop0: p190 start 67108864 is beyond EOD, truncated
[   84.878687][ T6312] loop0: p191 size 1342439424 extends beyond EOD, truncated
[   84.883278][ T6312] loop0: p192 start 67108864 is beyond EOD, truncated
[   84.888106][ T6312] loop0: p193 size 1342439424 extends beyond EOD, truncated
[   84.893005][ T6312] loop0: p194 start 67108864 is beyond EOD, truncated
[   84.900507][ T6312] loop0: p195 size 1342439424 extends beyond EOD, truncated
[   84.903724][ T6312] loop0: p196 start 67108864 is beyond EOD, truncated
[   84.905990][ T6312] loop0: p197 size 1342439424 extends beyond EOD, truncated
[   84.909278][ T6312] loop0: p198 start 67108864 is beyond EOD, truncated
[   84.912079][ T6312] loop0: p199 size 1342439424 extends beyond EOD, truncated
[   84.915670][ T6312] loop0: p200 start 67108864 is beyond EOD, truncated
[   84.917970][ T6312] loop0: p201 size 1342439424 extends beyond EOD, truncated
[   84.920896][ T5679] gspca_nw80x: reg_w err -71
[   84.923296][ T5679] nw80x 2-1:16.0: probe with driver nw80x failed with error -71
[   84.927177][ T6312] loop0: p202 start 67108864 is beyond EOD, truncated
[   84.930578][ T5679] usb 2-1: USB disconnect, device number 11
[   84.932659][ T6312] loop0: p203 size 1342439424 extends beyond EOD, truncated
[   84.938966][ T6312] loop0: p204 start 67108864 is beyond EOD, truncated
[   84.941129][ T6312] loop0: p205 size 1342439424 extends beyond EOD, truncated
[   84.946272][ T6312] loop0: p206 start 67108864 is beyond EOD, truncated
[   84.948440][ T6312] loop0: p207 size 1342439424 extends beyond EOD, truncated
[   84.951360][ T6312] loop0: p208 start 67108864 is beyond EOD, truncated
[   84.953496][ T6312] loop0: p209 size 1342439424 extends beyond EOD, truncated
[   84.956953][ T6312] loop0: p210 start 67108864 is beyond EOD, truncated
[   84.959087][ T6312] loop0: p211 size 1342439424 extends beyond EOD, truncated
[   84.962317][ T6312] loop0: p212 start 67108864 is beyond EOD, truncated
[   84.967130][ T6312] loop0: p213 size 1342439424 extends beyond EOD, truncated
[   84.972057][ T6312] loop0: p214 start 67108864 is beyond EOD, truncated
[   84.977174][ T6312] loop0: p215 size 1342439424 extends beyond EOD, truncated
[   84.982398][ T6312] loop0: p216 start 67108864 is beyond EOD, truncated
[   84.990090][ T6312] loop0: p217 size 1342439424 extends beyond EOD, truncated
[   84.995456][ T6312] loop0: p218 start 67108864 is beyond EOD, truncated
[   84.997836][ T6312] loop0: p219 size 1342439424 extends beyond EOD, truncated
[   85.001561][ T6312] loop0: p220 start 67108864 is beyond EOD, truncated
[   85.003881][ T6312] loop0: p221 size 1342439424 extends beyond EOD, truncated
[   85.007698][ T6312] loop0: p222 start 67108864 is beyond EOD, truncated
[   85.009887][ T6312] loop0: p223 size 1342439424 extends beyond EOD, truncated
[   85.018669][ T6312] loop0: p224 start 67108864 is beyond EOD, truncated
[   85.022268][ T6312] loop0: p225 size 1342439424 extends beyond EOD, truncated
[   85.035185][ T6312] loop0: p226 start 67108864 is beyond EOD, truncated
[   85.037619][ T6312] loop0: p227 size 1342439424 extends beyond EOD, truncated
[   85.040888][ T6312] loop0: p228 start 67108864 is beyond EOD, truncated
[   85.047188][ T6312] loop0: p229 size 1342439424 extends beyond EOD, truncated
[   85.051055][ T6312] loop0: p230 start 67108864 is beyond EOD, truncated
[   85.053624][ T6312] loop0: p231 size 1342439424 extends beyond EOD, truncated
[   85.057556][ T6312] loop0: p232 start 67108864 is beyond EOD, truncated
[   85.059695][ T6312] loop0: p233 size 1342439424 extends beyond EOD, truncated
[   85.062870][ T6312] loop0: p234 start 67108864 is beyond EOD, truncated
[   85.065190][ T6312] loop0: p235 size 1342439424 extends beyond EOD, truncated
[   85.068192][ T6312] loop0: p236 start 67108864 is beyond EOD, truncated
[   85.070253][ T6312] loop0: p237 size 1342439424 extends beyond EOD, truncated
[   85.073634][ T6312] loop0: p238 start 67108864 is beyond EOD, truncated
[   85.075873][ T6312] loop0: p239 size 1342439424 extends beyond EOD, truncated
[   85.078784][ T6312] loop0: p240 start 67108864 is beyond EOD, truncated
[   85.080912][ T6312] loop0: p241 size 1342439424 extends beyond EOD, truncated
[   85.083887][ T6312] loop0: p242 start 67108864 is beyond EOD, truncated
[   85.086191][ T6312] loop0: p243 size 1342439424 extends beyond EOD, truncated
[   85.089114][ T6312] loop0: p244 start 67108864 is beyond EOD, truncated
[   85.091180][ T6312] loop0: p245 size 1342439424 extends beyond EOD, truncated
[   85.095081][ T6312] loop0: p246 start 67108864 is beyond EOD, truncated
[   85.097185][ T6312] loop0: p247 size 1342439424 extends beyond EOD, truncated
[   85.100050][ T6312] loop0: p248 start 67108864 is beyond EOD, truncated
[   85.102195][ T6312] loop0: p249 size 1342439424 extends beyond EOD, truncated
[   85.105385][ T6312] loop0: p250 start 67108864 is beyond EOD, truncated
[   85.107581][ T6312] loop0: p251 size 1342439424 extends beyond EOD, truncated
[   85.110493][ T6312] loop0: p252 start 67108864 is beyond EOD, truncated
[   85.112661][ T6312] loop0: p253 size 1342439424 extends beyond EOD, truncated
[   85.116740][ T6312] loop0: p254 start 67108864 is beyond EOD, truncated
[   85.118961][ T6312] loop0: p255 size 1342439424 extends beyond EOD, truncated
[   85.422478][ T5602] udevd[5602]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[   85.429094][ T5612] udevd[5612]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   85.437139][ T6115] udevd[6115]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[   85.447085][ T5776] udevd[5776]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory
[   85.453236][ T5912] udevd[5912]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   85.457735][ T5613] udevd[5613]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[   85.506922][ T6350] udevd[6350]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory
[   85.509601][ T6352] udevd[6352]: inotify_add_watch(7, /dev/loop0p15, 10) failed: No such file or directory
[   85.524780][ T6351] udevd[6351]: inotify_add_watch(7, /dev/loop0p13, 10) failed: No such file or directory
[   85.534219][ T5602] udevd[5602]: inotify_add_watch(7, /dev/loop0p33, 10) failed: No such file or directory
[   85.583054][ T6361] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   85.791562][ T6367] FAULT_INJECTION: forcing a failure.
[   85.791562][ T6367] name failslab, interval 1, probability 0, space 0, times 0
[   85.808666][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT(full) 
[   85.808678][ T6367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.808683][ T6367] Call Trace:
[   85.808686][ T6367]  <TASK>
[   85.808690][ T6367]  dump_stack_lvl+0xe8/0x150
[   85.808705][ T6367]  should_fail_ex+0x40c/0x560
[   85.808720][ T6367]  should_failslab+0xa8/0x100
[   85.808732][ T6367]  __kmalloc_cache_noprof+0xa8/0x660
[   85.808742][ T6367]  ? madvise_collapse+0x15a/0x790
[   85.808779][ T6367]  ? madvise_collapse+0x15a/0x790
[   85.808797][ T6367]  madvise_collapse+0x15a/0x790
[   85.808807][ T6367]  ? ima_match_policy+0x2125/0x21c0
[   85.808818][ T6367]  madvise_vma_behavior+0x11ac/0x4340
[   85.808831][ T6367]  ? __pfx_madvise_vma_behavior+0x10/0x10
[   85.808842][ T6367]  ? __lock_acquire+0x683/0x2cf0
[   85.808857][ T6367]  ? do_raw_spin_lock+0x12b/0x2f0
[   85.808867][ T6367]  ? rcu_is_watching+0x15/0xb0
[   85.808877][ T6367]  ? trace_hrtimer_start+0x82/0x200
[   85.808886][ T6367]  ? hrtimer_start_range_ns_common+0x83b/0xb90
[   85.808902][ T6367]  ? finish_task_switch+0x412/0xc60
[   85.808909][ T6367]  ? lockdep_hardirqs_on+0x7a/0x110
[   85.808918][ T6367]  ? rcu_is_watching+0x15/0xb0
[   85.808928][ T6367]  ? trace_sched_exit_tp+0x3a/0x130
[   85.808937][ T6367]  ? __lock_acquire+0x683/0x2cf0
[   85.808950][ T6367]  ? mas_prev_slot+0xb76/0xbf0
[   85.808963][ T6367]  ? find_vma_prev+0x123/0x1b0
[   85.808971][ T6367]  ? __pfx_find_vma_prev+0x10/0x10
[   85.808977][ T6367]  ? futex_unqueue+0x22/0x240
[   85.808991][ T6367]  ? __futex_wait+0x358/0x400
[   85.809003][ T6367]  madvise_walk_vmas+0x576/0xb00
[   85.809018][ T6367]  ? __pfx_madvise_walk_vmas+0x10/0x10
[   85.809029][ T6367]  ? blk_start_plug+0x6e/0x1b0
[   85.809040][ T6367]  madvise_do_behavior+0x385/0x540
[   85.809052][ T6367]  ? __pfx_madvise_do_behavior+0x10/0x10
[   85.809069][ T6367]  ? down_read+0x2be/0x330
[   85.809081][ T6367]  do_madvise+0x327/0x3a0
[   85.809091][ T6367]  ? __pfx_do_madvise+0x10/0x10
[   85.809103][ T6367]  ? __se_sys_futex+0x3a8/0x450
[   85.809116][ T6367]  ? rcu_is_watching+0x15/0xb0
[   85.809128][ T6367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.809136][ T6367]  __x64_sys_madvise+0xa6/0xc0
[   85.809146][ T6367]  do_syscall_64+0x174/0x580
[   85.809155][ T6367]  ? trace_irq_disable+0x3b/0x140
[   85.809167][ T6367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.809174][ T6367] RIP: 0033:0x7f076179e159
[   85.809182][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.809188][ T6367] RSP: 002b:00007f0762655028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[   85.809197][ T6367] RAX: ffffffffffffffda RBX: 00007f0761a25fa0 RCX: 00007f076179e159
[   85.809202][ T6367] RDX: 0000000000000019 RSI: 0000000000600722 RDI: 0000200000000000
[   85.809207][ T6367] RBP: 00007f076183506b R08: 0000000000000000 R09: 0000000000000000
[   85.809212][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   85.809233][ T6367] R13: 00007f0761a26038 R14: 00007f0761a25fa0 R15: 00007ffe7ff9b188
[   85.809244][ T6367]  </TASK>
[   85.815669][   T33] audit: type=1400 audit(1789989586.249:70): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=6368 comm="syz.1.238"
[   86.062109][ T6375] loop1: detected capacity change from 0 to 128
[   86.079567][ T6375] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[   86.102443][ T5600] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   86.259931][ T6386] loop2: detected capacity change from 0 to 256
[   86.330668][ T6392] loop1: detected capacity change from 0 to 1024
[   86.492423][ T6404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'.
[   86.498906][ T6404] ip6gre1: entered promiscuous mode
[   86.500802][ T6404] ip6gre1: entered allmulticast mode
[   86.539585][ T6406] program syz.1.256 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.602379][ T6400] loop2: detected capacity change from 0 to 40427
[   86.605450][ T6400] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   86.607965][ T6400] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   86.624360][   T31] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.645585][ T6400] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.652920][ T6400] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   86.655606][ T6400] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   86.657051][ T6410] loop1: detected capacity change from 0 to 4096
[   86.701677][ T6410] ntfs3(loop1): ino=b, mi_enum_attr
[   86.705362][ T6410] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   86.708587][ T6410] ntfs3(loop1): Failed to load $Extend (-22).
[   86.710628][ T6410] ntfs3(loop1): Failed to initialize $Extend.
[   86.723632][   T33] audit: type=1800 audit(1789989587.159:71): pid=6410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.258" name="file1" dev="loop1" ino=30 res=0 errno=0
[   86.734612][ T6409] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex
[   86.799782][   T31] usb 1-1: Using ep0 maxpacket: 16
[   86.806701][   T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   86.815847][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   86.826694][   T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   86.829565][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.832647][ T6400] syz.2.253: attempt to access beyond end of device
[   86.832647][ T6400] loop2: rw=2049, sector=45096, nr_sectors = 8152 limit=40427
[   86.835161][   T31] usb 1-1: Product: syz
[   86.840233][ T6400] syz.2.253: attempt to access beyond end of device
[   86.840233][ T6400] loop2: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[   86.848175][   T31] usb 1-1: Manufacturer: syz
[   86.857490][   T31] usb 1-1: SerialNumber: syz
[   86.886413][   T31] usb 1-1: config 0 descriptor??
[   86.889264][ T6400] syz.2.253: attempt to access beyond end of device
[   86.889264][ T6400] loop2: rw=2049, sector=57344, nr_sectors = 16384 limit=40427
[   86.897918][ T6400] syz.2.253: attempt to access beyond end of device
[   86.897918][ T6400] loop2: rw=2049, sector=73728, nr_sectors = 8 limit=40427
[   86.898262][   T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   86.902386][ T6400] syz.2.253: attempt to access beyond end of device
[   86.902386][ T6400] loop2: rw=2049, sector=73736, nr_sectors = 8 limit=40427
[   86.910014][ T6400] syz.2.253: attempt to access beyond end of device
[   86.910014][ T6400] loop2: rw=2049, sector=73744, nr_sectors = 8 limit=40427
[   86.914241][ T6400] syz.2.253: attempt to access beyond end of device
[   86.914241][ T6400] loop2: rw=2049, sector=73752, nr_sectors = 8 limit=40427
[   86.918942][ T6400] syz.2.253: attempt to access beyond end of device
[   86.918942][ T6400] loop2: rw=2049, sector=73760, nr_sectors = 8 limit=40427
[   86.921896][   T31] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[   86.923690][ T6400] syz.2.253: attempt to access beyond end of device
[   86.923690][ T6400] loop2: rw=2049, sector=73768, nr_sectors = 8 limit=40427
[   86.930228][ T6400] syz.2.253: attempt to access beyond end of device
[   86.930228][ T6400] loop2: rw=2049, sector=73776, nr_sectors = 8 limit=40427
[   87.044898][ T6400] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=d830003, run fsck to fix.
[   87.051187][ T6400] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=d830003, run fsck to fix.
[   87.055074][ T6400] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=d830003, run fsck to fix.
[   87.059728][ T6400] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=d830003, run fsck to fix.
[   87.071623][ T6400] CPU: 0 UID: 0 PID: 6400 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT(full) 
[   87.071641][ T6400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.071649][ T6400] Call Trace:
[   87.071654][ T6400]  <TASK>
[   87.071659][ T6400]  dump_stack_lvl+0xe8/0x150
[   87.071706][ T6400]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   87.071732][ T6400]  f2fs_write_end_io+0x124b/0x1710
[   87.071785][ T6400]  __submit_merged_bio+0x258/0x6a0
[   87.071799][ T6400]  ? rcu_is_watching+0x15/0xb0
[   87.071822][ T6400]  f2fs_submit_merged_write+0x27d/0x380
[   87.071846][ T6400]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[   87.071876][ T6400]  f2fs_sync_node_pages+0x1055/0x1210
[   87.071909][ T6400]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   87.071958][ T6400]  f2fs_write_checkpoint+0xf91/0x2710
[   87.071997][ T6400]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.072051][ T6400]  f2fs_gc+0x905/0x25b0
[   87.072089][ T6400]  ? down_write+0x16d/0x200
[   87.072106][ T6400]  ? __pfx_f2fs_gc+0x10/0x10
[   87.072142][ T6400]  ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10
[   87.072165][ T6400]  ? rcu_is_watching+0x15/0xb0
[   87.072187][ T6400]  f2fs_balance_fs+0x67f/0x870
[   87.072205][ T6400]  ? __pfx_f2fs_balance_fs+0x10/0x10
[   87.072233][ T6400]  ? folio_unlock+0x101/0x160
[   87.072256][ T6400]  f2fs_write_single_data_page+0xfd7/0x1840
[   87.072283][ T6400]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[   87.072312][ T6400]  ? folio_clear_dirty_for_io+0x1bf/0x820
[   87.072332][ T6400]  ? folio_clear_dirty_for_io+0x1bf/0x820
[   87.072348][ T6400]  ? folio_clear_dirty_for_io+0x646/0x820
[   87.072368][ T6400]  f2fs_write_data_pages+0x1d2e/0x36f0
[   87.072408][ T6400]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.072432][ T6400]  ? is_bpf_text_address+0x292/0x2b0
[   87.072449][ T6400]  ? is_bpf_text_address+0x26/0x2b0
[   87.072484][ T6400]  ? stack_trace_save+0xa9/0x100
[   87.072499][ T6400]  ? __pfx_stack_trace_save+0x10/0x10
[   87.072526][ T6400]  ? lockdep_unlock+0x5d/0xd0
[   87.072539][ T6400]  ? __lock_acquire+0x13e8/0x2cf0
[   87.072572][ T6400]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.072586][ T6400]  do_writepages+0x338/0x560
[   87.072616][ T6400]  ? do_raw_spin_unlock+0x4d/0x210
[   87.072631][ T6400]  file_write_and_wait_range+0x36e/0x440
[   87.072652][ T6400]  ? __pfx_file_write_and_wait_range+0x10/0x10
[   87.072693][ T6400]  ? do_raw_spin_lock+0x12b/0x2f0
[   87.072707][ T6400]  ? __pfx_f2fs_write_begin+0x10/0x10
[   87.072726][ T6400]  f2fs_do_sync_file+0x66b/0x1960
[   87.072740][ T6400]  ? _raw_spin_unlock+0x28/0x50
[   87.072783][ T6400]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[   87.072818][ T6400]  ? f2fs_file_write_iter+0x4c5/0x28e0
[   87.072837][ T6400]  ? vfs_fsync_range+0xbd/0x150
[   87.072854][ T6400]  ? f2fs_sync_file+0xe9/0x160
[   87.072869][ T6400]  f2fs_file_write_iter+0x723/0x28e0
[   87.072884][ T6400]  ? __pfx_aa_file_perm+0x10/0x10
[   87.072917][ T6400]  ? vfs_write+0x22b/0xba0
[   87.072936][ T6400]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[   87.072960][ T6400]  vfs_write+0x612/0xba0
[   87.072984][ T6400]  ? __pfx_vfs_write+0x10/0x10
[   87.073010][ T6400]  ? __fget_files+0x2a/0x420
[   87.073033][ T6400]  ksys_write+0x150/0x270
[   87.073054][ T6400]  ? __pfx_ksys_write+0x10/0x10
[   87.073079][ T6400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.073093][ T6400]  do_syscall_64+0x174/0x580
[   87.073106][ T6400]  ? trace_irq_disable+0x3b/0x140
[   87.073126][ T6400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.073138][ T6400] RIP: 0033:0x7f076179e159
[   87.073152][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.073162][ T6400] RSP: 002b:00007f0762655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   87.073176][ T6400] RAX: ffffffffffffffda RBX: 00007f0761a25fa0 RCX: 00007f076179e159
[   87.073185][ T6400] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004
[   87.073192][ T6400] RBP: 00007f076183506b R08: 0000000000000000 R09: 0000000000000000
[   87.073199][ T6400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.073207][ T6400] R13: 00007f0761a26038 R14: 00007f0761a25fa0 R15: 00007ffe7ff9b188
[   87.073229][ T6400]  </TASK>
[   87.073295][ T6400] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.356508][ T6431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   87.361688][ T6431] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   87.367388][ T6431] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[   87.518239][   T31] em28xx 1-1:0.0: chip ID is em2884
[   87.674259][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   87.721209][   T31] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[   87.726371][   T31] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[   87.728560][   T31] em28xx 1-1:0.0: No AC97 audio processor
[   87.736870][   T31] usb 1-1: USB disconnect, device number 8
[   87.743457][   T31] em28xx 1-1:0.0: Disconnecting em28xx
[   87.750009][   T31] em28xx 1-1:0.0: Freeing device
[   87.774930][ T5679] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   87.836383][    T9] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[   87.840381][    T9] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 0
[   87.847077][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 0.01
[   87.850892][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.854193][    T9] usb 2-1: Product: syz
[   87.855916][    T9] usb 2-1: Manufacturer: syz
[   87.857837][    T9] usb 2-1: SerialNumber: syz
[   87.924183][ T5679] usb 3-1: Using ep0 maxpacket: 32
[   87.928895][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.933360][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.937467][ T5679] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   87.941162][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.948336][ T5679] usb 3-1: config 0 descriptor??
[   87.960125][ T5679] hub 3-1:0.0: USB hub found
[   88.067948][    T9] ipheth 2-1:1.0: ipheth_get_macaddr: usb_control_msg: -71
[   88.070814][    T9] ipheth 2-1:1.0: probe with driver ipheth failed with error -71
[   88.082939][    T9] apple-mfi-fastcharge 2-1: USB disconnect, device number 12
[   88.158406][ T5679] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[   88.562737][ T5679] hid_parser_main: 32 callbacks suppressed
[   88.562778][ T5679] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0
[   88.571894][ T5679] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0
[   88.574155][  T802] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[   88.616168][ T6444] loop1: detected capacity change from 0 to 512
[   88.629775][ T6444] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   88.636363][ T6444] EXT4-fs (loop1): orphan cleanup on readonly fs
[   88.638822][ T6444] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   88.643890][ T6444] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   88.648992][ T6444] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.270: bad orphan inode 768
[   88.651949][ T6444] loop1: lost filesystem error report for type 5 error -117
[   88.653577][ T6444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   88.670577][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.725731][  T802] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.729037][  T802] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.733069][  T802] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   88.737542][  T802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.825234][ T6455] program syz.1.275 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.893950][ T6458] FAULT_INJECTION: forcing a failure.
[   88.893950][ T6458] name failslab, interval 1, probability 0, space 0, times 0
[   88.899190][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) 
[   88.899231][ T6458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   88.899239][ T6458] Call Trace:
[   88.899245][ T6458]  <TASK>
[   88.899250][ T6458]  dump_stack_lvl+0xe8/0x150
[   88.899273][ T6458]  should_fail_ex+0x40c/0x560
[   88.899298][ T6458]  should_failslab+0xa8/0x100
[   88.899318][ T6458]  kmem_cache_alloc_noprof+0xa6/0x5f0
[   88.899333][ T6458]  ? make_kuid+0x1e5/0x670
[   88.899346][ T6458]  ? prepare_creds+0x30/0x820
[   88.899363][ T6458]  ? prepare_creds+0x30/0x820
[   88.899380][ T6458]  ? ksys_write+0x242/0x270
[   88.899400][ T6458]  prepare_creds+0x30/0x820
[   88.899420][ T6458]  __sys_setfsuid+0xcd/0x370
[   88.899435][ T6458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.899449][ T6458]  do_syscall_64+0x174/0x580
[   88.899463][ T6458]  ? trace_irq_disable+0x3b/0x140
[   88.899481][ T6458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   88.899495][ T6458] RIP: 0033:0x7f9ac199e159
[   88.899508][ T6458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   88.899518][ T6458] RSP: 002b:00007f9ac2819028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a
[   88.899531][ T6458] RAX: ffffffffffffffda RBX: 00007f9ac1c25fa0 RCX: 00007f9ac199e159
[   88.899541][ T6458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[   88.899548][ T6458] RBP: 00007f9ac1a3506b R08: 0000000000000000 R09: 0000000000000000
[   88.899555][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   88.899561][ T6458] R13: 00007f9ac1c26038 R14: 00007f9ac1c25fa0 R15: 00007fff99aac8a8
[   88.899580][ T6458]  </TASK>
[   88.960613][  T802] usb 1-1: usb_control_msg returned -32
[   88.962791][  T802] usbtmc 1-1:16.0: can't read capabilities
[   88.992333][ T6460] loop1: detected capacity change from 0 to 1024
[   89.175037][ T5659] usb 3-1: USB disconnect, device number 10
[   89.178173][ T6470] FAULT_INJECTION: forcing a failure.
[   89.178173][ T6470] name failslab, interval 1, probability 0, space 0, times 0
[   89.184510][ T6470] CPU: 1 UID: 0 PID: 6470 Comm: syz.1.282 Not tainted syzkaller #0 PREEMPT(full) 
[   89.184528][ T6470] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.184536][ T6470] Call Trace:
[   89.184542][ T6470]  <TASK>
[   89.184548][ T6470]  dump_stack_lvl+0xe8/0x150
[   89.184572][ T6470]  should_fail_ex+0x40c/0x560
[   89.184596][ T6470]  should_failslab+0xa8/0x100
[   89.184617][ T6470]  __kmalloc_node_track_caller_noprof+0x100/0x730
[   89.184633][ T6470]  ? __kasan_kmalloc+0x93/0xb0
[   89.184651][ T6470]  ? v9fs_init_fs_context+0x10a/0x540
[   89.184668][ T6470]  ? v9fs_init_fs_context+0x10a/0x540
[   89.184688][ T6470]  kstrdup+0x42/0x100
[   89.184706][ T6470]  v9fs_init_fs_context+0x10a/0x540
[   89.184766][ T6470]  alloc_fs_context+0x9a3/0xd00
[   89.184794][ T6470]  do_new_mount+0x17f/0xdc0
[   89.184815][ T6470]  ? __pfx_do_new_mount+0x10/0x10
[   89.184832][ T6470]  ? ns_capable+0x89/0xe0
[   89.184847][ T6470]  ? path_mount+0x647/0x1040
[   89.184864][ T6470]  ? user_path_at+0xd4/0x160
[   89.184884][ T6470]  __se_sys_mount+0x31d/0x420
[   89.184903][ T6470]  ? __pfx___se_sys_mount+0x10/0x10
[   89.184923][ T6470]  ? __x64_sys_mount+0x20/0xc0
[   89.184936][ T6470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.184948][ T6470]  do_syscall_64+0x174/0x580
[   89.184961][ T6470]  ? trace_irq_disable+0x3b/0x140
[   89.184979][ T6470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.184992][ T6470] RIP: 0033:0x7f9ac199e159
[   89.185004][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   89.185015][ T6470] RSP: 002b:00007f9ac2819028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   89.185030][ T6470] RAX: ffffffffffffffda RBX: 00007f9ac1c25fa0 RCX: 00007f9ac199e159
[   89.185038][ T6470] RDX: 0000200000000380 RSI: 00002000000001c0 RDI: 00002000000000c0
[   89.185053][ T6470] RBP: 00007f9ac1a3506b R08: 0000000000000000 R09: 0000000000000000
[   89.185063][ T6470] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[   89.185070][ T6470] R13: 00007f9ac1c26038 R14: 00007f9ac1c25fa0 R15: 00007fff99aac8a8
[   89.185088][ T6470]  </TASK>
[   89.564995][  T802] usb 1-1: USB disconnect, device number 9
[   89.950669][ T6487] loop1: detected capacity change from 0 to 2048
[   89.987088][ T6487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.184019][ T6511] can0: slcan on pty22.
[   91.394356][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   91.605828][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   91.609312][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   91.615054][   T10] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   91.619019][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.621696][   T10] usb 1-1: Product: syz
[   91.623072][   T10] usb 1-1: Manufacturer: syz
[   91.625098][   T10] usb 1-1: SerialNumber: syz
[   91.633509][   T10] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[   91.640237][   T10] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   91.640237][   T10]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   91.840377][ T5340] can0: mtu greater than device maximum
[   92.029554][ T6508] can0 (unregistered): slcan off pty22.
[   92.127406][ T6541] loop1: detected capacity change from 0 to 512
[   92.159713][ T6541] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   92.176336][ T6541] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   92.184514][ T6541] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[   92.199416][ T6541] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[   92.204398][ T6541] System zones: 0-2, 18-18, 34-35
[   92.218383][ T6541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   92.240269][ T6537] loop2: detected capacity change from 0 to 32768
[   92.250790][ T6537] ERROR: (device loop2): xtSearch: xt_getpage: xtree page corrupt
[   92.250790][ T6537] 
[   92.258931][ T6537] ERROR: (device loop2): remounting filesystem as read-only
[   92.262292][ T6537] xtLookup: xtSearch returned -5
[   92.264687][ T6537] read_mapping_page failed!
[   92.266560][ T6537] jfs_mount: diMount(ipaimap) failed w/rc = -5
[   92.269277][ T6537] Mount JFS Failure: -5
[   92.270994][ T6537] jfs_mount failed w/return code = -5
[   92.280484][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.450320][   T10] scsi host6: usb-storage 1-1:1.0
[   92.469408][   T10] usb 1-1: USB disconnect, device number 10
[   92.738111][ T6550] loop2: detected capacity change from 0 to 32768
[   92.765921][ T6550] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   92.843421][ T5605] ocfs2: Unmounting device (7,2) on (node local)
[   92.941691][ T6571] sd 0:0:0:0: PR command failed: 1026
[   92.943909][ T6571] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   92.948839][ T6571] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   93.024205][  T802] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[   93.175967][  T802] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.189456][  T802] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[   93.196678][  T802] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[   93.205990][  T802] usb 2-1: Product: syz
[   93.212762][  T802] usb 2-1: Manufacturer: syz
[   93.216424][  T802] usb 2-1: SerialNumber: syz
[   93.222511][  T802] usb 2-1: config 0 descriptor??
[   93.229175][  T802] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected
[   93.235444][  T802] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[   93.240160][  T802] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 88
[   93.251769][  T802] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[   93.262476][  T802] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[   93.272307][  T802] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[   93.282138][  T802] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[   93.288609][  T802] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[   93.293299][  T802] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[   93.299044][  T802] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[   93.302958][  T802] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[   93.462190][ T6567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.469611][ T6567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.615072][   T10] usb 2-1: USB disconnect, device number 13
[   93.634804][   T10] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[   93.646355][   T10] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[   93.656954][   T10] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[   93.666151][   T10] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[   93.673087][   T10] keyspan 2-1:0.0: device disconnected
[   93.789554][ T6611] loop2: detected capacity change from 0 to 512
[   93.802246][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.806147][ T6611] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.817814][   T33] audit: type=1800 audit(1789989594.259:72): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.330" name="bus" dev="loop2" ino=18 res=0 errno=0
[   93.826423][   T33] audit: type=1800 audit(1789989594.269:73): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.330" name="bus" dev="loop2" ino=18 res=0 errno=0
[   93.845343][ T5605] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.257442][ T6629] Bluetooth: ISO socket layer initialized
[   94.644220][  T802] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   94.814209][  T802] usb 1-1: Using ep0 maxpacket: 8
[   94.819699][  T802] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[   94.823304][  T802] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.827208][  T802] usb 1-1: Product: syz
[   94.829048][  T802] usb 1-1: Manufacturer: syz
[   94.830671][  T802] usb 1-1: SerialNumber: syz
[   94.834562][  T802] usb 1-1: config 0 descriptor??
[   95.046620][  T802] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   95.258494][ T6637] loop1: detected capacity change from 0 to 32768
[   95.452105][ T6641] X25: received unknown 00 with LCI 000
[   95.457347][  T802] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   95.470901][  T802] usb 1-1: USB disconnect, device number 11
[   95.540327][ T6645] loop1: detected capacity change from 0 to 1024
[   95.601256][ T6650] hfsplus: invalid length 62193 has been corrected to 255
[   95.614757][ T6650] hfsplus: invalid length 62193 has been corrected to 255
[   95.623681][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.631113][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.644733][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.649594][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.656594][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.662195][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.670004][ T6645] hfsplus: invalid length 62193 has been corrected to 255
[   95.708355][   T83] hfsplus: invalid length 62193 has been corrected to 255
[   95.712748][   T83] hfsplus: invalid length 62193 has been corrected to 255
[   95.763966][ T6658] loop1: detected capacity change from 0 to 512
[   95.773616][ T6658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.784184][ T6658] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.798088][ T6658] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:107: comm syz.1.343: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[   95.812078][ T6658] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem
[   95.840931][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.023034][ T6681] loop1: detected capacity change from 0 to 4096
[   96.039891][ T6683] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.314165][ T5679] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[   96.466408][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.473048][ T5679] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[   96.476790][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.480167][ T5679] usb 2-1: Product: syz
[   96.482020][ T5679] usb 2-1: Manufacturer: syz
[   96.485010][ T5679] usb 2-1: SerialNumber: syz
[   96.493399][ T5679] usb-storage 2-1:1.0: USB Mass Storage device detected
[   96.499262][ T5679] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000
[   96.504276][ T5679] scsi host6: usb-storage 2-1:1.0
[   96.693682][ T5679] usb 2-1: USB disconnect, device number 14
[   96.809466][ T6706] loop0: detected capacity change from 0 to 1024
[   96.821757][   T33] audit: type=1800 audit(1789989597.259:74): pid=6706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.358" name="file1" dev="loop0" ino=20 res=0 errno=0
[   97.247878][ T6712] loop1: detected capacity change from 0 to 512
[   97.265943][ T6712] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   97.272194][ T6712] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   97.281334][ T6712] System zones: 0-1, 15-15, 18-18, 34-34
[   97.286016][ T6712] EXT4-fs (loop1): orphan cleanup on readonly fs
[   97.288741][ T6712] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[   97.292587][ T6712] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   97.302735][ T6712] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   97.307599][ T6712] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.360: bg 0: block 40: padding at end of block bitmap is not set
[   97.314840][ T6712] loop1: lost filesystem error report for type 5 error -117
[   97.316825][ T6712] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[   97.323229][ T6712] loop1: lost filesystem error report for type 5 error -117
[   97.324823][    C0] EXT4-fs (loop1): error count since last fsck: 2
[   97.330043][    C0] EXT4-fs (loop1): initial error at time 1789989597: ext4_validate_block_bitmap:441
[   97.332979][    C0] EXT4-fs (loop1): last error at time 1789989597: ext4_mb_clear_bb:6679
[   97.336325][ T6712] EXT4-fs (loop1): 1 truncate cleaned up
[   97.338809][ T6712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   97.362743][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.467612][ T6717] loop1: detected capacity change from 0 to 1024
[   97.581257][ T6721] loop1: detected capacity change from 0 to 764
[   97.792054][ T6734] process 'syz.1.370' launched './file1' with NULL argv: empty string added
[   97.851762][ T6736] loop0: detected capacity change from 0 to 4096
[   97.867259][ T6736] ntfs3(loop0): Failed to load $Secure (-22).
[   97.869466][ T6736] ntfs3(loop0): Failed to initialize $Secure (-22).
[   97.919682][ T6740] loop1: detected capacity change from 0 to 4096
[   97.944737][ T6740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.961808][ T6740] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   97.976407][ T6746] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.982136][ T6746] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.982315][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.027005][ T5604] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.284520][ T5608] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[   98.435739][ T5608] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.439846][ T5608] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   98.443363][ T5608] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 4
[   98.447806][ T5608] usb 2-1: config 1 interface 1 has no altsetting 0
[   98.451710][ T5608] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.ff
[   98.456794][ T5608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   98.459840][ T5608] usb 2-1: SerialNumber: syz
[   98.683396][ T5608] usb 2-1: selecting invalid altsetting 0
[   98.686417][ T5608] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor
[   98.689503][ T5608] usb 2-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[   98.693328][ T5608] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[   98.696517][ T5608] usb 2-1: selecting invalid altsetting 0
[   98.698976][ T5608] usb 2-1: 0:2 : does not exist
[   98.740611][ T5608] usb 2-1: USB disconnect, device number 15
[   98.769514][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.027988][   T33] audit: type=1800 audit(1789989599.469:75): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.378" name="file1" dev="loop0" ino=33 res=0 errno=0
[   99.098829][ T6756] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.114929][   T33] audit: type=1800 audit(1789989599.549:76): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.379" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[   99.138181][   T33] audit: type=1800 audit(1789989599.569:77): pid=6756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.379" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[   99.252249][ T6756] FAT-fs (loop0): error, invalid FAT chain (i_pos 196, last_block 8200)
[   99.255740][ T6756] FAT-fs (loop0): Filesystem has been set read-only
[   99.694243][ T5608] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   99.764227][   T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[   99.844207][ T5608] usb 1-1: Using ep0 maxpacket: 16
[   99.847982][ T5608] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   99.852062][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   99.856529][ T5608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   99.860637][ T5608] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   99.865400][ T5608] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   99.871614][ T5608] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   99.875364][ T5608] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   99.878811][ T5608] usb 1-1: Manufacturer: syz
[   99.882676][ T5608] usb 1-1: config 0 descriptor??
[   99.925297][   T31] usb 2-1: Using ep0 maxpacket: 16
[   99.929274][   T31] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   99.932987][   T31] usb 2-1: config 1 has no interface number 0
[   99.935605][   T31] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[   99.939633][   T31] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7
[   99.944359][   T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[   99.950256][   T31] usb 2-1: New USB device found, idVendor=0763, idProduct=2019, bcdDevice= 0.40
[   99.953072][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.956373][   T31] usb 2-1: Product: syz
[   99.957911][   T31] usb 2-1: Manufacturer: syz
[   99.959784][   T31] usb 2-1: SerialNumber: syz
[  100.135663][ T5608] rc_core: IR keymap rc-hauppauge not found
[  100.139443][ T5608] Registered IR keymap rc-empty
[  100.141640][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.154354][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.174824][   T31] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  100.179347][   T31] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  100.186939][ T5608] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  100.201312][ T5608] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11
[  100.216279][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.234273][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.238934][   T31] usb 2-1: USB disconnect, device number 16
[  100.264301][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.285280][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.314429][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.334456][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.354278][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.385429][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.414846][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.434275][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.454811][ T5608] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  100.475953][ T5608] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  100.480008][ T5608] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  100.548383][ T5608] usb 1-1: USB disconnect, device number 12
[  101.230896][ T6778] set_capacity_and_notify: 4 callbacks suppressed
[  101.230904][ T6778] loop1: detected capacity change from 0 to 131072
[  101.236592][ T6778] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  101.239393][ T6778] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  101.242591][ T6778] F2FS-fs (loop1): invalid crc value
[  101.251495][ T6786] jffs2: notice: (6786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  101.273982][ T6778] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  101.279202][ T6778] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  101.281926][ T6778] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  101.306446][ T6778] F2FS-fs (loop1): Can't flush 1 in 0 for SEGS_PER_SEC 1 != 1
[  101.696974][ T5659] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  101.844300][ T5659] usb 1-1: Using ep0 maxpacket: 16
[  101.849258][ T5659] usb 1-1: unable to get BOS descriptor or descriptor too short
[  101.853852][ T5659] usb 1-1: config 3 has an invalid interface number: 105 but max is 1
[  101.857341][ T5659] usb 1-1: config 3 has an invalid interface number: 164 but max is 1
[  101.860989][ T5659] usb 1-1: config 3 has no interface number 0
[  101.864264][ T5659] usb 1-1: config 3 has no interface number 1
[  101.866844][ T5659] usb 1-1: config 3 interface 105 has no altsetting 0
[  101.869714][ T5659] usb 1-1: config 3 interface 164 has no altsetting 0
[  101.875456][ T5659] usb 1-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06
[  101.879215][ T5659] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.884075][ T5659] usb 1-1: Product: syz
[  101.886450][ T5659] usb 1-1: Manufacturer: syz
[  101.892663][ T5659] usb 1-1: SerialNumber: syz
[  102.123116][ T5659] uvcvideo 1-1:3.164: Found multiple Units with ID 5
[  102.126117][ T5659] uvcvideo 1-1:3.164: Found multiple Units with ID 1
[  102.128722][ T5659] uvcvideo 1-1:3.164: Found UVC 0.03 device syz (04c8:0720)
[  102.130994][ T5659] uvcvideo 1-1:3.164: Entity type for entity Output 32773 was not initialized!
[  102.133968][ T5659] uvcvideo 1-1:3.164: Entity type for entity Input 65535 was not initialized!
[  102.137790][ T5659] uvcvideo 1-1:3.164: Failed to create links for entity 32773
[  102.140117][ T5659] uvcvideo 1-1:3.164: Failed to register entities (-22).
[  102.145752][ T5659] usb 1-1: USB disconnect, device number 13
[  102.767459][ T6822] loop0: detected capacity change from 0 to 4096
[  102.787406][ T6823] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  102.988786][ T6839] loop0: detected capacity change from 0 to 128
[  102.995863][ T6839] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  103.010139][ T6839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.180194][ T6845] loop0: detected capacity change from 0 to 32768
[  103.196505][ T6845] (syz.0.414,6845,1):ocfs2_check_set_options:1258 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  103.205959][ T6845] (syz.0.414,6845,1):ocfs2_fill_super:1177 ERROR: status = -22
[  103.235192][ T6854] loop1: detected capacity change from 0 to 512
[  103.243176][ T6854] EXT4-fs: Ignoring removed orlov option
[  103.269302][ T6854] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  103.306312][ T6854] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.418: corrupted xattr block 252: invalid header
[  103.311112][ T6854] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  103.312655][ T6854] EXT4-fs (loop1): Remounting filesystem read-only
[  103.315553][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  103.315562][    C1] EXT4-fs (loop1): initial error at time 1789989603: ext4_xattr_delete_inode:2972: inode 15
[  103.315575][    C1] EXT4-fs (loop1): last error at time 1789989603: ext4_xattr_delete_inode:2972: inode 15
[  103.328694][ T6854] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117)
[  103.331546][ T6854] EXT4-fs (loop1): 1 orphan inode deleted
[  103.337618][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.357364][ T6861] loop2: detected capacity change from 0 to 2640
[  103.366210][ T6861] Buffer I/O error on dev loop2, logical block 0, lost async page write
[  103.369261][ T6861] Buffer I/O error on dev loop2, logical block 1, lost async page write
[  103.371879][ T6861] Buffer I/O error on dev loop2, logical block 2, lost async page write
[  103.375387][ T6861] Buffer I/O error on dev loop2, logical block 3, lost async page write
[  103.378011][ T6861] Buffer I/O error on dev loop2, logical block 4, lost async page write
[  103.380583][ T6861] Buffer I/O error on dev loop2, logical block 5, lost async page write
[  103.383104][ T6861] Buffer I/O error on dev loop2, logical block 6, lost async page write
[  103.387696][ T6861] Buffer I/O error on dev loop2, logical block 7, lost async page write
[  103.392717][ T6861] Buffer I/O error on dev loop2, logical block 8, lost async page write
[  103.398685][ T6861] Buffer I/O error on dev loop2, logical block 9, lost async page write
[  103.408453][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.228870][ T6872] loop1: detected capacity change from 0 to 2048
[  104.233592][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16307, location=16307
[  104.237353][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16563, location=16563
[  104.240549][ T6872] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  104.243393][ T6872] UDF-fs: Scanning with blocksize 512 failed
[  104.246322][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16307, location=16307
[  104.249967][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16563, location=16563
[  104.253205][ T6872] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  104.255829][ T6872] UDF-fs: Scanning with blocksize 1024 failed
[  104.258895][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16307, location=16307
[  104.262903][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16563, location=16563
[  104.267825][ T6872] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  104.270228][ T6872] UDF-fs: Scanning with blocksize 2048 failed
[  104.272808][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16307, location=16307
[  104.276750][ T6872] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=16563, location=16563
[  104.279915][ T6872] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  104.282238][ T6872] UDF-fs: Scanning with blocksize 4096 failed
[  104.284297][ T6872] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  104.316699][ T6874] loop1: detected capacity change from 0 to 512
[  104.319260][ T6874] EXT4-fs: Ignoring removed i_version option
[  104.321492][ T6874] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  104.444172][ T5659] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  104.689514][ T5659] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  104.703624][ T5659] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  104.710628][ T5659] usb 1-1: config 0 interface 0 has no altsetting 0
[  104.716852][ T5659] usb 1-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00
[  104.723586][ T5659] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.752166][ T5659] usb 1-1: config 0 descriptor??
[  105.179521][ T5659] asus 0003:0B05:183D.0008: ignoring exceeding usage max
[  105.194412][ T5659] asus 0003:0B05:183D.0008: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.0-1/input0
[  105.297270][ T6884] loop1: detected capacity change from 0 to 512
[  105.300412][ T6884] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  105.313443][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.318424][ T6884] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  105.330912][   T33] audit: type=1800 audit(1789989605.769:78): pid=6884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.430" name="file2" dev="loop1" ino=16 res=0 errno=0
[  105.356644][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.407274][ T5608] usb 1-1: USB disconnect, device number 14
[  105.593842][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'.
[  105.599740][ T6901] netlink: 20 bytes leftover after parsing attributes in process `syz.1.437'.
[  105.638244][ T6903] mmap: syz.1.438 (6903) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  105.813523][ T6909] syzkaller0: entered promiscuous mode
[  105.817754][ T6909] syzkaller0: entered allmulticast mode
[  106.062714][ T6919] loop0: detected capacity change from 0 to 256
[  106.068360][ T6919] exfat: Deprecated parameter 'utf8'
[  106.072251][ T6919] exfat: Deprecated parameter 'namecase'
[  106.082716][ T6911] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.442 (6911)
[  106.095543][ T6911] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  106.098955][ T6911] BTRFS info (device loop1): using sha256 checksum algorithm
[  106.099730][ T6919] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  106.170991][ T6911] BTRFS info (device loop1): enabling ssd optimizations
[  106.179583][ T6911] BTRFS info (device loop1): turning on async discard
[  106.182107][ T6911] BTRFS info (device loop1): enabling free space tree
[  106.235147][ T5600] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.367076][ T6945] set_capacity_and_notify: 1 callbacks suppressed
[  107.367314][ T6945] loop0: detected capacity change from 0 to 1764
[  107.381515][ T6945] iso9660: Bad value for 'gid'
[  107.387584][ T6945] iso9660: Bad value for 'gid'
[  107.674357][  T951] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  107.827997][  T951] usb 1-1: config index 0 descriptor too short (expected 7768, got 18)
[  107.831144][  T951] usb 1-1: config 0 has an invalid interface number: 71 but max is 0
[  107.833784][  T951] usb 1-1: config 0 has no interface number 0
[  107.835801][  T951] usb 1-1: too many endpoints for config 0 interface 71 altsetting 245: 118, using maximum allowed: 30
[  107.839580][  T951] usb 1-1: config 0 interface 71 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 118
[  107.843781][  T951] usb 1-1: config 0 interface 71 has no altsetting 0
[  107.845928][  T951] usb 1-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  107.848669][  T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.858708][  T951] usb 1-1: config 0 descriptor??
[  108.066341][  T951] usb 1-1: string descriptor 0 read error: -71
[  108.074007][  T951] ftdi_sio 1-1:0.71: FTDI USB Serial Device converter detected
[  108.077326][  T951] ftdi_sio ttyUSB0: unknown device type: 0x524d
[  108.081190][  T951] usb 1-1: USB disconnect, device number 15
[  108.083999][  T951] ftdi_sio 1-1:0.71: device disconnected
[  108.444670][ T5659] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  108.601865][ T5659] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.611371][ T5659] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  108.615444][ T5659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.620808][ T5659] usb 2-1: config 0 descriptor??
[  108.628153][ T5659] pwc: Askey VC010 type 2 USB webcam detected.
[  108.631320][ T6955] loop0: detected capacity change from 0 to 2048
[  108.643171][ T6955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.715157][ T6957] loop0: detected capacity change from 0 to 4096
[  108.857476][ T6961] loop0: detected capacity change from 0 to 8
[  108.869512][ T6961] SQUASHFS error: xz decompression failed, data probably corrupt
[  108.872019][ T6961] SQUASHFS error: Failed to read block 0x108: -5
[  108.875298][ T6961] SQUASHFS error: Unable to read metadata cache entry [106]
[  108.878036][ T6961] SQUASHFS error: Unable to read inode 0x11f
[  109.034753][ T5659] pwc: recv_control_msg error -32 req 02 val 2b00
[  109.041664][ T5659] pwc: recv_control_msg error -32 req 02 val 2700
[  109.048822][ T5659] pwc: recv_control_msg error -32 req 02 val 2c00
[  109.054953][ T5659] pwc: recv_control_msg error -32 req 04 val 1000
[  109.061791][ T5659] pwc: recv_control_msg error -32 req 04 val 1300
[  109.066896][ T5659] pwc: recv_control_msg error -32 req 04 val 1400
[  109.114319][ T6963] loop0: detected capacity change from 0 to 32768
[  109.134622][ T6963] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  109.143803][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  109.153547][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  109.157108][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  109.162154][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  109.167410][ T6963] XFS (loop0): Ending clean mount
[  109.167458][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  109.219455][ T5604] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  109.274729][ T5659] pwc: recv_control_msg error -71 req 02 val 2100
[  109.283672][ T5659] pwc: recv_control_msg error -71 req 04 val 1500
[  109.299534][ T5659] pwc: recv_control_msg error -71 req 02 val 2500
[  109.313095][ T5659] pwc: recv_control_msg error -71 req 02 val 2400
[  109.319807][ T5659] pwc: recv_control_msg error -71 req 02 val 2600
[  109.329038][ T5659] pwc: recv_control_msg error -71 req 02 val 2900
[  109.342316][ T5659] pwc: recv_control_msg error -71 req 02 val 2800
[  109.353439][ T6981] capability: warning: `syz.0.461' uses deprecated v2 capabilities in a way that may be insecure
[  109.353487][ T5659] pwc: recv_control_msg error -71 req 04 val 1100
[  109.360484][ T5659] pwc: recv_control_msg error -71 req 04 val 1200
[  109.372856][ T5659] pwc: Registered as video103.
[  109.384595][ T5659] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13
[  109.426319][ T5659] usb 2-1: USB disconnect, device number 17
[  109.679038][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.682107][ T6970] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.685731][ T6970] bridge_slave_0: entered allmulticast mode
[  109.689686][ T6970] bridge_slave_0: entered promiscuous mode
[  109.697324][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.700318][ T6970] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.703328][ T6970] bridge_slave_1: entered allmulticast mode
[  109.707601][ T6970] bridge_slave_1: entered promiscuous mode
[  109.734297][  T951] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  109.736446][ T6970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.744509][ T6970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  109.773880][ T6970] team0: Port device team_slave_0 added
[  109.779074][ T6970] team0: Port device team_slave_1 added
[  109.809056][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_0
[  109.811876][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.834012][ T6970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  109.839496][ T6970] batman_adv: batadv0: Adding interface: batadv_slave_1
[  109.841724][ T6970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  109.850546][ T6970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  109.886994][  T951] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  109.892965][  T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.893283][ T6970] hsr_slave_0: entered promiscuous mode
[  109.899387][ T6970] hsr_slave_1: entered promiscuous mode
[  109.901860][ T6970] debugfs: 'hsr0' already exists in 'hsr'
[  109.903784][ T6970] Cannot create hsr debugfs directory
[  109.908518][  T951] usb 1-1: config 0 descriptor??
[  109.917895][  T951] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  110.197075][ T6970] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  110.206763][ T6970] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  110.210354][ T6970] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  110.218437][ T6970] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  110.222619][ T6970] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  110.232794][ T6970] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  110.239679][ T6970] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  110.249658][ T6970] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  110.290881][ T6970] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.294515][ T6970] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.298038][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.300849][ T6970] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.337084][  T951] gp8psk: usb in 137 operation failed.
[  110.340319][  T951] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  110.347187][  T951] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  110.360266][  T951] usb 1-1: USB disconnect, device number 16
[  110.397919][ T6970] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.413683][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.419559][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.432921][ T6970] 8021q: adding VLAN 0 to HW filter on device team0
[  110.452968][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.455851][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  110.468217][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.471080][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.842320][ T6970] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.910380][ T6970] veth0_vlan: entered promiscuous mode
[  110.943573][ T7022] loop0: detected capacity change from 0 to 1024
[  110.948277][ T7020] loop1: detected capacity change from 0 to 4096
[  110.949366][ T6970] veth1_vlan: entered promiscuous mode
[  110.967912][ T7022] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.975738][ T7023] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.984871][ T7022] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102]
[  110.993979][ T7022] System zones: 0-1, 3-12
[  111.005591][ T6970] veth0_macvtap: entered promiscuous mode
[  111.010997][ T7022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.015495][ T6970] veth1_macvtap: entered promiscuous mode
[  111.036696][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.054030][ T6970] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.067335][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.073066][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.079726][ T7028] loop1: detected capacity change from 0 to 8
[  111.091689][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.093174][ T7028] SQUASHFS error: zlib decompression failed, data probably corrupt
[  111.098640][ T7028] SQUASHFS error: Failed to read block 0x9b: -5
[  111.101140][ T7028] SQUASHFS error: Unable to read metadata cache entry [99]
[  111.103477][ T7028] SQUASHFS error: Unable to read inode 0x127
[  111.106726][ T5658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.111934][ T5604] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.254294][   T53] Bluetooth: hci3: command tx timeout
[  111.953141][ T7032] loop1: detected capacity change from 0 to 512
[  111.970836][ T7032] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.471: corrupted in-inode xattr: invalid ea_ino
[  111.975562][ T7032] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  111.975783][ T7032] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.471: couldn't read orphan inode 15 (err -117)
[  111.982829][ T7032] loop1: lost filesystem error report for type 5 error -117
[  111.983748][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.012730][ T5600] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.407996][ T7044] loop1: detected capacity change from 0 to 256
[  112.428689][ T7044] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  112.674447][ T7048] loop1: detected capacity change from 0 to 4096
[  112.686681][ T7048] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  112.709565][ T7048] ntfs3(loop1): ino=19, mi_enum_attr
[  112.711390][ T7048] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  112.716001][ T7048] ntfs3(loop1): ino=1a, mi_enum_attr
[  112.717805][ T7048] ntfs3(loop1): ino=1a, mi_enum_attr
[  112.719473][ T7048] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  112.731936][ T7048] ntfs3(loop1): ino=5, "/" ntfs_readdir
[  113.324164][   T53] Bluetooth: hci3: command tx timeout
[  113.663327][ T7054] loop1: detected capacity change from 0 to 128
[  113.668092][ T7054] FAT-fs (loop1): bogus number of FAT sectors
[  113.672188][ T7054] FAT-fs (loop1): Can't find a valid FAT filesystem
[  113.715209][ T7056] loop1: detected capacity change from 0 to 256
[  113.726748][ T7056] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  113.750098][ T7056] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  113.757357][ T7056] exFAT-fs (loop1): valid_size(150994954) is greater than size(10)
[  114.054276][ T5679] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  114.204173][ T5679] usb 2-1: Using ep0 maxpacket: 16
[  114.208391][ T5679] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[  114.212231][ T5679] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.218632][ T5679] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  114.221964][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.225329][ T5679] usb 2-1: Product: syz
[  114.226956][ T5679] usb 2-1: Manufacturer: syz
[  114.228720][ T5679] usb 2-1: SerialNumber: syz
[  114.240283][ T5679] usb 2-1: 0:2 : does not exist
[  114.443340][ T5679] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  114.463104][ T5679] usb 2-1: USB disconnect, device number 18
[  114.485569][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.224173][ T5679] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  115.376996][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.381059][ T5679] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  115.384770][ T5679] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 251, using maximum allowed: 30
[  115.388731][ T5679] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 251
[  115.393007][ T5679] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  115.398932][ T5679] usb 2-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[  115.401868][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.406235][ T5679] usb 2-1: Product: syz
[  115.406238][   T53] Bluetooth: hci3: command tx timeout
[  115.407528][ T5679] usb 2-1: Manufacturer: syz
[  115.410955][ T5679] usb 2-1: SerialNumber: syz
[  115.413941][ T5679] usb 2-1: Interface #1 referenced by multiple IADs
[  115.625917][ T5679] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  115.630930][ T5679] usb 2-1: USB disconnect, device number 19
[  116.276353][ T7068] FAULT_INJECTION: forcing a failure.
[  116.276353][ T7068] name failslab, interval 1, probability 0, space 0, times 0
[  116.280818][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.1.488 Not tainted syzkaller #0 PREEMPT(full) 
[  116.280831][ T7068] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.280836][ T7068] Call Trace:
[  116.280840][ T7068]  <TASK>
[  116.280843][ T7068]  dump_stack_lvl+0xe8/0x150
[  116.280858][ T7068]  should_fail_ex+0x40c/0x560
[  116.280880][ T7068]  should_failslab+0xa8/0x100
[  116.280899][ T7068]  __kmalloc_cache_noprof+0xa8/0x660
[  116.280916][ T7068]  ? request_key_auth_new+0x100/0x980
[  116.280932][ T7068]  ? request_key_auth_new+0x100/0x980
[  116.280952][ T7068]  request_key_auth_new+0x100/0x980
[  116.280971][ T7068]  ? refcount_dec_not_one+0x136/0x1a0
[  116.280989][ T7068]  ? __pfx_request_key_auth_new+0x10/0x10
[  116.281005][ T7068]  ? up_write+0x19f/0x4a0
[  116.281016][ T7068]  ? __pfx___key_link+0x10/0x10
[  116.281033][ T7068]  request_key_and_link+0xe84/0x15a0
[  116.281054][ T7068]  ? __pfx_request_key_and_link+0x10/0x10
[  116.281069][ T7068]  ? key_type_lookup+0x29/0xc0
[  116.281088][ T7068]  ? __pfx_key_default_cmp+0x10/0x10
[  116.281107][ T7068]  ? __pfx_keyring_search_iterator+0x10/0x10
[  116.281128][ T7068]  ? down_read+0x2be/0x330
[  116.281144][ T7068]  ? _copy_from_user+0x94/0xb0
[  116.281161][ T7068]  __se_sys_request_key+0x29a/0x350
[  116.281177][ T7068]  ? __pfx___se_sys_request_key+0x10/0x10
[  116.281197][ T7068]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.281211][ T7068]  do_syscall_64+0x174/0x580
[  116.281224][ T7068]  ? trace_irq_disable+0x3b/0x140
[  116.281239][ T7068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.281252][ T7068] RIP: 0033:0x7f9ac199e159
[  116.281263][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.281273][ T7068] RSP: 002b:00007f9ac2819028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  116.281287][ T7068] RAX: ffffffffffffffda RBX: 00007f9ac1c25fa0 RCX: 00007f9ac199e159
[  116.281295][ T7068] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040
[  116.281303][ T7068] RBP: 00007f9ac1a3506b R08: 0000000000000000 R09: 0000000000000000
[  116.281310][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.281316][ T7068] R13: 00007f9ac1c26038 R14: 00007f9ac1c25fa0 R15: 00007fff99aac8a8
[  116.281336][ T7068]  </TASK>
[  117.484966][   T53] Bluetooth: hci3: command tx timeout
[  126.261570][ T4985] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  126.268853][ T4985] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  126.274845][ T4985] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  126.277929][ T4985] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  126.282023][ T4985] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  128.364702][ T4985] Bluetooth: hci4: command tx timeout
[  130.444315][ T4985] Bluetooth: hci4: command tx timeout
[  132.259617][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  132.263814][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  132.268590][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  132.273701][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  132.278822][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  132.524331][   T53] Bluetooth: hci4: command tx timeout
[  132.845415][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  132.848655][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  134.364371][   T53] Bluetooth: hci5: command tx timeout
[  134.614233][   T53] Bluetooth: hci4: command tx timeout
[  136.444289][   T53] Bluetooth: hci5: command tx timeout
[  138.524430][   T53] Bluetooth: hci5: command tx timeout
[  140.604196][   T53] Bluetooth: hci5: command tx timeout
[  169.277738][ T4985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  169.282694][ T4985] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  169.287454][ T4985] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  169.290998][ T4985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  169.293790][ T4985] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  171.324236][ T4985] Bluetooth: hci6: command tx timeout
[  173.404156][ T4985] Bluetooth: hci6: command tx timeout
[  175.484254][ T4985] Bluetooth: hci6: command tx timeout
[  177.564302][ T4985] Bluetooth: hci6: command tx timeout
[  181.009744][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  181.010529][ T5601] Bluetooth: hci2: command 0x0406 tx timeout
[  187.287161][ T5610] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  187.292722][ T5610] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  187.297070][ T5610] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  187.300720][ T5610] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  187.304302][ T5610] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  189.324307][ T4985] Bluetooth: hci7: command tx timeout
[  191.404293][ T4985] Bluetooth: hci7: command tx timeout
[  193.270400][ T5610] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  193.275983][ T5610] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  193.281777][ T5610] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  193.288239][ T5610] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  193.290693][ T5610] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  193.484293][ T4985] Bluetooth: hci7: command tx timeout
[  194.286801][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  194.289330][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  195.324474][ T4985] Bluetooth: hci8: command tx timeout
[  195.564285][ T4985] Bluetooth: hci7: command tx timeout
[  197.404799][ T4985] Bluetooth: hci8: command tx timeout
[  199.485119][ T4985] Bluetooth: hci8: command tx timeout
[  201.564326][ T4985] Bluetooth: hci8: command tx timeout
[  230.306732][ T5601] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  230.313011][ T5601] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  230.321019][ T5601] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  230.326748][ T5601] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  230.330212][ T5601] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  232.204475][ T5601] Bluetooth: hci3: command 0x0406 tx timeout
[  232.364325][ T5610] Bluetooth: hci9: command tx timeout
[  234.444267][ T5610] Bluetooth: hci9: command tx timeout
[  236.524362][ T5610] Bluetooth: hci9: command tx timeout
[  238.604344][ T5610] Bluetooth: hci9: command tx timeout
[  248.328854][ T5601] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  248.336392][ T5601] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  248.339844][ T5601] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  248.348360][ T5601] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  248.351665][ T5601] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  250.444291][ T5610] Bluetooth: hci10: command tx timeout
[  252.524205][ T5610] Bluetooth: hci10: command tx timeout
[  252.684328][ T5610] Bluetooth: hci4: command 0x0406 tx timeout
[  254.292719][ T5610] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  254.296487][ T5610] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  254.299767][ T5610] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  254.303560][ T5610] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  254.309831][ T5610] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  254.444292][   T34] INFO: task syz.2.333:6620 blocked for more than 143 seconds.
[  254.447001][   T34]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  254.448949][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.452125][   T34] task:syz.2.333       state:D stack:27816 pid:6620  tgid:6619  ppid:5605   task_flags:0x400140 flags:0x00080002
[  254.456696][   T34] Call Trace:
[  254.458038][   T34]  <TASK>
[  254.459400][   T34]  __schedule+0x17d9/0x56c0
[  254.460986][   T34]  ? __lock_acquire+0x683/0x2cf0
[  254.462558][   T34]  ? stack_trace_save+0xa9/0x100
[  254.464600][   T34]  ? check_noncircular+0xda/0x150
[  254.468738][   T34]  ? __pfx___schedule+0x10/0x10
[  254.470551][   T34]  ? schedule+0x90/0x2b0
[  254.472082][   T34]  schedule+0x164/0x2b0
[  254.473575][   T34]  schedule_timeout+0xc0/0x2c0
[  254.477374][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  254.480812][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  254.484194][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.488273][   T34]  ? wait_for_completion+0x272/0x5e0
[  254.492163][   T34]  wait_for_completion+0x2ca/0x5e0
[  254.494074][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  254.496632][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  254.498402][   T34]  ? __init_swait_queue_head+0xa8/0x150
[  254.500241][   T34]  damon_call+0x26c/0x350
[  254.501740][   T34]  damon_reclaim_commit_inputs_store+0x11d/0x1e0
[  254.503811][   T34]  ? __pfx_damon_reclaim_commit_inputs_store+0x10/0x10
[  254.507750][   T34]  ? __pfx_damon_reclaim_commit_inputs_fn+0x10/0x10
[  254.510738][   T34]  ? sysfs_file_kobj+0x1a/0x230
[  254.514206][   T34]  param_attr_store+0x214/0x310
[  254.516189][   T34]  ? __pfx_param_attr_store+0x10/0x10
[  254.518380][   T34]  ? __pfx_sysfs_kf_write+0x10/0x10
[  254.520508][   T34]  module_attr_store+0x65/0x90
[  254.522449][   T34]  kernfs_fop_write_iter+0x3a4/0x540
[  254.525325][   T34]  vfs_write+0x612/0xba0
[  254.527696][   T34]  ? __pfx_vfs_write+0x10/0x10
[  254.529653][   T34]  ? __fget_files+0x2a/0x420
[  254.531534][   T34]  ksys_write+0x150/0x270
[  254.533343][   T34]  ? __pfx_ksys_write+0x10/0x10
[  254.535405][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.537824][   T34]  do_syscall_64+0x174/0x580
[  254.539723][   T34]  ? trace_irq_disable+0x3b/0x140
[  254.541716][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.544037][   T34] RIP: 0033:0x7f076179e159
[  254.545905][   T34] RSP: 002b:00007f0762655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  254.548983][   T34] RAX: ffffffffffffffda RBX: 00007f0761a25fa0 RCX: 00007f076179e159
[  254.552017][   T34] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003
[  254.555147][   T34] RBP: 00007f076183506b R08: 0000000000000000 R09: 0000000000000000
[  254.558230][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.561246][   T34] R13: 00007f0761a26038 R14: 00007f0761a25fa0 R15: 00007ffe7ff9b188
[  254.564262][   T34]  </TASK>
[  254.565591][   T34] 
[  254.565591][   T34] Showing all locks held in the system:
[  254.568560][   T34] 3 locks held by kworker/u8:0/12:
[  254.570624][   T34]  #0: ffff888170ca0940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.575007][   T34]  #1: ffffc90000117c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.579776][   T34]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0
[  254.583403][   T34] 3 locks held by kworker/1:1/31:
[  254.585555][   T34]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.591228][   T34]  #1: ffffc90000a67c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.600697][   T34]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110
[  254.605328][   T34] 3 locks held by kworker/u9:1/32:
[  254.607374][   T34]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.611830][   T34]  #1: ffffc90000a87c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.614266][ T5610] Bluetooth: hci10: command tx timeout
[  254.616898][   T34]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  254.621604][   T34] 1 lock held by khungtaskd/34:
[  254.623574][   T34]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  254.627427][   T34] 1 lock held by klogd/5033:
[  254.629237][   T34]  #0: ffff88823c63b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  254.633069][   T34] 2 locks held by getty/5422:
[  254.635732][   T34]  #0: ffff888102aa10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  254.639568][   T34]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  254.643567][   T34] 3 locks held by kworker/1:4/5608:
[  254.645696][   T34]  #0: ffff888100069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.650451][   T34]  #1: ffffc90004c4fc40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  254.654628][   T34]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80
[  254.658149][   T34] 5 locks held by syz.2.333/6620:
[  254.660127][   T34]  #0: ffff88816f2f34f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  254.663672][   T34]  #1: ffff888176e42450 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  254.667182][   T34]  #2: ffff88816a803880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  254.670937][   T34]  #3: ffff88817715ac38 (kn->active#4){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540
[  254.674675][   T34]  #4: ffffffff8e9fd3e0 (param_lock){+.+.}-{4:4}, at: param_attr_store+0xcf/0x310
[  254.678227][   T34] 4 locks held by syz-executor/6970:
[  254.680279][   T34]  #0: ffffffff90096be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.683471][   T34]  #1: ffffffff90096a20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  254.691112][   T34]  #2: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3881/0x4a50
[  254.695349][   T34]  #3: ffffffff8e9fd3e0 (param_lock){+.+.}-{4:4}, at: ieee80211_init_rate_ctrl_alg+0x16a/0x5d0
[  254.699303][   T34] 2 locks held by syz.0.470/7030:
[  254.701291][   T34]  #0: ffffffff90096be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  254.704641][   T34]  #1: ffffffff90096a20 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  254.708155][   T34] 1 lock held by syz.1.490/7073:
[  254.710206][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  254.713877][   T34] 1 lock held by syz.1.490/7074:
[  254.716731][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  254.720365][   T34] 1 lock held by syz-executor/7077:
[  254.722373][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.726804][   T34] 1 lock held by syz-executor/7083:
[  254.728842][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.732482][   T34] 1 lock held by syz-executor/7090:
[  254.734567][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.738127][   T34] 1 lock held by syz-executor/7098:
[  254.740175][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.743680][   T34] 1 lock held by syz-executor/7104:
[  254.746431][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.750054][   T34] 1 lock held by syz-executor/7116:
[  254.752154][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.755954][   T34] 1 lock held by syz-executor/7122:
[  254.758058][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.761757][   T34] 1 lock held by syz-executor/7129:
[  254.763809][   T34]  #0: ffffffff90026380 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0
[  254.767752][   T34] 
[  254.768797][   T34] =============================================
[  254.768797][   T34] 
[  254.772091][   T34] NMI backtrace for cpu 0
[  254.772102][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  254.772115][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.772121][   T34] Call Trace:
[  254.772127][   T34]  <TASK>
[  254.772133][   T34]  dump_stack_lvl+0xe8/0x150
[  254.772153][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  254.772172][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  254.772191][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  254.772210][   T34]  sys_info+0x135/0x170
[  254.772227][   T34]  watchdog+0xfd7/0x1030
[  254.772246][   T34]  ? watchdog+0x1c7/0x1030
[  254.772264][   T34]  kthread+0x388/0x470
[  254.772279][   T34]  ? __pfx_watchdog+0x10/0x10
[  254.772291][   T34]  ? __pfx_kthread+0x10/0x10
[  254.772308][   T34]  ret_from_fork+0x514/0xb70
[  254.772347][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.772364][   T34]  ? __switch_to+0xc89/0x1420
[  254.772380][   T34]  ? __pfx_kthread+0x10/0x10
[  254.772397][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.772422][   T34]  </TASK>
[  254.772476][   T34] Sending NMI from CPU 0 to CPUs 1:
[  254.817400][    C1] NMI backtrace for cpu 1
[  254.817414][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  254.817426][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.817432][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  254.817451][    C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 ee 19 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  254.817460][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000202
[  254.817472][    C1] RAX: 0000000000178291 RBX: ffffffff819b3450 RCX: 0000000080000001
[  254.817480][    C1] RDX: 0000000000000001 RSI: ffffffff8e22723f RDI: ffffffff8c4bb580
[  254.817487][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  254.817495][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  254.817503][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  254.817511][    C1] FS:  0000000000000000(0000) GS:ffff8882a8f59000(0000) knlGS:0000000000000000
[  254.817519][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  254.817528][    C1] CR2: 00007f44d2a87e20 CR3: 000000010ec6a000 CR4: 00000000000006f0
[  254.817565][    C1] Call Trace:
[  254.817571][    C1]  <TASK>
[  254.817574][    C1]  default_idle+0x9/0x20
[  254.817589][    C1]  default_idle_call+0x72/0xb0
[  254.817603][    C1]  do_idle+0x2e0/0x540
[  254.817617][    C1]  ? __pfx_do_idle+0x10/0x10
[  254.817634][    C1]  cpu_startup_entry+0x43/0x60
[  254.817646][    C1]  start_secondary+0x101/0x110
[  254.817662][    C1]  common_startup_64+0x13e/0x157
[  254.817676][    C1]  </TASK>
[  254.881764][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  254.884395][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  254.887895][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.891771][   T34] Call Trace:
[  254.893067][   T34]  <TASK>
[  254.894225][   T34]  vpanic+0x56c/0xa60
[  254.895760][   T34]  ? __pfx___schedule+0x10/0x10
[  254.897617][   T34]  ? __pfx_vpanic+0x10/0x10
[  254.899414][   T34]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  254.901797][   T34]  panic+0xc5/0xd0
[  254.903303][   T34]  ? __pfx_panic+0x10/0x10
[  254.905001][   T34]  ? preempt_schedule_common+0x82/0xd0
[  254.907088][   T34]  ? preempt_schedule_thunk+0x16/0x40
[  254.909131][   T34]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  254.911480][   T34]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  254.913871][   T34]  watchdog+0x1030/0x1030
[  254.915550][   T34]  ? watchdog+0x1c7/0x1030
[  254.917275][   T34]  kthread+0x388/0x470
[  254.918923][   T34]  ? __pfx_watchdog+0x10/0x10
[  254.920739][   T34]  ? __pfx_kthread+0x10/0x10
[  254.922537][   T34]  ret_from_fork+0x514/0xb70
[  254.924331][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  254.926332][   T34]  ? __switch_to+0xc89/0x1420
[  254.928190][   T34]  ? __pfx_kthread+0x10/0x10
[  254.929984][   T34]  ret_from_fork_asm+0x1a/0x30
[  254.931820][   T34]  </TASK>
[  254.933787][   T34] Kernel Offset: disabled
[  254.935500][   T34] Rebooting in 86400 seconds..
