last executing test programs:

47.641624306s ago: executing program 1 (id=701):
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0x1a4, 0x85c, 0x5})
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af83, &(0x7f0000000080))

47.562934622s ago: executing program 1 (id=702):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x11, 0x0, &(0x7f0000000840))

47.515798304s ago: executing program 1 (id=703):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000002c0)={0x7, 0x3ff, 0x4, 0x5, 0x68a5, 0x0, 0x9, 0x1}, 0x20)

47.465287607s ago: executing program 1 (id=704):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0)
umount2(&(0x7f0000000140)='./file0\x00', 0x2)

47.394830178s ago: executing program 1 (id=705):
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

47.127543948s ago: executing program 1 (id=706):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioprio_get$pid(0x3, 0x0)
r1 = socket$kcm(0x21, 0xe, 0x2)
sendmsg$kcm(r1, 0x0, 0x8000)
openat$nullb(0xffffff9c, 0x0, 0x200, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x2, 0x0, 0x0, &(0x7f0000001600)=""/53, 0x0, 0xeeef0000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r5, &(0x7f0000000600)="89", 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8)
close_range(r2, 0xffffffffffffffff, 0x0)

47.099399585s ago: executing program 32 (id=706):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioprio_get$pid(0x3, 0x0)
r1 = socket$kcm(0x21, 0xe, 0x2)
sendmsg$kcm(r1, 0x0, 0x8000)
openat$nullb(0xffffff9c, 0x0, 0x200, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x2, 0x0, 0x0, &(0x7f0000001600)=""/53, 0x0, 0xeeef0000})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r5, &(0x7f0000000600)="89", 0x1)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000140)=0x4, 0x8)
close_range(r2, 0xffffffffffffffff, 0x0)

4.379767602s ago: executing program 2 (id=1274):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
getdents64(r0, &(0x7f0000000140)=""/46, 0x2e)
getdents64(r0, 0xfffffffffffffffe, 0x29)

4.01081657s ago: executing program 2 (id=1275):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xf, 0xf3}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)={0x0, 0x8, 0xc, {0xc, 0x30, "7e83a67411da6967a72f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

2.135164315s ago: executing program 2 (id=1298):
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25020000c4", @ANYRES32=r2, @ANYBLOB="080001000a010100080009000700200008000200ffffffff08000900060000000800090003000000080009"], 0x6f}, 0x1, 0x0, 0x0, 0x4044814}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

2.050575258s ago: executing program 2 (id=1300):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x757, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x20, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
symlink(0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

1.000037807s ago: executing program 3 (id=1305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800010000000000fddbdf250a80000003000611"], 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x48000)

934.660474ms ago: executing program 3 (id=1306):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0)

934.228663ms ago: executing program 3 (id=1308):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0)
lseek(r0, 0x9, 0x0)

860.332796ms ago: executing program 3 (id=1310):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076"], 0xe0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0)

808.709611ms ago: executing program 3 (id=1311):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x30, r1, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x3f, 0x0, 0x1, {0x8}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x4)

740.405084ms ago: executing program 3 (id=1312):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x88, 0x29, 0xec, 0x10, 0x93a, 0x260e, 0x1885, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xb0, 0x8, "", [{{0x9, 0x4, 0x97, 0x6, 0x0, 0x10, 0x11, 0x2c, 0xd2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)

340.163188ms ago: executing program 2 (id=1319):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x52b, 0xb, 0xfffffffffffffffe}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d4, 0x32}, 0xa, @in=@empty, 0x403502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd, 0x200000}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)

220.137799ms ago: executing program 2 (id=1322):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="8a08000002000000", 0x8)

219.923843ms ago: executing program 0 (id=1323):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9c000000390007012bbd7000ffdbdf25087c00008600048008000100", @ANYRES32], 0x9c}, 0x1, 0x0, 0x0, 0x2400c080}, 0xc010)

218.707386ms ago: executing program 0 (id=1324):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x2, 0x4, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x3, 0xa0000000}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

100.162578ms ago: executing program 0 (id=1325):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg$unix(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0)

99.896036ms ago: executing program 0 (id=1326):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0xfee, @ipv4={'\x00', '\xff\xff', @empty}, 0x800}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x6)

7.535713ms ago: executing program 0 (id=1327):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000380)={0x2})

0s ago: executing program 0 (id=1328):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0xbc, 0x21, 0x1, 0x0, 0x1, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}]}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e22, @in6=@mcast2}}]}, 0xbc}}, 0x0)

kernel console output (not intermixed with test programs):

w full-speed USB device number 7 using dummy_hcd
[   98.096579][ T6505] loop2: detected capacity change from 0 to 512
[   98.110675][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.116839][ T6505] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.127398][ T6505] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.317: bg 0: block 264: padding at end of block bitmap is not set
[   98.133573][ T6505] Quota error (device loop2): write_blk: dquota write failed
[   98.136432][ T6505] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[   98.139874][ T6505] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   98.143487][ T6505] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.317: Failed to acquire dquot type 1
[   98.151271][ T6505] Quota error (device loop2): write_blk: dquota write failed
[   98.154803][ T6505] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[   98.161268][ T6505] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[   98.171366][ T6505] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.317: Failed to acquire dquot type 1
[   98.207370][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   98.211329][ T6113] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[   98.222245][ T6113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[   98.230264][ T6113] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[   98.233941][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.245805][ T6113] usb 2-1: config 0 descriptor??
[   98.427769][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.459174][ T6113] ath6kl: Failed to submit usb control message: -71
[   98.461336][ T6113] ath6kl: unable to send the bmi data to the device: -71
[   98.478809][ T6113] ath6kl: Unable to send get target info: -71
[   98.489509][ T6113] ath6kl: Failed to init ath6kl core: -71
[   98.492594][ T6113] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[   98.510822][ T6113] usb 2-1: USB disconnect, device number 7
[   99.712198][ T6529] loop2: detected capacity change from 0 to 256
[   99.744243][ T6530] xt_hashlimit: size too large, truncated to 1048576
[   99.769049][ T6113] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   99.893394][ T6529] FAT-fs (loop2): Directory bread(block 64) failed
[   99.903366][ T6529] FAT-fs (loop2): Directory bread(block 65) failed
[   99.919444][ T6529] FAT-fs (loop2): Directory bread(block 66) failed
[   99.930367][ T6529] FAT-fs (loop2): Directory bread(block 67) failed
[   99.945785][ T6529] FAT-fs (loop2): Directory bread(block 68) failed
[   99.955217][ T6529] FAT-fs (loop2): Directory bread(block 69) failed
[   99.962799][ T6529] FAT-fs (loop2): Directory bread(block 70) failed
[   99.993578][ T6529] FAT-fs (loop2): Directory bread(block 71) failed
[  100.095088][ T6113] usb 2-1: Using ep0 maxpacket: 16
[  100.100986][ T6529] FAT-fs (loop2): Directory bread(block 72) failed
[  100.105238][ T6529] FAT-fs (loop2): Directory bread(block 73) failed
[  100.111764][ T6113] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.124759][ T6113] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.196803][ T6529] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.201793][ T6113] usb 2-1: config 0 interface 0 has no altsetting 0
[  100.204527][ T6113] usb 2-1: New USB device found, idVendor=056a, idProduct=08b1, bcdDevice= 0.00
[  100.213199][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.230595][ T6113] usb 2-1: config 0 descriptor??
[  100.674753][ T6113] wacom 0003:056A:08B1.0003: unknown main item tag 0x6
[  100.688329][ T6113] wacom 0003:056A:08B1.0003: ignoring exceeding usage max
[  100.692596][ T6113] wacom 0003:056A:08B1.0003: Unknown device_type for 'HID 056a:08b1'. Ignoring.
[  100.890721][ T6113] usb 2-1: USB disconnect, device number 8
[  102.099545][ T6548] loop2: detected capacity change from 0 to 128
[  102.103859][ T6548] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  102.119065][ T6548] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.582711][ T6556] 0: reclassify loop, rule prio 0, protocol 03
[  102.890636][ T6563] loop1: detected capacity change from 0 to 128
[  102.908714][ T6563] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  102.912818][ T6563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.965430][ T6187] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.118045][ T6187] usb 3-1: unable to get BOS descriptor or descriptor too short
[  103.122532][ T6187] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 69, changing to 7
[  103.129747][ T6187] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.133662][ T6187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.137444][ T6187] usb 3-1: Product: syz
[  103.139246][ T6187] usb 3-1: Manufacturer: syz
[  103.141283][ T6187] usb 3-1: SerialNumber: syz
[  103.373992][ T6187] usb 3-1: 1:1 : format type 0 is detected, processed as PCM
[  103.377412][ T6187] usb 3-1: 1:1 : unsupported sample bitwidth 5 in 7 bytes
[  103.391955][ T6187] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  103.421552][ T6187] usb 3-1: USB disconnect, device number 6
[  103.460833][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.782703][ T6581] loop1: detected capacity change from 0 to 32768
[  103.807552][ T6581] read_mapping_page failed!
[  103.813835][ T6581] ERROR: (device loop1): txCommit: 
[  103.813835][ T6581] 
[  104.353807][ T6593] loop1: detected capacity change from 0 to 4096
[  104.371638][ T6593] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  104.413104][ T6593] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  104.440737][ T6593] overlay: filesystem on ./bus not supported
[  104.515373][ T6187] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  104.667649][ T6187] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  104.671126][ T6187] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  104.675711][ T6187] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  104.678610][ T6187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  104.682222][ T6187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  104.687839][ T6187] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  104.704110][ T6187] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  104.708374][ T6187] usb 3-1: Product: syz
[  104.710053][ T6187] usb 3-1: Manufacturer: syz
[  104.729802][ T6187] cdc_wdm 3-1:1.0: skipping garbage
[  104.731950][ T6187] cdc_wdm 3-1:1.0: skipping garbage
[  104.764728][ T6187] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  104.772021][ T6187] cdc_wdm 3-1:1.0: Unknown control protocol
[  105.082990][ T6606] loop1: detected capacity change from 0 to 32768
[  105.089436][ T6606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.348 (6606)
[  105.108112][ T6606] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.112171][ T6606] BTRFS info (device loop1): using sha256 checksum algorithm
[  105.155242][ T6606] BTRFS info (device loop1): enabling ssd optimizations
[  105.158508][ T6606] BTRFS info (device loop1): turning on async discard
[  105.160616][ T6606] BTRFS info (device loop1): enabling free space tree
[  105.162840][ T6606] BTRFS info (device loop1): use zlib compression, level 3
[  105.206032][ T5604] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.234985][ T6625] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.351'.
[  105.347620][ T6187] usb 3-1: USB disconnect, device number 7
[  105.556181][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  105.705934][   T24] usb 2-1: Using ep0 maxpacket: 32
[  105.713957][   T24] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  105.717752][   T24] usb 2-1: config 0 has no interface number 0
[  105.728578][   T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  105.735596][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.738752][   T24] usb 2-1: Product: syz
[  105.744314][   T24] usb 2-1: Manufacturer: syz
[  105.750552][   T24] usb 2-1: SerialNumber: syz
[  105.756852][   T24] usb 2-1: config 0 descriptor??
[  105.773806][   T24] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  105.972343][   T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  106.034694][   T24] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  106.226491][ T6639] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.229805][ T6639] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.378757][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  106.381993][ T6644] usb 2-1: USB disconnect, device number 9
[  106.388404][ T6644] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  106.394459][ T6644] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  106.399664][ T6644] quatech2 2-1:0.51: device disconnected
[  106.750687][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.783387][ T6639] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.195401][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.199077][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.202722][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.208419][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.387659][ T6672] loop2: detected capacity change from 0 to 512
[  107.401367][ T6672] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.421436][ T6672] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.367: bg 0: block 393: padding at end of block bitmap is not set
[  107.427820][ T6672] loop2: lost filesystem error report for type 5 error -117
[  107.429476][ T6672] EXT4-fs (loop2): Remounting filesystem read-only
[  107.435497][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  107.438250][    C0] EXT4-fs (loop2): initial error at time 1785563316: ext4_validate_block_bitmap:441
[  107.441736][    C0] EXT4-fs (loop2): last error at time 1785563316: ext4_validate_block_bitmap:441
[  107.452497][ T6672] EXT4-fs (loop2): 2 truncates cleaned up
[  107.458036][ T6672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.469218][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.370'.
[  107.472671][ T6680] netlink: 'syz.0.370': attribute type 1 has an invalid length.
[  107.476939][ T6672] EXT4-fs warning (device loop2): empty_inline_dir:1777: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  107.499475][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.540025][ T6682] sock: sock_set_timeout: `syz.2.371' (pid 6682) tries to set negative timeout
[  107.565383][ T6646] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  107.584370][ T6686] loop2: detected capacity change from 0 to 128
[  107.615975][ T6686] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  107.628613][ T6686] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  107.633457][ T6686] ext2 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.722808][ T6646] usb 2-1: Using ep0 maxpacket: 8
[  107.726698][ T6646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  107.730562][ T6646] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.733479][ T6646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  107.745973][ T6646] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173
[  107.749903][ T5599] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.753298][ T6646] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  107.766318][ T6646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.779550][ T6646] usb 2-1: config 0 descriptor??
[  107.781696][ T6667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  107.820100][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'.
[  107.834047][ T6695] netlink: 'syz.2.377': attribute type 3 has an invalid length.
[  107.854334][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.2.377'.
[  107.866308][ T6695] netlink: 'syz.2.377': attribute type 3 has an invalid length.
[  108.017009][ T6693] loop0: detected capacity change from 0 to 32768
[  108.031467][ T6693] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.376 (6693)
[  108.049079][   T56] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  108.051369][   T56] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  108.053563][   T56] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  108.058022][   T56] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  108.078284][ T6693] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  108.082409][ T6693] BTRFS info (device loop0): using crc32c checksum algorithm
[  108.157378][ T6693] BTRFS info (device loop0): enabling ssd optimizations
[  108.160282][ T6693] BTRFS info (device loop0): turning on async discard
[  108.163152][ T6693] BTRFS info (device loop0): enabling free space tree
[  108.173322][ T6693] BTRFS info (device loop0): max_inline set to 4096
[  108.204541][ T5595] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  108.258834][ T5649] usb 2-1: USB disconnect, device number 10
[  108.259282][ T4981] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  108.836940][ T6749] loop1: detected capacity change from 0 to 512
[  108.855704][ T6749] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  108.861394][ T6749] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it
[  108.866263][ T6749] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended
[  108.886540][ T6749] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  108.889895][ T6749] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.393: corrupted in-inode xattr: invalid ea_ino
[  108.895018][ T6749] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  108.895260][ T6749] EXT4-fs (loop1): Remounting filesystem read-only
[  108.895359][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  108.895367][    C0] EXT4-fs (loop1): initial error at time 1785563318: ext4_iget_extra_inode:5025: inode 15
[  108.895379][    C0] EXT4-fs (loop1): last error at time 1785563318: ext4_iget_extra_inode:5025: inode 15
[  108.913506][ T6749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.953752][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.410213][   T34] audit: type=1326 audit(1785563318.612:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6732 comm="syz.0.387" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7fc00000
[  109.592727][ T6757] loop1: detected capacity change from 0 to 32768
[  109.601510][ T6757] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.397 (6757)
[  109.613016][ T6757] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.617927][ T6757] BTRFS info (device loop1): using crc32c checksum algorithm
[  109.639790][ T6757] BTRFS info (device loop1): setting nodatasum
[  109.641958][ T6757] BTRFS info (device loop1): enabling ssd optimizations
[  109.644078][ T6757] BTRFS info (device loop1): disabling tree log
[  109.646799][ T6757] BTRFS info (device loop1): turning on async discard
[  109.649480][ T6757] BTRFS info (device loop1): enabling free space tree
[  109.652207][ T6757] BTRFS info (device loop1): enabling auto defrag
[  109.679451][ T5604] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.835424][ T5649] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  109.862184][ T6781] loop2: detected capacity change from 0 to 512
[  110.005704][ T5649] usb 1-1: Using ep0 maxpacket: 16
[  110.010303][ T5649] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  110.012922][ T5649] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.025386][ T5649] usb 1-1: config 0 has no interface number 0
[  110.029307][ T5649] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  110.032126][ T5649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.034542][ T5649] usb 1-1: Product: syz
[  110.036102][ T5649] usb 1-1: Manufacturer: syz
[  110.037769][ T5649] usb 1-1: SerialNumber: syz
[  110.042878][ T5649] usb 1-1: config 0 descriptor??
[  110.049981][ T5649] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[  110.165429][ T6646] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  110.250999][ T5649] usb 1-1: USB disconnect, device number 6
[  110.317413][ T6646] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.321510][ T6646] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  110.328147][ T6646] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  110.331812][ T6646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.335100][ T6646] usb 2-1: Product: syz
[  110.337689][ T6646] usb 2-1: Manufacturer: syz
[  110.339558][ T6646] usb 2-1: SerialNumber: syz
[  110.343528][ T6646] usb 2-1: config 0 descriptor??
[  110.425488][ T6652] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  110.551117][ T6646] usb 2-1: USB disconnect, device number 11
[  110.575641][ T6652] usb 3-1: Using ep0 maxpacket: 16
[  110.579799][ T6652] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  110.583061][ T6652] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.587716][ T6652] usb 3-1: config 0 has no interface number 0
[  110.592323][ T6652] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  110.596446][ T6652] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.599650][ T6652] usb 3-1: Product: syz
[  110.601325][ T6652] usb 3-1: Manufacturer: syz
[  110.603210][ T6652] usb 3-1: SerialNumber: syz
[  110.608088][ T6652] usb 3-1: config 0 descriptor??
[  110.614262][ T6652] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  110.617757][ T6652] uvcvideo 3-1:0.105: No valid video chain found.
[  110.814384][ T5649] usb 3-1: USB disconnect, device number 8
[  111.054670][ T6805] loop0: detected capacity change from 0 to 32768
[  111.059266][ T6805] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.412 (6805)
[  111.065050][ T6805] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.068227][ T6805] BTRFS info (device loop0): using sha256 checksum algorithm
[  111.136609][ T6805] BTRFS info (device loop0): enabling ssd optimizations
[  111.138743][ T6805] BTRFS info (device loop0): turning on sync discard
[  111.140802][ T6805] BTRFS info (device loop0): enabling free space tree
[  111.143013][ T6805] BTRFS info (device loop0): use zlib compression, level 3
[  111.405190][   T34] audit: type=1800 audit(1785563320.592:5): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.412" name="file1" dev="loop0" ino=260 res=0 errno=0
[  111.507283][ T6832] overlayfs: failed to get inode (-116)
[  111.510124][ T6832] overlayfs: failed to get inode (-116)
[  111.513316][ T6832] overlayfs: failed to get inode (-116)
[  111.519718][ T6832] overlayfs: failed to get inode (-116)
[  111.525879][ T6834] loop1: detected capacity change from 0 to 512
[  111.530024][ T6834] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  111.539008][ T6834] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  111.544867][ T6834] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.417: bad orphan inode 131083
[  111.549428][ T6834] loop1: lost filesystem error report for type 5 error -117
[  111.551208][ T6834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  111.591077][ T6838] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved
[  111.696979][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.741854][ T6846] xt_TCPMSS: Only works on TCP SYN packets
[  111.850211][ T5595] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.118749][ T6856] 8021q: adding VLAN 0 to HW filter on device batadv1
[  112.154054][ T6856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'.
[  112.210637][ T6848] loop1: detected capacity change from 0 to 32768
[  113.239017][ T6924] netlink: 'syz.2.451': attribute type 2 has an invalid length.
[  113.289612][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[  113.292465][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.453'.
[  113.640011][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'.
[  113.794570][ T6652] kernel read not supported for file /video9 (pid: 6652 comm: kworker/1:16)
[  113.923095][ T6974] loop0: detected capacity change from 0 to 1764
[  114.691272][ T6985] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[  114.830554][ T6652] IPVS: starting estimator thread 0...
[  114.945602][ T6988] IPVS: using max 48 ests per chain, 115200 per kthread
[  115.027357][ T6993] loop2: detected capacity change from 0 to 128
[  115.033911][ T6993] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  115.038905][ T6993] hpfs: filesystem error: improperly stopped
[  115.065535][ T6993] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  115.086957][ T6993] hpfs: You really don't want any checks? You are crazy...
[  115.089734][ T6993] hpfs: Code page index out of array
[  115.091704][ T6993] hpfs: code page support is disabled
[  115.094191][ T6993] hpfs: hpfs_map_4sectors(): unaligned read
[  115.115937][ T6993] hpfs: hpfs_map_4sectors(): unaligned read
[  115.122472][ T6993] hpfs: filesystem error: unable to find root dir
[  115.274880][ T7000] tipc: Started in network mode
[  115.277243][ T7000] tipc: Node identity 72824eab73b8, cluster identity 4711
[  115.279682][ T7000] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  115.289416][ T6999] tipc: Resetting bearer <eth:syzkaller0>
[  115.324852][ T6999] tipc: Disabling bearer <eth:syzkaller0>
[  115.337246][ T7009] coredump: 446(syz.0.489): Core dump to core aborted: cannot preserve file permissions
[  115.534808][ T7012] netlink: 48 bytes leftover after parsing attributes in process `syz.2.490'.
[  116.096237][ T6646] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  116.281365][ T6646] usb 1-1: unable to get BOS descriptor or descriptor too short
[  116.286028][ T6646] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.292374][ T6646] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  116.300231][ T7037] loop2: detected capacity change from 0 to 128
[  116.310649][ T6646] usb 1-1: string descriptor 0 read error: -22
[  116.316473][ T6646] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  116.325949][ T6646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.364911][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.382596][ T7037] FAT-fs (loop2): Filesystem has been set read-only
[  116.390705][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.394408][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.398206][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.402572][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.406269][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.409863][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.413460][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.418800][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.422690][ T7037] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54)
[  116.426678][ T7033] loop1: detected capacity change from 0 to 32768
[  116.429027][   T34] audit: type=1800 audit(1785563325.662:6): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.501" name="file2" dev="loop2" ino=1048602 res=0 errno=0
[  116.610230][ T7033] read_mapping_page failed!
[  116.612983][ T7033] ERROR: (device loop1): txCommit: 
[  116.612983][ T7033] 
[  116.628343][ T7033] ERROR: (device loop1): remounting filesystem as read-only
[  116.878119][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'.
[  117.053366][ T7049] pimreg: entered allmulticast mode
[  117.058815][ T7049] pimreg: left allmulticast mode
[  117.078960][ T6652] usb 1-1: USB disconnect, device number 7
[  117.090719][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'.
[  117.128888][ T7053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.509'.
[  117.182422][ T7057] xt_nfacct: accounting object `\$9ZM#E|^c\F9YⳈ' does not exist
[  117.239005][ T7060] loop1: detected capacity change from 0 to 256
[  117.261876][ T7060] FAT-fs (loop1): Directory bread(block 64) failed
[  117.269196][ T7060] FAT-fs (loop1): Directory bread(block 65) failed
[  117.271852][ T7060] FAT-fs (loop1): Directory bread(block 66) failed
[  117.273861][ T7060] FAT-fs (loop1): Directory bread(block 67) failed
[  117.276629][ T7060] FAT-fs (loop1): Directory bread(block 68) failed
[  117.278636][ T7060] FAT-fs (loop1): Directory bread(block 69) failed
[  117.280745][ T7060] FAT-fs (loop1): Directory bread(block 70) failed
[  117.282802][ T7060] FAT-fs (loop1): Directory bread(block 71) failed
[  117.284838][ T7060] FAT-fs (loop1): Directory bread(block 72) failed
[  117.287868][ T7060] FAT-fs (loop1): Directory bread(block 73) failed
[  117.318185][   T34] audit: type=1800 audit(1785563326.552:7): pid=7060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.512" name="file1" dev="loop1" ino=1048603 res=0 errno=0
[  117.331566][ T7065] loop2: detected capacity change from 0 to 1024
[  117.336747][ T7065] EXT4-fs: inline encryption not supported
[  117.337098][ T7060] syz.1.512: attempt to access beyond end of device
[  117.337098][ T7060] loop1: rw=8388608, sector=1768, nr_sectors = 4 limit=256
[  117.339013][ T7065] EXT4-fs: Ignoring removed nomblk_io_submit option
[  117.413755][ T7065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.419426][ T7065] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.441513][   T26] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u9:0: bg 0: block 112: padding at end of block bitmap is not set
[  117.450239][   T26] EXT4-fs (loop2): Remounting filesystem read-only
[  117.453052][   T26] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5037: inode #15: block 7: len 1: ext4_ext_map_blocks returned -30
[  117.486430][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  117.534109][ T7073] loop2: detected capacity change from 0 to 256
[  117.564874][ T7073] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffac3354, utbl_chksum : 0xe619d30d)
[  117.709569][ T7077] loop2: detected capacity change from 0 to 1156
[  117.725827][ T7077] ISOFS: unable to read i-node block
[  117.728372][ T7077] isofs_fill_super: get root inode failed
[  117.733029][ T7079] loop0: detected capacity change from 0 to 256
[  117.744542][ T7079] exFAT-fs (loop0): bogus data start sector
[  117.747456][ T7079] exFAT-fs (loop0): failed to read boot sector
[  117.750040][ T7079] exFAT-fs (loop0): failed to recognize exfat type
[  117.814383][ T7081] Mass Storage Function, version: 2009/09/11
[  117.824713][ T7081] LUN: removable file: (no medium)
[  117.867491][ T7085] loop2: detected capacity change from 0 to 16
[  117.887767][ T7085] erofs (device loop2): mounted with root inode @ nid 36.
[  118.846078][ T7113] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  118.848950][ T7113] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  118.852009][ T7113] F2FS-fs (loop1): invalid crc value
[  118.885677][ T7113] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  118.891230][ T7113] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  118.893367][ T7113] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  118.912039][ T7119] syzkaller0: entered promiscuous mode
[  118.914336][ T7119] syzkaller0: entered allmulticast mode
[  118.964294][ T7127] Set syz1 is full, maxelem 14 reached
[  119.123817][ T7134] set_capacity_and_notify: 1 callbacks suppressed
[  119.123831][ T7134] loop2: detected capacity change from 0 to 164
[  119.155575][ T7134] rock: directory entry would overflow storage
[  119.157939][ T7134] rock: sig=0x4543, size=28, remaining=18
[  119.271991][ T7137] loop0: detected capacity change from 0 to 256
[  119.305446][ T7137] FAT-fs (loop0): Directory bread(block 64) failed
[  119.307687][ T7137] FAT-fs (loop0): Directory bread(block 65) failed
[  119.316793][ T7137] FAT-fs (loop0): Directory bread(block 66) failed
[  119.318998][ T7137] FAT-fs (loop0): Directory bread(block 67) failed
[  119.321097][ T7137] FAT-fs (loop0): Directory bread(block 68) failed
[  119.323132][ T7137] FAT-fs (loop0): Directory bread(block 69) failed
[  119.325137][ T7137] FAT-fs (loop0): Directory bread(block 70) failed
[  119.356252][ T7137] FAT-fs (loop0): Directory bread(block 71) failed
[  119.360091][ T7137] FAT-fs (loop0): Directory bread(block 72) failed
[  119.363807][ T7137] FAT-fs (loop0): Directory bread(block 73) failed
[  119.479588][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[  119.484212][ T7147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'.
[  119.617674][ T7153] loop0: detected capacity change from 0 to 8
[  119.636368][ T7153] SQUASHFS error: lzo decompression failed, data probably corrupt
[  119.641619][ T7153] SQUASHFS error: Failed to read block 0x91: -5
[  119.644209][ T7153] SQUASHFS error: Unable to read metadata cache entry [8f]
[  119.662667][ T7153] SQUASHFS error: Unable to read inode 0x7
[  119.680523][ T7157] loop1: detected capacity change from 0 to 256
[  119.683748][ T7157] exfat: Deprecated parameter 'namecase'
[  119.718227][ T7157] exfat: Deprecated parameter 'namecase'
[  119.751706][ T7157] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  120.155432][ T5649] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  120.377201][ T5649] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  120.380751][ T5649] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  120.380918][ T7163] cgroup: fork rejected by pids controller in /syz0
[  120.385244][ T5649] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  120.391199][ T5649] usb 2-1: config 0 has no interface number 0
[  120.394156][ T5649] usb 2-1: config 0 has no interface number 1
[  120.399900][ T5649] usb 2-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f
[  120.403765][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.407296][ T5649] usb 2-1: Product: syz
[  120.409228][ T5649] usb 2-1: Manufacturer: syz
[  120.411261][ T5649] usb 2-1: SerialNumber: syz
[  120.418760][ T5649] usb 2-1: config 0 descriptor??
[  120.423044][ T5649] cdc_acm 2-1:0.51: probe with driver cdc_acm failed with error -22
[  120.636474][  T925] usb 2-1: USB disconnect, device number 12
[  120.762011][ T7228] netlink: 'syz.0.570': attribute type 4 has an invalid length.
[  120.766118][ T5649] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  120.926985][ T5649] usb 3-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping
[  120.930527][ T5649] usb 3-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[  120.936079][ T5649] usb 3-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00
[  120.938966][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.941672][ T5649] usb 3-1: Product: syz
[  120.943157][ T5649] usb 3-1: Manufacturer: syz
[  120.944760][ T5649] usb 3-1: SerialNumber: syz
[  120.951448][ T5649] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X900F) Rev (0X0): Eagle I
[  121.089541][ T5649] usb 3-1: reset high-speed USB device number 9 using dummy_hcd
[  121.226460][ T7238] loop1: detected capacity change from 0 to 2048
[  121.238292][ T7238] NILFS (loop1): invalid segment: Magic number mismatch
[  121.241777][ T7238] NILFS (loop1): trying rollback from an earlier position
[  121.260667][ T7238] NILFS (loop1): recovery cancelled because norecovery option was specified for a read/write mount
[  121.363081][ T7243] loop1: detected capacity change from 0 to 64
[  121.936124][  T925] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  122.085451][  T925] usb 1-1: Using ep0 maxpacket: 8
[  122.089332][  T925] usb 1-1: unable to get BOS descriptor or descriptor too short
[  122.093123][  T925] usb 1-1: config 4 interface 0 has no altsetting 0
[  122.099028][  T925] usb 1-1: string descriptor 0 read error: -22
[  122.101588][  T925] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  122.104685][  T925] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  122.115996][  T925] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  122.130123][  T925] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  122.139594][  T925] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  122.142106][  T925] usb 1-1: media controller created
[  122.156773][  T925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  122.316830][  T925] zl10353_read_register: readreg error (reg=127, ret==0)
[  122.343018][  T925] usb 1-1: USB disconnect, device number 8
[  122.663545][ T7272] pim6reg9: entered allmulticast mode
[  122.710664][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'.
[  122.889752][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  123.212803][ T7286] loop0: detected capacity change from 0 to 32768
[  123.216214][ T5649] usb 3-1: device descriptor read/64, error -71
[  123.251574][ T7286] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  123.299174][ T7286] syz.0.596 (7286) used greatest stack depth: 19016 bytes left
[  123.339940][ T5595] ocfs2: Unmounting device (7,0) on (node local)
[  123.455864][ T5649] usb 3-1: reset high-speed USB device number 9 using dummy_hcd
[  123.460832][ T5649] usb 3-1: device reset changed ep0 maxpacket size!
[  123.468384][ T5649] usb 3-1: [UEAGLE-ATM] urb submission failed with error -19
[  123.471426][ T5649] ueagle-atm 3-1:1.0: usbatm_usb_probe: bind failed: -19!
[  123.492853][ T5649] usb 3-1: USB disconnect, device number 9
[  123.559804][ T7295] loop0: detected capacity change from 0 to 1024
[  123.560847][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'.
[  123.659698][ T5649] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  123.667729][ T7307] sctp: [Deprecated]: syz.0.605 (pid 7307) Use of int in max_burst socket option deprecated.
[  123.667729][ T7307] Use struct sctp_assoc_value instead
[  123.709170][ T7311] loop0: detected capacity change from 0 to 256
[  123.714603][ T7311] exfat: Deprecated parameter 'namecase'
[  123.724340][ T7311] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  123.805772][ T5649] usb 3-1: Using ep0 maxpacket: 8
[  123.817732][ T5649] usb 3-1: config 201 has an invalid interface number: 249 but max is 0
[  123.820420][ T5649] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  123.824180][ T5649] usb 3-1: config 201 has no interface number 0
[  123.837368][ T5649] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  123.841817][ T5649] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.844046][ T7322] netlink: 'syz.1.613': attribute type 10 has an invalid length.
[  123.846342][ T5649] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  123.855873][ T5649] usb 3-1: config 201 interface 249 has no altsetting 0
[  123.867585][ T5649] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  123.870493][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.873288][ T5649] usb 3-1: Product: syz
[  123.875181][ T5649] usb 3-1: Manufacturer: syz
[  123.877326][ T5649] usb 3-1: SerialNumber: syz
[  123.942429][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[  123.946369][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.616'.
[  123.964324][ T7329] block2mtd: error: cannot open device 
[  124.164400][ T5649] ath6kl: Failed to submit usb control message: -71
[  124.172575][ T5649] ath6kl: unable to send the bmi data to the device: -71
[  124.179131][ T5649] ath6kl: Unable to send get target info: -71
[  124.196862][ T5649] ath6kl: Failed to init ath6kl core: -71
[  124.199979][ T5649] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71
[  124.222701][ T5649] usb 3-1: USB disconnect, device number 10
[  124.694380][ T7334] loop0: detected capacity change from 0 to 131072
[  124.755947][ T7334] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.765909][ T7334] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  124.787225][ T7334] F2FS-fs (loop0): recover xattr in inode (7), error(0)
[  124.790226][ T7334] F2FS-fs (loop0): set inode (7) has corrupted xattr
[  124.795757][ T7334] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[  125.135487][ T6642] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  125.305389][ T6642] usb 3-1: Using ep0 maxpacket: 32
[  125.313825][ T6642] usb 3-1: unable to get BOS descriptor or descriptor too short
[  125.321529][ T6642] usb 3-1: config 7 has an invalid interface number: 187 but max is 0
[  125.324888][ T6642] usb 3-1: config 7 has no interface number 0
[  125.335754][ T6642] usb 3-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  125.345625][ T6642] usb 3-1: config 7 interface 187 has no altsetting 0
[  125.358081][ T6642] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  125.361764][ T6642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.364916][ T6642] usb 3-1: Product: syz
[  125.372204][ T6642] usb 3-1: Manufacturer: syz
[  125.374137][ T6642] usb 3-1: SerialNumber: syz
[  125.595442][ T6642] usb 3-1: Limiting number of CPorts to U8_MAX
[  125.603852][ T6642] usb 3-1: Unknown endpoint type found, address 0x07
[  125.610721][ T6642] usb 3-1: Unknown endpoint type found, address 0x03
[  125.613469][ T6642] usb 3-1: Not enough endpoints found in device, aborting!
[  125.826455][  T925] usb 3-1: USB disconnect, device number 11
[  126.069129][ T7388] loop0: detected capacity change from 0 to 512
[  126.077862][ T7388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  126.097615][ T7388] EXT4-fs (loop0): 1 truncate cleaned up
[  126.101455][ T7388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.132487][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.301624][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.312061][ T7390] loop1: detected capacity change from 0 to 32768
[  126.356620][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.382453][ T7404] loop2: detected capacity change from 0 to 1024
[  126.399623][   T34] audit: type=1800 audit(1785563335.632:8): pid=7404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.646" name="file1" dev="loop2" ino=20 res=0 errno=0
[  126.410147][ T7404] syz.2.646: attempt to access beyond end of device
[  126.410147][ T7404] loop2: rw=8423425, sector=5778, nr_sectors = 2 limit=1024
[  126.418202][ T7390] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.419601][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.444408][ T7390] XFS (loop1): Ending clean mount
[  126.501490][ T5604] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.791102][ T7429] tmpfs: Bad value for 'mpol'
[  127.075949][ T5649] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  127.182637][ T7446] syzkaller0: entered promiscuous mode
[  127.184458][ T7446] syzkaller0: entered allmulticast mode
[  127.215585][ T6642] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  127.235379][ T5649] usb 3-1: Using ep0 maxpacket: 8
[  127.242121][ T5649] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  127.246122][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.249473][ T5649] usb 3-1: Product: syz
[  127.251150][ T5649] usb 3-1: Manufacturer: syz
[  127.252961][ T5649] usb 3-1: SerialNumber: syz
[  127.260032][ T5649] usb 3-1: config 0 descriptor??
[  127.367344][ T6642] usb 1-1: Using ep0 maxpacket: 32
[  127.371600][ T6642] usb 1-1: unable to get BOS descriptor or descriptor too short
[  127.376857][ T6642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.385090][ T6642] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.398593][ T6642] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  127.402290][ T6642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.406394][ T6642] usb 1-1: Product: syz
[  127.408131][ T6642] usb 1-1: Manufacturer: syz
[  127.410033][ T6642] usb 1-1: SerialNumber: syz
[  127.465204][ T5649] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  127.631004][ T6642] usb 1-1: unit 0 not found!
[  127.661898][ T6642] usb 1-1: USB disconnect, device number 9
[  127.681412][ T5649] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  127.695035][ T5716] udevd[5716]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.712567][ T5649] usb 3-1: USB disconnect, device number 12
[  128.128703][   T34] audit: type=1326 audit(1785563337.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.1.671" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a8e39e019 code=0x0
[  128.204945][ T7470] hub 1-0:1.0: USB hub found
[  128.206752][ T7470] hub 1-0:1.0: 1 port detected
[  128.258830][ T7477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.674'.
[  128.552367][ T7489] ci_hdrc pcspkr: platform data missing
[  128.711345][ T7505] loop2: detected capacity change from 0 to 256
[  128.724173][ T7505] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  128.890809][ T7511] netlink: 3 bytes leftover after parsing attributes in process `syz.2.690'.
[  128.955483][ T5649] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  129.106819][ T5649] usb 1-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config
[  129.110116][ T5649] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 12544, setting to 64
[  129.113565][ T5649] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  129.119557][ T5649] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  129.122395][ T5649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.124990][ T5649] usb 1-1: Product: syz
[  129.126524][ T5649] usb 1-1: Manufacturer: syz
[  129.128052][ T5649] usb 1-1: SerialNumber: syz
[  129.130936][ T5649] usb 1-1: config 0 descriptor??
[  129.540383][ T6646] usb 1-1: USB disconnect, device number 10
[  129.735462][ T6642] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  129.887164][ T6642] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  129.891661][ T6642] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  129.897599][ T6642] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  129.901193][ T6642] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.908028][ T7522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  129.914445][ T6642] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  130.083760][ T7524] netlink: 80 bytes leftover after parsing attributes in process `syz.0.696'.
[  130.087575][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.696'.
[  130.210056][ T6642] usb 2-1: USB disconnect, device number 13
[  130.545433][ T6652] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  130.697249][ T6652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.701655][ T6652] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.706012][ T6652] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.711118][ T6652] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.714785][ T6652] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.730679][ T6652] usb 1-1: config 0 descriptor??
[  130.913095][ T7540] loop1: detected capacity change from 0 to 512
[  130.917653][ T7540] EXT4-fs: Ignoring removed oldalloc option
[  130.923254][ T7540] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  130.940755][ T7540] EXT4-fs (loop1): 1 truncate cleaned up
[  130.944158][ T7540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.981550][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.140379][ T6652] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 7/15
[  131.143874][ T6652] plantronics 0003:047F:FFFF.0004: parse failed
[  131.147167][ T6652] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22
[  131.218777][ T5656] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.298009][ T5656] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.347401][ T5656] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.363979][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.368292][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.370968][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.373858][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.376701][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.396401][ T5656] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.461542][ T5656] bridge_slave_1: left allmulticast mode
[  131.463428][ T5656] bridge_slave_1: left promiscuous mode
[  131.466488][ T5656] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.474013][ T5656] bridge_slave_0: left allmulticast mode
[  131.476938][ T5656] bridge_slave_0: left promiscuous mode
[  131.478834][ T5656] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.597743][ T5656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.602897][ T5656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.606838][ T5656] bond0 (unregistering): Released all slaves
[  131.611571][ T5656] bond1 (unregistering): Released all slaves
[  131.718628][ T5656] tipc: Left network mode
[  131.877349][ T6652] usb 1-1: USB disconnect, device number 11
[  131.951526][ T5656] hsr_slave_0: left promiscuous mode
[  131.956659][ T5656] hsr_slave_1: left promiscuous mode
[  131.958682][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.966429][ T5656] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.972116][ T5656] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.974790][ T5656] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.993045][ T5656] veth1_macvtap: left promiscuous mode
[  131.995212][ T5656] veth0_macvtap: left promiscuous mode
[  132.048770][ T5656] pim6reg9 (unregistering): left allmulticast mode
[  132.146540][ T5656] team0 (unregistering): Port device team_slave_1 removed
[  132.170134][ T5656] team0 (unregistering): Port device team_slave_0 removed
[  132.279236][ T7581] loop2: detected capacity change from 0 to 256
[  132.284222][ T7581] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  132.397807][ T7576] bridge_slave_0: left allmulticast mode
[  132.401864][ T7576] bridge_slave_0: left promiscuous mode
[  132.404851][ T7576] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.430213][ T7576] bridge_slave_1: left allmulticast mode
[  132.432598][ T7576] bridge_slave_1: left promiscuous mode
[  132.435055][ T7576] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.447547][ T7576] bond0: (slave bond_slave_0): Releasing backup interface
[  132.451997][ T7576] bond0: (slave bond_slave_1): Releasing backup interface
[  132.456897][ T7576] team0: Port device team_slave_0 removed
[  132.460518][ T7576] team0: Port device team_slave_1 removed
[  132.463601][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.469703][ T7576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.473159][ T7576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  132.494930][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.498463][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.501267][ T7544] bridge_slave_0: entered allmulticast mode
[  132.504243][ T7544] bridge_slave_0: entered promiscuous mode
[  132.509571][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.515651][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.518738][ T7544] bridge_slave_1: entered allmulticast mode
[  132.521284][ T7544] bridge_slave_1: entered promiscuous mode
[  132.566220][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.578774][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.621110][ T7544] team0: Port device team_slave_0 added
[  132.629268][ T7544] team0: Port device team_slave_1 added
[  132.688079][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0
[  132.701089][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.720987][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  132.733132][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1
[  132.738160][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  132.753564][ T7597] loop2: detected capacity change from 0 to 4096
[  132.756437][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.760676][ T7597] EXT4-fs: inline encryption not supported
[  132.764046][ T7597] EXT4-fs (loop2): Test dummy encryption mode enabled
[  132.796620][ T7597] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  132.799343][ T7597] System zones: 0-5
[  132.801772][ T7597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.814301][ T7597] EXT4-fs (loop2): shut down requested (2)
[  132.828734][ T7544] hsr_slave_0: entered promiscuous mode
[  132.830951][ T7544] hsr_slave_1: entered promiscuous mode
[  132.834293][ T7544] debugfs: 'hsr0' already exists in 'hsr'
[  132.836779][ T7544] Cannot create hsr debugfs directory
[  132.840380][ T5599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.935002][ T7602] tun0: tun_chr_ioctl cmd 1074812118
[  132.992023][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'.
[  133.023338][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'.
[  133.083042][ T7609] ip6erspan0: entered promiscuous mode
[  133.179721][ T7544] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  133.194561][ T7544] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  133.219975][ T7544] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  133.231135][ T7544] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  133.328787][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.346185][ T7544] 8021q: adding VLAN 0 to HW filter on device team0
[  133.349092][ T7641] loop2: detected capacity change from 0 to 8
[  133.359106][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.361360][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.370842][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.373114][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.384657][ T7641] SQUASHFS error: Failed to read block 0x6de: -5
[  133.392614][ T7641] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  133.396484][ T7641] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  133.455622][   T56] Bluetooth: hci2: command tx timeout
[  133.681087][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.714342][ T7544] veth0_vlan: entered promiscuous mode
[  133.722945][ T7544] veth1_vlan: entered promiscuous mode
[  133.736652][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  133.754367][ T7544] veth0_macvtap: entered promiscuous mode
[  133.760458][ T7544] veth1_macvtap: entered promiscuous mode
[  133.774276][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.792277][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.799917][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.803675][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.809136][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.812818][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  133.876014][ T1233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.879285][ T1233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.908383][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  133.911628][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  133.918935][    T9] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  133.921459][    T9] usb 3-1: config 0 has no interface number 0
[  133.923504][    T9] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.929130][    T9] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.932497][    T9] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  133.943284][    T9] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  133.954302][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.960421][    T9] usb 3-1: config 0 descriptor??
[  133.982924][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input7
[  134.041645][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'.
[  134.110857][ T7660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.712'.
[  134.202358][    T9] usb 3-1: USB disconnect, device number 13
[  134.368256][ T7673] sctp: [Deprecated]: syz.0.736 (pid 7673) Use of int in max_burst socket option deprecated.
[  134.368256][ T7673] Use struct sctp_assoc_value instead
[  134.475543][ T6646] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  134.625953][ T6646] usb 4-1: Using ep0 maxpacket: 16
[  134.629786][ T6646] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[  134.634199][ T6646] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  134.639809][ T6646] usb 4-1: config 0 interface 0 has no altsetting 0
[  134.642345][ T6646] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[  134.646826][ T6646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.652000][ T6646] usb 4-1: config 0 descriptor??
[  135.064297][ T6646] hid (null): report_id 0 is invalid
[  135.068401][ T6646] hid-corsair-void 0003:1B1C:0A30.0005: report_id 0 is invalid
[  135.071025][ T6646] hid-corsair-void 0003:1B1C:0A30.0005: item 0 4 1 8 parsing failed
[  135.073908][ T6646] hid-corsair-void 0003:1B1C:0A30.0005: parse failed (reason: -22)
[  135.078464][ T6646] hid-corsair-void 0003:1B1C:0A30.0005: probe with driver hid-corsair-void failed with error -22
[  135.212340][ T7680] loop0: detected capacity change from 0 to 4096
[  135.219299][ T7680] EXT4-fs: Ignoring removed mblk_io_submit option
[  135.222963][ T7680] EXT4-fs (loop0): Test dummy encryption mode enabled
[  135.230657][ T7680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  135.254850][ T7680] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  135.275161][ T6645] usb 4-1: USB disconnect, device number 2
[  135.286346][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.343594][ T7683] loop0: detected capacity change from 0 to 2048
[  135.374461][ T7683] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.404928][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.535457][   T56] Bluetooth: hci2: command tx timeout
[  135.935360][ T5663] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  136.095617][ T5663] usb 1-1: Using ep0 maxpacket: 32
[  136.100262][ T5663] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.104401][ T5663] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  136.109754][ T5663] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  136.117479][ T5663] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.01
[  136.121023][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  136.123979][ T5663] usb 1-1: Product: syz
[  136.125959][ T5663] usb 1-1: Manufacturer: syz
[  136.127839][ T5663] usb 1-1: SerialNumber: syz
[  136.131916][ T5663] usb 1-1: config 0 descriptor??
[  136.142042][ T5663] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  136.144863][ T5663] usb 1-1: MIDIStreaming interface descriptor not found
[  136.349168][ T5663] usb 1-1: USB disconnect, device number 12
[  136.951792][ T7720] loop0: detected capacity change from 0 to 512
[  136.958749][ T7720] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.756: inode has both inline data and extents flags
[  136.966777][ T7720] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  136.967042][ T7720] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.756: couldn't read orphan inode 15 (err -117)
[  136.975567][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  136.975581][    C0] EXT4-fs (loop0): initial error at time 1785563346: ext4_orphan_get:1391: inode 15
[  136.975601][    C0] EXT4-fs (loop0): last error at time 1785563346: ext4_orphan_get:1391: inode 15
[  136.987216][ T7720] loop0: lost filesystem error report for type 5 error -117
[  136.988679][ T7720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.056159][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.263233][ T7731] syz.3.760 (7731) used obsolete PPPIOCDETACH ioctl
[  137.616006][   T56] Bluetooth: hci2: command tx timeout
[  138.018494][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  138.020549][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  138.648610][ T7776] rt1711h 0-0004: check vid/pid fail
[  138.654201][ T7776] i2c i2c-0: new_device: Instantiated device rt1711h at 0x04
[  139.655571][ T5663] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  139.695360][   T56] Bluetooth: hci2: command tx timeout
[  139.815388][ T5663] usb 3-1: Using ep0 maxpacket: 32
[  139.819074][ T5663] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  139.822710][ T5663] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  139.827654][ T5663] usb 3-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00
[  139.830983][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.834869][ T5663] usb 3-1: config 0 descriptor??
[  139.956041][ T7823] loop0: detected capacity change from 0 to 512
[  139.973877][ T7823] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  140.102292][ T7829] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.105927][ T7829] 8021q: adding VLAN 0 to HW filter on device team0
[  140.110847][ T7829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.131160][ T7829] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  140.135033][ T7829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  140.154216][ T7829] veth1_vlan: left promiscuous mode
[  140.162474][ T7829] veth0_vlan: left promiscuous mode
[  140.166140][ T7829] veth0_vlan: entered promiscuous mode
[  140.172818][ T7829] veth1_vlan: entered promiscuous mode
[  140.178968][ T7829] veth1_macvtap: left promiscuous mode
[  140.186117][ T7829] veth0_macvtap: left promiscuous mode
[  140.188551][ T7829] veth0_macvtap: entered promiscuous mode
[  140.194951][ T7829] veth1_macvtap: entered promiscuous mode
[  140.216586][ T7829] erspan0: entered promiscuous mode
[  140.267778][ T5663] wacom 0003:056A:0014.0006: ignoring exceeding usage max
[  140.275693][ T5663] wacom 0003:056A:0014.0006: unknown main item tag 0x2
[  140.278689][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.301815][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.305800][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.309842][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.313460][ T7839] syzkaller0: entered promiscuous mode
[  140.317009][ T7839] syzkaller0: entered allmulticast mode
[  140.471306][ T5663] usb 3-1: USB disconnect, device number 14
[  141.523096][ T7868] tipc: Started in network mode
[  141.524719][ T7868] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711
[  141.828276][ T7877] loop0: detected capacity change from 0 to 512
[  141.831397][ T7877] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  141.838733][ T7877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  141.841269][ T7877] EXT4-fs (loop0): orphan cleanup on readonly fs
[  141.843291][ T7877] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.827: bad orphan inode 3
[  141.847021][ T7877] loop0: lost filesystem error report for type 5 error -117
[  141.847305][ T7877] EXT4-fs (loop0): Remounting filesystem read-only
[  141.852694][ T7877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  141.909152][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  141.936221][   T56] Bluetooth: hci2: command 0x2016 tx timeout
[  142.064483][   T34] audit: type=1326 audit(1785563351.292:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7887 comm="syz.3.832" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8702b9e019 code=0x0
[  142.183024][ T7893] loop3: detected capacity change from 0 to 512
[  142.219729][ T7893] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  142.234191][ T7893] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.835: bad orphan inode 131083
[  142.241742][ T7893] loop3: lost filesystem error report for type 5 error -117
[  142.244497][ T7893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.316959][ T7898] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 13: comm syz.3.835: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  143.322912][ T7897] syz.0.834 (7897): drop_caches: 2
[  143.442343][ T7900] scsi_dev_info_list_add_str: bad dev info string 'vendor' '' ''
[  143.898273][ T7544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.925162][ T7915] loop0: detected capacity change from 0 to 1024
[  143.973420][ T7915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.995884][ T7915] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.051006][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.114424][ T7927] loop2: detected capacity change from 0 to 256
[  144.158081][ T7931] loop3: detected capacity change from 0 to 512
[  144.189543][ T7931] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.847: corrupted in-inode xattr: e_value out of bounds
[  144.193989][ T7931] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  144.194200][ T7931] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.847: couldn't read orphan inode 15 (err -117)
[  144.197724][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  144.197733][    C1] EXT4-fs (loop3): initial error at time 1785563353: ext4_iget_extra_inode:5025: inode 15
[  144.197745][    C1] EXT4-fs (loop3): last error at time 1785563353: ext4_iget_extra_inode:5025: inode 15
[  144.211850][ T7931] loop3: lost filesystem error report for type 5 error -117
[  144.213663][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.261211][ T7939] loop2: detected capacity change from 0 to 256
[  144.281061][ T7544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.289568][ T7939] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  144.314225][ T7939] FAT-fs (loop2): error, invalid FAT chain (i_pos 196, last_block 8200)
[  144.322659][ T7939] FAT-fs (loop2): Filesystem has been set read-only
[  144.538808][ T7963] loop0: detected capacity change from 0 to 2048
[  144.588758][ T5716]  loop0: p2 p3 p7
[  144.605592][ T7970] loop2: detected capacity change from 0 to 2048
[  144.630906][ T7963]  loop0: p2 p3 p7
[  144.640173][ T5603] GPT:first_usable_lbas don't match.
[  144.641958][ T5603] GPT:34 != 290
[  144.643332][ T5603] GPT: Use GNU Parted to correct GPT errors.
[  144.648204][ T5603]  loop2: p1 p2 p3
[  144.676661][ T5041]  loop0: p2 p3 p7
[  144.681461][ T7970] GPT:first_usable_lbas don't match.
[  144.683666][ T7970] GPT:34 != 290
[  144.685039][ T7970] GPT: Use GNU Parted to correct GPT errors.
[  144.688550][ T7970]  loop2: p1 p2 p3
[  144.719993][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  144.725201][ T5603] udevd[5603]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  144.727555][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  144.765209][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  144.784998][ T5716] udevd[5716]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  144.790676][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  144.797707][ T6105] udevd[6105]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  144.797763][ T5603] udevd[5603]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  144.803383][ T7456] udevd[7456]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  144.848560][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  144.893582][ T7978] IPVS: persistence engine module ip_vs_pe_ not found
[  144.899567][ T7967] loop3: detected capacity change from 0 to 40427
[  144.914905][ T7967] F2FS-fs (loop3): build fault injection type: 0x7
[  144.918344][ T7967] F2FS-fs (loop3): invalid crc value
[  144.963940][ T7967] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.973207][ T7967] F2FS-fs (loop3): Start checkpoint disabled!
[  144.982925][ T7967] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  144.986201][ T7967] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  145.024775][ T1095] kworker/u10:7: attempt to access beyond end of device
[  145.024775][ T1095] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  145.031780][ T1095] kworker/u10:7: attempt to access beyond end of device
[  145.031780][ T1095] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  145.046636][ T1095] CPU: 0 UID: 0 PID: 1095 Comm: kworker/u10:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  145.046659][ T1095] Tainted: [L]=SOFTLOCKUP
[  145.046667][ T1095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  145.046675][ T1095] Workqueue: writeback wb_workfn (flush-7:3)
[  145.046700][ T1095] Call Trace:
[  145.046705][ T1095]  <TASK>
[  145.046710][ T1095]  dump_stack_lvl+0xe8/0x150
[  145.046727][ T1095]  f2fs_handle_critical_error+0x36f/0x530
[  145.046754][ T1095]  f2fs_write_end_io+0xcfc/0x1030
[  145.046769][ T1095]  ? blkg_put+0x22/0x240
[  145.046794][ T1095]  __submit_merged_bio+0x258/0x700
[  145.046812][ T1095]  __submit_merged_write_cond+0x3c9/0x4e0
[  145.046837][ T1095]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  145.046875][ T1095]  f2fs_write_data_pages+0x2afc/0x37d0
[  145.046911][ T1095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.046933][ T1095]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  145.046962][ T1095]  ? add_lock_to_list+0xc7/0x100
[  145.046979][ T1095]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  145.047011][ T1095]  ? __lock_acquire+0x683/0x2cd0
[  145.047037][ T1095]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  145.047052][ T1095]  do_writepages+0x338/0x560
[  145.047073][ T1095]  ? reacquire_held_locks+0x104/0x190
[  145.047087][ T1095]  ? writeback_sb_inodes+0x46a/0x1b30
[  145.047105][ T1095]  __writeback_single_inode+0x12e/0x1050
[  145.047126][ T1095]  writeback_sb_inodes+0x9eb/0x1b30
[  145.047155][ T1095]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  145.047194][ T1095]  ? rcu_is_watching+0x15/0xb0
[  145.047207][ T1095]  ? queue_io+0x2d3/0x4a0
[  145.047229][ T1095]  wb_writeback+0x426/0xb40
[  145.047243][ T1095]  ? queue_io+0x2d1/0x4a0
[  145.047258][ T1095]  ? __pfx_wb_writeback+0x10/0x10
[  145.047270][ T1095]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.047296][ T1095]  wb_workfn+0x414/0xf50
[  145.047314][ T1095]  ? look_up_lock_class+0x57/0x110
[  145.047339][ T1095]  ? __pfx_wb_workfn+0x10/0x10
[  145.047357][ T1095]  ? do_raw_spin_lock+0x12b/0x2f0
[  145.047379][ T1095]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  145.047406][ T1095]  ? rcu_is_watching+0x15/0xb0
[  145.047421][ T1095]  ? process_scheduled_works+0x9bd/0x1470
[  145.047436][ T1095]  process_scheduled_works+0xa2f/0x1470
[  145.047468][ T1095]  ? __pfx_process_scheduled_works+0x10/0x10
[  145.047515][ T1095]  ? assign_work+0x3cf/0x5d0
[  145.047534][ T1095]  worker_thread+0xa44/0xfb0
[  145.047566][ T1095]  kthread+0x388/0x470
[  145.047582][ T1095]  ? __pfx_worker_thread+0x10/0x10
[  145.047594][ T1095]  ? __pfx_kthread+0x10/0x10
[  145.047610][ T1095]  ret_from_fork+0x51e/0xb90
[  145.047627][ T1095]  ? __pfx_ret_from_fork+0x10/0x10
[  145.047640][ T1095]  ? __switch_to+0xc7d/0x1450
[  145.047656][ T1095]  ? __pfx_kthread+0x10/0x10
[  145.047677][ T1095]  ret_from_fork_asm+0x1a/0x30
[  145.047704][ T1095]  </TASK>
[  145.047709][ T1095] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  145.328992][ T8003] loop0: detected capacity change from 0 to 256
[  145.572526][ T8014] loop0: detected capacity change from 0 to 128
[  145.586253][ T8014] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  145.591702][ T8014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.652717][ T8001] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.872 (8001)
[  145.687150][ T8001] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.690270][ T8001] BTRFS info (device loop2): using sha256 checksum algorithm
[  145.768116][ T8001] BTRFS info (device loop2): enabling ssd optimizations
[  145.770348][ T8001] BTRFS info (device loop2): turning on async discard
[  145.779641][ T8001] BTRFS info (device loop2): enabling free space tree
[  145.815644][ T5599] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.098526][   T56] Bluetooth: hci2: command 0x2016 tx timeout
[  146.299990][ T8067] netlink: 'syz.2.890': attribute type 2 has an invalid length.
[  146.422068][ T8071] ./file0: Can't open blockdev
[  146.575517][ T6646] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  146.696600][ T8073] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.722044][ T8073] XFS (loop3): Ending clean mount
[  146.725696][ T6646] usb 3-1: Using ep0 maxpacket: 16
[  146.730046][ T6646] usb 3-1: unable to get BOS descriptor or descriptor too short
[  146.731846][ T8073] XFS (loop3): Quotacheck needed: Please wait.
[  146.733605][ T6646] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.743094][ T6646] usb 3-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=cc.c5
[  146.746219][ T6646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.749233][ T6646] usb 3-1: Product: syz
[  146.750904][ T6646] usb 3-1: Manufacturer: syz
[  146.752541][ T6646] usb 3-1: SerialNumber: syz
[  146.781106][ T8073] XFS (loop3): Quotacheck: Done.
[  146.854446][ T7544] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.999690][ T6646] usb 3-1: palm_os_4_probe - error -71 getting connection info
[  147.002141][ T6646] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  147.019056][ T6646] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  147.033224][ T6646] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  147.052139][ T6646] usb 3-1: USB disconnect, device number 15
[  147.065935][ T6646] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  147.093637][ T6646] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  147.107728][ T6646] visor 3-1:1.0: device disconnected
[  147.122856][ T8088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.152739][ T8088] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.167227][ T8088] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.896: corrupted xattr block 33: invalid header
[  147.203183][ T7544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.299477][ T8096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.899'.
[  147.340285][ T8098] set_capacity_and_notify: 3 callbacks suppressed
[  147.340307][ T8098] loop3: detected capacity change from 0 to 256
[  147.873593][ T8116] loop2: detected capacity change from 0 to 40427
[  147.883093][ T8116] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  147.886756][ T8116] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  147.894008][ T8116] F2FS-fs (loop2): invalid crc value
[  147.953337][ T8116] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  147.955652][ T6645] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  147.961420][ T8116] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  147.964280][ T8116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.979096][ T8132] loop0: detected capacity change from 0 to 4096
[  148.007483][ T8132] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  148.024694][ T8132] ntfs3(loop0): Failed to load $Extend (-22).
[  148.029445][ T8132] ntfs3(loop0): Failed to initialize $Extend.
[  148.128951][ T6645] usb 4-1: unable to get BOS descriptor or descriptor too short
[  148.138863][ T6645] usb 4-1: config 4 has an invalid interface number: 48 but max is 0
[  148.141488][ T6645] usb 4-1: config 4 has no interface number 0
[  148.143281][ T6645] usb 4-1: config 4 interface 48 has no altsetting 0
[  148.178253][ T6645] usb 4-1: New USB device found, idVendor=2100, idProduct=9e56, bcdDevice= 0.18
[  148.183846][ T6645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.188051][ T8137] process 'syz.0.916' launched './file0' with NULL argv: empty string added
[  148.191585][ T6645] usb 4-1: Product: syz
[  148.193318][ T6645] usb 4-1: Manufacturer: syz
[  148.195209][ T6645] usb 4-1: SerialNumber: syz
[  148.257795][ T8143] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  148.426155][ T6645] ftdi_sio 4-1:4.48: FTDI USB Serial Device converter detected
[  148.448289][ T6645] usb 4-1: Detected SIO
[  148.460251][ T6645] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  148.476545][ T6645] usb 4-1: USB disconnect, device number 3
[  148.481986][ T6645] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  148.489971][ T6645] ftdi_sio 4-1:4.48: device disconnected
[  148.549347][ T8155] loop2: detected capacity change from 0 to 4096
[  148.577520][ T8155] ntfs3(loop2): ino=0, mi_enum_attr
[  148.587141][ T8155] ntfs3(loop2): ino=0, mi_enum_attr
[  148.589399][ T8155] ntfs3(loop2): Failed to load $MFT (-22).
[  148.715732][ T8163] loop2: detected capacity change from 0 to 128
[  148.724356][ T8163] EXT4-fs (loop2): Test dummy encryption mode enabled
[  148.737114][ T8163] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.743151][ T8163] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.748788][ T8163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.928: bg 0: bad block bitmap checksum
[  148.765797][ T5599] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  148.902137][ T8161] loop0: detected capacity change from 0 to 32768
[  148.928751][ T8161] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  148.961819][ T8161] XFS (loop0): Ending clean mount
[  148.982231][ T8180] nbd: must specify a size in bytes for the device
[  149.026297][ T5595] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  149.229263][ T8188] IPv6: Can't replace route, no match found
[  149.703730][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'.
[  149.744619][ T8220] loop0: detected capacity change from 0 to 512
[  149.757573][ T8220] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  150.327973][ T8236] loop3: detected capacity change from 0 to 512
[  150.360311][ T8236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002]
[  150.363419][ T8236] System zones: 1-12
[  150.368109][ T8236] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.955: missing EA_INODE flag
[  150.374920][ T8236] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  150.375716][    C0] EXT4-fs (loop3): initial error at time 1785563359: ext4_xattr_inode_iget:441: inode 12
[  150.383469][    C0] EXT4-fs (loop3): last error at time 1785563359: ext4_xattr_inode_iget:441: inode 12
[  150.391606][ T8236] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.955: error while reading EA inode 12 err=-117
[  150.397794][ T8236] loop3: lost filesystem error report for type 5 error -117
[  150.398106][ T8236] EXT4-fs (loop3): 1 orphan inode deleted
[  150.404777][ T8236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.413487][ T8236] fscrypt (loop3, inode 15): Unsupported log2_data_unit_size in encryption policy: 20
[  150.428897][ T7544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.443003][ T8242] loop0: detected capacity change from 0 to 512
[  150.452811][ T8242] EXT4-fs: Ignoring removed bh option
[  150.468981][ T8242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  150.481154][ T8242] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  150.486012][ T8246] loop3: detected capacity change from 0 to 256
[  150.489022][ T8246] exfat: Deprecated parameter 'utf8'
[  150.490715][ T8246] exfat: Deprecated parameter 'namecase'
[  150.497620][ T8246] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  150.501751][ T8242] EXT4-fs (loop0): 1 truncate cleaned up
[  150.506302][ T8242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.545781][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.062610][ T8264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.294622][ T4981] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11
[  151.301365][ T4981] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  151.398531][ T8284] netlink: 32 bytes leftover after parsing attributes in process `syz.3.976'.
[  151.432194][ T8284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.976'.
[  151.564779][ T8290] IPv6: NLM_F_REPLACE set, but no existing node found!
[  152.012877][ T8310] mmap: syz.0.988 (8310) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  152.109605][ T8308] (syz.2.987,8308,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.116357][ T8308] (syz.2.987,8308,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  152.130353][ T8308] JBD2: Ignoring recovery information on journal
[  152.181335][ T8308] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  152.269330][ T8322] tipc: Started in network mode
[  152.270842][ T8322] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  152.273712][ T8322] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  152.290104][ T5599] ocfs2: Unmounting device (7,2) on (node local)
[  152.492071][ T8342] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.1003'.
[  152.633739][ T8356] set_capacity_and_notify: 3 callbacks suppressed
[  152.633754][ T8356] loop2: detected capacity change from 0 to 128
[  152.666901][ T8356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.671654][ T8356] ext4 filesystem being mounted at /314/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.693632][ T5599] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  152.803403][ T8368] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1014'.
[  152.908858][ T8375] zram0: detected capacity change from 0 to 8
[  152.935042][ T8378] loop3: detected capacity change from 0 to 256
[  153.261650][   T34] audit: type=1800 audit(1785563362.482:11): pid=8396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1027" name="c_chmask" dev="configfs" ino=16053 res=0 errno=0
[  153.523435][ T8408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1033'.
[  153.545882][ T8404] loop2: detected capacity change from 0 to 32768
[  153.558695][ T8404] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1031 (8404)
[  153.567595][ T8404] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  153.571450][ T8404] BTRFS info (device loop2): using blake2b checksum algorithm
[  153.589863][ T8404] BTRFS info (device loop2): enabling ssd optimizations
[  153.593711][ T8404] BTRFS info (device loop2): turning on async discard
[  153.597181][ T8404] BTRFS info (device loop2): enabling free space tree
[  153.671153][ T5599] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  154.252156][ T8448] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1045'.
[  154.528953][ T8458] overlayfs: refusing to follow metacopy origin for (/file1)
[  154.811438][ T8469] warning: `syz.0.1055' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  154.850224][ T8471] loop0: detected capacity change from 0 to 8
[  154.925613][  T925] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  154.968404][ T8477] xt_ecn: cannot match TCP bits for non-tcp packets
[  155.076456][  T925] usb 4-1: Using ep0 maxpacket: 16
[  155.082397][  T925] usb 4-1: config 0 has too many interfaces: 105, using maximum allowed: 32
[  155.089157][  T925] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 105
[  155.097178][  T925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  155.101598][  T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.108423][  T925] usb 4-1: Product: syz
[  155.112981][  T925] usb 4-1: Manufacturer: syz
[  155.117392][  T925] usb 4-1: SerialNumber: syz
[  155.137848][  T925] usb 4-1: config 0 descriptor??
[  155.350537][  T925] usb 4-1: USB disconnect, device number 4
[  155.419214][ T8487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1064'.
[  155.423206][ T8487] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1064'.
[  155.550058][ T4981] Bluetooth: hci0: Malformed LE Event: 0x0d
[  155.937653][ T6645] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  156.192100][ T8502] loop3: detected capacity change from 0 to 8
[  156.415697][ T8501] SQUASHFS error: Unable to read directory block [631:26]
[  156.529993][ T6645] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  156.532840][ T6645] usb 1-1: New USB device strings: Mfr=32, Product=187, SerialNumber=229
[  156.545410][ T6645] usb 1-1: Product: syz
[  156.546706][ T6645] usb 1-1: Manufacturer: syz
[  156.548223][ T6645] usb 1-1: SerialNumber: syz
[  156.551516][ T6645] usb 1-1: config 0 descriptor??
[  156.556699][ T6645] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  156.559671][ T6645] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  156.694322][ T8508] netlink: 'syz.2.1073': attribute type 1 has an invalid length.
[  156.738385][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1074'.
[  156.775826][  T925] usb 1-1: USB disconnect, device number 13
[  156.783867][  T925] ftdi_sio 1-1:0.0: device disconnected
[  158.993507][ T8545] netlink: 'syz.0.1090': attribute type 4 has an invalid length.
[  158.997196][ T8545] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1090'.
[  159.001455][ T8545] .`: renamed from bond0 (while UP)
[  159.365693][ T8558] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1096'.
[  159.395852][ T6645] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  159.560015][ T6645] usb 4-1: Using ep0 maxpacket: 32
[  159.563735][ T6645] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  159.573593][ T6645] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.579741][ T6645] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  159.587253][ T6645] usb 4-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00
[  159.590897][ T6645] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.597825][ T6645] usb 4-1: config 0 descriptor??
[  159.616837][ T8568] loop2: detected capacity change from 0 to 256
[  159.763512][ T8576] orangefs_devreq_open: device cannot be opened in blocking mode
[  160.063840][ T6645] usbhid 4-1:0.0: can't add hid device: -71
[  160.075668][ T6645] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  160.088533][ T6645] usb 4-1: USB disconnect, device number 5
[  160.089060][    T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  160.265526][    T9] usb 3-1: Using ep0 maxpacket: 16
[  160.269490][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  160.274282][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  160.281720][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  160.286253][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.289537][    T9] usb 3-1: Product: syz
[  160.291280][    T9] usb 3-1: Manufacturer: syz
[  160.293138][    T9] usb 3-1: SerialNumber: syz
[  160.297629][    T9] usb 3-1: config 0 descriptor??
[  160.303489][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  160.308382][    T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  160.485419][ T6645] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  160.635556][ T6645] usb 4-1: Using ep0 maxpacket: 32
[  160.641591][ T6645] usb 4-1: config 123 interface 0 has no altsetting 0
[  160.646160][ T6645] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[  160.649639][ T6645] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.652117][ T6645] usb 4-1: Product: syz
[  160.653451][ T6645] usb 4-1: Manufacturer: syz
[  160.655612][ T6645] usb 4-1: SerialNumber: syz
[  160.876445][ T6645] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[  160.884424][ T6645] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  160.889026][ T6645] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[  160.891832][ T6645] usb 4-1: media controller created
[  160.899593][ T6645] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.001678][    T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  161.006985][    T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  161.011700][    T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  161.015992][    T9] em28xx 3-1:0.0: No AC97 audio processor
[  161.024541][    T9] usb 3-1: USB disconnect, device number 16
[  161.028297][    T9] em28xx 3-1:0.0: Disconnecting em28xx
[  161.042653][    T9] em28xx 3-1:0.0: Freeing device
[  161.083227][ T6645] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  161.089187][ T6645] error writing reg: 0xff, val: 0x00
[  161.662662][ T8619] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 2, id = 0
[  161.884531][ T8621] loop2: detected capacity change from 0 to 32768
[  161.900131][ T6645] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  161.905996][ T6645] usb 4-1: USB disconnect, device number 6
[  161.906799][ T8621] (syz.2.1123,8621,0):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  161.907825][ T8621] (syz.2.1123,8621,0):ocfs2_check_volume:2432 ERROR: status = -27
[  161.925425][ T8621] (syz.2.1123,8621,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  161.932753][ T8621] (syz.2.1123,8621,1):ocfs2_fill_super:1177 ERROR: status = -27
[  162.006842][ T8627] loop0: detected capacity change from 0 to 164
[  162.275408][ T6645] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  162.426955][ T6645] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF
[  162.430670][ T6645] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 27759, setting to 1024
[  162.433955][ T6645] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[  162.437182][ T6645] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.443533][ T6645] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  162.446771][ T6645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.449721][ T6645] usb 1-1: Product: syz
[  162.451332][ T6645] usb 1-1: Manufacturer: syz
[  162.453086][ T6645] usb 1-1: SerialNumber: syz
[  162.457039][ T6645] usb 1-1: config 0 descriptor??
[  162.459062][ T8627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  162.462986][ T6645] redrat3 1-1:0.0: Couldn't find all endpoints
[  162.669561][    T9] usb 1-1: USB disconnect, device number 14
[  162.752600][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1127'.
[  163.008459][ T8634] loop3: detected capacity change from 0 to 40427
[  163.011870][ T8634] F2FS-fs: heap/no_heap options were deprecated
[  163.029596][ T8634] F2FS-fs (loop3): build fault injection rate: 19
[  163.032269][ T8634] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  163.037041][ T8634] F2FS-fs (loop3): invalid crc value
[  163.045930][ T8634] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x1890
[  163.087548][ T8634] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  163.097323][ T8634] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.101675][ T8634] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  163.263677][ T8634] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa5d/0x1eb0
[  163.269565][ T8634] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xda0
[  163.274942][ T8634] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x355/0xda0
[  163.280280][ T8634] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xda0
[  163.303861][ T8634] F2FS-fs (loop3): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0
[  163.366544][ T8634] syz.3.1128: attempt to access beyond end of device
[  163.366544][ T8634] loop3: rw=2049, sector=45096, nr_sectors = 32 limit=40427
[  163.378768][ T8634] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c5/0xe90
[  163.383534][ T8634] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  163.433872][    C0] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of f2fs_write_end_io+0x684/0x1030
[  163.460190][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.460211][    C0] Tainted: [L]=SOFTLOCKUP
[  163.460215][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.460221][    C0] Call Trace:
[  163.460226][    C0]  <TASK>
[  163.460232][    C0]  dump_stack_lvl+0xe8/0x150
[  163.460250][    C0]  f2fs_handle_critical_error+0x36f/0x530
[  163.460270][    C0]  f2fs_write_end_io+0xcfc/0x1030
[  163.460284][    C0]  ? blk_update_request+0x57b/0xe30
[  163.460302][    C0]  blk_update_request+0x57b/0xe30
[  163.460319][    C0]  blk_mq_end_request+0x3e/0x70
[  163.460366][    C0]  blk_done_softirq+0x10a/0x160
[  163.460384][    C0]  handle_softirqs+0x225/0x870
[  163.460399][    C0]  ? run_ksoftirqd+0x36/0x60
[  163.460416][    C0]  run_ksoftirqd+0x36/0x60
[  163.460428][    C0]  smpboot_thread_fn+0x57c/0xa80
[  163.460444][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  163.460459][    C0]  kthread+0x388/0x470
[  163.460474][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  163.460484][    C0]  ? __pfx_kthread+0x10/0x10
[  163.460499][    C0]  ret_from_fork+0x51e/0xb90
[  163.460514][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  163.460526][    C0]  ? __switch_to+0xc7d/0x1450
[  163.460540][    C0]  ? __pfx_kthread+0x10/0x10
[  163.460552][    C0]  ret_from_fork_asm+0x1a/0x30
[  163.460573][    C0]  </TASK>
[  163.460578][    C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.516916][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.516942][    C0] Tainted: [L]=SOFTLOCKUP
[  163.516946][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.516954][    C0] Call Trace:
[  163.516960][    C0]  <TASK>
[  163.516966][    C0]  dump_stack_lvl+0xe8/0x150
[  163.516986][    C0]  f2fs_handle_critical_error+0x36f/0x530
[  163.517010][    C0]  f2fs_write_end_io+0xcfc/0x1030
[  163.517034][    C0]  blk_update_request+0x57b/0xe30
[  163.517054][    C0]  blk_mq_end_request+0x3e/0x70
[  163.517067][    C0]  blk_done_softirq+0x10a/0x160
[  163.517085][    C0]  handle_softirqs+0x225/0x870
[  163.517101][    C0]  ? run_ksoftirqd+0x36/0x60
[  163.517121][    C0]  run_ksoftirqd+0x36/0x60
[  163.517133][    C0]  smpboot_thread_fn+0x57c/0xa80
[  163.517150][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  163.517169][    C0]  kthread+0x388/0x470
[  163.517185][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  163.517198][    C0]  ? __pfx_kthread+0x10/0x10
[  163.517214][    C0]  ret_from_fork+0x51e/0xb90
[  163.517231][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  163.517243][    C0]  ? __switch_to+0xc7d/0x1450
[  163.517258][    C0]  ? __pfx_kthread+0x10/0x10
[  163.517274][    C0]  ret_from_fork_asm+0x1a/0x30
[  163.517299][    C0]  </TASK>
[  163.517304][    C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.570685][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.570705][    C0] Tainted: [L]=SOFTLOCKUP
[  163.570710][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.570718][    C0] Call Trace:
[  163.570725][    C0]  <TASK>
[  163.570730][    C0]  dump_stack_lvl+0xe8/0x150
[  163.570750][    C0]  f2fs_handle_critical_error+0x36f/0x530
[  163.570774][    C0]  f2fs_write_end_io+0xcfc/0x1030
[  163.570798][    C0]  blk_update_request+0x57b/0xe30
[  163.570819][    C0]  blk_mq_end_request+0x3e/0x70
[  163.570832][    C0]  blk_done_softirq+0x10a/0x160
[  163.570851][    C0]  handle_softirqs+0x225/0x870
[  163.570867][    C0]  ? run_ksoftirqd+0x36/0x60
[  163.570886][    C0]  run_ksoftirqd+0x36/0x60
[  163.570899][    C0]  smpboot_thread_fn+0x57c/0xa80
[  163.570922][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  163.570941][    C0]  kthread+0x388/0x470
[  163.570957][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  163.570970][    C0]  ? __pfx_kthread+0x10/0x10
[  163.570987][    C0]  ret_from_fork+0x51e/0xb90
[  163.571003][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  163.571016][    C0]  ? __switch_to+0xc7d/0x1450
[  163.571031][    C0]  ? __pfx_kthread+0x10/0x10
[  163.571048][    C0]  ret_from_fork_asm+0x1a/0x30
[  163.571072][    C0]  </TASK>
[  163.571077][    C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.572851][   T34] audit: type=1326 audit(1785563372.802:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  163.575499][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.575518][    C0] Tainted: [L]=SOFTLOCKUP
[  163.575523][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.575530][    C0] Call Trace:
[  163.575536][    C0]  <TASK>
[  163.575541][    C0]  dump_stack_lvl+0xe8/0x150
[  163.575560][    C0]  f2fs_handle_critical_error+0x36f/0x530
[  163.575581][    C0]  f2fs_write_end_io+0xcfc/0x1030
[  163.575607][    C0]  blk_update_request+0x57b/0xe30
[  163.575626][    C0]  blk_mq_end_request+0x3e/0x70
[  163.575639][    C0]  blk_done_softirq+0x10a/0x160
[  163.575657][    C0]  handle_softirqs+0x225/0x870
[  163.575673][    C0]  ? run_ksoftirqd+0x36/0x60
[  163.575691][    C0]  run_ksoftirqd+0x36/0x60
[  163.575705][    C0]  smpboot_thread_fn+0x57c/0xa80
[  163.575721][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  163.575740][    C0]  kthread+0x388/0x470
[  163.575755][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  163.575769][    C0]  ? __pfx_kthread+0x10/0x10
[  163.575785][    C0]  ret_from_fork+0x51e/0xb90
[  163.575802][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  163.575815][    C0]  ? __switch_to+0xc7d/0x1450
[  163.575829][    C0]  ? __pfx_kthread+0x10/0x10
[  163.575845][    C0]  ret_from_fork_asm+0x1a/0x30
[  163.575870][    C0]  </TASK>
[  163.575875][    C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.585177][   T34] audit: type=1326 audit(1785563372.812:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  163.585798][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  163.585816][    C0] Tainted: [L]=SOFTLOCKUP
[  163.585820][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  163.585827][    C0] Call Trace:
[  163.585833][    C0]  <TASK>
[  163.585838][    C0]  dump_stack_lvl+0xe8/0x150
[  163.585855][    C0]  f2fs_handle_critical_error+0x36f/0x530
[  163.585877][    C0]  f2fs_write_end_io+0xcfc/0x1030
[  163.585900][    C0]  blk_update_request+0x57b/0xe30
[  163.585926][    C0]  blk_mq_end_request+0x3e/0x70
[  163.585939][    C0]  blk_done_softirq+0x10a/0x160
[  163.585958][    C0]  handle_softirqs+0x225/0x870
[  163.585974][    C0]  ? run_ksoftirqd+0x36/0x60
[  163.585993][    C0]  run_ksoftirqd+0x36/0x60
[  163.586006][    C0]  smpboot_thread_fn+0x57c/0xa80
[  163.586022][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  163.586041][    C0]  kthread+0x388/0x470
[  163.586057][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  163.586070][    C0]  ? __pfx_kthread+0x10/0x10
[  163.586086][    C0]  ret_from_fork+0x51e/0xb90
[  163.586102][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  163.586115][    C0]  ? __switch_to+0xc7d/0x1450
[  163.586129][    C0]  ? __pfx_kthread+0x10/0x10
[  163.586145][    C0]  ret_from_fork_asm+0x1a/0x30
[  163.586170][    C0]  </TASK>
[  163.586175][    C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  163.589945][   T34] audit: type=1326 audit(1785563372.812:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  163.618349][ T7544] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint
[  163.621821][   T34] audit: type=1326 audit(1785563372.812:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  163.875546][ T8656] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  164.016351][ T8664] netlink: 'syz.3.1140': attribute type 3 has an invalid length.
[  164.194819][   T34] audit: type=1326 audit(1785563372.812:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  164.204995][   T34] audit: type=1326 audit(1785563372.812:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  164.213979][   T34] audit: type=1326 audit(1785563372.812:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  164.633859][   T34] audit: type=1326 audit(1785563372.822:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  164.643373][   T34] audit: type=1326 audit(1785563372.822:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  164.655175][   T34] audit: type=1326 audit(1785563372.822:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8649 comm="syz.0.1135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52859e019 code=0x7ffc0000
[  164.941459][ T5663] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  165.145767][ T5663] usb 4-1: Using ep0 maxpacket: 32
[  165.161231][ T5663] usb 4-1: unable to get BOS descriptor or descriptor too short
[  165.166040][ T5663] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[  165.168780][ T5663] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[  165.171490][ T5663] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  165.174841][ T5663] usb 4-1: config 14 has no interface number 0
[  165.177452][ T5663] usb 4-1: config 14 has no interface number 1
[  165.179517][ T5663] usb 4-1: config 14 interface 57 altsetting 220 endpoint 0x8 has invalid maxpacket 38910, setting to 64
[  165.183286][ T5663] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  165.188091][ T5663] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xC3, changing to 0x83
[  165.192583][ T5663] usb 4-1: config 14 interface 228 altsetting 5 bulk endpoint 0x83 has invalid maxpacket 209
[  165.196848][ T5663] usb 4-1: config 14 interface 57 has no altsetting 0
[  165.199686][ T5663] usb 4-1: config 14 interface 228 has no altsetting 0
[  165.204640][ T5663] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  165.210252][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.213261][ T5663] usb 4-1: Product: syz
[  165.215179][ T5663] usb 4-1: Manufacturer: syz
[  165.219809][ T5663] usb 4-1: SerialNumber: syz
[  165.938687][ T8691] loop2: detected capacity change from 0 to 131072
[  165.941259][ T8691] xfs: Deprecated parameter 'ikeep'
[  165.943298][ T8691] XFS: ikeep mount option is deprecated.
[  165.948469][ T5663] legousbtower 4-1:14.57: interrupt endpoints not found
[  165.952962][ T5663] legousbtower 4-1:14.228: interrupt endpoints not found
[  165.957350][ T5663] usb 4-1: USB disconnect, device number 7
[  165.989013][ T8691] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  166.018144][ T8691] XFS (loop2): Starting recovery (logdev: internal)
[  166.040203][ T8691] XFS (loop2): Ending recovery (logdev: internal)
[  166.165076][ T5599] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  166.350916][ T8720] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1158'.
[  166.557533][ T8740] binder: 8738:8740 ioctl c0205867 200000000840 returned -22
[  166.618596][ T8740] binder: BINDER_SET_CONTEXT_MGR already set
[  166.620699][ T8740] binder: 8738:8740 ioctl 4018620d 200000004a80 returned -16
[  166.956237][ T6645] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  167.107890][ T6645] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  167.112131][ T6645] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  167.123207][ T6645] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  167.126425][ T6645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.128951][ T6645] usb 3-1: Product: syz
[  167.131279][ T6645] usb 3-1: Manufacturer: syz
[  167.133982][ T6645] usb 3-1: SerialNumber: syz
[  167.155829][ T6645] hub 3-1:1.0: bad descriptor, ignoring hub
[  167.160070][ T6645] hub 3-1:1.0: probe with driver hub failed with error -5
[  167.453967][ T8788] sch_tbf: burst 0 is lower than device batadv_slave_0 mtu (1514) !
[  167.627712][ T6645] usb 3-1: reset high-speed USB device number 17 using dummy_hcd
[  167.835477][ T5649] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  167.985407][ T5649] usb 4-1: Using ep0 maxpacket: 8
[  167.989191][ T5649] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  167.992435][ T5649] usb 4-1: config 0 has no interface number 0
[  167.994873][ T5649] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  168.002772][ T5649] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  168.007648][ T5649] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  168.012398][ T5649] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  168.018032][ T5649] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  168.021372][ T5649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.025577][ T6645] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  168.027096][ T5649] usb 4-1: config 0 descriptor??
[  168.039475][ T5649] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  168.108611][ T6651] usb 3-1: USB disconnect, device number 17
[  168.198522][ T6645] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.202643][ T6645] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.208036][ T6645] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  168.211716][ T6645] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.248978][ T5649] usb 4-1: USB disconnect, device number 8
[  168.252533][ T5649] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  168.429241][ T6645] usb 1-1: GET_CAPABILITIES returned 0
[  168.431428][ T6645] usbtmc 1-1:16.0: can't read capabilities
[  168.545754][ T8803] netlink: 'syz.2.1184': attribute type 20 has an invalid length.
[  168.548379][ T8803] IPv6: NLM_F_CREATE should be specified when creating new route
[  168.551508][ T8803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  168.553828][ T8803] IPv6: NLM_F_CREATE should be set when creating new route
[  168.634872][  T925] usb 1-1: USB disconnect, device number 15
[  168.657313][ T8809] loop2: detected capacity change from 0 to 128
[  168.665124][ T8809] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.672368][ T8809] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  168.878841][ T1233] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  168.934850][ T8817] loop2: detected capacity change from 0 to 256
[  168.946607][ T8817] exfat: Deprecated parameter 'namecase'
[  168.961587][ T8817] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  169.240065][ T8826] loop3: detected capacity change from 0 to 4096
[  169.270743][ T8826] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  169.278891][ T8833] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.289378][ T8826] Remounting filesystem read-only
[  169.445665][ T8847] loop2: detected capacity change from 0 to 1024
[  169.625554][   T34] kauditd_printk_skb: 10 callbacks suppressed
[  169.625569][   T34] audit: type=1326 audit(1785563378.852:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8843 comm="syz.3.1203" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8702b9e019 code=0x0
[  169.746586][   T34] audit: type=1326 audit(1785563378.982:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.2.1207" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89c8d9e019 code=0x0
[  170.710116][ T8871] loop0: detected capacity change from 0 to 32768
[  170.721178][ T8871] xfs: Unknown parameter 'smackfstransmute'
[  170.769093][ T8878] loop0: detected capacity change from 0 to 256
[  171.378348][ T8884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  171.417838][ T8890] netlink: 'syz.0.1221': attribute type 2 has an invalid length.
[  171.423754][ T8890] netlink: 'syz.0.1221': attribute type 2 has an invalid length.
[  171.427004][ T8890] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.1221'.
[  171.735552][ T5649] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  171.744160][ T6646] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  171.885392][ T5649] usb 4-1: Using ep0 maxpacket: 32
[  171.888560][ T5649] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  171.891523][ T5649] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  171.898517][ T5649] usb 4-1: config 0 interface 0 has no altsetting 0
[  171.905708][ T6646] usb 1-1: Using ep0 maxpacket: 32
[  171.905983][ T5649] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  171.909922][ T6646] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  171.911334][ T5649] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.918537][ T6646] usb 1-1: config 0 has no interface number 0
[  171.918554][ T5649] usb 4-1: Product: syz
[  171.921183][ T6646] usb 1-1: config 0 interface 35 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  171.929675][ T5649] usb 4-1: Manufacturer: syz
[  171.931472][ T5649] usb 4-1: SerialNumber: syz
[  171.932418][ T6646] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  171.938115][ T6646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.938657][ T5649] usb 4-1: config 0 descriptor??
[  171.941459][ T6646] usb 1-1: Product: syz
[  171.944789][ T6646] usb 1-1: Manufacturer: syz
[  171.947000][ T6646] usb 1-1: SerialNumber: syz
[  171.958019][ T6646] usb 1-1: config 0 descriptor??
[  171.967247][ T6646] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  171.970394][ T6646] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5
[  172.163948][ T6646] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  172.242493][ T8929] loop2: detected capacity change from 0 to 128
[  172.279186][ T8929] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  172.284451][ T8929] hpfs: filesystem error: improperly stopped
[  172.287028][ T8929] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  172.290063][ T8929] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  172.293939][ T8929] hpfs: You really don't want any checks? You are crazy...
[  172.297205][ T8929] hpfs: hpfs_map_sector(): read error
[  172.298915][ T8929] hpfs: code page support is disabled
[  172.300855][ T8929] hpfs: hpfs_map_4sectors(): unaligned read
[  172.303228][ T8929] hpfs: hpfs_map_4sectors(): unaligned read
[  172.306815][ T8929] hpfs: filesystem error: unable to find root dir
[  172.364189][ T5649] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  172.381227][ T6646] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71)
[  172.394838][ T6646] radio-raremono 1-1:0.35: V4L2 device registered as radio48
[  172.400127][ T6646] usb 1-1: USB disconnect, device number 16
[  172.403429][ T6646] radio-raremono 1-1:0.35: Thanko's Raremono disconnected
[  172.564865][ T5649] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  172.570402][ T5649] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121
[  172.776959][ T5649] usb 4-1: USB disconnect, device number 9
[  173.010701][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  173.070785][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1249'.
[  173.172398][ T8950] loop2: detected capacity change from 0 to 32768
[  173.359259][ T6646] IPVS: starting estimator thread 0...
[  173.407075][ T8977] loop0: detected capacity change from 0 to 64
[  173.410801][ T8978] loop3: detected capacity change from 0 to 512
[  173.415020][ T8978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  173.431124][ T8978] EXT4-fs (loop3): 1 orphan inode deleted
[  173.433454][ T8978] EXT4-fs (loop3): 1 truncate cleaned up
[  173.437953][ T8978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.465547][ T8972] IPVS: using max 86 ests per chain, 206400 per kthread
[  173.479549][ T7544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.680675][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'.
[  173.728683][ T8982] loop0: detected capacity change from 0 to 32768
[  173.740060][ T8982] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.764321][ T8982] XFS (loop0): Ending clean mount
[  173.787669][ T9003] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  173.806224][ T5595] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  174.063052][   T34] audit: type=1326 audit(1785563383.292:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9018 comm="syz.3.1273" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8702b9e019 code=0x0
[  174.291684][ T9020] loop2: detected capacity change from 0 to 32768
[  174.715426][ T6646] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  174.878214][ T6646] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  174.905797][ T6646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.916485][ T6646] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  174.921449][ T6646] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00
[  174.924964][ T6646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.950396][ T6646] usb 3-1: config 0 descriptor??
[  174.985898][ T5649] IPVS: starting estimator thread 0...
[  175.033450][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'.
[  175.045652][ T9031] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1278'.
[  175.077113][ T9029] IPVS: using max 51 ests per chain, 122400 per kthread
[  175.307985][ T9047] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  175.367308][ T6646] ntrig 0003:1B96:000F.0007: unknown main item tag 0x3
[  175.374213][ T6646] ntrig 0003:1B96:000F.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.2-1/input0
[  175.727075][ T6646] usb 3-1: USB disconnect, device number 18
[  175.829154][ T9062] hugetlbfs: syz.3.1292 (9062): Using mlock ulimits for SHM_HUGETLB is obsolete
[  176.281687][ T9075] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1298'.
[  176.315479][ T5649] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  176.466328][ T5649] usb 4-1: Using ep0 maxpacket: 16
[  176.473495][ T5649] usb 4-1: config 0 has no interfaces?
[  176.475950][ T5649] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  176.479692][ T5649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.506065][ T5649] usb 4-1: config 0 descriptor??
[  176.728848][ T5663] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  176.759375][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.765843][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.776486][ T6646] usb 4-1: USB disconnect, device number 10
[  176.877421][ T5663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  176.881908][ T5663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.885850][ T5663] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  176.890854][ T5663] usb 3-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  176.894511][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.899901][ T5663] usb 3-1: config 0 descriptor??
[  177.322143][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.324242][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.331634][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.334594][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.338370][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.338890][ T9087] unsupported nlmsg_type 40
[  177.343359][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.346126][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.350481][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.352592][ T5663] nti 0003:0757:0A00.0008: unknown main item tag 0x0
[  177.365009][ T5663] nti 0003:0757:0A00.0008: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.2-1/input0
[  177.384037][ T9090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1305'.
[  177.512018][ T5663] usb 3-1: USB disconnect, device number 19
[  177.576320][ T9106] nbd: socks must be embedded in a SOCK_ITEM attr
[  177.875493][ T5663] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  178.027077][ T5663] usb 4-1: Using ep0 maxpacket: 16
[  178.040678][ T5663] usb 4-1: unable to get BOS descriptor or descriptor too short
[  178.071816][ T5663] usb 4-1: config 1 has an invalid interface number: 151 but max is 0
[  178.075001][ T5663] usb 4-1: config 1 has no interface number 0
[  178.077501][ T5663] usb 4-1: config 1 interface 151 has no altsetting 0
[  178.089450][ T5663] usb 4-1: string descriptor 0 read error: -22
[  178.091962][ T5663] usb 4-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  178.098324][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.120131][ T5663] gspca_main: pac7311-2.14.0 probing 093a:260e
[  178.447464][ T4981] ==================================================================
[  178.449900][ T4981] BUG: KASAN: stack-out-of-bounds in l2cap_send_cmd+0x28d/0xb80
[  178.452259][ T4981] Read of size 20 at addr ffffc90009d8f520 by task kworker/u11:1/4981
[  178.455248][ T4981] 
[  178.456201][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.456214][ T4981] Tainted: [L]=SOFTLOCKUP
[  178.456216][ T4981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.456222][ T4981] Workqueue: hci0 hci_rx_work
[  178.456235][ T4981] Call Trace:
[  178.456239][ T4981]  <TASK>
[  178.456243][ T4981]  dump_stack_lvl+0xe8/0x150
[  178.456255][ T4981]  print_report+0xba/0x230
[  178.456263][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.456273][ T4981]  kasan_report+0x117/0x150
[  178.456281][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.456292][ T4981]  kasan_check_range+0x264/0x2c0
[  178.456299][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.456308][ T4981]  __asan_memcpy+0x29/0x70
[  178.456318][ T4981]  l2cap_send_cmd+0x28d/0xb80
[  178.456329][ T4981]  l2cap_recv_frame+0xbf84/0x10150
[  178.456339][ T4981]  ? arch_stack_walk+0xe3/0x150
[  178.456348][ T4981]  ? rcu_is_watching+0x15/0xb0
[  178.456356][ T4981]  ? ret_from_fork_asm+0x1a/0x30
[  178.456365][ T4981]  ? rcu_is_watching+0x15/0xb0
[  178.456372][ T4981]  ? lock_release+0x4b/0x3d0
[  178.456379][ T4981]  ? unwind_next_frame+0x1a95/0x2380
[  178.456387][ T4981]  ? deref_stack_reg+0x18e/0x220
[  178.456396][ T4981]  ? unwind_next_frame+0x95/0x2380
[  178.456404][ T4981]  ? unwind_next_frame+0x1a95/0x2380
[  178.456412][ T4981]  ? __pfx_l2cap_recv_frame+0x10/0x10
[  178.456422][ T4981]  ? ret_from_fork_asm+0x1a/0x30
[  178.456430][ T4981]  ? unwind_next_frame+0x95/0x2380
[  178.456439][ T4981]  ? arch_stack_walk+0x11b/0x150
[  178.456448][ T4981]  ? ret_from_fork_asm+0x1a/0x30
[  178.456456][ T4981]  ? stack_trace_save+0xa9/0x100
[  178.456465][ T4981]  ? __pfx_stack_trace_save+0x10/0x10
[  178.456475][ T4981]  ? check_path+0x21/0x40
[  178.456482][ T4981]  ? check_noncircular+0xda/0x150
[  178.456490][ T4981]  ? add_lock_to_list+0xc7/0x100
[  178.456498][ T4981]  ? lockdep_unlock+0x5d/0xd0
[  178.456503][ T4981]  ? __lock_acquire+0x13e8/0x2cd0
[  178.456513][ T4981]  ? __mutex_trylock_common+0x15f/0x270
[  178.456521][ T4981]  ? __pfx___mutex_trylock_common+0x10/0x10
[  178.456530][ T4981]  ? rcu_is_watching+0x15/0xb0
[  178.456537][ T4981]  ? trace_contention_end+0x3d/0x150
[  178.456546][ T4981]  ? __mutex_lock+0x313/0x12d0
[  178.456555][ T4981]  ? l2cap_recv_acldata+0x2e2/0x13b0
[  178.456566][ T4981]  ? l2cap_recv_acldata+0x306/0x13b0
[  178.456599][ T4981]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  178.456610][ T4981]  ? __pfx___mutex_lock+0x10/0x10
[  178.456620][ T4981]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  178.456630][ T4981]  ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10
[  178.456641][ T4981]  ? l2cap_recv_acldata+0x41/0x13b0
[  178.456651][ T4981]  l2cap_recv_acldata+0x7d3/0x13b0
[  178.456664][ T4981]  hci_rx_work+0x4f9/0x1010
[  178.456674][ T4981]  ? process_scheduled_works+0x9bd/0x1470
[  178.456681][ T4981]  process_scheduled_works+0xa2f/0x1470
[  178.456692][ T4981]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.456700][ T4981]  ? assign_work+0x3cf/0x5d0
[  178.456707][ T4981]  worker_thread+0xa44/0xfb0
[  178.456716][ T4981]  ? __kthread_parkme+0x71/0x1f0
[  178.456725][ T4981]  kthread+0x388/0x470
[  178.456734][ T4981]  ? __pfx_worker_thread+0x10/0x10
[  178.456740][ T4981]  ? __pfx_kthread+0x10/0x10
[  178.456749][ T4981]  ret_from_fork+0x51e/0xb90
[  178.456757][ T4981]  ? __pfx_ret_from_fork+0x10/0x10
[  178.456764][ T4981]  ? __switch_to+0xc7d/0x1450
[  178.456771][ T4981]  ? __pfx_kthread+0x10/0x10
[  178.456780][ T4981]  ret_from_fork_asm+0x1a/0x30
[  178.456790][ T4981]  </TASK>
[  178.456793][ T4981] 
[  178.572447][ T4981] The buggy address belongs to stack of task kworker/u11:1/4981
[  178.575365][ T4981]  and is located at offset 128 in frame:
[  178.577576][ T4981]  l2cap_recv_frame+0x0/0x10150
[  178.579458][ T4981] 
[  178.580348][ T4981] This frame has 26 objects:
[  178.581887][ T4981]  [32, 34) 'rsp.i241.i.i'
[  178.581894][ T4981]  [48, 88) 'chan.i.i.i'
[  178.583266][ T4981]  [128, 146) 'pdu_u.i.i.i'
[  178.584580][ T4981]  [192, 202) 'rsp.i94.i.i'
[  178.585967][ T4981]  [224, 226) 'rsp.i.i.i111'
[  178.587359][ T4981]  [240, 242) 'rej.i'
[  178.588790][ T4981]  [256, 258) 'rej.i145.i'
[  178.590039][ T4981]  [272, 274) 'rej.i143.i'
[  178.591498][ T4981]  [288, 290) 'req.i230.i.i'
[  178.592866][ T4981]  [304, 312) 'buf.i223.i.i'
[  178.594269][ T4981]  [336, 348) 'buf29.i.i.i'
[  178.595756][ T4981]  [368, 372) 'rsp49.i.i.i'
[  178.597131][ T4981]  [384, 393) 'rfc.i.i118.i.i'
[  178.598520][ T4981]  [416, 480) 'buf.i119.i.i'
[  178.600256][ T4981]  [512, 576) 'req.i120.i.i'
[  178.602044][ T4981]  [608, 617) 'rfc.i.i.i.i'
[  178.603672][ T4981]  [640, 656) 'efs.i.i.i.i'
[  178.605430][ T4981]  [672, 678) 'rej.i371.i.i.i'
[  178.607177][ T4981]  [704, 710) 'rej.i.i.i.i'
[  178.609028][ T4981]  [736, 800) 'rsp.i.i.i'
[  178.610621][ T4981]  [832, 896) 'buf.i.i.i'
[  178.611978][ T4981]  [928, 1056) 'req.i.i.i'
[  178.613315][ T4981]  [1088, 1096) 'rsp.i.i.i.i'
[  178.614697][ T4981]  [1120, 1122) 'info.i.i.i.i'
[  178.616163][ T4981]  [1136, 1264) 'buf.i.i.i.i'
[  178.617664][ T4981]  [1296, 1298) 'rej.i.i'
[  178.619114][ T4981] 
[  178.621467][ T4981] The buggy address belongs to a vmalloc virtual mapping
[  178.623794][ T4981] The buggy address belongs to the physical page:
[  178.626179][ T4981] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112027
[  178.628954][ T4981] flags: 0x17ff00000000000(node=0|zone=2|lastcpupid=0x7ff)
[  178.631356][ T4981] raw: 017ff00000000000 ffffea00044809c8 ffffea00044809c8 0000000000000000
[  178.634005][ T4981] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  178.636650][ T4981] page dumped because: kasan: bad access detected
[  178.638586][ T4981] page_owner tracks the page as allocated
[  178.640408][ T4981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 25885901978, free_ts 0
[  178.645805][ T4981]  post_alloc_hook+0x231/0x280
[  178.647408][ T4981]  get_page_from_freelist+0x2503/0x25a0
[  178.649596][ T4981]  __alloc_frozen_pages_noprof+0x18d/0x380
[  178.651856][ T4981]  alloc_pages_mpol+0x22b/0x390
[  178.653742][ T4981]  alloc_pages_noprof+0xa8/0x190
[  178.655644][ T4981]  __vmalloc_node_range_noprof+0x7ac/0x1830
[  178.657933][ T4981]  __vmalloc_node_noprof+0xc2/0x100
[  178.659949][ T4981]  dup_task_struct+0x289/0x9c0
[  178.661804][ T4981]  copy_process+0x50f/0x3d00
[  178.663469][ T4981]  kernel_clone+0x248/0x8e0
[  178.665020][ T4981]  kernel_thread+0x13f/0x1b0
[  178.666462][ T4981]  kthreadd+0x4ec/0x6e0
[  178.668130][ T4981]  ret_from_fork+0x51e/0xb90
[  178.669872][ T4981]  ret_from_fork_asm+0x1a/0x30
[  178.671662][ T4981] page_owner free stack trace missing
[  178.673427][ T4981] 
[  178.674435][ T4981] Memory state around the buggy address:
[  178.676778][ T4981]  ffffc90009d8f400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  178.679579][ T4981]  ffffc90009d8f480: 00 00 00 00 f1 f1 f1 f1 f8 f2 f8 f8 f8 f8 f8 f2
[  178.682567][ T4981] >ffffc90009d8f500: f2 f2 f2 f2 00 00 02 f2 f2 f2 f2 f2 f8 f8 f2 f2
[  178.685146][ T4981]                                      ^
[  178.686887][ T4981]  ffffc90009d8f580: f8 f2 f8 f2 f8 f2 f8 f2 f8 f2 f8 f2 f2 f2 f8 f8
[  178.689533][ T4981]  ffffc90009d8f600: f2 f2 f8 f2 f8 f8 f2 f2 f8 f8 f8 f8 f8 f8 f8 f8
[  178.692185][ T4981] ==================================================================
[  178.697207][ T5663] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  178.700050][ T5663] pac7311 4-1:1.151: probe with driver pac7311 failed with error -71
[  178.702584][ T4981] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  178.704869][ T4981] CPU: 0 UID: 0 PID: 4981 Comm: kworker/u11:1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.708347][ T4981] Tainted: [L]=SOFTLOCKUP
[  178.709706][ T4981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.713496][ T4981] Workqueue: hci0 hci_rx_work
[  178.715050][ T4981] Call Trace:
[  178.716133][ T4981]  <TASK>
[  178.717074][ T4981]  vpanic+0x56c/0xa60
[  178.718393][ T4981]  ? __pfx_vpanic+0x10/0x10
[  178.719858][ T4981]  panic+0xc5/0xd0
[  178.721188][ T4981]  ? __pfx_panic+0x10/0x10
[  178.722646][ T4981]  ? preempt_schedule_thunk+0x16/0x30
[  178.724362][ T4981]  ? preempt_schedule_thunk+0x16/0x30
[  178.726092][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.727677][ T4981]  check_panic_on_warn+0x89/0xb0
[  178.729269][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.730778][ T4981]  end_report+0x73/0x180
[  178.732085][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.733579][ T4981]  kasan_report+0x128/0x150
[  178.734970][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.736461][ T4981]  kasan_check_range+0x264/0x2c0
[  178.737989][ T4981]  ? l2cap_send_cmd+0x28d/0xb80
[  178.739490][ T4981]  __asan_memcpy+0x29/0x70
[  178.740869][ T4981]  l2cap_send_cmd+0x28d/0xb80
[  178.742331][ T4981]  l2cap_recv_frame+0xbf84/0x10150
[  178.743946][ T4981]  ? arch_stack_walk+0xe3/0x150
[  178.745448][ T4981]  ? rcu_is_watching+0x15/0xb0
[  178.746918][ T4981]  ? ret_from_fork_asm+0x1a/0x30
[  178.748450][ T4981]  ? rcu_is_watching+0x15/0xb0
[  178.749944][ T4981]  ? lock_release+0x4b/0x3d0
[  178.751382][ T4981]  ? unwind_next_frame+0x1a95/0x2380
[  178.753249][ T4981]  ? deref_stack_reg+0x18e/0x220
[  178.754816][ T4981]  ? unwind_next_frame+0x95/0x2380
[  178.756421][ T4981]  ? unwind_next_frame+0x1a95/0x2380
[  178.758067][ T4981]  ? __pfx_l2cap_recv_frame+0x10/0x10
[  178.759715][ T4981]  ? ret_from_fork_asm+0x1a/0x30
[  178.761227][ T4981]  ? unwind_next_frame+0x95/0x2380
[  178.762807][ T4981]  ? arch_stack_walk+0x11b/0x150
[  178.764324][ T4981]  ? ret_from_fork_asm+0x1a/0x30
[  178.765843][ T4981]  ? stack_trace_save+0xa9/0x100
[  178.767466][ T4981]  ? __pfx_stack_trace_save+0x10/0x10
[  178.769283][ T4981]  ? check_path+0x21/0x40
[  178.770920][ T4981]  ? check_noncircular+0xda/0x150
[  178.772795][ T4981]  ? add_lock_to_list+0xc7/0x100
[  178.774345][ T4981]  ? lockdep_unlock+0x5d/0xd0
[  178.776070][ T4981]  ? __lock_acquire+0x13e8/0x2cd0
[  178.777693][ T4981]  ? __mutex_trylock_common+0x15f/0x270
[  178.779455][ T4981]  ? __pfx___mutex_trylock_common+0x10/0x10
[  178.781354][ T4981]  ? rcu_is_watching+0x15/0xb0
[  178.783048][ T4981]  ? trace_contention_end+0x3d/0x150
[  178.785211][ T4981]  ? __mutex_lock+0x313/0x12d0
[  178.787168][ T4981]  ? l2cap_recv_acldata+0x2e2/0x13b0
[  178.789344][ T4981]  ? l2cap_recv_acldata+0x306/0x13b0
[  178.791490][ T4981]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  178.793747][ T4981]  ? __pfx___mutex_lock+0x10/0x10
[  178.795749][ T4981]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  178.798145][ T4981]  ? __pfx_l2cap_conn_hold_unless_zero+0x10/0x10
[  178.800693][ T4981]  ? l2cap_recv_acldata+0x41/0x13b0
[  178.802828][ T4981]  l2cap_recv_acldata+0x7d3/0x13b0
[  178.804818][ T4981]  hci_rx_work+0x4f9/0x1010
[  178.806670][ T4981]  ? process_scheduled_works+0x9bd/0x1470
[  178.808913][ T4981]  process_scheduled_works+0xa2f/0x1470
[  178.811190][ T4981]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.813492][ T4981]  ? assign_work+0x3cf/0x5d0
[  178.815390][ T4981]  worker_thread+0xa44/0xfb0
[  178.817015][ T4981]  ? __kthread_parkme+0x71/0x1f0
[  178.818591][ T4981]  kthread+0x388/0x470
[  178.819848][ T4981]  ? __pfx_worker_thread+0x10/0x10
[  178.821465][ T4981]  ? __pfx_kthread+0x10/0x10
[  178.822964][ T4981]  ret_from_fork+0x51e/0xb90
[  178.824549][ T4981]  ? __pfx_ret_from_fork+0x10/0x10
[  178.826628][ T4981]  ? __switch_to+0xc7d/0x1450
[  178.828579][ T4981]  ? __pfx_kthread+0x10/0x10
[  178.830478][ T4981]  ret_from_fork_asm+0x1a/0x30
[  178.832451][ T4981]  </TASK>
[  178.834554][ T4981] Kernel Offset: disabled
[  178.836290][ T4981] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:49:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001211 RDI=0000000000001212 RBP=00000000000003f8 RSP=ffffc90009d8ec50
R8 =ffff88816bf00237 R9 =1ffff1102d7e0046 R10=dffffc0000000000 R11=ffffffff8557c190
R12=dffffc0000000000 R13=ffffffff9a2c3a8f R14=ffffffff9a5dbb20 R15=0000000000000000
RIP=ffffffff8557c20c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818de52000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb528827dac CR3=0000000112cd6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007fb52935d560
XMM02=00007fb5287f25e8 00007fb5287f2618 XMM03=00007fb5287f2600 00007fb5287f25e0
XMM04=00007fb52935d020 00007fb5287f25c0 XMM05=00007fb5287f25d0 00007fb5287f2610
XMM06=00007fb5287f25f8 00007fb5287f25c8 XMM07=00007fb5287f2600 00007fb5287f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000c4051 RBX=0000000000000002 RCX=0000000000000051 RDX=0000000000044000
RSI=0000000000004000 RDI=0000000000000000 RBP=0000000000000001 RSP=ffffc90000a08a68
R8 =ffffffff81b29860 R9 =0000000000080000 R10=0000000000000000 R11=ffffffff9a2c7780
R12=0000000000000051 R13=ffff88810a164658 R14=ffff88810a163b00 R15=ffff88810a164658
RIP=ffffffff81a0fecc RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557bc6a500 ffffffff 00c00000
GS =0000 ffff8882a9452000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb5294f6ff8 CR3=000000001d3e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f89c9b5d560
XMM02=00007f89c8ff25e8 00007f89c8ff2618 XMM03=00007f89c8ff2600 00007f89c8ff25e0
XMM04=00007f89c9b5d020 00007f89c8ff25c0 XMM05=00007f89c8ff25d0 00007f89c8ff2610
XMM06=00007f89c8ff25f8 00007f89c8ff25c8 XMM07=00007f89c8ff2600 00007f89c8ff25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
