last executing test programs:

14.946024455s ago: executing program 0 (id=1182):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x43fb, 0x0, 0x2, 0xffffffff}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}}, 0x20000000)

14.816693906s ago: executing program 0 (id=1183):
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98)

14.724263014s ago: executing program 0 (id=1185):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000001080)=0x2)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

14.723653637s ago: executing program 0 (id=1188):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000002c0), 0x4, 0x9644, &(0x7f0000012cc0)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x400000})
creat(&(0x7f0000000040)='./bus\x00', 0x0)

14.49593443s ago: executing program 0 (id=1191):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

13.486114154s ago: executing program 0 (id=1206):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x4000080)

2.208048116s ago: executing program 1 (id=1352):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x20)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10)

2.147476752s ago: executing program 1 (id=1353):
shutdown(0xffffffffffffffff, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtclass={0x70, 0x28, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xf, 0xb}, {0x1, 0xb}}, [@c_atm={{0x8}, {0x2c, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0xd}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff3, 0x275461a364d8dd42}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x2, 0x4}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x7}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000840}, 0x880)
recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2c}}, 0x40)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x40001)

1.247387871s ago: executing program 1 (id=1365):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/193, 0xc1}], 0x1)

1.166582539s ago: executing program 1 (id=1366):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)
truncate(&(0x7f0000000080)='./file1\x00', 0x3)

775.28839ms ago: executing program 2 (id=1368):
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="050000"], 0x5)

717.277265ms ago: executing program 2 (id=1369):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r0)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0xde5f1afd190b4725, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x40000)

667.604094ms ago: executing program 2 (id=1370):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000206a052c030000000000010902240001000000030904000201030000000921270b000122060009058103"], 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000000)={0x40, 0x30, 0x8, {0x8, 0x8, "81b079d9871f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

278.77312ms ago: executing program 1 (id=1371):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x1adb8, 0x40, 0x200000, 0x80000, 0x10})

96.737184ms ago: executing program 2 (id=1372):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0)

96.632637ms ago: executing program 2 (id=1373):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x39, 0x1a, r0, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)

1.909306ms ago: executing program 2 (id=1374):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
recvmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10002, 0x0)

0s ago: executing program 1 (id=1375):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000580)=0x8)

kernel console output (not intermixed with test programs):

 28 bytes leftover after parsing attributes in process `syz.0.144'.
[   67.772546][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'.
[   67.940670][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   68.003101][ T6310] raw_sendmsg: syz.0.152 forgot to set AF_INET. Fix it!
[   68.135198][ T6316] loop1: detected capacity change from 0 to 4096
[   68.146833][ T6316] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   68.358067][ T6335] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.366787][ T6336] loop2: detected capacity change from 0 to 1024
[   68.510445][ T2290] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   68.672125][ T2290] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.682484][ T2290] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   68.685580][ T2290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.688479][ T2290] usb 2-1: Product: syz
[   68.697550][ T6345] loop2: detected capacity change from 0 to 32768
[   68.700671][ T2290] usb 2-1: Manufacturer: syz
[   68.702354][ T2290] usb 2-1: SerialNumber: syz
[   68.870665][ T6345] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.947089][ T6345] XFS (loop2): Ending clean mount
[   68.952747][ T6345] XFS (loop2): Quotacheck needed: Please wait.
[   68.969554][ T6345] XFS (loop2): Quotacheck: Done.
[   68.976711][ T6345] MTD: Couldn't look up './file0': -15
[   68.978801][ T6345] ./file0: Can't lookup blockdev
[   68.993095][ T5852] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.371603][ T6378] loop2: detected capacity change from 0 to 32768
[   69.377867][ T6378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.171 (6378)
[   69.396485][ T6378] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.411191][ T6378] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   69.414099][ T6378] BTRFS info (device loop2): using free-space-tree
[   69.509488][ T5852] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   69.895289][ T6423] syz.2.180 uses obsolete (PF_INET,SOCK_PACKET)
[   69.937458][ T2290] cdc_ncm 2-1:1.0: SET_NTB_FORMAT failed
[   69.962889][ T2290] cdc_ncm 2-1:1.0: bind() failure
[   69.965881][ T6409] loop0: detected capacity change from 0 to 40427
[   69.967796][ T2290] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[   69.993411][ T2290] cdc_ncm 2-1:1.1: bind() failure
[   69.993908][ T6409] F2FS-fs (loop0): Image doesn't support compression
[   69.998178][ T2290] usb 2-1: USB disconnect, device number 6
[   70.013276][ T6409] F2FS-fs (loop0): build fault injection rate: 690
[   70.019000][ T6427] loop2: detected capacity change from 0 to 512
[   70.026076][ T6409] F2FS-fs (loop0): invalid crc value
[   70.030212][ T6427] EXT4-fs: Ignoring removed nomblk_io_submit option
[   70.034251][ T6427] EXT4-fs (loop2): filesystem is read-only
[   70.037181][ T6427] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   70.058881][ T6427] EXT4-fs (loop2): filesystem is read-only
[   70.070279][ T6427] EXT4-fs (loop2): orphan cleanup on readonly fs
[   70.079277][ T6427] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.182: iget: bad i_size value: 648518346341360424
[   70.087086][ T6427] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.182: couldn't read orphan inode 16 (err -117)
[   70.094000][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   70.095465][ T6409] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   70.110780][ T6409] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   70.122360][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.137442][ T5861] syz-executor: attempt to access beyond end of device
[   70.137442][ T5861] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   70.149845][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   70.149863][ T5861] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   70.149869][ T5861] Call Trace:
[   70.149874][ T5861]  <TASK>
[   70.149880][ T5861]  dump_stack_lvl+0x189/0x250
[   70.149896][ T5861]  ? preempt_schedule_thunk+0x16/0x30
[   70.149915][ T5861]  ? __pfx_dump_stack_lvl+0x10/0x10
[   70.149929][ T5861]  ? __pfx_queue_work_on+0x10/0x10
[   70.149939][ T5861]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   70.149953][ T5861]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   70.149974][ T5861]  f2fs_handle_critical_error+0x37c/0x540
[   70.149995][ T5861]  f2fs_write_end_io+0x886/0xb60
[   70.150020][ T5861]  __submit_merged_bio+0x27a/0x6a0
[   70.150040][ T5861]  __submit_merged_write_cond+0x255/0x530
[   70.150060][ T5861]  f2fs_write_data_pages+0x261d/0x3000
[   70.150099][ T5861]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.150189][ T5861]  ? __lock_acquire+0xab9/0xd20
[   70.150214][ T5861]  ? do_raw_spin_lock+0x121/0x290
[   70.150236][ T5861]  ? do_raw_spin_unlock+0x4d/0x240
[   70.150250][ T5861]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   70.150267][ T5861]  do_writepages+0x32e/0x550
[   70.150291][ T5861]  ? do_raw_spin_unlock+0x4d/0x240
[   70.150307][ T5861]  filemap_fdatawrite+0x199/0x240
[   70.150329][ T5861]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   70.150378][ T5861]  ? do_raw_spin_unlock+0x4d/0x240
[   70.150395][ T5861]  f2fs_sync_dirty_inodes+0x31f/0x830
[   70.150417][ T5861]  f2fs_write_checkpoint+0x95a/0x1df0
[   70.150446][ T5861]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   70.150491][ T5861]  ? kill_f2fs_super+0x298/0x6c0
[   70.150507][ T5861]  kill_f2fs_super+0x2c3/0x6c0
[   70.150523][ T5861]  ? __pfx_kill_f2fs_super+0x10/0x10
[   70.150531][ T5861]  ? radix_tree_delete_item+0x2b6/0x400
[   70.150551][ T5861]  ? shrinker_free+0x2ce/0x3e0
[   70.150566][ T5861]  deactivate_locked_super+0xbc/0x130
[   70.150581][ T5861]  cleanup_mnt+0x425/0x4c0
[   70.150593][ T5861]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.150608][ T5861]  task_work_run+0x1d4/0x260
[   70.150626][ T5861]  ? __pfx_task_work_run+0x10/0x10
[   70.150639][ T5861]  ? __x64_sys_umount+0x122/0x160
[   70.150658][ T5861]  ? exit_to_user_mode_loop+0x40/0x110
[   70.150677][ T5861]  exit_to_user_mode_loop+0xec/0x110
[   70.150693][ T5861]  do_syscall_64+0x2bd/0x3b0
[   70.150707][ T5861]  ? lockdep_hardirqs_on+0x9c/0x150
[   70.150721][ T5861]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.150732][ T5861]  ? exc_page_fault+0x9f/0xf0
[   70.150748][ T5861]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   70.150759][ T5861] RIP: 0033:0x7fea5df8ff17
[   70.150770][ T5861] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   70.150780][ T5861] RSP: 002b:00007ffd582d4db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   70.150793][ T5861] RAX: 0000000000000000 RBX: 00007fea5e011c05 RCX: 00007fea5df8ff17
[   70.150800][ T5861] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd582d4e70
[   70.150807][ T5861] RBP: 00007ffd582d4e70 R08: 0000000000000000 R09: 0000000000000000
[   70.150813][ T5861] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd582d5f00
[   70.150821][ T5861] R13: 00007fea5e011c05 R14: 000000000001115b R15: 00007ffd582d5f40
[   70.150841][ T5861]  </TASK>
[   70.150846][ T5861] F2FS-fs (loop0): Remounting filesystem read-only
[   70.440112][  T972] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   70.506187][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.509194][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'.
[   70.514293][ T6438] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[   70.519054][ T6438] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[   70.607525][  T972] usb 3-1: Using ep0 maxpacket: 16
[   70.613802][  T972] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.617899][  T972] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   70.621904][  T972] usb 3-1: config 0 interface 0 has no altsetting 0
[   70.624529][  T972] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[   70.628496][  T972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.644304][  T972] usb 3-1: config 0 descriptor??
[   70.941243][ T5986] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   71.024612][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'.
[   71.031078][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.1.196'.
[   71.089535][  T972] cougar 0003:060B:500A.0001: unexpected long global item
[   71.095254][  T972] cougar 0003:060B:500A.0001: parse failed
[   71.097907][  T972] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22
[   71.116634][ T5986] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.126195][ T5986] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.142068][ T5986] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   71.145899][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.149233][ T5986] usb 1-1: Product: syz
[   71.160160][ T5986] usb 1-1: Manufacturer: syz
[   71.170616][ T5986] usb 1-1: SerialNumber: syz
[   71.257232][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.260438][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.278225][  T972] usb 3-1: USB disconnect, device number 3
[   71.391605][ T5986] usb 1-1: 0:2 : does not exist
[   71.413455][ T5986] usb 1-1: USB disconnect, device number 3
[   71.441873][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   71.576160][ T6489] loop1: detected capacity change from 0 to 1024
[   71.629199][ T5030] hfsplus: b-tree write err: -5, ino 4
[   71.835757][ T6497] loop2: detected capacity change from 0 to 512
[   71.942325][ T6495] loop1: detected capacity change from 0 to 32768
[   71.953224][ T6495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.207 (6495)
[   71.992719][ T6495] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.000313][ T6495] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   72.009733][ T6495] BTRFS info (device loop1): using free-space-tree
[   72.131597][ T6525] loop0: detected capacity change from 0 to 128
[   72.164804][ T5885] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   72.169537][ T6525] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   72.175937][ T6525] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   72.195232][ T5854] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   72.279483][ T5861] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.349887][  T972] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   72.474418][ T6540] loop0: detected capacity change from 0 to 512
[   72.525806][  T972] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   72.529611][  T972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   72.535035][  T972] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   72.542140][  T972] usb 3-1: config 1 has no interface number 1
[   72.545802][  T972] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   72.552972][  T972] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   72.558851][ T6536] loop1: detected capacity change from 0 to 32768
[   72.561012][  T972] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   72.564382][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.567130][  T972] usb 3-1: Product: syz
[   72.568797][  T972] usb 3-1: Manufacturer: syz
[   72.575056][  T972] usb 3-1: SerialNumber: syz
[   72.600186][ T6536] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   72.652729][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[   72.793890][  T972] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0
[   72.797236][  T972] usb 3-1: MIDIStreaming interface descriptor not found
[   72.852294][  T972] usb 3-1: USB disconnect, device number 4
[   72.995857][ T6558] udevd[6558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.305694][ T6566] netlink: 'syz.1.229': attribute type 29 has an invalid length.
[   73.999066][ T6570] loop2: detected capacity change from 0 to 32768
[   74.154705][ T6570] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.169445][ T6570] XFS (loop2): Ending clean mount
[   74.302889][ T5852] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   74.391458][ T6597] netlink: 392 bytes leftover after parsing attributes in process `syz.1.240'.
[   74.625537][ T6609] loop0: detected capacity change from 0 to 4096
[   74.679526][ T6614] binder_alloc: 6612: binder_alloc_buf, no vma
[   74.771531][ T6618] netlink: 'syz.0.249': attribute type 21 has an invalid length.
[   74.794208][ T5893] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   74.805815][ T6620] loop0: detected capacity change from 0 to 256
[   74.809304][ T6620] exfat: Deprecated parameter 'namecase'
[   74.811800][ T6620] exfat: Deprecated parameter 'utf8'
[   74.817074][ T6620] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[   74.940839][ T5893] usb 2-1: Using ep0 maxpacket: 8
[   74.945070][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D
[   74.952730][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[   74.957015][ T5893] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[   74.961525][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   74.968424][ T5893] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f
[   75.030409][ T2290] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   75.048165][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.052163][ T5893] usb 2-1: Product: syz
[   75.066694][ T5893] usb 2-1: Manufacturer: syz
[   75.073870][ T5893] usb 2-1: SerialNumber: syz
[   75.083222][ T5893] usb 2-1: config 0 descriptor??
[   75.088823][ T5893] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[   75.181447][ T2290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.187897][ T2290] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   75.192495][ T2290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.195907][ T2290] usb 3-1: Product: syz
[   75.197681][ T2290] usb 3-1: Manufacturer: syz
[   75.200241][ T2290] usb 3-1: SerialNumber: syz
[   75.206517][ T2290] usb 3-1: config 0 descriptor??
[   75.230685][ T2290] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[   75.249017][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   75.295715][ T5893] usb 2-1: USB disconnect, device number 7
[   75.330735][ T5986] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   75.424173][  T791] usb 3-1: USB disconnect, device number 5
[   75.480046][ T5986] usb 1-1: Using ep0 maxpacket: 32
[   75.483589][ T5986] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   75.486809][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.492738][ T5986] usb 1-1: config 0 descriptor??
[   75.501653][ T5986] gspca_main: sunplus-2.14.0 probing 041e:400b
[   75.702222][ T5986] gspca_sunplus: reg_w_riv err -71
[   75.704077][ T5986] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[   75.708521][ T5986] usb 1-1: USB disconnect, device number 4
[   75.996132][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'.
[   76.250744][ T6639] loop2: detected capacity change from 0 to 40427
[   76.263733][ T6639] F2FS-fs (loop2): Invalid SB checksum offset: 0
[   76.265963][ T6639] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[   76.285735][ T6639] F2FS-fs (loop2): invalid crc value
[   76.325489][ T6658] warning: `syz.1.264' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.346142][ T6639] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.351765][ T6639] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[   76.360191][ T6639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   76.385393][ T6661] netlink: 'syz.1.266': attribute type 3 has an invalid length.
[   76.397345][ T6639] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:12, node_footer[nid:12,ino:3,ofs:249659,cpver:0,blkaddr:0]
[   76.445850][ T5852] syz-executor: attempt to access beyond end of device
[   76.445850][ T5852] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   76.452630][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   76.452646][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.452653][ T5852] Call Trace:
[   76.452658][ T5852]  <TASK>
[   76.452662][ T5852]  dump_stack_lvl+0x189/0x250
[   76.452681][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.452694][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   76.452704][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.452717][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.452738][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   76.452758][ T5852]  f2fs_write_end_io+0x886/0xb60
[   76.452782][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   76.452794][ T5852]  ? up_write+0x1c4/0x420
[   76.452810][ T5852]  __submit_merged_write_cond+0x44c/0x530
[   76.452829][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[   76.452857][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   76.452892][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   76.452906][ T5852]  ? up_write+0x1c4/0x420
[   76.452915][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   76.452930][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[   76.452959][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   76.453006][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   76.453043][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   76.453060][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   76.453068][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   76.453086][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   76.453127][ T5852]  deactivate_locked_super+0xbc/0x130
[   76.453141][ T5852]  cleanup_mnt+0x425/0x4c0
[   76.453153][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.453168][ T5852]  task_work_run+0x1d4/0x260
[   76.453184][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   76.453195][ T5852]  ? __x64_sys_umount+0x122/0x160
[   76.453217][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   76.453234][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   76.453247][ T5852]  do_syscall_64+0x2bd/0x3b0
[   76.453260][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.453272][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.453282][ T5852]  ? exc_page_fault+0x9f/0xf0
[   76.453296][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.453305][ T5852] RIP: 0033:0x7fe58df8ff17
[   76.453315][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.453323][ T5852] RSP: 002b:00007ffd63b66fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.453335][ T5852] RAX: 0000000000000000 RBX: 00007fe58e011c05 RCX: 00007fe58df8ff17
[   76.453341][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd63b67070
[   76.453347][ T5852] RBP: 00007ffd63b67070 R08: 0000000000000000 R09: 0000000000000000
[   76.453353][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd63b68100
[   76.453359][ T5852] R13: 00007fe58e011c05 R14: 00000000000129f0 R15: 00007ffd63b68140
[   76.453379][ T5852]  </TASK>
[   76.454398][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   76.567985][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   76.567996][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.568000][ T5852] Call Trace:
[   76.568003][ T5852]  <TASK>
[   76.568011][ T5852]  dump_stack_lvl+0x189/0x250
[   76.568025][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.568048][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   76.568057][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.568068][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.568081][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   76.568114][ T5852]  f2fs_write_end_io+0x886/0xb60
[   76.568132][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   76.568140][ T5852]  ? up_write+0x1c4/0x420
[   76.568151][ T5852]  __submit_merged_write_cond+0x44c/0x530
[   76.568163][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[   76.568181][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   76.568204][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   76.568213][ T5852]  ? up_write+0x1c4/0x420
[   76.568219][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   76.568229][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[   76.568247][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   76.568279][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   76.568289][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   76.568298][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   76.568304][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   76.568317][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   76.568326][ T5852]  deactivate_locked_super+0xbc/0x130
[   76.568335][ T5852]  cleanup_mnt+0x425/0x4c0
[   76.568343][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.568353][ T5852]  task_work_run+0x1d4/0x260
[   76.568364][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   76.568372][ T5852]  ? __x64_sys_umount+0x122/0x160
[   76.568383][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   76.568394][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   76.568403][ T5852]  do_syscall_64+0x2bd/0x3b0
[   76.568411][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.568419][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.568426][ T5852]  ? exc_page_fault+0x9f/0xf0
[   76.568435][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.568441][ T5852] RIP: 0033:0x7fe58df8ff17
[   76.568449][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.568455][ T5852] RSP: 002b:00007ffd63b66fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.568463][ T5852] RAX: 0000000000000000 RBX: 00007fe58e011c05 RCX: 00007fe58df8ff17
[   76.568468][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd63b67070
[   76.568471][ T5852] RBP: 00007ffd63b67070 R08: 0000000000000000 R09: 0000000000000000
[   76.568475][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd63b68100
[   76.568480][ T5852] R13: 00007fe58e011c05 R14: 00000000000129f0 R15: 00007ffd63b68140
[   76.568493][ T5852]  </TASK>
[   76.580877][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   76.680452][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   76.680467][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.680473][ T5852] Call Trace:
[   76.680478][ T5852]  <TASK>
[   76.680483][ T5852]  dump_stack_lvl+0x189/0x250
[   76.680500][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.680511][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   76.680521][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.680533][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.680553][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   76.680570][ T5852]  f2fs_write_end_io+0x886/0xb60
[   76.680590][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   76.680601][ T5852]  ? up_write+0x1c4/0x420
[   76.680615][ T5852]  __submit_merged_write_cond+0x44c/0x530
[   76.680633][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[   76.680659][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   76.680691][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   76.680704][ T5852]  ? up_write+0x1c4/0x420
[   76.680712][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   76.680727][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[   76.680752][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   76.680791][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   76.680805][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   76.680819][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   76.680827][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   76.680844][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   76.680857][ T5852]  deactivate_locked_super+0xbc/0x130
[   76.680870][ T5852]  cleanup_mnt+0x425/0x4c0
[   76.680881][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.680896][ T5852]  task_work_run+0x1d4/0x260
[   76.680911][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   76.680922][ T5852]  ? __x64_sys_umount+0x122/0x160
[   76.680938][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   76.680953][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   76.680969][ T5852]  do_syscall_64+0x2bd/0x3b0
[   76.681007][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.681019][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.681028][ T5852]  ? exc_page_fault+0x9f/0xf0
[   76.681043][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.681053][ T5852] RIP: 0033:0x7fe58df8ff17
[   76.681065][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.681073][ T5852] RSP: 002b:00007ffd63b66fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.681086][ T5852] RAX: 0000000000000000 RBX: 00007fe58e011c05 RCX: 00007fe58df8ff17
[   76.681119][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd63b67070
[   76.681126][ T5852] RBP: 00007ffd63b67070 R08: 0000000000000000 R09: 0000000000000000
[   76.681132][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd63b68100
[   76.681140][ T5852] R13: 00007fe58e011c05 R14: 00000000000129f0 R15: 00007ffd63b68140
[   76.681160][ T5852]  </TASK>
[   76.681221][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   76.804930][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   76.804965][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.804973][ T5852] Call Trace:
[   76.804978][ T5852]  <TASK>
[   76.804983][ T5852]  dump_stack_lvl+0x189/0x250
[   76.805002][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   76.805014][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   76.805025][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   76.805038][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   76.805058][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   76.805078][ T5852]  f2fs_write_end_io+0x886/0xb60
[   76.805116][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   76.805127][ T5852]  ? up_write+0x1c4/0x420
[   76.805137][ T5852]  __submit_merged_write_cond+0x44c/0x530
[   76.805149][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[   76.805166][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[   76.805186][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[   76.805195][ T5852]  ? up_write+0x1c4/0x420
[   76.805201][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   76.805211][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[   76.805227][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   76.805253][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   76.805262][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   76.805276][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   76.805282][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   76.805293][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   76.805302][ T5852]  deactivate_locked_super+0xbc/0x130
[   76.805311][ T5852]  cleanup_mnt+0x425/0x4c0
[   76.805319][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.805329][ T5852]  task_work_run+0x1d4/0x260
[   76.805339][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   76.805346][ T5852]  ? __x64_sys_umount+0x122/0x160
[   76.805357][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   76.805368][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   76.805377][ T5852]  do_syscall_64+0x2bd/0x3b0
[   76.805385][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.805393][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.805400][ T5852]  ? exc_page_fault+0x9f/0xf0
[   76.805408][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.805415][ T5852] RIP: 0033:0x7fe58df8ff17
[   76.805422][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.805428][ T5852] RSP: 002b:00007ffd63b66fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.805436][ T5852] RAX: 0000000000000000 RBX: 00007fe58e011c05 RCX: 00007fe58df8ff17
[   76.805441][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd63b67070
[   76.805444][ T5852] RBP: 00007ffd63b67070 R08: 0000000000000000 R09: 0000000000000000
[   76.805448][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd63b68100
[   76.805453][ T5852] R13: 00007fe58e011c05 R14: 00000000000129f0 R15: 00007ffd63b68140
[   76.805464][ T5852]  </TASK>
[   76.805516][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   77.337559][ T6677] loop2: detected capacity change from 0 to 8
[   77.354810][ T6677] SQUASHFS error: xz decompression failed, data probably corrupt
[   77.358294][ T6677] SQUASHFS error: Failed to read block 0x108: -5
[   77.370335][ T6677] SQUASHFS error: Unable to read metadata cache entry [106]
[   77.373637][ T6677] SQUASHFS error: Unable to read inode 0x11f
[   77.690620][ T6682] loop0: detected capacity change from 0 to 512
[   77.697556][ T6682] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   77.719557][ T6682] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   77.838694][ T6682] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.272: invalid indirect mapped block 83886080 (level 1)
[   77.850907][ T6682] EXT4-fs (loop0): Remounting filesystem read-only
[   77.854650][ T6682] EXT4-fs (loop0): 1 orphan inode deleted
[   77.860865][ T6682] EXT4-fs (loop0): 1 truncate cleaned up
[   77.868705][ T6682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.026902][ T6690] loop2: detected capacity change from 0 to 128
[   78.051200][ T6690] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   78.106269][ T6690] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   78.121349][ T6690] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   78.397858][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.652240][ T6692] loop2: detected capacity change from 0 to 32768
[   78.663900][ T6692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.277 (6692)
[   78.671461][ T6692] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   78.675172][ T6692] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   78.678555][ T6692] BTRFS info (device loop2): using free-space-tree
[   79.024561][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.117688][ T6726] mmap: syz.2.282 (6726) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   79.333881][ T6724] loop0: detected capacity change from 0 to 32768
[   79.418250][ T6724] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.426265][ T6736] kernel read not supported for file /   (pid: 6736 comm: syz.2.286)
[   79.440199][   T34] audit: type=1800 audit(1755288464.360:4): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.286" name=200120 dev="mqueue" ino=8162 res=0 errno=0
[   79.458832][ T6724] XFS (loop0): Ending clean mount
[   79.474459][ T6724] XFS (loop0): Quotacheck needed: Please wait.
[   79.507238][ T6724] XFS (loop0): Quotacheck: Done.
[   79.560911][ T5861] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.564754][ T6749] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   79.567964][ T6749] syz.2.292: attempt to access beyond end of device
[   79.567964][ T6749] loop2: rw=0, sector=0, nr_sectors = 2 limit=0
[   79.614455][ T6751] delete_channel: no stack
[   79.720049][  T972] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   79.727642][ T6757] loop2: detected capacity change from 0 to 512
[   79.730969][ T6757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   79.744265][ T6757] EXT4-fs (loop2): 1 orphan inode deleted
[   79.746349][ T6757] EXT4-fs (loop2): 1 truncate cleaned up
[   79.753463][ T6757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.763263][ T6757] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   79.786439][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.832297][ T6761] netlink: 104 bytes leftover after parsing attributes in process `syz.2.296'.
[   79.879903][  T972] usb 2-1: Using ep0 maxpacket: 32
[   79.884342][  T972] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[   79.888024][  T972] usb 2-1: config 0 has no interface number 0
[   79.894902][  T972] usb 2-1: config 0 interface 12 has no altsetting 0
[   79.900386][  T972] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[   79.904447][  T972] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[   79.908126][  T972] usb 2-1: Product: syz
[   79.911781][  T972] usb 2-1: Manufacturer: syz
[   79.913845][  T972] usb 2-1: SerialNumber: syz
[   79.918457][  T972] usb 2-1: config 0 descriptor??
[   80.100833][ T2290] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   80.252230][ T2290] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   80.256874][ T2290] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   80.261772][ T2290] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   80.265510][ T2290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.279192][ T6763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   80.284986][ T2290] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   80.530217][ T2290] usb 3-1: USB disconnect, device number 6
[   80.684458][ T6769] binder: 6768:6769 ioctl c00c620f 0 returned -14
[   80.980116][ T2290] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   81.128705][ T6779] capability: warning: `syz.2.305' uses 32-bit capabilities (legacy support in use)
[   81.131726][ T2290] usb 1-1: Using ep0 maxpacket: 8
[   81.138945][  T972] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71
[   81.140397][ T2290] usb 1-1: unable to get BOS descriptor or descriptor too short
[   81.146981][  T972] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[   81.147302][ T2290] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[   81.152829][  T972] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   81.152866][  T972] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[   81.155549][  T972] usb 2-1: USB disconnect, device number 8
[   81.176758][ T2290] usb 1-1: config 0 has no interface number 0
[   81.179227][ T2290] usb 1-1: config 0 interface 88 altsetting 8 has an endpoint descriptor with address 0x4F, changing to 0xF
[   81.188861][ T2290] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0xF has an invalid bInterval 49, changing to 9
[   81.194766][ T2290] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0xF has invalid maxpacket 9292, setting to 1024
[   81.201452][ T2290] usb 1-1: config 0 interface 88 has no altsetting 0
[   81.212227][ T2290] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[   81.214652][ T5893] hid-generic 0004:0006:0003.0002: unknown main item tag 0x1
[   81.218961][ T2290] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[   81.224029][ T2290] usb 1-1: Product: syz
[   81.224653][ T5893] hid-generic 0004:0006:0003.0002: hidraw0: <UNKNOWN> HID v0.09 Device [syz1] on syz1
[   81.226061][ T2290] usb 1-1: Manufacturer: syz
[   81.232275][ T2290] usb 1-1: SerialNumber: syz
[   81.241925][ T2290] usb 1-1: config 0 descriptor??
[   81.245038][ T6773] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   81.401593][ T6791] process 'syz.2.311' launched './file0' with NULL argv: empty string added
[   81.471118][ T2290] usb 1-1: USB disconnect, device number 5
[   81.476464][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.313'.
[   81.482344][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz.2.313'.
[   81.487994][ T6795] tipc: MTU too low for tipc bearer
[   81.492190][   T24] cfg80211: failed to load regulatory.db
[   81.802570][ T6819] loop2: detected capacity change from 0 to 512
[   81.805735][ T6819] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   82.027887][ T6841] loop2: detected capacity change from 0 to 2364
[   82.100188][ T6840] loop1: detected capacity change from 0 to 4096
[   82.113626][ T6840] ntfs3(loop1): ino=3, Correct links count -> 2.
[   82.178473][ T6849] loop2: detected capacity change from 0 to 4096
[   82.196954][ T6852] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.202790][ T6851] loop0: detected capacity change from 0 to 1024
[   82.206255][ T6851] EXT4-fs: Ignoring removed bh option
[   82.208918][ T6851] EXT4-fs (loop0): unable to read superblock
[   82.288623][ T6856] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   82.292810][ T6856] comedi comedi3: 8255: I/O port conflict (0x8000006,4)
[   82.296169][ T6856] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   82.300553][ T6856] comedi comedi3: 8255: I/O port conflict (0x8,4)
[   82.309861][ T6856] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   82.316792][ T6856] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[   82.320505][ T6856] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[   82.329359][ T6856] comedi comedi3: 8255: I/O port conflict (0x3000000,4)
[   82.631104][ T6867] loop2: detected capacity change from 0 to 512
[   82.659324][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.674144][ T6867] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.837858][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.887370][ T6873] netlink: 'syz.0.351': attribute type 5 has an invalid length.
[   82.947717][ T6877] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   82.954861][ T6877] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[   82.959034][ T6877] overlayfs: fs on './bus' does not support file handles, falling back to xino=off.
[   82.962320][ T6877] overlayfs: conflicting lowerdir path
[   83.135926][ T6890] Device name cannot be null; rc = [-22]
[   83.984048][ T6898] loop1: detected capacity change from 0 to 32768
[   84.008313][ T6898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.361 (6898)
[   84.063032][ T6898] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.065809][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.363'.
[   84.080293][ T6898] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   84.083939][ T6898] BTRFS info (device loop1): disk space caching is enabled
[   84.087249][ T6898] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   84.147804][ T6898] BTRFS info (device loop1): rebuilding free space tree
[   84.193471][ T6898] BTRFS info (device loop1): disabling free space tree
[   84.196704][ T6898] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   84.202529][ T6898] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   84.619264][ T5854] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.737587][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'.
[   85.187904][ T6947] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[   86.152948][ T6962] loop2: detected capacity change from 0 to 32768
[   86.156070][ T6962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.382 (6962)
[   86.210347][ T6962] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.228228][ T6962] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   86.241583][ T6962] BTRFS info (device loop2): using free-space-tree
[   86.298602][ T6962] BTRFS info (device loop2): rebuilding free space tree
[   86.365609][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.579409][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   86.637375][ T7000] loop1: detected capacity change from 0 to 512
[   86.640795][ T7000] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   86.649531][ T7000] EXT4-fs (loop1): 1 truncate cleaned up
[   86.653870][ T7000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.677733][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.740131][   T24] usb 1-1: Using ep0 maxpacket: 32
[   86.743464][ T7006] loop1: detected capacity change from 0 to 512
[   86.744213][   T24] usb 1-1: config 1 has an invalid interface number: 44 but max is 0
[   86.759875][   T24] usb 1-1: config 1 has no interface number 0
[   86.762573][   T24] usb 1-1: config 1 interface 44 has no altsetting 0
[   86.769349][   T24] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c8.7b
[   86.773752][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.776880][ T7006] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   86.777813][   T24] usb 1-1: Product: syz
[   86.781069][ T7006] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   86.782753][   T24] usb 1-1: Manufacturer: syz
[   86.785005][ T7006] System zones: 
[   86.787003][   T24] usb 1-1: SerialNumber: syz
[   86.794873][ T7006] 0-1, 15-15, 18-18, 34-34
[   86.796648][ T7006] EXT4-fs (loop1): orphan cleanup on readonly fs
[   86.798858][ T7006] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[   86.802811][ T7006] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   86.807735][ T7006] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   86.811775][ T7006] EXT4-fs (loop1): 1 truncate cleaned up
[   86.814449][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.827674][ T7006] fscrypt (loop1, inode 16): Error -61 getting encryption context
[   86.831848][ T7006] fscrypt (loop1, inode 16): Error -61 getting encryption context
[   86.845789][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.882611][ T7010] loop1: detected capacity change from 0 to 512
[   86.889183][ T7010] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[   87.061420][   T24] gspca_main: dtcs033-2.14.0 probing 0547:7303
[   87.069884][   T24] usb 1-1: USB disconnect, device number 6
[   87.140289][  T791] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   87.302388][  T791] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   87.306469][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.315829][  T791] usb 2-1: config 0 descriptor??
[   87.329335][  T791] cp210x 2-1:0.0: cp210x converter detected
[   87.598305][ T7025] loop2: detected capacity change from 0 to 512
[   87.604711][ T7025] EXT4-fs: Ignoring removed i_version option
[   87.640952][ T7025] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   87.667213][ T7025] EXT4-fs (loop2): 1 truncate cleaned up
[   87.670365][ T7025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.782057][  T791] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   87.805105][  T791] usb 2-1: cp210x converter now attached to ttyUSB0
[   88.135720][   T34] audit: type=1804 audit(1755288472.930:5): pid=7032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.399" name="/newroot/162/bus/bus" dev="loop2" ino=18 res=1 errno=0
[   88.171523][   T24] usb 2-1: USB disconnect, device number 9
[   88.247685][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   88.262381][   T24] cp210x 2-1:0.0: device disconnected
[   88.305765][ T7037] loop0: detected capacity change from 0 to 256
[   88.320313][ T7037] FAT-fs (loop0): Directory bread(block 64) failed
[   88.322884][ T7037] FAT-fs (loop0): Directory bread(block 65) failed
[   88.325954][ T7037] FAT-fs (loop0): Directory bread(block 66) failed
[   88.328935][ T7037] FAT-fs (loop0): Directory bread(block 67) failed
[   88.332255][ T7037] FAT-fs (loop0): Directory bread(block 68) failed
[   88.334992][ T7037] FAT-fs (loop0): Directory bread(block 69) failed
[   88.337990][ T7037] FAT-fs (loop0): Directory bread(block 70) failed
[   88.341579][ T7037] FAT-fs (loop0): Directory bread(block 71) failed
[   88.344110][ T7037] FAT-fs (loop0): Directory bread(block 72) failed
[   88.346406][ T7037] FAT-fs (loop0): Directory bread(block 73) failed
[   88.629853][  T791] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   88.784574][  T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.792996][  T791] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[   88.796738][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.816573][  T791] usb 1-1: config 0 descriptor??
[   88.825629][  T791] smsusb:smsusb_probe: board id=8, interface number 0
[   88.828004][  T791] smsusb:smsusb_probe: Device initialized with return code -19
[   89.071430][  T791] usb 1-1: USB disconnect, device number 7
[   89.535955][ T7078] loop1: detected capacity change from 0 to 1024
[   89.625609][ T7082] loop1: detected capacity change from 0 to 1024
[   89.678618][ T1093] hfsplus: b-tree write err: -5, ino 4
[   89.970383][  T791] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[   90.031641][ T5986] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[   90.135226][  T791] usb 2-1: unable to get BOS descriptor set
[   90.138500][  T791] usb 2-1: not running at top speed; connect to a high speed hub
[   90.143954][  T791] usb 2-1: config 1 interface 0 has no altsetting 0
[   90.148999][  T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   90.153675][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.157256][  T791] usb 2-1: Product: syz
[   90.159240][  T791] usb 2-1: Manufacturer: syz
[   90.161742][  T791] usb 2-1: SerialNumber: syz
[   90.203636][ T5986] usb 1-1: unable to get BOS descriptor or descriptor too short
[   90.207574][ T5986] usb 1-1: not running at top speed; connect to a high speed hub
[   90.212591][ T5986] usb 1-1: config 4 has an invalid interface number: 32 but max is 0
[   90.215407][ T5986] usb 1-1: config 4 has no interface number 0
[   90.219634][ T5986] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[   90.222939][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.225714][ T5986] usb 1-1: Product: syz
[   90.227235][ T5986] usb 1-1: Manufacturer: syz
[   90.228885][ T5986] usb 1-1: SerialNumber: syz
[   90.379530][  T791] usb 2-1: USB disconnect, device number 10
[   90.383762][ T5853] udevd[5853]: setting mode of /dev/bus/usb/002/010 to 020664 failed: No such file or directory
[   90.388184][ T5853] udevd[5853]: setting owner of /dev/bus/usb/002/010 to uid=0, gid=7 failed: No such file or directory
[   90.442240][ T5986] usb 1-1: Found UVC 0.02 device syz (17dc:0202)
[   90.444428][ T5986] usb 1-1: No valid video chain found.
[   90.447175][ T5986] usb 1-1: USB disconnect, device number 8
[   90.672355][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.871381][ T7104] loop2: detected capacity change from 0 to 4096
[   90.881374][ T7104] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   90.892917][ T7104] ntfs3(loop2): ino=b, mi_enum_attr
[   90.895135][ T7104] ntfs3(loop2): Failed to load $Extend (-22).
[   90.897401][ T7104] ntfs3(loop2): Failed to initialize $Extend.
[   90.972011][ T7108] loop2: detected capacity change from 0 to 1024
[   90.996248][ T7108] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[   91.104320][ T7122] binder: 7121:7122 ioctl c0306201 200000000540 returned -14
[   91.193786][ T7126] loop1: detected capacity change from 0 to 4096
[   91.320108][  T791] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   91.352986][ T7136] loop0: detected capacity change from 0 to 4096
[   91.481296][  T791] usb 3-1: Using ep0 maxpacket: 8
[   91.493969][  T791] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[   91.501828][  T791] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[   91.507852][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[   91.516492][  T791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   91.524805][  T791] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[   91.529228][  T791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.536860][  T791] usb 3-1: Product: syz
[   91.538627][  T791] usb 3-1: Manufacturer: syz
[   91.549327][  T791] usb 3-1: SerialNumber: syz
[   91.552973][  T791] usb 3-1: config 0 descriptor??
[   91.556556][  T791] powermate 3-1:0.0: probe with driver powermate failed with error -5
[   91.760406][  T791] usb 3-1: USB disconnect, device number 7
[   91.840075][   T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   91.996062][   T24] usb 1-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01
[   92.000853][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.012553][   T24] usb 1-1: config 0 descriptor??
[   92.024701][   T24] ums-jumpshot 1-1:0.0: USB Mass Storage device detected
[   92.041936][   T24] ums-jumpshot 1-1:0.0: Quirks match for vid 05dc pid 0001: 2
[   92.227088][ T5986] usb 1-1: USB disconnect, device number 9
[   92.259914][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   92.419891][ T5893] usb 2-1: Using ep0 maxpacket: 32
[   92.424315][ T5893] usb 2-1: config 0 has an invalid interface number: 225 but max is 0
[   92.427882][ T5893] usb 2-1: config 0 has no interface number 0
[   92.430581][ T5893] usb 2-1: config 0 interface 225 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[   92.435221][ T5893] usb 2-1: config 0 interface 225 has no altsetting 0
[   92.439390][ T5893] usb 2-1: New USB device found, idVendor=05ac, idProduct=821a, bcdDevice=f8.67
[   92.444561][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.447973][ T5893] usb 2-1: Product: syz
[   92.450065][ T5893] usb 2-1: Manufacturer: syz
[   92.452127][ T5893] usb 2-1: SerialNumber: syz
[   92.456449][ T5893] usb 2-1: config 0 descriptor??
[   92.458711][ T5893] usb 2-1: Interface #225 referenced by multiple IADs
[   92.671162][ T5893] usb 2-1: USB disconnect, device number 11
[   93.019951][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   93.199903][   T24] usb 1-1: Using ep0 maxpacket: 8
[   93.204820][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[   93.208956][   T24] usb 1-1: config 7 has an invalid interface number: 148 but max is 0
[   93.215348][   T24] usb 1-1: config 7 has no interface number 0
[   93.224127][   T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76
[   93.232495][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.239947][   T24] usb 1-1: Product: syz
[   93.241845][   T24] usb 1-1: Manufacturer: syz
[   93.244002][   T24] usb 1-1: SerialNumber: syz
[   93.456534][ T7189] ALSA: mixer_oss: invalid OSS volume 'file1'
[   93.470243][   T24] ldusb 1-1:7.148: Interrupt in endpoint not found
[   93.473654][   T24] usb 1-1: USB disconnect, device number 10
[   93.493285][ T7191] loop1: detected capacity change from 0 to 512
[   93.495796][ T7191] EXT4-fs: Ignoring removed mblk_io_submit option
[   93.498651][ T7191] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   93.505836][ T7191] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   93.509199][ T7191] EXT4-fs (loop1): orphan cleanup on readonly fs
[   93.517430][ T7191] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.474: Invalid block bitmap block 0 in block_group 0
[   93.524717][ T7191] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.474: Invalid block bitmap block 0 in block_group 0
[   93.531644][ T7191] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.474: Invalid block bitmap block 0 in block_group 0
[   93.536624][ T7191] Quota error (device loop1): write_blk: dquota write failed
[   93.539276][ T7191] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota
[   93.543227][ T7191] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.474: Failed to acquire dquot type 1
[   93.547660][ T7191] EXT4-fs (loop1): 1 orphan inode deleted
[   93.551732][   T27] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5
[   93.555467][   T27] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u10:0: Failed to release dquot type 1
[   93.562267][ T7191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   93.580926][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.623909][ T7194] loop1: detected capacity change from 0 to 4096
[   93.638447][ T7194] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   93.642123][ T7194] UDF-fs: Scanning with blocksize 512 failed
[   93.647486][ T7194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.657654][ T7194] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[   94.086357][ T7216] input: syz1 as /devices/virtual/input/input7
[   94.100778][ T5986] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   94.250090][ T5986] usb 2-1: Using ep0 maxpacket: 8
[   94.256504][ T5986] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[   94.263829][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.266676][ T5986] usb 2-1: Product: syz
[   94.268281][ T5986] usb 2-1: Manufacturer: syz
[   94.270232][ T5986] usb 2-1: SerialNumber: syz
[   94.273426][ T5986] usb 2-1: config 0 descriptor??
[   94.276896][ T5986] usb 2-1: bad CDC descriptors
[   94.278989][ T5986] usb 2-1: unsupported MDLM descriptors
[   94.333751][ T7231] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[   94.479113][ T2290] usb 2-1: USB disconnect, device number 12
[   94.738911][ T7247] loop0: detected capacity change from 0 to 32768
[   94.765220][ T7247] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   94.778028][ T7247] (syz.0.501,7247,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[   94.784210][ T7247] (syz.0.501,7247,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[   94.787159][ T7247] (syz.0.501,7247,1):ocfs2_mknod:301 ERROR: status = -2
[   94.791523][ T7247] (syz.0.501,7247,1):ocfs2_mknod:505 ERROR: status = -2
[   94.794427][ T7247] (syz.0.501,7247,1):ocfs2_create:678 ERROR: status = -2
[   94.807879][ T5861] ocfs2: Unmounting device (7,0) on (node local)
[   95.022704][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[   95.034061][ T5885] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   95.034128][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[   95.037930][ T5885] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   95.046102][ T5885] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   95.056276][ T5885] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   95.196797][ T7261] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.505'.
[   95.251018][ T5860] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   95.417186][ T7263] syzkaller1: entered promiscuous mode
[   95.419202][ T7263] syzkaller1: entered allmulticast mode
[   95.558600][ T7269] IPv6: NLM_F_REPLACE set, but no existing node found!
[   95.565274][ T7269] loop1: detected capacity change from 0 to 128
[   95.581392][ T7269] FAT-fs (loop1): bogus number of FAT sectors
[   95.584073][ T7269] FAT-fs (loop1): Can't find a valid FAT filesystem
[   95.604815][ T7268] netlink: 72 bytes leftover after parsing attributes in process `syz.2.508'.
[   95.875569][ T7273] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.510'.
[   95.906458][ T7275] delete_channel: no stack
[   96.171232][ T7287] loop0: detected capacity change from 0 to 32768
[   96.262474][ T7287] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   96.276891][ T7287] XFS (loop0): Ending clean mount
[   96.298497][ T5861] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   96.456450][ T7301] overlayfs: failed to resolve './file0': -2
[   97.021051][ T7329] loop0: detected capacity change from 0 to 256
[   97.032618][ T7329] FAT-fs (loop0): Directory bread(block 64) failed
[   97.035132][ T7329] FAT-fs (loop0): Directory bread(block 65) failed
[   97.037893][ T7329] FAT-fs (loop0): Directory bread(block 66) failed
[   97.044495][ T7329] FAT-fs (loop0): Directory bread(block 67) failed
[   97.046979][ T7329] FAT-fs (loop0): Directory bread(block 68) failed
[   97.049360][ T7329] FAT-fs (loop0): Directory bread(block 69) failed
[   97.052375][ T7329] FAT-fs (loop0): Directory bread(block 70) failed
[   97.054682][ T7329] FAT-fs (loop0): Directory bread(block 71) failed
[   97.057022][ T7329] FAT-fs (loop0): Directory bread(block 72) failed
[   97.059376][ T7329] FAT-fs (loop0): Directory bread(block 73) failed
[   97.394157][ T7352] loop1: detected capacity change from 0 to 1764
[   97.899935][  T972] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   98.052467][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   98.056102][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.059363][  T972] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[   98.062624][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.066566][  T972] usb 1-1: config 0 descriptor??
[   98.482361][  T972] hid-led 0003:0FC5:B080.0003: unknown main item tag 0x0
[   98.623735][ T7368] loop1: detected capacity change from 0 to 32768
[   98.637834][ T7368] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.658848][ T7368] XFS (loop1): Ending clean mount
[   98.671953][   T34] audit: type=1800 audit(1755288483.600:6): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.550" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   98.690722][  T972] hid-led 0003:0FC5:B080.0003: probe with driver hid-led failed with error -71
[   98.696170][  T972] usb 1-1: USB disconnect, device number 11
[   98.697351][   T34] audit: type=1800 audit(1755288483.600:7): pid=7368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.550" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   98.886057][ T7387] fuse: Bad value for 'fd'
[   98.936123][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.048290][ T7393] netlink: 64 bytes leftover after parsing attributes in process `syz.1.558'.
[   99.098373][  T972] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   99.104825][ T7397] loop1: detected capacity change from 0 to 1024
[   99.108142][ T7397] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.111347][ T7397] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   99.112048][  T972] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   99.124773][ T7397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.149664][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.221810][ T7403] loop0: detected capacity change from 0 to 512
[   99.228768][ T7403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   99.253881][ T7403] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.265427][ T7403] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.303050][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.321468][ T7401] loop1: detected capacity change from 0 to 32768
[   99.324894][ T7401] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.561 (7401)
[   99.331104][ T7401] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.334287][ T7401] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   99.337478][ T7401] BTRFS info (device loop1): using free-space-tree
[   99.378830][ T7419] netlink: 'syz.0.564': attribute type 1 has an invalid length.
[   99.482876][ T5854] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.846401][ T7446] loop1: detected capacity change from 0 to 4096
[   99.849384][ T7446] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   99.854526][ T7446] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   99.859460][ T7446] ntfs3(loop1): volume is dirty and "force" flag is not set!
[   99.963658][ T7452] loop1: detected capacity change from 0 to 256
[   99.968459][ T7452] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   99.979870][ T7452] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   99.992404][ T7452] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  100.030537][  T791] usb 1-1: new low-speed USB device number 12 using dummy_hcd
[  100.341411][  T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.344732][  T791] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  100.348114][  T791] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  100.351558][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.359552][  T791] usb 1-1: config 0 descriptor??
[  100.567118][  T791] usb 1-1: USB disconnect, device number 12
[  100.743115][ T7472] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.348203][ T7481] loop0: detected capacity change from 0 to 32768
[  101.386651][ T7481] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.403616][ T7481] XFS (loop0): Ending clean mount
[  101.416891][ T7481] XFS (loop0): Quotacheck needed: Please wait.
[  101.439744][ T7481] XFS (loop0): Quotacheck: Done.
[  101.478425][ T5861] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.753489][ T7506] netlink: 72 bytes leftover after parsing attributes in process `syz.0.593'.
[  101.950022][ T7514] fuse: Bad value for 'fd'
[  102.436640][ T7518] loop1: detected capacity change from 0 to 32768
[  102.446679][ T7518] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.602 (7518)
[  102.472513][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.604'.
[  102.799690][ T7518] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  102.811253][ T7518] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  102.817891][ T7518] BTRFS info (device loop1): using free-space-tree
[  102.829490][ T7531] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  102.833509][ T7531] PKCS7: Only support pkcs7_signedData type
[  102.916256][ T5854] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  103.734940][ T7595] netlink: 'syz.0.629': attribute type 2 has an invalid length.
[  103.747750][ T7595] bridge: entered promiscuous mode
[  103.962427][ T7597] loop0: detected capacity change from 0 to 4096
[  103.978915][ T7597] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  104.193700][ T7611] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.637'.
[  104.878303][ T7626] loop1: detected capacity change from 0 to 1024
[  104.947730][ T7626] hfsplus: request for non-existent node 262144 in B*Tree
[  104.953100][ T7626] hfsplus: request for non-existent node 262144 in B*Tree
[  105.450063][  T791] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  105.600970][  T791] usb 2-1: Using ep0 maxpacket: 16
[  105.605091][  T791] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[  105.608054][  T791] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  105.611444][ T2290] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  105.613992][  T791] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  105.616877][  T791] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[  105.621556][  T791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  105.625171][  T791] usb 2-1: config 0 has no interface number 0
[  105.627645][  T791] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  105.630616][   T24] Process accounting resumed
[  105.634557][  T791] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  105.638140][  T791] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  105.643262][  T791] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  105.648392][  T791] usb 2-1: config 0 interface 125 has no altsetting 0
[  105.652017][  T791] usb 2-1: config 0 interface 125 has no altsetting 2
[  105.658305][  T791] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  105.664043][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.667170][  T791] usb 2-1: Product: syz
[  105.668615][  T791] usb 2-1: Manufacturer: syz
[  105.671311][  T791] usb 2-1: SerialNumber: syz
[  105.674651][  T791] usb 2-1: config 0 descriptor??
[  105.679164][  T791] usb 2-1: selecting invalid altsetting 2
[  105.770438][ T2290] usb 1-1: Using ep0 maxpacket: 16
[  105.776932][ T2290] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  105.782500][ T2290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.785317][ T2290] usb 1-1: Product: syz
[  105.787266][ T2290] usb 1-1: Manufacturer: syz
[  105.788898][ T2290] usb 1-1: SerialNumber: syz
[  105.793384][ T2290] usb 1-1: config 0 descriptor??
[  105.802144][ T2290] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  105.810685][ T2290] usb 1-1: Detected FT232H
[  105.999504][ T2290] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  106.416159][ T2290] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  106.608672][   T24] usb 1-1: USB disconnect, device number 13
[  106.623804][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  106.640294][   T24] ftdi_sio 1-1:0.0: device disconnected
[  106.700527][  T972] usb 2-1: USB disconnect, device number 13
[  107.249476][ T7668] loop1: detected capacity change from 0 to 128
[  107.257595][ T7668] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  107.265141][ T7668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.321324][   T24] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  108.408907][ T7706] loop1: detected capacity change from 0 to 4096
[  108.414033][ T7706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  108.417669][ T7706] EXT4-fs (loop1): Test dummy encryption mode enabled
[  108.428922][ T7706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.474535][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.491081][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  108.507300][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  108.520559][   T24] usb 1-1: config 8 has an invalid interface number: 24 but max is 0
[  108.523954][   T24] usb 1-1: config 8 has no interface number 0
[  108.526644][   T24] usb 1-1: config 8 interface 24 has no altsetting 0
[  108.544670][   T24] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  108.549683][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.559897][   T24] usb 1-1: Product: syz
[  108.562980][   T24] usb 1-1: Manufacturer: syz
[  108.569423][   T24] usb 1-1: SerialNumber: syz
[  108.815344][   T24] vmk80xx 1-1:8.24: driver 'vmk80xx' failed to auto-configure device.
[  108.823426][   T24] usb 1-1: USB disconnect, device number 14
[  108.970717][  T972] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  109.133321][  T972] usb 2-1: config 0 has an invalid interface number: 168 but max is 0
[  109.136839][  T972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.145660][  T972] usb 2-1: config 0 has no interface number 0
[  109.148338][  T972] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  109.157200][  T972] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  109.163049][  T972] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  109.166865][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.175096][  T972] usb 2-1: config 0 descriptor??
[  109.183157][  T972] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5
[  109.394535][  T972] usb 2-1: USB disconnect, device number 14
[  109.925850][ T7750] team0: Device gtp0 is of different type
[  110.291026][  T972] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  110.460097][  T972] usb 2-1: Using ep0 maxpacket: 16
[  110.478349][  T972] usb 2-1: config 0 has an invalid interface number: 102 but max is 0
[  110.488148][  T972] usb 2-1: config 0 has no interface number 0
[  110.499523][  T972] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=53.54
[  110.504854][  T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.509308][  T972] usb 2-1: Product: syz
[  110.512547][  T972] usb 2-1: Manufacturer: syz
[  110.514184][  T972] usb 2-1: SerialNumber: syz
[  110.517508][  T972] usb 2-1: config 0 descriptor??
[  110.584478][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.714'.
[  110.727718][  T972] snd-usb-audio 2-1:0.102: probe with driver snd-usb-audio failed with error -71
[  110.735097][  T972] usb 2-1: USB disconnect, device number 15
[  111.111798][ T5986] IPVS: starting estimator thread 0...
[  111.210619][ T7800] IPVS: using max 46 ests per chain, 110400 per kthread
[  111.455721][ T7802] loop1: detected capacity change from 0 to 256
[  111.459326][ T7802] exfat: Deprecated parameter 'utf8'
[  111.471518][   T34] audit: type=1800 audit(1755288496.400:8): pid=7802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.724" name="file2" dev="loop1" ino=1048601 res=0 errno=0
[  111.687230][ T7812] loop0: detected capacity change from 0 to 512
[  111.692301][ T7812] EXT4-fs: inline encryption not supported
[  111.709368][ T7812] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  111.723551][ T7812] EXT4-fs (loop0): 1 truncate cleaned up
[  111.727281][ T7812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.757279][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.771116][  T972] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  111.921728][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.937355][  T972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.947434][  T972] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  111.957521][  T972] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  111.962099][  T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.971366][  T972] usb 2-1: config 0 descriptor??
[  112.114273][ T7838] loop0: detected capacity change from 0 to 65
[  112.128072][ T7838] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  112.138147][ T7838] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0
[  112.380465][  T972] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0
[  112.389253][  T972] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0
[  112.400040][  T972] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0
[  112.402655][  T972] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0
[  112.404139][ T7853] openvswitch: netlink: IP tunnel dst address not specified
[  112.405032][  T972] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0
[  112.414753][  T972] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  112.584929][  T791] usb 2-1: USB disconnect, device number 16
[  112.800153][ T5986] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  112.952439][ T5986] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  112.956019][ T5986] usb 1-1: config 0 has no interface number 0
[  112.960737][ T5986] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  112.963975][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.967039][ T5986] usb 1-1: Product: syz
[  112.968790][ T5986] usb 1-1: Manufacturer: syz
[  112.972879][ T5986] usb 1-1: SerialNumber: syz
[  112.976628][ T5986] usb 1-1: config 0 descriptor??
[  113.261137][ T5986] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  113.267272][ T5986] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  113.271240][ T5986] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  113.274061][ T5986] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  113.278415][ T5986] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  113.568139][ T7889] loop1: detected capacity change from 0 to 256
[  113.586424][ T7889] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  113.767662][ T5986] usb 1-1: USB disconnect, device number 15
[  113.778220][ T5986] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  113.790609][ T5986] keyspan 1-1:0.133: device disconnected
[  113.809174][ T7899] loop1: detected capacity change from 0 to 128
[  113.824665][ T7899] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.829696][ T7899] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.842476][ T7899] EXT4-fs warning (device loop1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  113.862572][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.350233][ T5986] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  114.578081][ T5986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.593456][ T5986] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.597339][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.601256][ T5986] usb 2-1: Product: syz
[  114.604182][ T5986] usb 2-1: Manufacturer: syz
[  114.691993][ T5986] usb 2-1: SerialNumber: syz
[  115.170173][ T5986] cdc_ncm 2-1:1.0: bind() failure
[  115.179707][ T5986] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  115.188405][ T5986] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  115.193346][ T5986] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  115.207874][ T5986] usb 2-1: USB disconnect, device number 17
[  115.373444][ T7948] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  115.428976][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'.
[  115.784040][ T7962] tmpfs: Bad value for 'nr_blocks'
[  115.790470][ T2290] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  115.952624][ T2290] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  115.960242][ T2290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.963592][ T2290] usb 1-1: Product: syz
[  115.965340][ T2290] usb 1-1: Manufacturer: syz
[  115.969114][ T2290] usb 1-1: SerialNumber: syz
[  115.991463][ T2290] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  116.037233][ T5986] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  116.197773][ T7978] loop1: detected capacity change from 0 to 32768
[  116.218725][ T7978] (syz.1.805,7978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.227048][ T7978] (syz.1.805,7978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.242673][ T7978] (syz.1.805,7978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  116.249049][ T7956] random: crng reseeded on system resumption
[  116.261779][ T7978] JBD2: Ignoring recovery information on journal
[  116.316288][ T7978] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  116.340448][  T791] usb 1-1: USB disconnect, device number 16
[  116.359649][ T7978] (syz.1.805,7978,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x4e60244d, computed 0x8b393e9b. Applying ECC.
[  116.369582][ T7978] (syz.1.805,7978,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x4e60244d, computed 0x9b4be5b3
[  116.375479][ T7978] (syz.1.805,7978,1):ocfs2_trim_mainbm:7630 ERROR: status = -5
[  116.406388][ T5854] ocfs2: Unmounting device (7,1) on (node local)
[  116.555437][ T7988] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  116.969916][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  117.090102][ T5986] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  117.093409][ T5986] ath9k_htc: Failed to initialize the device
[  117.098012][  T791] usb 1-1: ath9k_htc: USB layer deinitialized
[  117.142778][   T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  117.147231][   T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  117.151271][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  117.154867][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.162663][ T8004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  117.168313][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  117.419269][ T5893] usb 2-1: USB disconnect, device number 18
[  118.460242][ T5893] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  118.615507][ T8054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.835'.
[  118.623987][ T8054] netlink: 44 bytes leftover after parsing attributes in process `syz.2.835'.
[  118.633035][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  118.637096][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.641836][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  118.649937][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  118.659213][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  118.664291][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.667599][ T5893] usb 2-1: Product: syz
[  118.669337][ T5893] usb 2-1: Manufacturer: syz
[  118.673689][ T5893] usb 2-1: SerialNumber: syz
[  118.679716][ T5893] usb 2-1: config 0 descriptor??
[  118.691042][ T5893] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected
[  118.696691][ T5893] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  118.702246][ T5893] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  118.892497][ T5993] usb 2-1: USB disconnect, device number 19
[  118.902783][ T5993] garmin_gps 2-1:0.0: device disconnected
[  118.942012][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  118.945106][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'.
[  118.948140][ T8062] netlink: 'syz.0.838': attribute type 18 has an invalid length.
[  118.952633][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  119.010400][ T8064] loop0: detected capacity change from 0 to 4096
[  119.016461][ T8064] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  119.029130][ T8064] ntfs3(loop0): ino=4, mi_enum_attr
[  119.031623][ T8064] ntfs3(loop0): ino=4, Correct links count -> 2.
[  119.034152][ T8064] ntfs3(loop0): Failed to load $AttrDef (-22)
[  119.683750][ T8082] loop1: detected capacity change from 0 to 512
[  119.688472][ T8082] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  120.265555][ T8090] loop0: detected capacity change from 0 to 32768
[  120.277414][ T8090] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.850 (8090)
[  120.296846][ T8090] BTRFS info (device loop0): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  120.301966][ T8090] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  120.305573][ T8090] BTRFS info (device loop0): using free-space-tree
[  120.444092][ T5861] BTRFS info (device loop0): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928
[  120.950012][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  121.111882][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.116346][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.121402][   T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  121.125745][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.141377][   T24] usb 1-1: config 0 descriptor??
[  121.567749][   T24] itetech 0003:06CB:2968.0006: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.0-1/input0
[  121.765169][ T5986] usb 1-1: USB disconnect, device number 17
[  121.822056][ T8135] loop1: detected capacity change from 0 to 32768
[  121.827238][ T8135] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-10, 9-16
[  121.827238][ T8135] journal_v2 (size 40):
[  121.827238][ T8135] Buckets:  9-16 9-10
[  121.827238][ T8135] 
[  121.835507][ T8135] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  121.903238][ T8139] loop1: detected capacity change from 0 to 4096
[  121.913385][ T8139] ntfs3(loop1): ino=1a, mi_enum_attr
[  121.915131][ T8139] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  123.098103][   T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  123.253739][   T24] usb 1-1: config 0 has an invalid interface number: 84 but max is 0
[  123.257278][   T24] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[  123.260931][   T24] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  123.264928][   T24] usb 1-1: config 0 has no interface number 0
[  123.267511][   T24] usb 1-1: config 0 has no interface number 1
[  123.270947][   T24] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64
[  123.275909][   T24] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  123.281424][   T24] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30
[  123.286255][   T24] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32
[  123.299887][   T24] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2
[  123.304827][   T24] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86
[  123.310373][   T24] usb 1-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024
[  123.315242][   T24] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024
[  123.319562][   T24] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216
[  123.325429][   T24] usb 1-1: config 0 interface 66 has no altsetting 0
[  123.332426][   T24] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  123.336245][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.339525][   T24] usb 1-1: Product: syz
[  123.341554][   T24] usb 1-1: Manufacturer: syz
[  123.349839][   T24] usb 1-1: SerialNumber: syz
[  123.354655][   T24] usb 1-1: config 0 descriptor??
[  123.359944][   T24] ljca 1-1:0.84: bulk endpoints not found
[  123.572391][   T24] ljca 1-1:0.66: probe with driver ljca failed with error -71
[  123.580660][   T24] usb 1-1: USB disconnect, device number 18
[  123.961888][   T34] audit: type=1326 audit(1755288508.880:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  123.976959][   T34] audit: type=1326 audit(1755288508.880:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  123.986044][   T34] audit: type=1326 audit(1755288508.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  123.995827][   T34] audit: type=1326 audit(1755288508.890:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.005328][   T34] audit: type=1326 audit(1755288508.890:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.016027][   T34] audit: type=1326 audit(1755288508.900:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.025285][   T34] audit: type=1326 audit(1755288508.900:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.040435][   T34] audit: type=1326 audit(1755288508.900:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.049363][   T34] audit: type=1326 audit(1755288508.910:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.069081][   T34] audit: type=1326 audit(1755288508.910:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.2.879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x7ffc0000
[  124.091136][ T8174] loop1: detected capacity change from 0 to 32768
[  124.093749][ T8174] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  124.121961][ T8179] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  124.191675][ T8185] netlink: 'syz.0.884': attribute type 5 has an invalid length.
[  124.331327][ T8184] loop1: detected capacity change from 0 to 32768
[  124.336303][ T8184] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.885 (8184)
[  124.352566][ T8184] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  124.355801][ T8184] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  124.358835][ T8184] BTRFS info (device loop1): using free-space-tree
[  124.457162][ T8213] Bluetooth: hci3: Frame reassembly failed (-84)
[  124.463702][ T8184] BTRFS error (device loop1 state M): ignoresuperflags must be used with ro mount option
[  124.477698][ T5854] BTRFS info (device loop1 state M): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  124.582553][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'.
[  124.626740][ T8221] loop1: detected capacity change from 0 to 4096
[  124.640889][ T8221] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  124.654299][ T8221] ntfs3(loop1): $Secure::$SDH is corrupted.
[  124.656667][ T8221] ntfs3(loop1): Failed to initialize $Secure (-22).
[  124.855670][ T8231] loop1: detected capacity change from 0 to 128
[  124.901932][ T8233] bond0: entered promiscuous mode
[  124.903693][ T8233] bond_slave_0: entered promiscuous mode
[  124.905699][ T8233] bond_slave_1: entered promiscuous mode
[  124.912269][ T8233] batadv0: entered promiscuous mode
[  124.914785][ T8233] hsr1: entered allmulticast mode
[  124.916492][ T8233] bond0: entered allmulticast mode
[  124.918371][ T8233] bond_slave_0: entered allmulticast mode
[  124.921922][ T8233] bond_slave_1: entered allmulticast mode
[  124.923941][ T8233] batadv0: entered allmulticast mode
[  124.925968][ T8233] 8021q: adding VLAN 0 to HW filter on device hsr1
[  124.932676][ T8233] bond0: left promiscuous mode
[  124.934271][ T8233] bond_slave_0: left promiscuous mode
[  124.936307][ T8233] bond_slave_1: left promiscuous mode
[  124.950817][ T8233] batadv0: left promiscuous mode
[  125.106641][ T8239] netlink: 'syz.1.904': attribute type 5 has an invalid length.
[  125.380273][ T5986] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  125.568966][ T5986] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  125.572952][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.576190][ T5986] usb 2-1: Product: syz
[  125.578050][ T5986] usb 2-1: Manufacturer: syz
[  125.581532][ T5986] usb 2-1: SerialNumber: syz
[  125.590955][ T5986] usb 2-1: config 0 descriptor??
[  125.595557][ T5986] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  125.598788][ T5986] usb 2-1: setting power ON
[  125.602455][ T5986] dvb-usb: bulk message failed: -22 (2/0)
[  125.610737][ T5986] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  125.617361][ T5986] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  125.621503][ T5986] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  125.798986][  T791] usb 2-1: USB disconnect, device number 20
[  126.168819][ T8253] 9p: Unknown access argument (: -22
[  126.336744][ T8259] loop1: detected capacity change from 0 to 1024
[  126.362554][ T8259] hfsplus: b-tree write err: -5, ino 3
[  126.378234][ T4648] hfsplus: b-tree write err: -5, ino 3
[  126.453001][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  126.553597][ T8272] input: syz0 as /devices/virtual/input/input8
[  127.021807][ T5986] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  127.130182][  T791] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  127.170317][ T5986] usb 2-1: Using ep0 maxpacket: 8
[  127.177197][ T5986] usb 2-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01
[  127.181473][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.184765][ T5986] usb 2-1: Product: syz
[  127.186495][ T5986] usb 2-1: Manufacturer: syz
[  127.188452][ T5986] usb 2-1: SerialNumber: syz
[  127.192885][ T5986] usb 2-1: config 0 descriptor??
[  127.256528][ T5986] go7007 2-1:0.0: probe with driver go7007 failed with error -12
[  127.269641][ T8287] netlink: 'syz.2.924': attribute type 2 has an invalid length.
[  127.273463][ T8287] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.924'.
[  127.276712][ T8287] nbd: must specify a device to reconfigure
[  127.330360][  T791] usb 1-1: Using ep0 maxpacket: 16
[  127.335898][  T791] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  127.339415][  T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.344649][  T791] usb 1-1: config 0 has no interface number 0
[  127.348507][  T791] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  127.353514][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.356402][  T791] usb 1-1: Product: syz
[  127.357956][  T791] usb 1-1: Manufacturer: syz
[  127.359560][  T791] usb 1-1: SerialNumber: syz
[  127.371217][  T791] usb 1-1: config 0 descriptor??
[  127.375257][  T791] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[  127.466520][ T5986] usb 2-1: USB disconnect, device number 21
[  127.523585][ T8291] Invalid option length (1048180) for dns_resolver key
[  127.590622][   T24] usb 1-1: USB disconnect, device number 19
[  128.245169][  T972] libceph: connect (1)[c::]:6789 error -101
[  128.247401][  T972] libceph: mon0 (1)[c::]:6789 connect error
[  128.522515][  T972] libceph: connect (1)[c::]:6789 error -101
[  128.525761][  T972] libceph: mon0 (1)[c::]:6789 connect error
[  129.031495][  T972] libceph: connect (1)[c::]:6789 error -101
[  129.043358][  T972] libceph: mon0 (1)[c::]:6789 connect error
[  129.069082][ T8314] ceph: No mds server is up or the cluster is laggy
[  129.185984][ T8335] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  129.361883][ T8339] tracefs: Invalid gid '00000000000037777777777'
[  129.450195][ T8343] loop1: detected capacity change from 0 to 1024
[  129.559415][ T8333] loop0: detected capacity change from 0 to 32768
[  129.569407][ T8333] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  129.595141][ T8333] XFS (loop0): Ending clean mount
[  129.636995][ T5861] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  129.863617][ T8356] loop1: detected capacity change from 0 to 32768
[  129.885380][ T8356] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  129.930605][ T8356] XFS (loop1): Ending clean mount
[  130.030797][ T5854] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  131.076516][ T8393] loop1: detected capacity change from 0 to 1024
[  131.086282][ T8393] EXT4-fs: Ignoring removed nobh option
[  131.097343][ T8393] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  131.116939][ T8393] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.964: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  131.136066][ T8393] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.964: couldn't read orphan inode 11 (err -117)
[  131.147752][ T8393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.172889][ T8393] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.964: Invalid block bitmap block 0 in block_group 0
[  131.180130][ T8393] __quota_error: 13 callbacks suppressed
[  131.180138][ T8393] Quota error (device loop1): write_blk: dquota write failed
[  131.184754][ T8393] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  131.188713][ T8393] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.964: Failed to acquire dquot type 0
[  131.200088][ T8393] EXT4-fs error (device loop1): ext4_nfs_get_inode:1525: inode #11: comm syz.1.964: iget: bad extra_isize 65535 (inode size 256)
[  131.248120][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.317016][ T8401] tipc: Started in network mode
[  131.318792][ T8401] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  131.326314][ T8403] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.968'.
[  131.327744][ T8401] tipc: Enabled bearer <eth:vlan0>, priority 10
[  131.422888][ T8411] netlink: 'syz.2.972': attribute type 1 has an invalid length.
[  131.425975][ T8411] netlink: 'syz.2.972': attribute type 4 has an invalid length.
[  131.429002][ T8411] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.972'.
[  132.264880][ T8428] loop1: detected capacity change from 0 to 32768
[  132.270672][ T8428] (syz.1.979,8428,0):ocfs2_read_virt_blocks:1007 ERROR: Inode #66 contains a hole at offset 0
[  132.276990][ T8428] (syz.1.979,8428,0):ocfs2_read_dir_block:511 ERROR: status = -5
[  132.281705][ T8428] (syz.1.979,8428,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  132.286035][ T8428] (syz.1.979,8428,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  132.286056][ T8428] (syz.1.979,8428,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  132.310118][ T8428] (syz.1.979,8428,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  132.313526][ T8428] (syz.1.979,8428,0):ocfs2_fill_super:1177 ERROR: status = -22
[  132.450908][  T972] tipc: Node number set to 10005162
[  132.693127][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.695838][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.174949][ T8461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.994'.
[  133.180735][ T8462] loop0: detected capacity change from 0 to 4096
[  133.201108][ T8462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.231850][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.266030][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'.
[  133.929334][ T8491] loop0: detected capacity change from 0 to 8
[  134.319933][ T5316] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  134.491817][ T5316] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  134.495188][ T5316] usb 1-1: config 0 has no interface number 0
[  134.497490][ T5316] usb 1-1: config 0 interface 29 has no altsetting 0
[  134.505585][ T5316] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  134.509375][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.512829][ T5316] usb 1-1: Product: syz
[  134.514419][ T5316] usb 1-1: Manufacturer: syz
[  134.516467][ T5316] usb 1-1: SerialNumber: syz
[  134.523608][ T5316] usb 1-1: config 0 descriptor??
[  134.775447][ T5316] peak_usb 1-1:0.29 can0: unable to request usb[type=0 value=1] err=-71
[  134.789448][ T5316] peak_usb 1-1:0.29: unable to read PCAN-USB X6 firmware info (err -71)
[  134.883433][ T5316] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -71
[  134.910540][ T5316] usb 1-1: USB disconnect, device number 20
[  135.469301][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  135.474132][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'.
[  135.477359][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  135.480700][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'.
[  135.648280][ T8544] smc: net device bond0 applied user defined pnetid SYZ2
[  136.120326][ T5986] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  136.272419][ T5986] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  136.275847][ T5986] usb 1-1: config 0 has no interface number 0
[  136.278480][ T5986] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  136.291873][ T5986] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  136.298359][ T5986] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  136.302595][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.305971][ T5986] usb 1-1: Product: syz
[  136.308021][ T5986] usb 1-1: Manufacturer: syz
[  136.312826][ T5986] usb 1-1: SerialNumber: syz
[  136.316880][ T5986] usb 1-1: config 0 descriptor??
[  136.777827][ T5986] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71
[  136.780525][ T5986] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  136.786989][ T5986] usb 1-1: USB disconnect, device number 21
[  137.122768][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1052'.
[  137.235401][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1058'.
[  137.401626][ T8612] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  137.506268][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1068'.
[  137.511274][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.542884][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.647971][ T8626] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  137.684171][ T8619] loop1: detected capacity change from 0 to 32768
[  137.743319][ T8619] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.757325][ T8619] XFS (loop1): Ending clean mount
[  137.789072][ T5854] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  137.944483][ T8642] loop1: detected capacity change from 0 to 2048
[  137.953046][ T8642] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  137.972574][ T8643] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.000237][ T5316] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  138.151876][ T5316] usb 1-1: Using ep0 maxpacket: 16
[  138.158034][ T5316] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  138.162510][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.165952][ T5316] usb 1-1: Product: syz
[  138.167830][ T5316] usb 1-1: Manufacturer: syz
[  138.181856][ T5316] usb 1-1: SerialNumber: syz
[  138.186150][ T5316] usb 1-1: config 0 descriptor??
[  138.204214][ T5316] hub 1-1:0.0: bad descriptor, ignoring hub
[  138.207018][ T5316] hub 1-1:0.0: probe with driver hub failed with error -5
[  138.281219][ T8645] loop1: detected capacity change from 0 to 32768
[  138.284887][ T8645] XFS: noikeep mount option is deprecated.
[  138.318229][ T8645] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.338697][ T8645] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  138.351171][ T8645] XFS (loop1): Starting recovery (logdev: internal)
[  138.362423][ T8645] XFS (loop1): Ending recovery (logdev: internal)
[  138.398637][ T5854] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.487214][ T8659] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1078'.
[  138.501257][  T972] usb 1-1: USB disconnect, device number 22
[  138.765119][ T8665] loop1: detected capacity change from 0 to 32768
[  138.787967][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1085'.
[  138.793553][ T8675] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1085'.
[  139.092310][ T8681] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1089'.
[  139.235479][ T8684] loop1: detected capacity change from 0 to 32768
[  139.246123][ T8684] 
[  139.246123][ T8684]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.246123][ T8684] 
[  139.276968][ T8684] read_mapping_page failed!
[  139.278974][ T8684] ERROR: (device loop1): txCommit: 
[  139.278974][ T8684] 
[  139.288028][ T8684] read_mapping_page failed!
[  139.290834][ T8684] ERROR: (device loop1): txCommit: 
[  139.290834][ T8684] 
[  139.309404][ T5854] 
[  139.309404][ T5854]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.309404][ T5854] 
[  139.320792][ T5854] 
[  139.320792][ T5854]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.320792][ T5854] 
[  139.470475][ T5316] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  139.568563][ T8710] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  139.573942][ T8710] PKCS7: Only support pkcs7_signedData type
[  139.639118][ T8715] program syz.1.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.643658][ T5316] usb 1-1: Using ep0 maxpacket: 8
[  139.650659][ T5316] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23
[  139.654458][ T5316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.670627][ T5316] usb 1-1: config 0 descriptor??
[  139.683746][ T5316] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11
[  139.882596][ T5283] bcm5974 1-1:0.0: could not read from device
[  139.893303][ T5283] bcm5974 1-1:0.0: could not read from device
[  139.898597][ T5283] bcm5974 1-1:0.0: could not read from device
[  139.912518][ T5316] usb 1-1: USB disconnect, device number 23
[  139.923529][ T5283] bcm5974 1-1:0.0: could not read from device
[  140.002371][ T5853] udevd[5853]: Error opening device "/dev/input/event3": No such device
[  140.012611][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event3"
[  140.015674][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event3"
[  140.018940][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event3"
[  140.025017][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event3"
[  140.463196][ T8735] tipc: Enabled bearer <udp:syz2>, priority 10
[  140.484626][ T8735] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  140.487917][ T8735] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  140.494952][ T8735] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  140.499578][ T8735] tipc: Enabled bearer <udp:syz0>, priority 9
[  140.565712][ T8738] loop0: detected capacity change from 0 to 4096
[  140.580197][ T8738] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  140.792312][ T8742] loop1: detected capacity change from 0 to 32768
[  140.803030][   T34] audit: type=1800 audit(1755288525.730:32): pid=8742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1116" name="file2" dev="loop1" ino=5 res=0 errno=0
[  140.919912][ T5316] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  140.934297][ T8746] can0: slcan on ttyS3.
[  141.011881][ T8746] can0 (unregistered): slcan off ttyS3.
[  141.087053][ T5316] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.096863][ T5316] usb 1-1: config 0 interface 0 has no altsetting 0
[  141.099316][ T5316] usb 1-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00
[  141.103084][ T5316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.108630][ T5316] usb 1-1: config 0 descriptor??
[  141.115487][ T5316] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  141.315238][ T5283] bcm5974 1-1:0.0: could not read from device
[  141.324219][ T5283] bcm5974 1-1:0.0: could not read from device
[  141.327036][ T5316] usb 1-1: USB disconnect, device number 24
[  141.329970][ T5283] bcm5974 1-1:0.0: could not read from device
[  141.334196][ T5283] bcm5974 1-1:0.0: could not read from device
[  141.479966][ T5893] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  141.629916][ T5893] usb 2-1: Using ep0 maxpacket: 32
[  141.634176][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  141.638909][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  141.643696][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  141.647803][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  141.652504][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  141.659390][ T5893] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  141.663270][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.666602][ T5893] usb 2-1: Product: syz
[  141.668382][ T5893] usb 2-1: Manufacturer: syz
[  141.670376][ T5893] usb 2-1: SerialNumber: syz
[  141.675498][ T5893] usb 2-1: config 0 descriptor??
[  141.917910][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  141.917946][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x5d
[  141.920670][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  141.922897][ T5860] Bluetooth: hci2: Unknown advertising packet type: 0x7f
[  141.924059][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'.
[  141.925163][ T5860] Bluetooth: hci2: Malformed LE Event: 0x0d
[  142.089271][ T5893] input input13: Device does not respond to id packet M
[  142.294530][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.297373][ T5893] input input13: Device does not respond to id packet P
[  142.303470][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.306394][ T5893] input input13: Device does not respond to id packet B
[  142.309184][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.311973][ T5893] input input13: Device does not respond to id packet N
[  142.314998][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.317692][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.321521][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.324118][ T5893] iforce 2-1:0.0: usb_submit_urb failed: -71
[  142.329646][ T5893] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  142.338994][ T5893] usb 2-1: USB disconnect, device number 22
[  143.071704][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1130'.
[  143.075297][ T8782] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  143.078060][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.206313][ T8778] loop1: detected capacity change from 0 to 32768
[  143.231661][ T8778] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.282829][ T8778] XFS (loop1): Ending clean mount
[  143.334694][ T8778] XFS (loop1): Quotacheck needed: Please wait.
[  143.375952][ T8778] XFS (loop1): Quotacheck: Done.
[  143.453782][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.478801][ T8814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.157809][ T8851] Bluetooth: hci0: invalid length 0, exp 2 for type 3
[  144.205898][ T8855] netlink: 'syz.1.1161': attribute type 49 has an invalid length.
[  144.220565][ T8855] netlink: 'syz.1.1161': attribute type 49 has an invalid length.
[  144.554221][ T8880] loop0: detected capacity change from 0 to 32768
[  144.560106][  T791] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  144.563141][ T8880] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1174 (8880)
[  144.585021][ T8880] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.589416][ T8880] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  144.597301][ T8880] BTRFS info (device loop0): using free-space-tree
[  144.607352][ T8889] trusted_key: syz.2.1176 sent an empty control message without MSG_MORE.
[  144.712105][  T791] usb 2-1: config index 0 descriptor too short (expected 61256, got 72)
[  144.715330][  T791] usb 2-1: config 1 has an invalid interface number: 0 but max is -1
[  144.727844][  T791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.732345][ T1090] BTRFS warning (device loop0): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x05b99823 level 0
[  144.738848][  T791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 0
[  144.742414][ T8880] BTRFS: error (device loop0) in btrfs_fill_super:986: errno=-5 IO failure
[  144.747575][ T8880] BTRFS error (device loop0 state E): commit super ret -30
[  144.750455][  T791] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  144.780052][  T791] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.785036][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  144.793918][  T791] usb 2-1: SerialNumber: syz
[  144.804624][  T791] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  144.807185][  T791] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  144.809433][  T791] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[  145.023494][  T791] usb 2-1: USB disconnect, device number 23
[  145.386352][ T8930] loop0: detected capacity change from 0 to 32768
[  145.394067][ T8930] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  145.408353][ T8930] XFS (loop0): Ending clean mount
[  145.431048][ T5861] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  145.551895][ T8944] loop0: detected capacity change from 0 to 1024
[  145.573507][ T8944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.617273][ T8951] loop1: detected capacity change from 0 to 164
[  145.845310][  T791] IPVS: starting estimator thread 0...
[  145.940141][ T8957] IPVS: using max 79 ests per chain, 189600 per kthread
[  146.401069][ T5861] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.661211][ T8995] loop1: detected capacity change from 0 to 164
[  146.994954][ T9003] loop1: detected capacity change from 0 to 128
[  147.037816][ T9005] netlink: 'syz.1.1217': attribute type 1 has an invalid length.
[  147.042131][ T9005] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.1217'.
[  147.088136][ T9009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1219'.
[  147.091426][ T9009] openvswitch: netlink: Missing key (keys=40, expected=80)
[  147.137228][ T9013] loop1: detected capacity change from 0 to 128
[  147.154433][ T9013] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.158765][ T9013] ext4 filesystem being mounted at /383/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.186495][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.274882][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'.
[  147.278791][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'.
[  147.316028][ T9022] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1225'.
[  147.405980][ T9028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'.
[  148.059590][ T9039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  149.009942][  T791] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  149.200111][  T791] usb 2-1: Using ep0 maxpacket: 8
[  149.203629][  T791] usb 2-1: config 5 has an invalid interface number: 22 but max is 0
[  149.206415][  T791] usb 2-1: config 5 has no interface number 0
[  149.208496][  T791] usb 2-1: config 5 interface 22 altsetting 25 endpoint 0x6 has invalid wMaxPacketSize 0
[  149.215948][  T791] usb 2-1: config 5 interface 22 has no altsetting 0
[  149.225052][  T791] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ba.fa
[  149.228660][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.233438][  T791] usb 2-1: Product: syz
[  149.234967][  T791] usb 2-1: Manufacturer: syz
[  149.236567][  T791] usb 2-1: SerialNumber: syz
[  149.454624][  T791] kvaser_usb 2-1:5.22: error -ENODEV: Cannot get usb endpoint(s)
[  149.462966][  T791] rndis_host 2-1:5.22: skipping garbage
[  149.465458][  T791] usb 2-1: bad CDC descriptors
[  149.473893][  T791] usb 2-1: USB disconnect, device number 24
[  150.057313][ T9093] loop1: detected capacity change from 0 to 512
[  150.085645][ T9093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.092171][ T9093] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.163904][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.363593][ T9117] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1269'.
[  150.390553][ T9106] loop1: detected capacity change from 0 to 32768
[  150.422786][ T9106]  loop1: p1 p3 < >
[  150.602402][ T5853] udevd[5853]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  150.613240][ T6558] udevd[6558]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  150.751098][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1274'.
[  150.764617][ T9127] erspan0: entered promiscuous mode
[  150.767613][ T9127] macvtap1: entered promiscuous mode
[  150.774465][ T9127] macvtap1: entered allmulticast mode
[  150.776930][ T9127] erspan0: entered allmulticast mode
[  150.788989][ T9127] erspan0: left allmulticast mode
[  150.791768][ T9127] erspan0: left promiscuous mode
[  150.838953][ T9131] loop1: detected capacity change from 0 to 128
[  150.857438][ T9131] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  151.170493][ T5893] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  151.332686][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.336683][ T5893] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  151.342495][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  151.345689][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  151.348790][ T5893] usb 2-1: SerialNumber: syz
[  151.362228][ T5893] usb 2-1: 0:2 : does not exist
[  151.769095][ T5893] usb 2-1: USB disconnect, device number 25
[  152.081612][ T9164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'.
[  153.349539][ T9196] loop1: detected capacity change from 0 to 32768
[  153.479886][ T9196] XFS: ikeep mount option is deprecated.
[  153.635225][ T9196] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.655191][ T9196] XFS (loop1): Ending clean mount
[  153.658156][ T9196] XFS (loop1): Quotacheck needed: Please wait.
[  153.679637][ T9196] XFS (loop1): Quotacheck: Done.
[  153.707997][ T5854] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.116170][ T5986] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  154.205493][ T9220] trusted_key: encrypted_key: insufficient parameters specified
[  154.275664][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.280169][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.283412][ T5986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  154.287576][ T5986] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  154.291035][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.295032][ T5986] usb 2-1: config 0 descriptor??
[  154.713207][ T5986] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  154.973444][ T5986] usb 2-1: USB disconnect, device number 26
[  155.338733][   T34] audit: type=1326 audit(1755288540.260:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9239 comm="syz.2.1324" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe58df8ebe9 code=0x0
[  156.709553][ T9285] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1344'.
[  156.713190][ T9285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.349049][ T9294] loop1: detected capacity change from 0 to 256
[  157.373386][ T9294] FAT-fs (loop1): Directory bread(block 64) failed
[  157.376150][ T9294] FAT-fs (loop1): Directory bread(block 65) failed
[  157.379002][ T9294] FAT-fs (loop1): Directory bread(block 66) failed
[  157.381986][ T9294] FAT-fs (loop1): Directory bread(block 67) failed
[  157.384718][ T9294] FAT-fs (loop1): Directory bread(block 68) failed
[  157.387425][ T9294] FAT-fs (loop1): Directory bread(block 69) failed
[  157.391208][ T9294] FAT-fs (loop1): Directory bread(block 70) failed
[  157.393895][ T9294] FAT-fs (loop1): Directory bread(block 71) failed
[  157.396604][ T9294] FAT-fs (loop1): Directory bread(block 72) failed
[  157.399350][ T9294] FAT-fs (loop1): Directory bread(block 73) failed
[  157.967342][ T9316] netlink: 'syz.2.1357': attribute type 4 has an invalid length.
[  158.910824][ T9334] loop1: detected capacity change from 0 to 32768
[  158.915700][ T9334] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1366 (9334)
[  158.929359][ T9334] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  158.934432][ T9334] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  158.938603][ T9334] BTRFS info (device loop1): using free-space-tree
[  158.997619][   T34] audit: type=1800 audit(1755288543.920:34): pid=9334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1366" name="file1" dev="loop1" ino=260 res=0 errno=0
[  159.646531][ T5854] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  159.826643][ T9364] loop1: detected capacity change from 0 to 2048
[  159.851307][ T9364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.888141][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.995168][ T9375] Oops: general protection fault, probably for non-canonical address 0xf5b591f5d53515d6: 0000 [#1] SMP KASAN PTI
[  160.000409][ T9375] KASAN: maybe wild-memory-access in range [0xadacafaea9a8aeb0-0xadacafaea9a8aeb7]
[  160.005242][ T9375] CPU: 1 UID: 0 PID: 9375 Comm: syz.1.1376 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  160.010767][ T9375] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.015211][ T9375] RIP: 0010:xfrm_state_find+0x2814/0x5400
[  160.017721][ T9375] Code: 00 00 48 8b 44 24 40 44 0f b6 30 41 83 e6 0c bf 08 00 00 00 44 89 f6 e8 1a 55 9f f7 4d 8d a5 30 03 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 bc 04 00 00 45 0f b6 24 24 41 83 e4 0c bf
[  160.026235][ T9375] RSP: 0018:ffffc900087e6f00 EFLAGS: 00010a02
[  160.028905][ T9375] RAX: 15b595f5d53515d6 RBX: dffffc0000000000 RCX: 0000000000000002
[  160.032331][ T9375] RDX: ffff88810f4cd640 RSI: 0000000000000000 RDI: 0000000000000008
[  160.035766][ T9375] RBP: ffffc900087e7120 R08: ffffc900087e77c8 R09: dffffc0000000000
[  160.039145][ T9375] R10: 000000000000000a R11: 0000000000000002 R12: adacafaea9a8aeb2
[  160.042619][ T9375] R13: adacafaea9a8ab82 R14: 0000000000000000 R15: 1ffff11022543048
[  160.045996][ T9375] FS:  00007fd1bb9976c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  160.049820][ T9375] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.052635][ T9375] CR2: 0000001b32c1eff8 CR3: 000000010e880000 CR4: 00000000000006f0
[  160.056109][ T9375] Call Trace:
[  160.057598][ T9375]  <TASK>
[  160.058941][ T9375]  ? __pfx___find_rr_leaf+0x10/0x10
[  160.061281][ T9375]  ? xfrm_state_find+0x1da/0x5400
[  160.063557][ T9375]  ? __pfx_xfrm_state_find+0x10/0x10
[  160.065828][ T9375]  ? __rt6_find_exception_rcu+0x127/0x4c0
[  160.068278][ T9375]  ? __pfx___rt6_find_exception_rcu+0x10/0x10
[  160.071050][ T9375]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  160.073592][ T9375]  ? ip6_pol_route+0x162/0x1180
[  160.075281][ T9375]  ? __pfx_ip6_pol_route+0x10/0x10
[  160.077064][ T9375]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  160.079993][ T9375]  ? __lock_acquire+0xab9/0xd20
[  160.082189][ T9375]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  160.084576][ T9375]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  160.087003][ T9375]  ? xfrm_expand_policies+0x41f/0x6a0
[  160.089424][ T9375]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  160.091806][ T9375]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  160.094268][ T9375]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  160.096872][ T9375]  ? txopt_get+0x335/0x3f0
[  160.098904][ T9375]  ? aa_label_sk_perm+0x4cd/0x630
[  160.101132][ T9375]  ? __pfx_txopt_get+0x10/0x10
[  160.103227][ T9375]  xfrm_lookup_route+0x3c/0x1c0
[  160.105430][ T9375]  rawv6_sendmsg+0xdab/0x1820
[  160.107416][ T9375]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  160.109714][ T9375]  ? finish_task_switch+0x266/0x950
[  160.111920][ T9375]  ? __pfx_aa_sk_perm+0x10/0x10
[  160.114036][ T9375]  ? sock_rps_record_flow+0x19/0x410
[  160.116382][ T9375]  ? inet_sendmsg+0x2f4/0x370
[  160.118497][ T9375]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  160.120823][ T9375]  __sock_sendmsg+0x19c/0x270
[  160.122807][ T9375]  ____sys_sendmsg+0x52d/0x830
[  160.124840][ T9375]  ? __pfx_____sys_sendmsg+0x10/0x10
[  160.127069][ T9375]  ? import_iovec+0x74/0xa0
[  160.129024][ T9375]  ___sys_sendmsg+0x21f/0x2a0
[  160.131041][ T9375]  ? __pfx____sys_sendmsg+0x10/0x10
[  160.133359][ T9375]  ? __fget_files+0x2a/0x420
[  160.135389][ T9375]  ? __fget_files+0x3a0/0x420
[  160.137426][ T9375]  __sys_sendmmsg+0x227/0x430
[  160.139478][ T9375]  ? __pfx___sys_sendmmsg+0x10/0x10
[  160.141771][ T9375]  ? do_futex+0x333/0x420
[  160.143729][ T9375]  ? rcu_is_watching+0x15/0xb0
[  160.145894][ T9375]  __x64_sys_sendmmsg+0xa0/0xc0
[  160.148061][ T9375]  do_syscall_64+0xfa/0x3b0
[  160.150114][ T9375]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.152551][ T9375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.155260][ T9375]  ? exc_page_fault+0x9f/0xf0
[  160.157348][ T9375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.160008][ T9375] RIP: 0033:0x7fd1bab8ebe9
[  160.161976][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.170431][ T9375] RSP: 002b:00007fd1bb997038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  160.173871][ T9375] RAX: ffffffffffffffda RBX: 00007fd1badb5fa0 RCX: 00007fd1bab8ebe9
[  160.177325][ T9375] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000005
[  160.180850][ T9375] RBP: 00007fd1bac11e19 R08: 0000000000000000 R09: 0000000000000000
[  160.184304][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  160.187814][ T9375] R13: 00007fd1badb6038 R14: 00007fd1badb5fa0 R15: 00007fffa98e7d08
[  160.191307][ T9375]  </TASK>
[  160.192684][ T9375] Modules linked in:
[  160.194569][    C1] vkms_vblank_simulate: vblank timer overrun
[  160.197545][ T9375] ---[ end trace 0000000000000000 ]---
[  160.205610][ T9375] RIP: 0010:xfrm_state_find+0x2814/0x5400
[  160.208201][ T9375] Code: 00 00 48 8b 44 24 40 44 0f b6 30 41 83 e6 0c bf 08 00 00 00 44 89 f6 e8 1a 55 9f f7 4d 8d a5 30 03 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 04 18 84 c0 0f 85 bc 04 00 00 45 0f b6 24 24 41 83 e4 0c bf
[  160.217074][ T9375] RSP: 0018:ffffc900087e6f00 EFLAGS: 00010a02
[  160.219759][ T9375] RAX: 15b595f5d53515d6 RBX: dffffc0000000000 RCX: 0000000000000002
[  160.223614][ T9375] RDX: ffff88810f4cd640 RSI: 0000000000000000 RDI: 0000000000000008
[  160.227265][ T9375] RBP: ffffc900087e7120 R08: ffffc900087e77c8 R09: dffffc0000000000
[  160.231043][ T9375] R10: 000000000000000a R11: 0000000000000002 R12: adacafaea9a8aeb2
[  160.234488][ T9375] R13: adacafaea9a8ab82 R14: 0000000000000000 R15: 1ffff11022543048
[  160.238168][ T9375] FS:  00007fd1bb9976c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  160.242402][ T9375] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.245313][ T9375] CR2: 0000001b32c1eff8 CR3: 000000010e880000 CR4: 00000000000006f0
[  160.249014][ T9375] Kernel panic - not syncing: Fatal exception
[  160.252608][ T9375] Kernel Offset: disabled
[  160.254581][ T9375] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:09:05  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff88811d7d3980 RCX=0000000000000000 RDX=ffff88811d7d3980
RSI=ffff88810555d640 RDI=ffff88804b039f80 RBP=ffffc900037cf990 RSP=ffffc900037cf778
R8 =ffff88810555d647 R9 =1ffff11020aabac8 R10=dffffc0000000000 R11=ffffed1020aabac9
R12=dffffc0000000000 R13=0000000000000000 R14=ffff88810555d640 R15=ffff88810555da80
RIP=ffffffff819b8f30 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faf96694c80 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000580 CR3=00000001100f4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000e2d RDI=0000000000000e2e RBP=00000000000003f8 RSP=ffffc900087e6730
R8 =ffff888106750237 R9 =1ffff11020cea046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af991a R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd1bb9976c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32c1eff8 CR3=000000010e880000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd1bad87498 00007fd1bad87470 XMM03=00007fd1bad874a8 00007fd1bad874a0
XMM04=00007fd1bb8ed100 00007fd1bad87460 XMM05=00007fd1bad87478 00007fd1bad874c0
XMM06=00007fd1bad874b8 00007fd1bad874b0 XMM07=00007fd1bad874a8 00007fd1bad874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd1bac12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
