last executing test programs:

1.200850398s ago: executing program 0 (id=2056):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0xd2, 0x2, 0x1, {0xa, @sliced={0x8, [0x8, 0x9, 0x9, 0x6, 0x1, 0x0, 0x3, 0x6, 0x5, 0x5, 0x4, 0x86, 0x0, 0x9, 0x400, 0x1000, 0x3, 0x2, 0xa, 0x400, 0xd681, 0xf1, 0xa, 0x6, 0x8, 0xd1e, 0x6902, 0xb, 0x2, 0x7, 0x5, 0xfff, 0x5, 0x0, 0x3, 0x7, 0x7, 0x8, 0xfe5, 0x6, 0x0, 0x6, 0x3, 0x6, 0x4, 0x400, 0x5c, 0x2], 0x7}}, 0x4})

1.140496966s ago: executing program 0 (id=2058):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)

1.090096223s ago: executing program 2 (id=2060):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
writev(r0, &(0x7f0000001600)=[{&(0x7f0000000300)="ac", 0x1}], 0x1)

1.089565535s ago: executing program 2 (id=2061):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket(0x29, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x119, 0x22, 0x0, 0x32)

1.005520125s ago: executing program 2 (id=2064):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000038000000030a01010000000000000000010000070900030073797a31000000000900030073797a31000000000900010073797a300000000070000000060a01040000000000000000010000004800048044000180090001007866726d000000003400028008000240000000040800024000000006080002400000000405000300000000000800014000000002080001400000000f08000b40000000000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)

928.448457ms ago: executing program 2 (id=2066):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ppoll(&(0x7f0000000040)=[{r0, 0x4}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0)

818.817176ms ago: executing program 2 (id=2068):
syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x10, &(0x7f0000001040), 0x0, 0x559e, &(0x7f00000103c0)="$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")
chdir(&(0x7f0000000080)='./file0\x00')
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x850ce, 0x0, 0x1, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

719.623998ms ago: executing program 1 (id=2070):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3d}, 0x48)

719.397269ms ago: executing program 1 (id=2071):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x18, 0x4e, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x0)

610.228289ms ago: executing program 1 (id=2072):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1, 0x1, 0x10001})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000000)={{@local, 0x1ff}, 0x1, 0x2, 0xffff8001})

530.444388ms ago: executing program 1 (id=2073):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file0\x00', 0x800810, &(0x7f0000000300)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_force}, {@flushoncommit}, {@skip_balance}, {@max_inline={'max_inline', 0x3d, [0x38, 0x31, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193)
ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f0000000580)={0x0, 0x0, 0x440000000002, 0x0, 0x100, 0x800000000000cf56, 0xffffffffffffffff, 0x0, 0x4})

214.099218ms ago: executing program 0 (id=2074):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000140)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0x4, 0x7, 0x6, 0x2, 0x2, 0x4, 0x4, 0x6, 0x8000, 0x9, 0x4, 0xae3, 0x1, 0x2066550, 0x1, 0x3, 0x3, 0x7, 0x7, 0x100, 0xf, 0x8, 0x6, 0x80000000, 0x6, 0x3, 0x80000001, 0x2, 0x5, 0x7f, 0x8eb4, 0x4, 0x101, 0xb, 0x3229, 0x5, 0x4, 0x7a, 0x0, 0x0, 0x0, 0x7, 0x3, 0x3, 0x7, 0x200, 0x2, 0xd1, 0x1cac, 0x8, 0x4, 0x1, 0x0, 0x10, 0x7fffffff, 0xfffffff8, 0x3, 0x7f, 0x100, 0x400, 0xfff, 0xfffffff2, 0x9, 0xc, 0x8, 0xfffffff8, 0x1, 0x9, 0x2, 0x11, 0x8, 0x9, 0x1, 0x4, 0x2, 0x3, 0x8, 0x1000, 0x2a0, 0x4, 0x8, 0x1, 0x6, 0xdc6, 0x944, 0x2, 0x7b44, 0xffc, 0x9, 0x587, 0xfffffffd, 0xd39, 0x0, 0xebd, 0x1ab080a0, 0x9, 0x8001, 0x8, 0x1, 0x6, 0x0, 0xffff, 0x1, 0x3ff, 0x0, 0x2, 0x5, 0x7, 0xbd83, 0x401, 0x8, 0x8001, 0xf2736337, 0x71, 0x9, 0x5015, 0xf0, 0x1, 0x2, 0x6, 0x7, 0x3d, 0xfffffffd, 0x9, 0xc000000, 0x3, 0x5, 0x10001, 0x25fe, 0x5, 0xfff, 0x6, 0x9, 0x8, 0x4, 0xdc, 0xa, 0x7, 0x6, 0x7, 0x9, 0x81, 0x317, 0x3, 0xccb1, 0x5, 0x5, 0xffffee20, 0x800, 0x2, 0x200, 0x6, 0xfe0c, 0x5, 0x4, 0x1, 0xda6c, 0xa5, 0x9, 0x6cb, 0xffff, 0x8, 0xe308, 0x8, 0x2, 0x7, 0x7ff, 0x0, 0x81, 0x800, 0x7, 0xff, 0xff, 0x6, 0x7, 0x4, 0xf5, 0xaa, 0x5, 0x25, 0x5, 0x0, 0x7, 0x38, 0x7fff, 0x2, 0x68, 0x8d66, 0x0, 0x8, 0x7ff, 0x101, 0x9, 0x2, 0x5, 0x401, 0x5, 0x8, 0x1, 0x56, 0x7910, 0xd, 0x0, 0x0, 0x8, 0x401, 0x3, 0xe, 0x2, 0x2, 0x3, 0xdb20, 0x5, 0x58c, 0x1, 0x90, 0x8, 0x5, 0x9226, 0x3, 0x7, 0x4, 0xec53, 0x9, 0x8, 0xb, 0xd, 0x3ff, 0x3, 0x83, 0x0, 0x1, 0x1, 0x6, 0xd90, 0xfffffff7, 0x5, 0x100, 0x7, 0x80, 0x72, 0x3ff, 0x10001, 0x10000, 0x17700000, 0xca57, 0x80000000, 0x7, 0x5, 0x6, 0x7, 0x7ec, 0xffffff00, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x200, 0x4bad, 0x7, {0xe4, 0x0, 0x8000, 0xa72, 0x9, 0x9}, {0x9, 0x1, 0xf, 0x1, 0x9, 0x8}, 0x145, 0x6, 0xa}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0)

212.226409ms ago: executing program 1 (id=2075):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$PPPIOCGFLAGS(r0, 0x8004745a, 0x0)

201.734454ms ago: executing program 2 (id=2076):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000080)=@ethtool_cmd={0x18, 0x28f7, 0x6, 0x1, 0xe, 0x0, 0x5, 0x2, 0x4a, 0x9, 0x8, 0x7, 0x8, 0x3, 0x7, 0x100, [0x3, 0x7fff]}})

87.470255ms ago: executing program 0 (id=2077):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5b5f, 0x800, 0x0, 0x51}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_SENDMSG_ZC={0x30, 0x0, 0x20, r0, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x6, 0xa}, {0x10, 0x10e}], 0x20}, 0x2, 0xdba90280b90ecbba, 0x1, {0x2}})
io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

86.959246ms ago: executing program 1 (id=2078):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)="81ea")
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x119f, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r0, &(0x7f0000000280)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x0)

86.794647ms ago: executing program 0 (id=2079):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000)
close(0x3)

0s ago: executing program 0 (id=2080):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

converter detected
[  125.892838][ T6010] usb 3-1: IR Dongle converter now attached to ttyUSB0
[  126.103310][ T5714] usb 3-1: USB disconnect, device number 13
[  126.159797][ T5714] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  126.167913][ T5714] ir_usb 3-1:114.240: device disconnected
[  126.247083][ T7317] loop1: detected capacity change from 0 to 1024
[  126.568251][ T7328] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  127.030936][ T7332] loop2: detected capacity change from 0 to 32768
[  127.039232][ T7332] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.642 (7332)
[  127.052672][ T7332] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  127.056991][ T7332] BTRFS info (device loop2): using sha256 checksum algorithm
[  127.075735][ T2235] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  127.144181][ T7332] BTRFS info (device loop2): enabling ssd optimizations
[  127.147030][ T7332] BTRFS info (device loop2): turning on sync discard
[  127.152944][ T7332] BTRFS info (device loop2): enabling free space tree
[  127.156113][ T7332] BTRFS info (device loop2): use zlib compression, level 3
[  127.198522][   T33] audit: type=1800 audit(1787568269.173:18): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.642" name="file1" dev="loop2" ino=260 res=0 errno=0
[  127.307055][ T2235] usb 1-1: Using ep0 maxpacket: 8
[  127.342192][ T2235] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  127.351856][ T2235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.356721][ T2235] usb 1-1: Product: syz
[  127.361058][ T2235] usb 1-1: Manufacturer: syz
[  127.365635][ T2235] usb 1-1: SerialNumber: syz
[  127.388281][ T2235] usb 1-1: config 0 descriptor??
[  127.613684][ T2235] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  127.674041][ T5601] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.312403][ T5685] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  128.328933][ T7381] loop2: detected capacity change from 0 to 128
[  128.352347][ T7381] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  128.358522][ T7381] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.395362][ T5601] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.428444][ T2235] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  128.439234][ T2235] usb 1-1: USB disconnect, device number 14
[  128.480503][ T5685] usb 2-1: Using ep0 maxpacket: 8
[  128.488930][ T5685] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.493842][ T5685] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  128.499767][ T5685] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.514276][ T5685] usb 2-1: config 0 interface 0 has no altsetting 0
[  128.517717][ T5685] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  128.522620][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.529178][ T5685] usb 2-1: config 0 descriptor??
[  128.535913][ T7373] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  128.539842][ T7386] netlink: 9 bytes leftover after parsing attributes in process `syz.2.660'.
[  128.552572][ T7386] netlink: 9 bytes leftover after parsing attributes in process `syz.2.660'.
[  128.616753][ T7388] tipc: Started in network mode
[  128.618491][ T7388] tipc: Node identity ac1414aa, cluster identity 4711
[  128.627919][ T7388] tipc: Enabled bearer <udp:s>, priority 10
[  128.682951][ T7390] loop2: detected capacity change from 0 to 256
[  128.689247][ T7390] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.973374][ T5685] input: HID 1b96:000a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1B96:000A.0005/input/input8
[  129.017755][ T5685] ntrig 0003:1B96:000A.0005: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.1-1/input0
[  129.171566][ T5685] usb 2-1: USB disconnect, device number 7
[  129.264106][ T7400] loop2: detected capacity change from 0 to 512
[  129.275595][ T7400] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.667: corrupted in-inode xattr: invalid ea_ino
[  129.286095][ T7400] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  129.289076][ T7400] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.667: couldn't read orphan inode 15 (err -117)
[  129.291989][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  129.292000][    C0] EXT4-fs (loop2): initial error at time 1787568271: ext4_iget_extra_inode:5180: inode 15
[  129.292036][    C0] EXT4-fs (loop2): last error at time 1787568271: ext4_iget_extra_inode:5180: inode 15
[  129.304108][ T7400] loop2: lost filesystem error report for type 5 error -117
[  129.305324][ T7400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.358703][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.374978][ T6010] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  129.523048][ T6010] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  129.526942][ T6010] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  129.532099][ T6010] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  129.540496][ T6010] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  129.551224][ T6010] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  129.555178][ T6010] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  129.560959][ T6010] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.575827][ T7398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.578747][ T7398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.582831][ T7398] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.588112][ T6010] mos7720 1-1:1.0: Moschip 2 port adapter converter detected
[  129.658639][ T5685] tipc: Node number set to 2886997162
[  129.995863][ T6010] usb 1-1: mos7720: usb_control_msg() failed: -71
[  130.013144][ T6010] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  130.027334][ T6010] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  130.138160][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  130.143529][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'.
[  130.148023][ T6010] usb 1-1: USB disconnect, device number 15
[  130.150524][    C0] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  130.207585][ T6010] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  130.235117][ T6010] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  130.245331][ T6010] mos7720 1-1:1.0: device disconnected
[  130.494242][ T7441] loop2: detected capacity change from 0 to 2048
[  130.504375][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16307, location=16307
[  130.521179][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16563, location=16563
[  130.528960][ T7441] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  130.533527][ T7441] UDF-fs: Scanning with blocksize 512 failed
[  130.541692][ T5685] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  130.542376][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16307, location=16307
[  130.549633][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16563, location=16563
[  130.553794][ T7441] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  130.556858][ T7441] UDF-fs: Scanning with blocksize 1024 failed
[  130.561129][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16307, location=16307
[  130.568328][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16563, location=16563
[  130.579367][ T7441] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  130.585141][ T7441] UDF-fs: Scanning with blocksize 2048 failed
[  130.596288][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16307, location=16307
[  130.605546][ T7441] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=16563, location=16563
[  130.610085][ T7441] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  130.613693][ T7441] UDF-fs: Scanning with blocksize 4096 failed
[  130.616213][ T7441] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  130.710472][ T5685] usb 2-1: Using ep0 maxpacket: 16
[  130.717373][ T5685] usb 2-1: unable to get BOS descriptor or descriptor too short
[  130.725268][ T5685] usb 2-1: config 6 has an invalid interface number: 149 but max is 0
[  130.731189][ T5685] usb 2-1: config 6 has no interface number 0
[  130.736070][ T5685] usb 2-1: config 6 interface 149 altsetting 0 endpoint 0x6 has an invalid bInterval 240, changing to 11
[  130.747575][ T5685] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=28.0e
[  130.751581][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.757591][ T5685] usb 2-1: Product: syz
[  130.759323][ T5685] usb 2-1: Manufacturer: syz
[  130.765878][ T5685] usb 2-1: SerialNumber: syz
[  131.044515][ T5685] usb 2-1: USB disconnect, device number 8
[  131.225349][ T7466] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  131.327513][ T7472] loop2: detected capacity change from 0 to 512
[  131.335097][ T7472] EXT4-fs: Ignoring removed i_version option
[  131.348686][ T7472] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  131.372998][ T7472] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  131.390674][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  131.393196][    C0] EXT4-fs (loop2): initial error at time 1787568273: ext4_mb_generate_buddy:1317
[  131.396790][    C0] EXT4-fs (loop2): last error at time 1787568273: ext4_mb_generate_buddy:1317
[  131.402272][ T7472] Quota error (device loop2): write_blk: dquota write failed
[  131.407066][ T7472] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  131.412447][ T7472] Quota error (device loop2): write_blk: dquota write failed
[  131.418217][ T7472] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  131.423261][ T7472] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.700: Failed to acquire dquot type 1
[  131.427648][ T7472] loop2: lost filesystem error report for type 5 error -28
[  131.428314][ T7472] EXT4-fs (loop2): 1 truncate cleaned up
[  131.435246][ T7472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.451064][ T7472] EXT4-fs (loop2): shut down requested (2)
[  131.485467][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.551088][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  131.700624][   T10] usb 1-1: Using ep0 maxpacket: 16
[  131.709423][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  131.725708][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.738562][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  131.746007][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.753385][   T10] usb 1-1: Product: syz
[  131.755728][   T10] usb 1-1: Manufacturer: syz
[  131.757123][ T7489] netlink: 'syz.1.707': attribute type 1 has an invalid length.
[  131.757628][   T10] usb 1-1: SerialNumber: syz
[  131.767635][   T10] usb 1-1: config 0 descriptor??
[  131.774009][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  131.777186][   T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  131.839092][ T7492] netlink: 'syz.1.708': attribute type 2 has an invalid length.
[  131.842584][ T7492] netlink: 'syz.1.708': attribute type 7 has an invalid length.
[  131.867410][ T7492] : entered promiscuous mode
[  132.010440][ T2235] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  132.185902][ T2235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.198128][ T2235] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  132.202609][ T2235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.211361][ T2235] usb 3-1: config 0 descriptor??
[  132.386785][   T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  132.389482][   T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  132.586120][ T7508] loop1: detected capacity change from 0 to 2048
[  132.626011][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.630854][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.635064][ T7508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.639776][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.643014][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.649120][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.652145][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.654980][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.657807][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.661099][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.664036][ T2235] elecom 0003:056E:010C.0006: unknown main item tag 0x0
[  132.669266][ T2235] elecom 0003:056E:010C.0006: hidraw0: USB HID v20.00 Device [HID 056e:010c] on usb-dummy_hcd.2-1/input0
[  132.704569][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.834829][ T2235] usb 3-1: USB disconnect, device number 14
[  132.997544][   T10] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  133.325941][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  133.328448][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  133.410652][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  133.418957][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  133.422370][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  133.424976][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  133.431532][   T10] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  133.454184][   T10] usb 1-1: USB disconnect, device number 16
[  133.736429][ T7537] loop2: detected capacity change from 0 to 2048
[  133.753773][ T7537] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  133.813034][ T7538] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.052165][ T7546] Cannot find del_set index 2 as target
[  134.062277][ T7549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'.
[  134.073760][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'.
[  134.160964][ T7552] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  134.388004][ T7559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'.
[  135.057720][ T7567] macvlan0: left promiscuous mode
[  135.061660][ T7567] netlink: 'syz.0.742': attribute type 2 has an invalid length.
[  135.094939][ T7569] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.209755][ T7563] loop1: detected capacity change from 0 to 40427
[  135.213636][ T7563] F2FS-fs: Quota file already specified
[  135.373953][ T7576] netlink: 56 bytes leftover after parsing attributes in process `syz.0.746'.
[  135.480863][   T33] audit: type=1326 audit(1787568277.463:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  135.494364][   T33] audit: type=1326 audit(1787568277.463:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  135.501890][   T33] audit: type=1326 audit(1787568277.483:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.750" exe="/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  135.508868][   T33] audit: type=1326 audit(1787568277.483:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  135.524016][   T33] audit: type=1326 audit(1787568277.483:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7581 comm="syz.2.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  135.593043][ T7590] loop1: detected capacity change from 0 to 512
[  135.596249][ T7590] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  135.669888][ T7590] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.754: bad orphan inode 131083
[  135.674180][ T7590] loop1: lost filesystem error report for type 5 error -117
[  135.676148][ T7590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.744975][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.313057][ T7622] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  136.315661][ T7622] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  136.320493][ T7622] tipc: Started in network mode
[  136.324188][ T7622] tipc: Node identity 080211, cluster identity 4711
[  136.326582][ T7622] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.334514][ T7622] tipc: Resetting bearer <eth:syzkaller0>
[  136.368773][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.759'.
[  136.864021][ T7646] netlink: 'syz.1.763': attribute type 12 has an invalid length.
[  136.878072][ T7646] netlink: 'syz.1.763': attribute type 29 has an invalid length.
[  136.885922][ T7646] netlink: 148 bytes leftover after parsing attributes in process `syz.1.763'.
[  136.889619][ T7646] netlink: 59 bytes leftover after parsing attributes in process `syz.1.763'.
[  136.895932][ T7646] netlink: 'syz.1.763': attribute type 12 has an invalid length.
[  136.899133][ T7646] netlink: 'syz.1.763': attribute type 29 has an invalid length.
[  136.905885][ T7646] netlink: 148 bytes leftover after parsing attributes in process `syz.1.763'.
[  136.913672][ T7646] netlink: 59 bytes leftover after parsing attributes in process `syz.1.763'.
[  137.193829][ T7640] loop2: detected capacity change from 0 to 131072
[  137.198971][ T7640] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0)
[  137.202358][ T7640] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.206537][ T7640] F2FS-fs (loop2): invalid crc value
[  137.294225][ T7640] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  137.327387][ T7640] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.334039][ T7640] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  137.450557][ T5668] tipc: Node number set to 134353152
[  137.614641][ T7657] loop1: detected capacity change from 0 to 1024
[  137.665450][ T7657] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  139.134121][ T7720] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  139.351464][ T7727] loop2: detected capacity change from 0 to 1024
[  139.355307][ T7727] EXT4-fs: Ignoring removed nomblk_io_submit option
[  139.399475][ T7727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.873661][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.934282][ T7747] binder: 7746:7747 ioctl c0046209 200000000000000 returned -22
[  140.025538][ T7752] netlink: 'syz.0.781': attribute type 2 has an invalid length.
[  140.033523][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'.
[  140.173326][ T5607] Bluetooth: hci1: unexpected cc 0x204b length: 34 > 3
[  140.222088][ T5685] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  140.390540][ T5685] usb 3-1: Using ep0 maxpacket: 32
[  140.396450][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  140.402637][ T5685] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  140.410580][ T5685] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  140.414626][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.419042][ T5685] usb 3-1: Product: syz
[  140.422750][ T5685] usb 3-1: Manufacturer: syz
[  140.426021][ T5685] usb 3-1: SerialNumber: syz
[  140.443405][ T5685] usb 3-1: config 0 descriptor??
[  140.657920][ T5685] usb 3-1: USB disconnect, device number 15
[  140.749326][ T7784] loop1: detected capacity change from 0 to 32768
[  140.753387][ T7784] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.793 (7784)
[  140.762317][ T7784] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  140.765558][ T7784] BTRFS info (device loop1): using sha256 checksum algorithm
[  140.813975][ T7784] BTRFS info (device loop1): enabling ssd optimizations
[  140.818121][ T7784] BTRFS info (device loop1): turning on async discard
[  140.821805][ T7784] BTRFS info (device loop1): enabling free space tree
[  140.844683][ T5604] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.609208][ T7847] loop8: detected capacity change from 0 to 7
[  141.617159][ T7847] Dev loop8: unable to read RDB block 7
[  141.624091][ T7847]  loop8: unable to read partition table
[  141.628595][ T7847] loop8: partition table beyond EOD, truncated
[  141.631543][ T7847] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5)
[  141.800841][ T6010] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  141.881569][ T2235] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.950510][ T6010] usb 1-1: Using ep0 maxpacket: 16
[  141.955237][ T6010] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  141.959811][ T6010] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  141.968312][ T6010] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  141.972451][ T6010] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.975135][ T6010] usb 1-1: Product: syz
[  141.976442][ T6010] usb 1-1: Manufacturer: syz
[  141.978127][ T6010] usb 1-1: SerialNumber: syz
[  141.983047][ T6010] usb 1-1: config 0 descriptor??
[  141.989542][ T6010] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  141.993378][ T6010] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  142.040517][ T2235] usb 3-1: Using ep0 maxpacket: 16
[  142.045141][ T2235] usb 3-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30
[  142.049415][ T2235] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  142.055850][ T2235] usb 3-1: config 0 interface 0 has no altsetting 0
[  142.058608][ T2235] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00
[  142.062558][ T2235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.070831][ T2235] usb 3-1: config 0 descriptor??
[  142.130606][  T803] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  142.288041][  T803] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  142.291404][  T803] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  142.294126][  T803] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  142.296851][  T803] usb 2-1: config 1 has no interface number 0
[  142.298839][  T803] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  142.303055][  T803] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  142.307731][  T803] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  142.311044][  T803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.322865][  T803] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  142.496839][ T2235] input: HID 05ac:8243 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8243.0007/input/input9
[  142.522906][  T803] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  142.527226][  T803] snd_usb_pod 2-1:1.1: invalid control EP
[  142.529027][  T803] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  142.531610][  T803] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  142.534508][  T803] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  142.592102][ T2235] appleir 0003:05AC:8243.0007: input,hiddev0,hidraw0: USB HID v0.02 Joystick [HID 05ac:8243] on usb-dummy_hcd.2-1/input0
[  142.601704][ T6010] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  142.612813][ T6010] em28xx 1-1:0.0: Config register raw data: 0x41
[  142.698914][ T2235] usb 3-1: USB disconnect, device number 16
[  142.725069][ T6010] usb 2-1: USB disconnect, device number 9
[  142.818348][ T5714] usb 1-1: USB disconnect, device number 17
[  142.827949][ T5714] em28xx 1-1:0.0: Disconnecting em28xx
[  142.853025][ T5714] em28xx 1-1:0.0: Freeing device
[  143.543014][ T7869] loop1: detected capacity change from 0 to 32768
[  143.551767][ T7869] ERROR: (device loop1): xtSearch: stack overrun!
[  143.551767][ T7869] 
[  143.584166][ T7869] ERROR: (device loop1): remounting filesystem as read-only
[  143.591266][ T7869] xtLookup: xtSearch returned -5
[  143.599491][ T7869] read_mapping_page failed!
[  143.604382][ T7869] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  143.611295][ T7869] Mount JFS Failure: -5
[  143.614945][ T7869] jfs_mount failed w/return code = -5
[  143.826679][ T7888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  144.208098][ T5607] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  144.211810][ T5607] Bluetooth: hci1: Injecting HCI hardware error event
[  144.223782][   T53] Bluetooth: hci1: hardware error 0x00
[  144.245282][ T7910] netlink: 'syz.0.845': attribute type 2 has an invalid length.
[  144.266245][ T7910] netlink: 252 bytes leftover after parsing attributes in process `syz.0.845'.
[  144.374892][ T7917] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  144.377617][ T7917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.848'.
[  144.578117][ T7907] loop2: detected capacity change from 0 to 32768
[  144.619503][ T7907] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  144.648852][ T7907] XFS (loop2): Ending clean mount
[  144.770982][ T5601] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.232145][ T7952] bridge1: the hash_elasticity option has been deprecated and is always 16
[  145.340460][ T5685] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  145.492786][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  145.500459][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 64
[  145.508340][ T5685] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  145.520564][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.523852][ T5685] usb 3-1: Product: syz
[  145.525713][ T5685] usb 3-1: Manufacturer: syz
[  145.529050][ T5685] usb 3-1: SerialNumber: syz
[  145.535315][ T5685] usb 3-1: config 0 descriptor??
[  145.537761][ T7948] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  145.751651][ T7964] loop1: detected capacity change from 0 to 512
[  145.760764][ T5685] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  145.843635][ T7964] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.867: inode has both inline data and extents flags
[  145.852854][ T7964] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  145.854583][ T7964] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.867: couldn't read orphan inode 15 (err -117)
[  145.864009][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  145.866625][    C1] EXT4-fs (loop1): initial error at time 1787568287: ext4_orphan_get:1399: inode 15
[  145.870239][    C1] EXT4-fs (loop1): last error at time 1787568287: ext4_orphan_get:1399: inode 15
[  145.877245][ T7964] loop1: lost filesystem error report for type 5 error -117
[  145.897733][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.955042][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.961900][ T2235] usb 3-1: USB disconnect, device number 17
[  146.073546][   T33] audit: type=1326 audit(1787568288.063:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.090941][   T33] audit: type=1326 audit(1787568288.063:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.094826][ T5607] Bluetooth: hci1: unexpected event for opcode 0x080d
[  146.099389][   T33] audit: type=1326 audit(1787568288.083:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.112427][   T33] audit: type=1326 audit(1787568288.083:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.121820][   T33] audit: type=1326 audit(1787568288.083:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.143209][   T33] audit: type=1326 audit(1787568288.083:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.174552][   T33] audit: type=1326 audit(1787568288.083:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.198192][   T33] audit: type=1326 audit(1787568288.083:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.207717][   T33] audit: type=1326 audit(1787568288.083:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5dbc55e90e code=0x7ffc0000
[  146.216487][   T33] audit: type=1326 audit(1787568288.083:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  146.296330][   T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  146.296958][ T7975] loop1: detected capacity change from 0 to 512
[  146.305991][ T7975] FAT-fs (loop1): bogus number of FAT sectors
[  146.316404][ T7975] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  146.321116][ T7975] FAT-fs (loop1): Can't find a valid FAT filesystem
[  146.632560][ T7982] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  146.649024][ T7982] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  147.001411][ T2235] usb 2-1: new low-speed USB device number 10 using dummy_hcd
[  147.067715][ T8003] loop2: detected capacity change from 0 to 1024
[  147.164080][ T2235] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  147.167818][ T2235] usb 2-1: config 0 has no interface number 0
[  147.177977][ T2235] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  147.182401][ T2235] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  147.192585][ T2235] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  147.200552][ T2235] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  147.212142][ T2235] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  147.220026][ T2235] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  147.228465][ T2235] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  147.237020][ T2235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.254720][ T2235] usb 2-1: config 0 descriptor??
[  147.257865][ T7986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.272968][ T7986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.302549][ T2235] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  147.512564][ T2235] usb 2-1: USB disconnect, device number 10
[  147.539745][ T2235] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  147.637346][ T8016] loop2: detected capacity change from 0 to 1024
[  147.802417][ T8024] loop2: detected capacity change from 0 to 4096
[  147.823675][ T8025] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.113176][ T8032] netlink: 'syz.1.892': attribute type 4 has an invalid length.
[  148.125000][ T8032] netlink: 'syz.1.892': attribute type 4 has an invalid length.
[  148.630483][ T2235] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  148.783525][ T2235] usb 2-1: not running at top speed; connect to a high speed hub
[  148.790387][ T2235] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4
[  148.797332][ T2235] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  148.800967][ T2235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.804068][ T2235] usb 2-1: Product: syz
[  148.805670][ T2235] usb 2-1: Manufacturer: syz
[  148.807385][ T2235] usb 2-1: SerialNumber: syz
[  149.045875][ T2235] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  149.053844][ T2235] usb 2-1: unit 0 not found!
[  149.103357][ T2235] usb 2-1: USB disconnect, device number 11
[  149.161199][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.288821][ T8051] loop2: detected capacity change from 0 to 32768
[  149.300624][ T8051] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.341631][ T8051] XFS (loop2): Ending clean mount
[  149.372373][ T5601] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.828409][ T8079] netlink: NAT attribute type 0 has unexpected length (1 != 0)
[  149.832771][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.096308][ T8095] loop1: detected capacity change from 0 to 256
[  150.109580][ T8095] exfat: Deprecated parameter 'utf8'
[  150.111855][ T8095] exfat: Deprecated parameter 'namecase'
[  150.114193][ T8095] exfat: Deprecated parameter 'namecase'
[  150.128214][ T8095] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  150.227310][ T8099] loop1: detected capacity change from 0 to 1764
[  150.552148][ T8111] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  150.569933][ T6010] IPVS: starting estimator thread 0...
[  150.671162][ T8117] IPVS: using max 67 ests per chain, 160800 per kthread
[  151.317139][ T8129] loop1: detected capacity change from 0 to 131072
[  151.424534][ T8129] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  151.483831][ T8129] XFS (loop1): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0xc0.
[  151.528283][ T8129] XFS (loop1): Corruption warning: Metadata has LSN (1:192) ahead of current LSN (1:64). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  151.533071][ T8129] XFS (loop1): log mount/recovery failed: error -22
[  151.545077][ T8129] XFS (loop1): log mount failed
[  151.695612][ T8131] loop2: detected capacity change from 0 to 131072
[  151.699371][ T8131] xfs: Deprecated parameter 'ikeep'
[  151.701558][ T8131] XFS: ikeep mount option is deprecated.
[  151.766190][ T8131] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  151.852395][ T8131] XFS (loop2): Starting recovery (logdev: internal)
[  151.875371][ T8131] XFS (loop2): Ending recovery (logdev: internal)
[  152.711028][ T5601] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  152.926644][ T8171] netlink: 'syz.1.944': attribute type 1 has an invalid length.
[  152.929832][ T8171] netlink: 'syz.1.944': attribute type 7 has an invalid length.
[  152.934758][ T8171] netlink: 'syz.1.944': attribute type 8 has an invalid length.
[  152.937819][ T8171] netlink: 208 bytes leftover after parsing attributes in process `syz.1.944'.
[  152.941498][ T8171] NCSI netlink: No device for ifindex 1073545264
[  153.000092][ T8173] loop1: detected capacity change from 0 to 8
[  153.097252][ T8175] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  153.472182][ T8186] loop1: detected capacity change from 0 to 40427
[  153.475655][ T8186] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  153.478122][ T8186] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  153.521649][ T8186] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.528716][ T8186] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  153.531307][ T8186] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  153.631619][ T8186] syz.1.951: attempt to access beyond end of device
[  153.631619][ T8186] loop1: rw=2049, sector=45096, nr_sectors = 2224 limit=40427
[  153.645221][ T8186] syz.1.951: attempt to access beyond end of device
[  153.645221][ T8186] loop1: rw=2049, sector=47320, nr_sectors = 2048 limit=40427
[  153.656739][ T8186] syz.1.951: attempt to access beyond end of device
[  153.656739][ T8186] loop1: rw=2049, sector=49368, nr_sectors = 2048 limit=40427
[  153.668477][ T8186] syz.1.951: attempt to access beyond end of device
[  153.668477][ T8186] loop1: rw=2049, sector=51416, nr_sectors = 1832 limit=40427
[  153.673728][ T8186] syz.1.951: attempt to access beyond end of device
[  153.673728][ T8186] loop1: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  153.683322][ T8186] syz.1.951: attempt to access beyond end of device
[  153.683322][ T8186] loop1: rw=2049, sector=57344, nr_sectors = 2048 limit=40427
[  153.688641][ T8186] syz.1.951: attempt to access beyond end of device
[  153.688641][ T8186] loop1: rw=2049, sector=59392, nr_sectors = 40 limit=40427
[  153.729794][ T8186] syz.1.951: attempt to access beyond end of device
[  153.729794][ T8186] loop1: rw=524288, sector=45096, nr_sectors = 256 limit=40427
[  153.735026][ T8186] syz.1.951: attempt to access beyond end of device
[  153.735026][ T8186] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  153.739245][ T8186] syz.1.951: attempt to access beyond end of device
[  153.739245][ T8186] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  154.290983][ T2235] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  154.316520][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  154.316536][   T33] audit: type=1326 audit(1787568296.303:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.356175][   T33] audit: type=1326 audit(1787568296.303:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.371589][   T33] audit: type=1326 audit(1787568296.303:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.379782][   T33] audit: type=1326 audit(1787568296.303:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.390063][   T33] audit: type=1326 audit(1787568296.303:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.410900][   T33] audit: type=1326 audit(1787568296.303:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.424665][   T33] audit: type=1326 audit(1787568296.303:41): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.454572][   T33] audit: type=1326 audit(1787568296.303:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.456992][ T2235] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.471410][ T2235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  154.476765][ T2235] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  154.479858][   T33] audit: type=1326 audit(1787568296.303:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.484651][ T2235] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  154.490891][   T33] audit: type=1326 audit(1787568296.303:44): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.2.956" exe="/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3e56d9e0d9 code=0x7ffc0000
[  154.497081][ T2235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.513676][ T2235] usb 2-1: Product: syz
[  154.520894][ T2235] usb 2-1: Manufacturer: syz
[  154.522893][ T2235] usb 2-1: SerialNumber: syz
[  154.534086][ T8199] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.740505][  T803] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  154.893823][  T803] usb 1-1: unable to get BOS descriptor or descriptor too short
[  154.901928][  T803] usb 1-1: not running at top speed; connect to a high speed hub
[  154.911843][  T803] usb 1-1: config 1 interface 0 has no altsetting 0
[  154.917273][  T803] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  154.922340][  T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.928772][  T803] usb 1-1: Product: syz
[  154.932338][  T803] usb 1-1: Manufacturer: syz
[  154.935624][  T803] usb 1-1: SerialNumber: syz
[  155.162890][  T803] usb 1-1: No union descriptors
[  155.172472][  T803] usb 1-1: USB disconnect, device number 18
[  155.248247][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'.
[  155.576842][ T2235] cdc_ncm 2-1:1.0: bind() failure
[  155.596714][ T2235] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  155.607713][ T2235] usb 2-1: USB disconnect, device number 12
[  155.657239][ T8241] loop2: detected capacity change from 0 to 4096
[  155.700096][ T8241] ntfs3(loop2): Failed to load $Extend (-22).
[  155.702887][ T8241] ntfs3(loop2): Failed to initialize $Extend.
[  155.903042][ T8251] openvswitch: netlink: IP tunnel dst address not specified
[  155.905935][ T8251] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.039108][ T8255] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  156.278253][ T8257] tipc: Failed to remove unknown binding: 66,1,1/134353152:3991381629/3991381631
[  156.281573][ T8257] tipc: Failed to remove unknown binding: 66,1,1/134353152:3991381629/3991381631
[  156.422871][ T6010] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  156.570464][ T6010] usb 3-1: Using ep0 maxpacket: 16
[  156.575048][ T6010] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[  156.578581][ T6010] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  156.582122][ T6010] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  156.584670][ T6010] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[  156.587175][ T6010] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  156.590071][ T6010] usb 3-1: config 0 has no interface number 0
[  156.592512][ T6010] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  156.595896][ T6010] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  156.598929][ T6010] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  156.602868][ T6010] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  156.607027][ T6010] usb 3-1: config 0 interface 125 has no altsetting 0
[  156.611619][ T6010] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  156.614436][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.616814][ T6010] usb 3-1: Product: syz
[  156.618052][ T6010] usb 3-1: Manufacturer: syz
[  156.619560][ T6010] usb 3-1: SerialNumber: syz
[  156.629303][ T6010] usb 3-1: config 0 descriptor??
[  156.750989][  T803] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  156.879844][ T8268] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  156.912818][  T803] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  156.916885][  T803] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  156.921383][  T803] usb 2-1: config 220 has no interface number 2
[  156.923966][  T803] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  156.929524][  T803] usb 2-1: config 220 interface 0 has no altsetting 0
[  156.932632][  T803] usb 2-1: config 220 interface 76 has no altsetting 0
[  156.935503][  T803] usb 2-1: config 220 interface 1 has no altsetting 0
[  156.942057][  T803] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  156.945794][  T803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.949062][  T803] usb 2-1: Product: syz
[  156.951049][  T803] usb 2-1: Manufacturer: syz
[  156.953047][  T803] usb 2-1: SerialNumber: syz
[  157.047562][ T5668] usb 3-1: USB disconnect, device number 18
[  157.169989][  T803] usb 2-1: selecting invalid altsetting 0
[  157.181460][  T803] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  157.197108][  T803] uvcvideo 2-1:220.0: No valid video chain found.
[  157.206236][  T803] usb 2-1: selecting invalid altsetting 0
[  157.208739][  T803] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  157.215650][  T803] usb 2-1: USB disconnect, device number 13
[  157.818817][ T8283] loop1: detected capacity change from 0 to 256
[  157.821063][ T8281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.994'.
[  158.035680][ T8287] loop2: detected capacity change from 0 to 1024
[  158.226428][  T803] IPVS: starting estimator thread 0...
[  158.352279][ T8299] IPVS: using max 43 ests per chain, 103200 per kthread
[  159.471536][ T8313] loop1: detected capacity change from 0 to 512
[  159.476357][ T8313] EXT4-fs: Ignoring removed nobh option
[  159.479991][ T8313] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  159.509987][ T8313] EXT4-fs (loop1): 1 truncate cleaned up
[  159.513132][ T8313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.645258][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.725279][ T8324] loop1: detected capacity change from 0 to 256
[  159.735906][ T8324] exfat: Deprecated parameter 'utf8'
[  160.977896][ T8386] netlink: 'syz.1.1038': attribute type 1 has an invalid length.
[  161.565572][ T8407] loop2: detected capacity change from 0 to 1024
[  161.916524][ T8409] loop1: detected capacity change from 0 to 8
[  162.784583][ T8425] loop2: detected capacity change from 0 to 16
[  162.787934][ T8425] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  162.795281][ T8425] cramfs: wrong endianness
[  163.344076][ T8436] loop2: detected capacity change from 0 to 32768
[  163.353405][ T8436] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1060 (8436)
[  163.433904][ T8436] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.443325][ T8436] BTRFS info (device loop2): using crc32c checksum algorithm
[  163.511445][ T8436] BTRFS info (device loop2): enabling ssd optimizations
[  163.516897][ T8436] BTRFS info (device loop2): turning on flush-on-commit
[  163.524040][ T8436] BTRFS info (device loop2): enabling free space tree
[  163.530705][ T8436] BTRFS info (device loop2): enabling auto defrag
[  163.533893][ T8436] BTRFS info (device loop2): use lzo compression, level 1
[  163.543952][ T8436] BTRFS info (device loop2): max_inline set to 4096
[  163.578485][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  163.578497][   T33] audit: type=1800 audit(1787568305.563:54): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1060" name="file1" dev="loop2" ino=260 res=0 errno=0
[  163.596352][ T8436] BTRFS error: failed to open device for path $9|啔XHao18KONrcXukт!zܧ;r0.Ӹ5:{퉭(ruSS_~s&;#yξEvU''8߅nbbS;rĒ(r+௪U  with flags 0x1: -2
[  163.600641][ T2235] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  163.655664][ T5601] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.814441][ T2235] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  163.818342][ T2235] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  163.822846][ T2235] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00
[  163.839746][ T2235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.091760][ T2235] usb 1-1: USB disconnect, device number 19
[  164.190948][ T8483] loop2: detected capacity change from 0 to 512
[  164.234191][ T8483] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.238385][ T8483] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.916676][ T8488] loop1: detected capacity change from 0 to 1024
[  166.970917][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.067150][ T8494] veth1_to_team: Caught tx_queue_len zero misconfig
[  167.181863][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'.
[  167.426735][ T8511] loop1: detected capacity change from 0 to 16
[  167.448688][ T8512] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  167.461198][ T8512] overlayfs: missing 'lowerdir'
[  167.467316][ T8511] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 143300)
[  168.040885][ T5668] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  168.214334][ T5668] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  168.217409][ T5668] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  168.221453][ T5668] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.224722][ T5668] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  168.227889][ T5668] usb 2-1: config 1 has no interface number 0
[  168.230192][ T5668] usb 2-1: config 1 interface 1 has no altsetting 0
[  168.238489][ T5668] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  168.241740][ T5668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.402534][ T5668] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  168.417189][ T5668] usb 2-1: selecting invalid altsetting 0
[  168.417399][ T5668] snd_usb_pod 2-1:1.1: set_interface failed
[  168.431897][ T5668] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  168.433092][ T5668] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  168.723668][ T5668] usb 2-1: USB disconnect, device number 14
[  169.700479][ T5714] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  169.811672][ T8545] loop2: detected capacity change from 0 to 256
[  169.820799][ T8545] exFAT-fs (loop2): error, no upcase table entry. Please run fsck
[  169.823430][ T8545] exFAT-fs (loop2): Filesystem has been set read-only
[  169.825872][ T8545] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  169.864725][ T5714] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  169.868145][ T5714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  169.873912][ T5714] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  169.883587][ T5714] usb 2-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 9
[  169.905240][ T5714] usb 2-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00
[  169.918816][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.925500][ T5714] usb 2-1: Product: syz
[  169.928682][ T5714] usb 2-1: Manufacturer: syz
[  169.932661][ T5714] usb 2-1: SerialNumber: syz
[  169.943265][ T5714] mos7840 2-1:1.0: missing endpoints
[  170.049410][ T8550] loop2: detected capacity change from 0 to 512
[  170.090766][ T8550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.096993][ T8550] ext4 filesystem being mounted at /415/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.104970][ T8550] EXT4-fs (loop2): resizing filesystem from 256 to 2 blocks
[  170.107454][ T8550] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  170.148337][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.164299][ T2235] usb 2-1: USB disconnect, device number 15
[  170.304471][ T8556] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1103'.
[  170.485825][ T8562] loop2: detected capacity change from 0 to 512
[  170.506248][ T8562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.516567][ T8562] EXT4-fs error (device loop2): ext4_generic_delete_entry:2673: inode #2: block 6: comm syz.2.1106: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0
[  170.532377][ T8562] EXT4-fs error (device loop2) in ext4_delete_entry:2744: Corrupt filesystem
[  170.562723][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.523519][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'.
[  172.795838][ T8633] syzkaller0: entered promiscuous mode
[  172.798196][ T8633] syzkaller0: entered allmulticast mode
[  172.807430][ T8633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.812273][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[  172.842180][ T8631] tipc: Disabling bearer <eth:syzkaller0>
[  172.920570][ T2235] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  173.072538][ T2235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.088216][ T2235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.098539][ T2235] usb 1-1: New USB device found, idVendor=1e7d, idProduct=fcf6, bcdDevice= 0.00
[  173.103318][ T2235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.111331][ T2235] usb 1-1: config 0 descriptor??
[  173.131372][ T2235] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  173.134513][ T2235] usbhid 1-1:0.0: can't add hid device: -22
[  173.136829][ T2235] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  173.338792][ T2235] usb 1-1: USB disconnect, device number 20
[  173.600980][ T8636] loop1: detected capacity change from 0 to 131072
[  173.607831][ T8636] F2FS-fs (loop1): invalid crc value
[  173.725063][ T8636] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.735169][ T8636] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  173.963197][   T33] audit: type=1800 audit(1787568315.793:55): pid=8636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1133" name="file1" dev="loop1" ino=7 res=0 errno=0
[  174.306749][ T2235] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 2235 comm: kworker/1:2)
[  174.438796][ T8654] netlink: 'syz.2.1140': attribute type 29 has an invalid length.
[  174.444737][ T8654] netlink: 'syz.2.1140': attribute type 29 has an invalid length.
[  174.551570][ T8656] loop2: detected capacity change from 0 to 8
[  174.586941][ T8656] SQUASHFS error: zlib decompression failed, data probably corrupt
[  174.600279][ T8656] SQUASHFS error: Failed to read block 0x9b: -5
[  174.607808][ T8656] SQUASHFS error: Unable to read metadata cache entry [99]
[  174.615669][ T8656] SQUASHFS error: Unable to read inode 0x127
[  174.768638][ T8656] loop2: detected capacity change from 0 to 32768
[  174.771102][ T8656] btrfs: Deprecated parameter 'usebackuproot'
[  174.773061][ T8656] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  174.788676][ T8656] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1141 (8656)
[  174.797197][ T8656] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  174.801193][ T8656] BTRFS info (device loop2): using crc32c checksum algorithm
[  174.804177][ T8656] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  174.825730][ T8658] geneve2: entered promiscuous mode
[  175.102589][   T36] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xff1a0598 found 0xef02c3c4 level 0
[  175.143745][ T8656] BTRFS error (device loop2): failed to load root extent
[  175.146688][ T8656] BTRFS warning (device loop2): try to load backup roots slot 1
[  175.164558][ T8656] BTRFS info (device loop2): rebuilding free space tree
[  175.212399][ T8656] BTRFS info (device loop2): disabling free space tree
[  175.215398][ T8656] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  175.219565][ T8656] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  175.237095][ T8656] BTRFS info (device loop2): checking UUID tree
[  175.241641][ T8656] BTRFS info (device loop2): enabling ssd optimizations
[  175.245800][ T8656] BTRFS info (device loop2): turning on async discard
[  175.248710][ T8656] BTRFS info (device loop2): enabling disk space caching
[  175.251780][ T8656] BTRFS info (device loop2): force clearing of disk cache
[  175.254821][ T8656] BTRFS info (device loop2): trying to use backup root at mount time
[  175.258031][ T8656] BTRFS info (device loop2): use zstd compression, level 3
[  175.643455][  T803] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  175.809010][ T5601] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  175.867011][  T803] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  175.869633][  T803] usb 1-1: config 0 has no interface number 0
[  175.878163][  T803] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  175.884398][  T803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.890799][  T803] usb 1-1: Product: syz
[  175.893561][  T803] usb 1-1: Manufacturer: syz
[  175.901730][  T803] usb 1-1: SerialNumber: syz
[  175.935875][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'.
[  175.947887][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1148'.
[  175.968012][ T8692] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1148'.
[  176.014593][  T803] usb 1-1: config 0 descriptor??
[  176.168209][ T2235] kernel read not supported for file /rfkill (pid: 2235 comm: kworker/1:2)
[  176.235282][  T803] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  176.296639][  T803] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  176.303001][ T8708] loop1: detected capacity change from 0 to 256
[  176.306040][  T803] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  176.333818][  T803] usb 1-1: media controller created
[  176.413252][  T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  176.535472][  T803] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  176.596741][  T803] usb 1-1: USB disconnect, device number 21
[  176.801147][ T8716] loop1: detected capacity change from 0 to 32768
[  176.807117][ T8716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1159 (8716)
[  176.842109][ T8716] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  176.846492][ T8716] BTRFS info (device loop1): using crc32c checksum algorithm
[  176.903687][ T8716] BTRFS info (device loop1): rebuilding free space tree
[  176.985064][ T8716] BTRFS info (device loop1): disabling free space tree
[  176.992925][ T8716] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  177.042886][ T8716] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  177.082093][ T8716] BTRFS info (device loop1): checking UUID tree
[  177.090059][ T8716] BTRFS info (device loop1): enabling ssd optimizations
[  177.097747][ T8716] BTRFS info (device loop1): turning on sync discard
[  177.102576][ T8716] BTRFS info (device loop1): force clearing of disk cache
[  177.111291][ T8716] BTRFS info (device loop1): trying to use backup root at mount time
[  177.119883][ T8716] BTRFS info (device loop1): use zlib compression, level 3
[  177.142612][   T33] audit: type=1326 audit(1787568319.133:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.174252][   T33] audit: type=1326 audit(1787568319.133:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.201509][ T8716] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.202744][   T33] audit: type=1326 audit(1787568319.133:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.213443][   T33] audit: type=1326 audit(1787568319.133:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.220110][   T33] audit: type=1326 audit(1787568319.143:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.234486][   T33] audit: type=1326 audit(1787568319.153:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.245594][   T33] audit: type=1326 audit(1787568319.153:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.255033][   T33] audit: type=1326 audit(1787568319.153:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.262619][   T33] audit: type=1326 audit(1787568319.153:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.1166" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d7c99e0d9 code=0x7ffc0000
[  177.466702][ T6010] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  177.566385][ T8755] loop1: detected capacity change from 0 to 512
[  177.581814][ T8755] EXT4-fs: Ignoring removed oldalloc option
[  177.590745][ T8755] EXT4-fs (loop1): Test dummy encryption mode enabled
[  177.622969][ T8755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.661510][ T6010] usb 3-1: Using ep0 maxpacket: 32
[  177.671988][ T6010] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.685511][ T6010] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  177.702539][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.706131][ T6010] usb 3-1: Product: syz
[  177.708119][ T6010] usb 3-1: Manufacturer: syz
[  177.710003][ T6010] usb 3-1: SerialNumber: syz
[  177.744913][ T6010] usb 3-1: config 0 descriptor??
[  177.754462][ T6010] usb 3-1: No union descriptors
[  177.763022][ T6010] usb 3-1: unsupported MDLM descriptors
[  177.822024][ T8755] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  177.849337][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'.
[  177.852330][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'.
[  177.898235][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.966536][ T8781] netlink: 'syz.0.1181': attribute type 20 has an invalid length.
[  177.969623][ T2235] usb 3-1: USB disconnect, device number 19
[  178.863831][ T8816] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1192'.
[  178.996852][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  178.999835][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  179.054462][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  179.098400][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  179.108787][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.112609][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'.
[  179.117013][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.121808][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.126276][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  179.129671][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.459074][ T8828] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1199'.
[  179.950840][ T5714] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  180.117750][ T5714] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.121065][ T5714] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  180.129255][ T5714] usb 3-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[  180.132566][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  180.135545][ T5714] usb 3-1: Product: syz
[  180.137196][ T5714] usb 3-1: Manufacturer: syz
[  180.144205][ T5714] usb 3-1: config 0 descriptor??
[  180.394718][ T2235] usb 3-1: USB disconnect, device number 20
[  181.015317][ T8852] gfs2: not a GFS2 filesystem
[  181.481025][ T2235] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  181.630472][ T2235] usb 2-1: Using ep0 maxpacket: 16
[  181.634987][ T2235] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  181.638465][ T2235] usb 2-1: config 0 has no interface number 0
[  181.641164][ T2235] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  181.644786][ T2235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.653559][ T2235] usb 2-1: config 0 descriptor??
[  182.083028][ T8873] No such timeout policy "syz0"
[  182.264936][ T2235] uclogic 0003:28BD:0071.0008: pen parameters not found
[  182.267802][ T2235] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring
[  182.512559][ T5668] usb 2-1: USB disconnect, device number 16
[  183.156373][ T8899] __nla_validate_parse: 3 callbacks suppressed
[  183.156393][ T8899] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1231'.
[  183.512971][ T8909] loop2: detected capacity change from 0 to 1024
[  183.519390][ T8909] EXT4-fs: Ignoring removed oldalloc option
[  183.526991][ T8909] EXT4-fs: Ignoring removed oldalloc option
[  183.529987][ T8909] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled
[  183.558889][ T8909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.609787][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.688935][ T8903] loop1: detected capacity change from 0 to 32768
[  183.702641][ T8903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1233 (8903)
[  184.766160][ T8903] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.784540][ T8903] BTRFS info (device loop1): using crc32c checksum algorithm
[  184.968205][ T8915] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1237'.
[  185.075745][ T8903] BTRFS info (device loop1): enabling ssd optimizations
[  185.086236][ T8903] BTRFS info (device loop1): turning on async discard
[  185.097715][ T8903] BTRFS info (device loop1): enabling free space tree
[  185.333753][ T5604] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.420982][ T8959] loop1: detected capacity change from 0 to 32768
[  186.425429][ T8959] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1251 (8959)
[  186.435840][ T8959] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.439758][ T8959] BTRFS info (device loop1): using crc32c checksum algorithm
[  186.539105][ T8959] BTRFS info (device loop1): enabling ssd optimizations
[  186.542031][ T8959] BTRFS info (device loop1): turning on flush-on-commit
[  186.544723][ T8959] BTRFS info (device loop1): turning on async discard
[  186.547407][ T8959] BTRFS info (device loop1): enabling free space tree
[  186.549970][ T8959] BTRFS info (device loop1): enabling auto defrag
[  186.553720][ T8959] BTRFS info (device loop1): use lzo compression, level 1
[  186.556654][ T8959] BTRFS info (device loop1): max_inline set to 4096
[  186.609373][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  186.609388][   T33] audit: type=1800 audit(1787568328.573:70): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1251" name="file1" dev="loop1" ino=260 res=0 errno=0
[  186.703878][ T8983] Non-string source
[  186.845982][ T5604] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.115573][   T53] Bluetooth: hci2: unexpected event 0x04 length: 11 > 10
[  188.185991][   T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:200'
[  188.192441][   T53] CPU: 1 UID: 0 PID: 53 Comm: kworker/u11:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  188.192466][   T53] Tainted: [L]=SOFTLOCKUP
[  188.192471][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.192481][   T53] Workqueue: hci2 hci_rx_work
[  188.192508][   T53] Call Trace:
[  188.192514][   T53]  <TASK>
[  188.192522][   T53]  dump_stack_lvl+0xe8/0x150
[  188.192544][   T53]  sysfs_create_dir_ns+0x271/0x2a0
[  188.192571][   T53]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  188.192592][   T53]  ? do_raw_spin_unlock+0x4d/0x210
[  188.192610][   T53]  kobject_add_internal+0x622/0xcd0
[  188.192630][   T53]  kobject_add+0x163/0x240
[  188.192644][   T53]  ? preempt_schedule_thunk+0x16/0x40
[  188.192658][   T53]  ? __pfx_kobject_add+0x10/0x10
[  188.192679][   T53]  ? get_device_parent+0x366/0x3a0
[  188.192698][   T53]  device_add+0x3fa/0xb80
[  188.192714][   T53]  hci_conn_add_sysfs+0xd5/0x210
[  188.192735][   T53]  hci_conn_complete_evt+0x8a8/0x1350
[  188.192757][   T53]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  188.192785][   T53]  ? skb_pull_data+0xf0/0x200
[  188.192806][   T53]  hci_event_packet+0x6cd/0xf10
[  188.192827][   T53]  ? __pfx_hci_conn_complete_evt+0x10/0x10
[  188.192842][   T53]  ? __pfx_hci_event_packet+0x10/0x10
[  188.192859][   T53]  ? __pfx_hci_cmd_sync_complete+0x10/0x10
[  188.192876][   T53]  ? audit_filter_rules+0x39c0/0x5d10
[  188.192898][   T53]  ? hci_send_to_monitor+0xe2/0x590
[  188.192922][   T53]  hci_rx_work+0x3ee/0x1020
[  188.192945][   T53]  ? process_scheduled_works+0xa20/0x14e0
[  188.192958][   T53]  process_scheduled_works+0xa8e/0x14e0
[  188.192990][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.193008][   T53]  ? assign_work+0x3cf/0x5d0
[  188.193061][   T53]  worker_thread+0xa47/0xfb0
[  188.193095][   T53]  kthread+0x388/0x470
[  188.193113][   T53]  ? __pfx_worker_thread+0x10/0x10
[  188.193123][   T53]  ? __pfx_kthread+0x10/0x10
[  188.193137][   T53]  ret_from_fork+0x514/0xb70
[  188.193153][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  188.193168][   T53]  ? __switch_to+0xc89/0x1420
[  188.193183][   T53]  ? __pfx_kthread+0x10/0x10
[  188.193196][   T53]  ret_from_fork_asm+0x1a/0x30
[  188.193221][   T53]  </TASK>
[  188.193243][   T53] kobject: kobject_add_internal failed for hci2:200 with -EEXIST, don't try to register things with the same name in the same directory.
[  188.231408][ T9030] loop2: detected capacity change from 0 to 256
[  188.232871][   T53] Bluetooth: hci2: failed to register connection device
[  188.316655][ T9030] exFAT-fs (loop2): error, no upcase table entry. Please run fsck
[  188.322755][ T9030] exFAT-fs (loop2): Filesystem has been set read-only
[  188.326313][ T9030] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  188.495117][ T9042] loop2: detected capacity change from 0 to 2048
[  188.513682][ T9043] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  189.510210][ T9067] netlink: 'syz.1.1290': attribute type 6 has an invalid length.
[  189.758509][ T9063] overlayfs: conflicting lowerdir path
[  189.769036][ T9075] netlink: 'syz.2.1294': attribute type 5 has an invalid length.
[  189.881118][   T33] audit: type=1800 audit(1787568331.863:71): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1295" name="zoned" dev="configfs" ino=16274 res=0 errno=0
[  189.897661][   T33] audit: type=1800 audit(1787568331.883:72): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1295" name="memory_backed" dev="configfs" ino=16277 res=0 errno=0
[  189.907311][   T33] audit: type=1800 audit(1787568331.883:73): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1295" name="zone_nr_conv" dev="configfs" ino=16278 res=0 errno=0
[  189.922057][   T33] audit: type=1800 audit(1787568331.883:74): pid=9078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1295" name="power" dev="configfs" ino=16279 res=0 errno=0
[  189.955779][ T9078] null_blk: disk nullb1 created
[  190.027751][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1299'.
[  190.031626][ T9087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1299'.
[  190.127373][ T5612] Bluetooth: hci2: command 0x0405 tx timeout
[  190.310459][ T5668] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  190.333575][ T9099] loop2: detected capacity change from 0 to 128
[  190.356145][ T9099] ufs: ufstype=nextstep-cd is supported read-only
[  190.444864][ T9101] loop2: detected capacity change from 0 to 2048
[  190.460467][ T5668] usb 1-1: Using ep0 maxpacket: 32
[  190.466644][ T5668] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  190.474596][ T5668] usb 1-1: config 0 has no interface number 0
[  190.485422][ T5668] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  190.499403][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.503392][ T5668] usb 1-1: Product: syz
[  190.505758][ T5668] usb 1-1: Manufacturer: syz
[  190.507860][ T5668] usb 1-1: SerialNumber: syz
[  190.533380][ T5668] usb 1-1: config 0 descriptor??
[  190.554309][ T5668] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  190.584137][ T9101] hpfs: filesystem error: improperly stopped; already mounted read-only
[  190.590640][ T9101] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  190.593098][ T9101] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 00000000
[  190.756037][ T5668] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  190.767398][ T5668] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  190.959379][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 231
[  190.980444][   T24] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  191.142224][   T24] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[  191.146831][   T24] usb 3-1: config 5 has no interface number 0
[  191.152808][   T24] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  191.161302][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  191.168611][   T24] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.172749][ T2235] usb 1-1: USB disconnect, device number 22
[  191.176839][   T24] usb 3-1: config 5 interface 123 has no altsetting 0
[  191.192546][   T24] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  191.197101][ T2235] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  191.205700][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.211486][   T24] usb 3-1: Product: syz
[  191.217120][   T24] usb 3-1: Manufacturer: syz
[  191.220462][ T2235] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  191.226635][   T24] usb 3-1: SerialNumber: syz
[  191.231227][ T2235] quatech2 1-1:0.51: device disconnected
[  191.457805][   T24] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device.
[  191.466198][   T24] usb 3-1: USB disconnect, device number 21
[  191.730624][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  192.084542][ T9144] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  192.145572][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  192.240109][ T9150] loop2: detected capacity change from 0 to 64
[  192.630197][ T9156] faux_driver vgem: [drm] Unknown color mode 55359; guessing buffer size.
[  193.017206][ T9166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1335'.
[  193.024209][ T9166] l2tp_ppp: sess 2/0: no socket in recv
[  193.080593][ T9168] ip_tables: iptables: counters copy to user failed while replacing table
[  193.508609][   T33] audit: type=1800 audit(1787568335.493:75): pid=9190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1348" name="out_ports" dev="configfs" ino=17568 res=0 errno=0
[  193.529472][   T24] libceph: connect (1)[c::]:6789 error -101
[  193.543252][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  193.611540][ T9192] ceph: No mds server is up or the cluster is laggy
[  193.618267][ T9198] ima: policy update failed
[  193.660507][   T33] audit: type=1802 audit(1787568335.643:76): pid=9198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1350" res=0 errno=0
[  193.800947][ T5607] Bluetooth: hci2: command 0x0405 tx timeout
[  194.137098][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'.
[  194.636882][ T9246] gadgetfs: bound to dummy_udc driver
[  194.770118][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  194.774456][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  194.857170][ T9254] loop2: detected capacity change from 0 to 4096
[  195.349062][ T9274] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1381'.
[  195.537411][ T9280] trusted_key: syz.0.1384 sent an empty control message without MSG_MORE.
[  195.795766][ T9291] loop2: detected capacity change from 0 to 128
[  195.824044][ T9291] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.831533][ T9291] ext4 filesystem being mounted at /514/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  195.880391][ T5601] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  195.880675][ T5607] Bluetooth: hci2: command 0x0405 tx timeout
[  196.612713][ T9322] bridge_slave_0: Caught tx_queue_len zero misconfig
[  196.856423][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  196.860187][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'.
[  196.986878][ T9340] vhci_hcd vhci_hcd.0: failed to lookup sock
[  197.952306][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1432'.
[  198.179556][ T9398] xt_hashlimit: size too large, truncated to 1048576
[  198.640484][   T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  198.755821][ T9408] loop2: detected capacity change from 0 to 4096
[  198.791423][   T10] usb 1-1: Using ep0 maxpacket: 32
[  198.798824][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  198.806662][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  198.810234][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  198.816166][   T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  198.822298][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.840447][   T10] usb 1-1: config 0 descriptor??
[  198.845137][ T9404] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  198.854361][   T10] hub 1-1:0.0: USB hub found
[  199.057043][   T10] hub 1-1:0.0: 2 ports detected
[  199.222053][   T33] audit: type=1326 audit(1787568341.213:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.236741][   T33] audit: type=1326 audit(1787568341.213:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.267220][   T33] audit: type=1326 audit(1787568341.213:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.276102][   T33] audit: type=1326 audit(1787568341.213:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.285351][   T33] audit: type=1326 audit(1787568341.213:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.296983][   T33] audit: type=1326 audit(1787568341.213:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.315272][   T33] audit: type=1326 audit(1787568341.213:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.328652][   T33] audit: type=1326 audit(1787568341.213:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.340632][   T33] audit: type=1326 audit(1787568341.213:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.356569][   T33] audit: type=1326 audit(1787568341.213:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9432 comm="syz.1.1454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  199.376615][   T10] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  199.382778][   T10] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  199.387281][ T9441] loop2: detected capacity change from 0 to 8
[  199.388299][   T10] usbhid 1-1:0.0: can't add hid device: -71
[  199.392584][   T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  199.401097][ T5607] Bluetooth: hci2: command 0x0405 tx timeout
[  199.443645][   T10] usb 1-1: USB disconnect, device number 24
[  199.692832][ T9449] loop2: detected capacity change from 0 to 32768
[  199.744160][ T9449] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.770178][ T9449] XFS (loop2): Ending clean mount
[  199.776690][ T9449] XFS (loop2): Quotacheck needed: Please wait.
[  199.823020][ T9449] XFS (loop2): Quotacheck: Done.
[  200.430545][ T5601] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.052215][ T5714] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  201.200653][ T5714] usb 3-1: Using ep0 maxpacket: 8
[  201.207536][ T5714] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.212682][ T5714] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  201.221378][ T5714] usb 3-1: New USB device found, idVendor=2b73, idProduct=0029, bcdDevice= 0.40
[  201.234096][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.240981][ T5714] usb 3-1: Product: syz
[  201.242394][ T5714] usb 3-1: Manufacturer: syz
[  201.249555][ T5714] usb 3-1: SerialNumber: syz
[  201.523048][ T5714] usb 3-1: 0:2 : does not exist
[  201.526347][ T5714] usb 3-1: 0:3 : does not exist
[  201.532873][ T5714] usb 3-1: unit 3 not found!
[  201.590472][ T5714] usb 3-1: USB disconnect, device number 22
[  201.769919][ T7335] udevd[7335]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.991694][ T9503] netlink: 'syz.1.1481': attribute type 2 has an invalid length.
[  201.994967][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1481'.
[  202.128192][ T9509] x_tables: unsorted underflow at hook 2
[  202.235122][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'.
[  202.238956][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'.
[  202.605157][ T9524] loop2: detected capacity change from 0 to 32768
[  202.611424][ T9524] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1491 (9524)
[  202.618986][ T9524] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.622826][ T9524] BTRFS info (device loop2): using sha256 checksum algorithm
[  202.659660][ T9540] tmpfs: Bad value for 'mpol'
[  202.693929][ T9547] Device name not specified.
[  202.693929][ T9547] 
[  202.736315][ T9524] BTRFS info (device loop2): enabling ssd optimizations
[  202.739110][ T9524] BTRFS info (device loop2): turning on sync discard
[  202.741403][ T9524] BTRFS info (device loop2): enabling free space tree
[  202.743645][ T9524] BTRFS info (device loop2): use zlib compression, level 3
[  203.542996][ T9564] process 'syz.0.1501' launched './file2' with NULL argv: empty string added
[  203.577825][ T5601] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.824888][ T9566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'.
[  203.896623][ T9572] syz.2.1505(9572): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  204.289820][ T9598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1517'.
[  204.304805][ T9598] bond0: (slave bond_slave_0): Releasing backup interface
[  204.379457][ T9598] bond_slave_0: entered promiscuous mode
[  204.387297][ T9598] bond_slave_0: entered allmulticast mode
[  204.897581][ T9635] fuse: fd is not a fuse device
[  205.119490][ T9643] vxcan1: tx drop: invalid da for name 0xffffffffffffffff
[  205.324029][ T9653] loop2: detected capacity change from 0 to 512
[  205.341828][ T9653] EXT4-fs: Ignoring removed oldalloc option
[  205.345899][ T9653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.370105][ T9653] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  205.374062][ T9653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  205.380749][ T9653] EXT4-fs (loop2): orphan cleanup on readonly fs
[  205.390650][ T9653] __quota_error: 17 callbacks suppressed
[  205.390667][ T9653] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  205.400987][ T9653] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  205.410855][ T9653] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  205.432438][ T9653] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1534: bg 0: block 40: padding at end of block bitmap is not set
[  205.437488][ T9653] loop2: lost filesystem error report for type 5 error -117
[  205.439404][ T9653] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  205.441790][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  205.441803][    C1] EXT4-fs (loop2): initial error at time 1787568347: ext4_validate_block_bitmap:441
[  205.441815][    C1] EXT4-fs (loop2): last error at time 1787568347: ext4_validate_block_bitmap:441
[  205.455738][ T9653] loop2: lost filesystem error report for type 5 error -117
[  205.456012][ T9653] EXT4-fs (loop2): 1 truncate cleaned up
[  205.461613][ T9653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  205.474437][ T9653] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1534'.
[  205.505541][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.602945][ T9658] program syz.0.1536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.607226][ T9660] loop2: detected capacity change from 0 to 128
[  205.616809][ T9660] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  205.633301][ T9660] hpfs: filesystem error: improperly stopped
[  205.638887][ T9660] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  205.643203][ T9660] hpfs: You really don't want any checks? You are crazy...
[  205.645607][ T9660] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  205.648135][ T9660] hpfs: code page support is disabled
[  205.649986][ T9660] hpfs: hpfs_map_4sectors(): unaligned read
[  205.653131][ T9660] hpfs: hpfs_map_4sectors(): unaligned read
[  205.655332][ T9660] hpfs: filesystem error: unable to find root dir
[  205.667075][ T9660] hpfs: hpfs_map_4sectors(): unaligned read
[  206.419395][ T9708] netlink: 'syz.1.1560': attribute type 9 has an invalid length.
[  206.499428][ T9712] loop2: detected capacity change from 0 to 1024
[  206.507196][ T9714] input: syz0 as /devices/virtual/input/input12
[  206.703788][ T9721] Falling back ldisc for ttyS3.
[  207.045347][ T9727] loop2: detected capacity change from 0 to 1024
[  207.048572][ T9727] hfsplus: Bad value for 'part'
[  207.159564][   T33] audit: type=1326 audit(1787568349.143:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9730 comm="syz.2.1570" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e56d9e0d9 code=0x0
[  207.260587][   T33] audit: type=1326 audit(1787568349.243:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.1.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  207.269315][   T33] audit: type=1326 audit(1787568349.253:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.1.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  207.276733][   T33] audit: type=1326 audit(1787568349.253:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.1.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  207.283586][   T33] audit: type=1326 audit(1787568349.253:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.1.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  207.290563][   T33] audit: type=1326 audit(1787568349.253:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9739 comm="syz.1.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dbc59e0d9 code=0x7ffc0000
[  207.834545][ T5685] hid_parser_main: 14 callbacks suppressed
[  207.834572][ T5685] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  207.884904][ T5685] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  208.518585][ T9771] xt_TCPMSS: Only works on TCP SYN packets
[  209.063315][ T9775] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1590'.
[  209.072111][ T9775] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1590'.
[  209.625603][ T9779] xt_hashlimit: size too large, truncated to 1048576
[  209.948134][ T9793] fuse: fd is not a fuse device
[  210.274132][ T9819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1611'.
[  212.201866][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1626'.
[  213.031845][ T9891] loop2: detected capacity change from 0 to 4096
[  213.038863][ T9891] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  213.067443][ T9891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.966571][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.391253][ T5685] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  214.554678][ T5685] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.559552][ T5685] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  214.563953][ T5685] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  214.569932][ T5685] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  214.575207][ T5685] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  214.579010][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.854843][ T9956] loop2: detected capacity change from 0 to 40427
[  214.859997][ T9956] F2FS-fs (loop2): Image doesn't support compression
[  214.863377][ T9956] F2FS-fs (loop2): build fault injection rate: 690
[  214.867718][ T9956] F2FS-fs (loop2): invalid crc value
[  214.911537][ T9956] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  214.926792][ T9956] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  215.214637][ T5685] gud 1-1:1.0: Failed to add properties (error=-71)
[  215.219021][ T5685] gud 1-1:1.0: probe with driver gud failed with error -71
[  215.229501][ T5685] usb 1-1: USB disconnect, device number 25
[  215.447670][ T9998] loop2: detected capacity change from 0 to 764
[  215.459728][ T9998] rock: directory entry would overflow storage
[  215.462637][ T9998] rock: sig=0x4654, size=5, remaining=4
[  215.774916][ T5685] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  215.950513][ T5685] usb 3-1: Using ep0 maxpacket: 32
[  215.966128][ T5685] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  215.970965][ T5685] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  215.979621][ T5685] usb 3-1: config 0 interface 0 has no altsetting 0
[  215.985043][ T5685] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  215.988684][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.992309][ T5685] usb 3-1: Product: syz
[  215.994572][ T5685] usb 3-1: Manufacturer: syz
[  215.996588][ T5685] usb 3-1: SerialNumber: syz
[  216.006910][ T5685] usb 3-1: config 0 descriptor??
[  216.415821][ T5685] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  217.060287][ T5685] usb 3-1: USB disconnect, device number 23
[  217.456246][   T33] audit: type=1400 audit(1787568359.443:110): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10055 comm="syz.1.1709" name="unknown" offset=16
[  218.819020][T10099] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  219.638176][T10125] loop2: detected capacity change from 0 to 32768
[  219.861328][T10133] netlink: 'syz.0.1741': attribute type 5 has an invalid length.
[  219.903382][T10139] fuse: fd is not a fuse device
[  220.072929][T10154] loop2: detected capacity change from 0 to 128
[  220.101520][T10154] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  220.106635][T10154] ext4 filesystem being mounted at /627/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  220.311314][ T5601] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.567428][T10175] openvswitch: netlink: Invalid VLAN frame
[  220.616705][T10179] loop2: detected capacity change from 0 to 256
[  220.775829][T10194] cgroup: name respecified
[  222.554800][ T5685] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  222.699543][T10266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1802'.
[  222.705006][ T5685] usb 1-1: Using ep0 maxpacket: 8
[  222.714600][ T5685] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  222.717925][ T5685] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  222.722141][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  222.725684][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  222.728771][ T5685] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  222.733491][ T5685] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  222.736899][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.855152][T10276] loop2: detected capacity change from 0 to 24
[  222.950648][ T5685] usb 1-1: usb_control_msg returned -32
[  222.954741][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.962542][ T5685] usbtmc 1-1:16.0: can't read capabilities
[  222.982900][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.999245][ T5685] usb 1-1: USB disconnect, device number 26
[  223.096776][T10283] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.100073][T10283] batadv_slave_1: entered promiscuous mode
[  223.961738][T10318] loop2: detected capacity change from 0 to 40427
[  223.966675][T10318] F2FS-fs (loop2): Image doesn't support compression
[  223.972586][T10318] F2FS-fs (loop2): build fault injection rate: 690
[  223.977128][T10318] F2FS-fs (loop2): invalid crc value
[  224.019010][T10318] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  224.031458][T10318] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  224.068007][   T33] audit: type=1800 audit(1787568366.053:111): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1828" name="file1" dev="loop2" ino=10 res=0 errno=0
[  224.219114][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'.
[  224.365865][T10318] bio_check_eod: 2 callbacks suppressed
[  224.365878][T10318] syz.2.1828: attempt to access beyond end of device
[  224.365878][T10318] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  224.383037][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.2.1828 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.383055][T10318] Tainted: [L]=SOFTLOCKUP
[  224.383059][T10318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.383064][T10318] Call Trace:
[  224.383069][T10318]  <TASK>
[  224.383074][T10318]  dump_stack_lvl+0xe8/0x150
[  224.383094][T10318]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  224.383109][T10318]  f2fs_write_end_io+0x124b/0x1710
[  224.383132][T10318]  __submit_merged_bio+0x258/0x6a0
[  224.383158][T10318]  ? rcu_is_watching+0x15/0xb0
[  224.383173][T10318]  __submit_merged_write_cond+0x3c9/0x4e0
[  224.383188][T10318]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  224.383209][T10318]  f2fs_write_data_pages+0x2a27/0x36f0
[  224.383239][T10318]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.383248][T10318]  ? is_bpf_text_address+0x26/0x2b0
[  224.383267][T10318]  ? arch_stack_walk+0xfb/0x150
[  224.383296][T10318]  ? add_lock_to_list+0xc7/0x100
[  224.383309][T10318]  ? lockdep_unlock+0x5d/0xd0
[  224.383317][T10318]  ? __lock_acquire+0x13e8/0x2cf0
[  224.383341][T10318]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.383381][T10318]  ? do_raw_spin_unlock+0x4d/0x210
[  224.383389][T10318]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.383400][T10318]  do_writepages+0x338/0x560
[  224.383417][T10318]  ? do_raw_spin_unlock+0x4d/0x210
[  224.383427][T10318]  filemap_fdatawrite+0x1e9/0x2f0
[  224.383442][T10318]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  224.383474][T10318]  ? do_raw_spin_unlock+0x4d/0x210
[  224.383485][T10318]  f2fs_sync_dirty_inodes+0x30e/0x830
[  224.383506][T10318]  f2fs_write_checkpoint+0xa3d/0x2710
[  224.383533][T10318]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  224.383570][T10318]  f2fs_gc+0x1ee9/0x25b0
[  224.383594][T10318]  ? __pfx_f2fs_gc+0x10/0x10
[  224.383617][T10318]  ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10
[  224.383629][T10318]  ? rcu_is_watching+0x15/0xb0
[  224.383642][T10318]  f2fs_balance_fs+0x67f/0x870
[  224.383654][T10318]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  224.383663][T10318]  ? f2fs_map_blocks+0x3b60/0x46d0
[  224.383673][T10318]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  224.383681][T10318]  ? rcu_is_watching+0x15/0xb0
[  224.383692][T10318]  ? __up_read+0x29c/0x930
[  224.383706][T10318]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  224.383715][T10318]  ? restore_priority+0x1af/0x450
[  224.383728][T10318]  f2fs_map_blocks+0x3b60/0x46d0
[  224.383760][T10318]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  224.383772][T10318]  ? stack_trace_save+0xa9/0x100
[  224.383782][T10318]  ? __pfx_stack_trace_save+0x10/0x10
[  224.383790][T10318]  ? invalidate_inode_pages2_range+0xa7b/0xb30
[  224.383806][T10318]  ? stack_depot_init+0x1a1/0x1b0
[  224.383821][T10318]  ? filemap_check_errors+0xd2/0x120
[  224.383832][T10318]  ? filemap_write_and_wait_range+0x1e9/0x3f0
[  224.383849][T10318]  f2fs_iomap_begin+0x3b7/0x960
[  224.383863][T10318]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[  224.383888][T10318]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[  224.383898][T10318]  iomap_iter+0x5f5/0xf80
[  224.383911][T10318]  ? blk_start_plug+0x6e/0x1b0
[  224.383926][T10318]  __iomap_dio_rw+0xcab/0x1de0
[  224.383946][T10318]  ? __lock_acquire+0x683/0x2cf0
[  224.383963][T10318]  ? __pfx___iomap_dio_rw+0x10/0x10
[  224.383991][T10318]  ? f2fs_file_write_iter+0x1702/0x28e0
[  224.384017][T10318]  ? down_read+0x2be/0x330
[  224.384036][T10318]  f2fs_file_write_iter+0x18d6/0x28e0
[  224.384054][T10318]  ? __pfx_aa_file_perm+0x10/0x10
[  224.384095][T10318]  ? vfs_write+0x22b/0xba0
[  224.384114][T10318]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  224.384148][T10318]  vfs_write+0x612/0xba0
[  224.384173][T10318]  ? __pfx_vfs_write+0x10/0x10
[  224.384198][T10318]  ? __fget_files+0x2a/0x420
[  224.384219][T10318]  ksys_write+0x150/0x270
[  224.384231][T10318]  ? __pfx_ksys_write+0x10/0x10
[  224.384247][T10318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.384258][T10318]  do_syscall_64+0x174/0x580
[  224.384270][T10318]  ? trace_irq_disable+0x3b/0x140
[  224.384286][T10318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.384296][T10318] RIP: 0033:0x7f3e56d9e0d9
[  224.384308][T10318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.384317][T10318] RSP: 002b:00007f3e54ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  224.384328][T10318] RAX: ffffffffffffffda RBX: 00007f3e57025fa0 RCX: 00007f3e56d9e0d9
[  224.384377][T10318] RDX: 0000000000000030 RSI: 00002000000000c0 RDI: 0000000000000006
[  224.384385][T10318] RBP: 00007f3e56e35024 R08: 0000000000000000 R09: 0000000000000000
[  224.384391][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.384397][T10318] R13: 00007f3e57026038 R14: 00007f3e57025fa0 R15: 00007fff53ed9af8
[  224.384415][T10318]  </TASK>
[  224.385712][T10318] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  224.543756][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.2.1828 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  224.543772][T10318] Tainted: [L]=SOFTLOCKUP
[  224.543775][T10318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.543780][T10318] Call Trace:
[  224.543784][T10318]  <TASK>
[  224.543788][T10318]  dump_stack_lvl+0xe8/0x150
[  224.543805][T10318]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  224.543819][T10318]  f2fs_write_end_io+0x124b/0x1710
[  224.543842][T10318]  __submit_merged_bio+0x258/0x6a0
[  224.543852][T10318]  ? rcu_is_watching+0x15/0xb0
[  224.543867][T10318]  __submit_merged_write_cond+0x3c9/0x4e0
[  224.543882][T10318]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  224.543905][T10318]  f2fs_write_data_pages+0x2a27/0x36f0
[  224.543943][T10318]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.543953][T10318]  ? is_bpf_text_address+0x26/0x2b0
[  224.543978][T10318]  ? arch_stack_walk+0xfb/0x150
[  224.544024][T10318]  ? add_lock_to_list+0xc7/0x100
[  224.544039][T10318]  ? lockdep_unlock+0x5d/0xd0
[  224.544047][T10318]  ? __lock_acquire+0x13e8/0x2cf0
[  224.544072][T10318]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.544087][T10318]  ? do_raw_spin_unlock+0x4d/0x210
[  224.544096][T10318]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.544108][T10318]  do_writepages+0x338/0x560
[  224.544125][T10318]  ? do_raw_spin_unlock+0x4d/0x210
[  224.544136][T10318]  filemap_fdatawrite+0x1e9/0x2f0
[  224.544149][T10318]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  224.544183][T10318]  ? do_raw_spin_unlock+0x4d/0x210
[  224.544194][T10318]  f2fs_sync_dirty_inodes+0x30e/0x830
[  224.544214][T10318]  f2fs_write_checkpoint+0xa3d/0x2710
[  224.544243][T10318]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  224.544282][T10318]  f2fs_gc+0x1ee9/0x25b0
[  224.544308][T10318]  ? __pfx_f2fs_gc+0x10/0x10
[  224.544368][T10318]  ? __pfx_f2fs_submit_all_merged_ipu_writes+0x10/0x10
[  224.544380][T10318]  ? rcu_is_watching+0x15/0xb0
[  224.544394][T10318]  f2fs_balance_fs+0x67f/0x870
[  224.544406][T10318]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  224.544415][T10318]  ? f2fs_map_blocks+0x3b60/0x46d0
[  224.544424][T10318]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  224.544433][T10318]  ? rcu_is_watching+0x15/0xb0
[  224.544446][T10318]  ? __up_read+0x29c/0x930
[  224.544460][T10318]  ? trace_lock_elapsed_time_end+0xf1/0xbc0
[  224.544469][T10318]  ? restore_priority+0x1af/0x450
[  224.544483][T10318]  f2fs_map_blocks+0x3b60/0x46d0
[  224.544516][T10318]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  224.544529][T10318]  ? stack_trace_save+0xa9/0x100
[  224.544538][T10318]  ? __pfx_stack_trace_save+0x10/0x10
[  224.544546][T10318]  ? invalidate_inode_pages2_range+0xa7b/0xb30
[  224.544561][T10318]  ? stack_depot_init+0x1a1/0x1b0
[  224.544575][T10318]  ? filemap_check_errors+0xd2/0x120
[  224.544587][T10318]  ? filemap_write_and_wait_range+0x1e9/0x3f0
[  224.544604][T10318]  f2fs_iomap_begin+0x3b7/0x960
[  224.544618][T10318]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[  224.544645][T10318]  ? __pfx_f2fs_iomap_begin+0x10/0x10
[  224.544655][T10318]  iomap_iter+0x5f5/0xf80
[  224.544667][T10318]  ? blk_start_plug+0x6e/0x1b0
[  224.544681][T10318]  __iomap_dio_rw+0xcab/0x1de0
[  224.544701][T10318]  ? __lock_acquire+0x683/0x2cf0
[  224.544713][T10318]  ? __pfx___iomap_dio_rw+0x10/0x10
[  224.544735][T10318]  ? f2fs_file_write_iter+0x1702/0x28e0
[  224.544754][T10318]  ? down_read+0x2be/0x330
[  224.544766][T10318]  f2fs_file_write_iter+0x18d6/0x28e0
[  224.544778][T10318]  ? __pfx_aa_file_perm+0x10/0x10
[  224.544798][T10318]  ? vfs_write+0x22b/0xba0
[  224.544808][T10318]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  224.544829][T10318]  vfs_write+0x612/0xba0
[  224.544843][T10318]  ? __pfx_vfs_write+0x10/0x10
[  224.544858][T10318]  ? __fget_files+0x2a/0x420
[  224.544875][T10318]  ksys_write+0x150/0x270
[  224.544885][T10318]  ? __pfx_ksys_write+0x10/0x10
[  224.544899][T10318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.544911][T10318]  do_syscall_64+0x174/0x580
[  224.544941][T10318]  ? trace_irq_disable+0x3b/0x140
[  224.544954][T10318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.544963][T10318] RIP: 0033:0x7f3e56d9e0d9
[  224.544973][T10318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.544981][T10318] RSP: 002b:00007f3e54ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  224.544990][T10318] RAX: ffffffffffffffda RBX: 00007f3e57025fa0 RCX: 00007f3e56d9e0d9
[  224.544996][T10318] RDX: 0000000000000030 RSI: 00002000000000c0 RDI: 0000000000000006
[  224.545001][T10318] RBP: 00007f3e56e35024 R08: 0000000000000000 R09: 0000000000000000
[  224.545006][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.545011][T10318] R13: 00007f3e57026038 R14: 00007f3e57025fa0 R15: 00007fff53ed9af8
[  224.545027][T10318]  </TASK>
[  224.545663][T10318] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  224.726870][T10318] syz.2.1828 (10318) used greatest stack depth: 20056 bytes left
[  224.816094][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1837'.
[  224.849236][T10345] netlink: 'syz.0.1838': attribute type 2 has an invalid length.
[  224.852723][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'.
[  224.893659][T10347] xt_CT: You must specify a L4 protocol and not use inversions on it
[  225.194821][T10367] loop2: detected capacity change from 0 to 1024
[  225.221645][T10367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.233514][T10367] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1849: missing EA_INODE flag
[  225.239973][T10367] EXT4-fs (loop2): Remounting filesystem read-only
[  225.255040][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.590659][T10386] block nbd1: server does not support multiple connections per device.
[  225.599324][T10386] block nbd1: shutting down sockets
[  225.872981][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1867'.
[  227.174110][  T803] Process accounting resumed
[  227.930434][   T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  228.080444][   T24] usb 1-1: Using ep0 maxpacket: 16
[  228.089102][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.094571][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  228.098786][   T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  228.102105][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.110189][   T24] usb 1-1: config 0 descriptor??
[  228.476405][T10467] netlink: 'syz.1.1890': attribute type 3 has an invalid length.
[  228.752846][   T24] usb 1-1: USB disconnect, device number 27
[  229.660835][   T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  229.722420][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'.
[  229.726051][T10528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1917'.
[  229.729497][T10528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1917'.
[  229.810771][   T24] usb 3-1: Using ep0 maxpacket: 16
[  229.818017][   T24] usb 3-1: config 252 has an invalid interface number: 15 but max is 0
[  229.829350][   T24] usb 3-1: config 252 has no interface number 0
[  229.836176][   T24] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  229.847613][   T24] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  229.863717][   T24] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  229.874673][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.879662][   T24] usb 3-1: Product: syz
[  229.883498][   T24] usb 3-1: Manufacturer: syz
[  229.885730][   T24] usb 3-1: SerialNumber: syz
[  229.896096][T10516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  229.913498][   T24] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  230.099013][T10546] netlink: 'syz.0.1924': attribute type 1 has an invalid length.
[  230.106516][T10546] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1924'.
[  230.112148][T10546] netlink: 'syz.0.1924': attribute type 1 has an invalid length.
[  230.126988][   T13] usb 3-1: Failed to submit usb control message: -71
[  230.128535][ T2235] usb 3-1: USB disconnect, device number 24
[  230.153649][   T13] usb 3-1: unable to send the bmi data to the device: -71
[  230.163945][   T13] usb 3-1: unable to get target info from device
[  230.168400][   T13] usb 3-1: could not get target info (-71)
[  230.177011][   T13] usb 3-1: could not probe fw (-71)
[  230.308720][T10555] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  230.311629][T10555] overlayfs: failed to set xattr on upper
[  230.313567][T10555] overlayfs: ...falling back to redirect_dir=nofollow.
[  230.317782][T10555] overlayfs: ...falling back to uuid=null.
[  230.492136][T10561] bridge_slave_0: left allmulticast mode
[  230.497473][T10561] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.504162][T10561] bridge_slave_1: left allmulticast mode
[  230.506330][T10561] bridge_slave_1: left promiscuous mode
[  230.508774][T10561] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.530118][T10561] bond0: (slave bond_slave_0): Releasing backup interface
[  230.541215][  T803] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  230.568623][T10561] bond0: (slave bond_slave_1): Releasing backup interface
[  230.590128][T10561] team0: Port device team_slave_0 removed
[  230.614270][T10561] team0: Port device team_slave_1 removed
[  230.616900][T10561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.619313][T10561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.624653][T10561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.627048][T10561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.631217][T10561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  230.702080][  T803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  230.711081][  T803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  230.715396][T10564] loop2: detected capacity change from 0 to 512
[  230.715998][  T803] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  230.720062][  T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.724239][T10564] EXT4-fs: Ignoring removed oldalloc option
[  230.733540][  T803] usb 1-1: config 0 descriptor??
[  230.735839][T10556] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  230.749815][T10564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.758046][T10564] ext4 filesystem being mounted at /664/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  230.813513][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.943826][T10556] vcan0: tx drop: invalid da for name 0x0807060504030201
[  230.958561][  T803] usbhid 1-1:0.0: can't add hid device: -71
[  230.961953][  T803] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  230.970486][  T803] usb 1-1: USB disconnect, device number 28
[  231.115512][T10570] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.140370][T10570] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.469973][T10578] loop2: detected capacity change from 0 to 164
[  232.005746][T10604] netlink: 'syz.0.1946': attribute type 1 has an invalid length.
[  232.010666][T10604] netlink: 64851 bytes leftover after parsing attributes in process `syz.0.1946'.
[  232.711304][ T2235] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  232.862003][ T2235] usb 3-1: Using ep0 maxpacket: 8
[  232.866161][ T2235] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  232.869298][ T2235] usb 3-1: config 0 has no interface number 0
[  232.875532][ T2235] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  232.883944][ T2235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.895330][ T2235] usb 3-1: config 0 descriptor??
[  232.953424][T10637] dummy_hcd dummy_hcd.0: remove, state 4
[  232.956946][T10637] usb usb1: USB disconnect, device number 1
[  233.014130][ T2235] viperboard 3-1:0.143: version 0.00 found at bus 003 address 025
[  233.094228][T10637] dummy_hcd dummy_hcd.0: stopped
[  233.108463][T10637] dummy_hcd dummy_hcd.0: USB bus 1 deregistered
[  233.129972][ T2235] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  233.139384][ T2235] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  233.196701][ T2235] usb 3-1: USB disconnect, device number 25
[  233.846895][T10665] loop2: detected capacity change from 0 to 512
[  233.859661][T10665] EXT4-fs (loop2): invalid journal inode
[  233.868446][T10665] EXT4-fs (loop2): can't get journal size
[  233.916488][T10665] EXT4-fs (loop2): 1 truncate cleaned up
[  233.923429][T10665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.940520][   T33] audit: type=1800 audit(1787568375.923:112): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1973" name="file1" dev="loop2" ino=15 res=0 errno=0
[  234.367857][ T5601] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.436574][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1978'.
[  234.440171][T10682] netlink: 'syz.2.1978': attribute type 2 has an invalid length.
[  234.444392][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1978'.
[  234.555422][T10692] loop2: detected capacity change from 0 to 2048
[  234.675096][T10692]  loop2: p2 p3 < > p4 < p5 >
[  234.677397][T10692] loop2: partition table partially beyond EOD, truncated
[  234.682494][T10692] loop2: p3 start 4225 is beyond EOD, truncated
[  234.872438][ T9933] udevd[9933]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  234.878433][ T9894] udevd[9894]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  234.885436][T10027] udevd[10027]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  234.969778][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'.
[  235.188755][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1999'.
[  235.600278][T10752] CIFS: Attempting to mount //127.0.0.1/share
[  235.628505][T10752] CIFS: VFS: Error connecting to socket. Aborting operation.
[  235.633348][T10752] CIFS: VFS: cifs_mount failed w/return code = -111
[  236.124201][T10761] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind()
[  236.128861][T10761] udc usbip-vudc.0: failed to start g1: -19
[  236.148313][T10761] UDC core: g1: couldn't find an available UDC or it's busy
[  236.379708][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'.
[  236.759275][T10788] loop2: detected capacity change from 0 to 2048
[  236.791439][T10788] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  236.803851][T10788] UDF-fs: Scanning with blocksize 512 failed
[  236.831798][T10788] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  236.995857][T10796] loop2: detected capacity change from 0 to 1024
[  237.006974][T10796] hfsplus: failed to load attributes file
[  237.179861][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'.
[  237.332296][   T53] Bluetooth: hci2: Opcode 0x206a failed: -110
[  237.334981][ T5607] Bluetooth: hci2: command 0x206a tx timeout
[  237.401801][ T5607] Bluetooth: hci0: command 0x0406 tx timeout
[  237.405448][T10745] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  237.405719][T10808] IPVS: Scheduler module ip_vs_sip not found
[  237.456139][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2036'.
[  237.468621][T10806] loop2: detected capacity change from 0 to 40427
[  237.472756][T10806] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(4096) blocks(1024)
[  237.475560][T10806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  237.478072][T10806] F2FS-fs (loop2): build fault injection rate: 14
[  237.480088][T10806] F2FS-fs (loop2): build fault injection type: 0x3
[  237.483196][T10806] F2FS-fs (loop2): invalid crc value
[  237.491595][T10806] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x493a/0x77f0
[  237.495228][T10806] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  239.670862][T10846] netlink: 'syz.1.2051': attribute type 62 has an invalid length.
[  240.143662][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'.
[  240.148512][T10871] netlink: 'syz.1.2062': attribute type 30 has an invalid length.
[  240.154324][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2062'.
[  240.249128][T10879] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  240.251276][T10879] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  240.410638][T10887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2069'.
[  240.563231][T10885] loop2: detected capacity change from 0 to 32768
[  240.581072][T10885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2068 (10885)
[  240.606147][T10885] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  240.610607][T10885] BTRFS info (device loop2): using sha256 checksum algorithm
[  240.675971][T10885] BTRFS info (device loop2): enabling ssd optimizations
[  240.690662][T10885] BTRFS info (device loop2): turning on async discard
[  240.693503][T10885] BTRFS info (device loop2): enabling free space tree
[  241.184189][ T5601] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  241.239279][T10923] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  241.242962][T10923] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  241.246291][T10923] CPU: 1 UID: 0 PID: 10923 Comm: syz.0.2080 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  241.249592][T10923] Tainted: [L]=SOFTLOCKUP
[  241.251286][T10923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.255145][T10923] RIP: 0010:dummy_udc_start+0xd0/0x1f0
[  241.257256][T10923] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 75 30 11 fa eb 0c e8 6e 30 11 fa eb 05 e8 67 30 11 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 31 50 7f fa 4d 8b 36 4c 89 f7 e8
[  241.263437][T10923] RSP: 0018:ffffc9000649f830 EFLAGS: 00010246
[  241.265489][T10923] RAX: 0000000000000000 RBX: ffff8881b152a050 RCX: 0000000000080000
[  241.268544][T10923] RDX: ffffc9000f586000 RSI: 0000000000001fa2 RDI: 0000000000001fa3
[  241.271635][T10923] RBP: ffff88816a1b6000 R08: ffff88816bd0bb80 R09: 0000000000000004
[  241.274682][T10923] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[  241.277629][T10923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[  241.280078][T10923] FS:  00007f1d7d92b6c0(0000) GS:ffff8882a8f5d000(0000) knlGS:0000000000000000
[  241.282964][T10923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.285074][T10923] CR2: 00007f0c680c4440 CR3: 00000001b2cd0000 CR4: 00000000000006f0
[  241.287506][T10923] Call Trace:
[  241.288556][T10923]  <TASK>
[  241.289538][T10923]  ? __pfx_dummy_udc_start+0x10/0x10
[  241.291278][T10923]  gadget_bind_driver+0x3a8/0x9e0
[  241.292837][T10923]  ? __pfx_gadget_bind_driver+0x10/0x10
[  241.294587][T10923]  really_probe+0x254/0xae0
[  241.296398][T10923]  __driver_probe_device+0x1e8/0x360
[  241.298436][T10923]  driver_probe_device+0x4f/0x240
[  241.300402][T10923]  __driver_attach+0x339/0x600
[  241.302237][T10923]  bus_for_each_dev+0x23b/0x2c0
[  241.303747][T10923]  ? __pfx___driver_attach+0x10/0x10
[  241.305356][T10923]  ? __pfx_bus_for_each_dev+0x10/0x10
[  241.306975][T10923]  ? do_raw_spin_unlock+0x4d/0x210
[  241.308738][T10923]  bus_add_driver+0x345/0x670
[  241.310199][T10923]  driver_register+0x23a/0x320
[  241.311732][T10923]  usb_gadget_register_driver_owner+0xf9/0x270
[  241.313590][T10923]  raw_ioctl+0x1541/0x41c0
[  241.314976][T10923]  ? tomoyo_path_number_perm+0x219/0x5f0
[  241.316791][T10923]  ? do_vfs_ioctl+0x116f/0x1530
[  241.318440][T10923]  ? __pfx_raw_ioctl+0x10/0x10
[  241.319929][T10923]  ? hook_file_ioctl+0x1f0/0x5f0
[  241.321443][T10923]  ? __fget_files+0x2a/0x420
[  241.322960][T10923]  ? __fget_files+0x2a/0x420
[  241.324473][T10923]  ? __fget_files+0x3a2/0x420
[  241.326018][T10923]  ? __fget_files+0x2a/0x420
[  241.327550][T10923]  ? bpf_lsm_file_ioctl+0x9/0x20
[  241.329075][T10923]  ? __pfx_raw_ioctl+0x10/0x10
[  241.330500][T10923]  __se_sys_ioctl+0xfc/0x170
[  241.331918][T10923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.333742][T10923]  do_syscall_64+0x174/0x580
[  241.335132][T10923]  ? trace_irq_disable+0x3b/0x140
[  241.336632][T10923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.338404][T10923] RIP: 0033:0x7f1d7c99dd6b
[  241.339767][T10923] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  241.345505][T10923] RSP: 002b:00007f1d7d928f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.348057][T10923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1d7c99dd6b
[  241.350490][T10923] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  241.353088][T10923] RBP: 00007f1d7d929fd0 R08: 0000000000000000 R09: 00000000ffffffff
[  241.355888][T10923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  241.358452][T10923] R13: 0000200000000540 R14: 0000000000000000 R15: 0000000000000000
[  241.361090][T10923]  </TASK>
[  241.362108][T10923] Modules linked in:
[  241.364405][T10923] ---[ end trace 0000000000000000 ]---
[  241.377504][T10923] RIP: 0010:dummy_udc_start+0xd0/0x1f0
[  241.379519][T10923] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 75 30 11 fa eb 0c e8 6e 30 11 fa eb 05 e8 67 30 11 fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 31 50 7f fa 4d 8b 36 4c 89 f7 e8
[  241.410262][T10923] RSP: 0018:ffffc9000649f830 EFLAGS: 00010246
[  241.416433][T10923] RAX: 0000000000000000 RBX: ffff8881b152a050 RCX: 0000000000080000
[  241.419901][T10923] RDX: ffffc9000f586000 RSI: 0000000000001fa2 RDI: 0000000000001fa3
[  241.426269][T10923] RBP: ffff88816a1b6000 R08: ffff88816bd0bb80 R09: 0000000000000004
[  241.429405][T10923] R10: 0000000000000005 R11: 0000000000000002 R12: dffffc0000000000
[  241.441555][T10923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000003
[  241.444946][T10923] FS:  00007f1d7d92b6c0(0000) GS:ffff8882a8f5d000(0000) knlGS:0000000000000000
[  241.448556][T10923] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  241.451194][T10923] CR2: 000056273472a000 CR3: 00000001b2cd0000 CR4: 00000000000006f0
[  241.454358][T10923] Kernel panic - not syncing: Fatal exception
[  241.457631][T10923] Kernel Offset: disabled
[  241.459333][T10923] Rebooting in 86400 seconds..
