last executing test programs:

398.88292ms ago: executing program 3 (id=4179):
r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000340)=ANY=[])

368.734633ms ago: executing program 3 (id=4183):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3, 0x0, &(0x7f0000002980))

320.345737ms ago: executing program 3 (id=4191):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000006040)={0x7, 'vlan1\x00', {0x6}})

312.345128ms ago: executing program 4 (id=4194):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0x50, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x4}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x6, 0x20000000000000}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xaee, 0xf}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800)

299.839619ms ago: executing program 1 (id=4195):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000007c0)=0x9, 0x4)

293.35115ms ago: executing program 3 (id=4197):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x2, 0x1, 0x3, 0xb, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_key={0x1, 0x9, 0x20}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}]}, 0x58}, 0x1, 0x7}, 0x810)

287.180511ms ago: executing program 4 (id=4199):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a11820fffff5bab4e210fff000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd000000100001000d0c100000000000224e0000", 0x58}], 0x1)

263.408923ms ago: executing program 1 (id=4201):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x1a, 0x3c}, @in6=@private0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x6, 0x200000, 0x7, 0x1}, {0x40000, 0xfffffffd, 0x9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)

260.259983ms ago: executing program 3 (id=4203):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffffc, 0x9, 0xffffffffffffffff, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0xffffffff, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0xffffffffffffff72}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c808)

257.254204ms ago: executing program 4 (id=4204):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200000, 0x0)
close_range(r0, 0xffffffffffffffff, 0x6)

233.044616ms ago: executing program 0 (id=4205):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000007400)=0x8000, 0x4)

216.005518ms ago: executing program 0 (id=4206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000040000000400000007"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000240), &(0x7f0000000300), 0x1}, 0x20)

215.074338ms ago: executing program 4 (id=4207):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x268, &(0x7f00000003c0)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEsRb0x5LL6GXlkJPaZtDeim0oYeGHtrDlt3ZDZtkQ9v9W3Y+HxhmJu+9eW/CfN8sCzMbQGZNRsRsROQjYioiihGRtFZ4M10mG7sbpe3FiGr1s7tJvV66n2q2m4iISkR8EFFolq1tfbV3f+eTd35bLb7979aXpUGdX6v9vd1PD/6e//XM3Ptrl6/enk9iNsqNstbz6KWkzd8KScRL/ejsGZEUhj0CnsTCz/9fq+X+5Yh4q57/YuQakf195bkLxXjvr9Pa/nHnyquDHCvQe9VqsXYPrFSBzMlFRDmS3HREpNu53PR0+hn+en4898Pyyk9T3y+vLn037JkK6JVyJLsfnxs7O3Es/7fyaf6B0VWO2P18YfNGbfsgP+zRAH3T+m37a+mqlv+pb9bfDfmHzJF/yC75h+ySfxgBHWZX/iG7usn/830aEzAY7v8wworNjUrbYvmH7JJ/GFH/tHvq9Cj5h0w7zD8AkC3VsWE/gQwMy7DnHwAAAAAAAAAAAAAAAAAA4KSN0vZicxlUnxf/jNj/KCIK7frP13+PuPm28fF7Sa3aoSRt1pWv3+jyAF36r2dPX5c6avXCzV7135lLr/fnuL8c3T31n7O+FFGpVZ4pFE5ef0nj+uvci48pL37bZQdP6fhbAT/8YrD9H/dwc7j9z+1EnK/NPzPt5p9cvFJft59/yq2vWO7Qjw+6PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8ygAAP//uTtt2w==")
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0), &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101, 0x0)

212.350938ms ago: executing program 1 (id=4208):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002cc0)={&(0x7f0000002d00)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x11}}, 0x28}}, 0x0)

193.71066ms ago: executing program 0 (id=4209):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x4e22, 0xfffd, 0x4e23, 0x0, 0x2, 0x20, 0xa0}, {0x20000, 0x7, 0x0, 0x0, 0x7, 0x2}, {0x3, 0x448b, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0)

193.31853ms ago: executing program 2 (id=4210):
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x2)

192.710181ms ago: executing program 3 (id=4211):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
write(r0, &(0x7f0000002b80)='0', 0x1)

142.929495ms ago: executing program 1 (id=4212):
setreuid(0xee01, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000019b00)=ANY=[@ANYBLOB="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"], &(0x7f000001a6c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000001a700), 0x0, 0x10, &(0x7f000001a740), 0xfffffffffffffd00}, 0x48)

117.638358ms ago: executing program 2 (id=4213):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)

108.500309ms ago: executing program 4 (id=4214):
r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
pwrite64(r0, &(0x7f00000004c0)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6eeaeec2d13731c56a864fa45a465e64d43", 0x2f, 0xef8d)

99.39487ms ago: executing program 0 (id=4215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000004"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, 0x0, 0x0}, 0x20)

50.925875ms ago: executing program 2 (id=4216):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0)

50.767955ms ago: executing program 1 (id=4217):
r0 = syz_open_dev$evdev(&(0x7f0000001600), 0x2, 0x842)
read(r0, &(0x7f0000001b80)=""/70, 0x46)

48.102165ms ago: executing program 4 (id=4218):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x20)
write(r0, &(0x7f0000000040)='\a', 0x1)

42.413436ms ago: executing program 2 (id=4219):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffffffffffffcf, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x26a3c, 0x5922b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

41.514026ms ago: executing program 0 (id=4220):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000000085000000540000001500020000000000bf010000000000008500000056000000b70000000000000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x1000, &(0x7f0000000700)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="00112233445566778899aabb0800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

29.267347ms ago: executing program 2 (id=4221):
r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsetxattr$security_selinux(r0, &(0x7f00000001c0), &(0x7f0000000200)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x1)

278.24µs ago: executing program 1 (id=4222):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x180, 0x168, 0x10, 0x180, 0xb, 0x278, 0x250, 0x250, 0x278, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [], [], 'veth1_to_batadv\x00', 'veth0_to_team\x00', {}, {}, 0x3a}, 0x6000000, 0x118, 0x180, 0x0, {0x0, 0x28e}, [@common=@icmp6={{0x28}, {0x0, 'K\r', 0xfe}}, @common=@hbh={{0x48}, {0x3, 0x6, 0x1, [0x800, 0x4, 0x1, 0x7507, 0x228a, 0x2, 0xf7, 0x4, 0x1, 0x6, 0x6, 0xfff9, 0x75, 0x4, 0x6983, 0x6], 0x7}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0xff000000, 0xff000000], [0x0, 0xff, 0xffffffff], 'gretap0\x00', 'ip6gre0\x00', {0xff}, {}, 0x29, 0x2, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)

74.59µs ago: executing program 0 (id=4223):
r0 = syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0x10, &(0x7f0000000240)=ANY=[], 0x1, 0x105d6, &(0x7f0000000b40)="$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")
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0x5)

0s ago: executing program 2 (id=4224):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001b80)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, 0x0, 0x2, 0xd, 0x4, 0x3}, &(0x7f0000001bc0)=0x20)

kernel console output (not intermixed with test programs):

d to load alloc-bitmap
[  125.215368][ T5103] exFAT-fs (loop2): failed to recognize exfat type
[  125.215883][  T293] usb 4-1: Manufacturer: syz
[  125.339499][ T5114] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  125.349232][  T293] uvcvideo: Found UVC 1.00 device syz (225a:e1d4)
[  125.355855][  T293] uvcvideo: No streaming interface found for terminal 2.
[  125.551696][   T53] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  125.566515][  T293] usb 4-1: USB disconnect, device number 45
[  125.672004][ T5142] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  125.697757][  T358] udevd[358]: inotify_add_watch(7, /dev/loop0p136, 10) failed: No such file or directory
[  125.708453][ T5142] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  125.709331][  T377] udevd[377]: inotify_add_watch(7, /dev/loop0p137, 10) failed: No such file or directory
[  125.718965][ T5142] EXT4-fs (loop2): orphan cleanup on readonly fs
[  125.728356][  T455] udevd[455]: inotify_add_watch(7, /dev/loop0p138, 10) failed: No such file or directory
[  125.737191][ T4616] udevd[4616]: inotify_add_watch(7, /dev/loop0p148, 10) failed: No such file or directory
[  125.744161][  T755] udevd[755]: inotify_add_watch(7, /dev/loop0p139, 10) failed: No such file or directory
[  125.754675][  T358] udevd[358]: inotify_add_watch(7, /dev/loop0p147, 10) failed: No such file or directory
[  125.765286][  T336] udevd[336]: inotify_add_watch(7, /dev/loop0p140, 10) failed: No such file or directory
[  125.775566][ T1755] udevd[1755]: inotify_add_watch(7, /dev/loop0p146, 10) failed: No such file or directory
[  125.785416][ T5142] EXT4-fs warning (device loop2): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  125.809215][ T5142] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  125.810696][ T1747] udevd[1747]: inotify_add_watch(7, /dev/loop0p145, 10) failed: No such file or directory
[  125.816329][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #16: comm syz.2.2223: iget: immutable or append flags not allowed on symlinks
[  125.827914][ T4615] udevd[4615]: inotify_add_watch(7, /dev/loop0p144, 10) failed: No such file or directory
[  125.841303][ T5142] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.2223: couldn't read orphan inode 16 (err -117)
[  125.855418][ T1319] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  125.863134][ T5142] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[  125.870531][  T651] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  125.979732][ T5146] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  125.994053][ T5146] FAT-fs (loop2): Directory bread(block 1056) failed
[  126.000836][ T5146] FAT-fs (loop2): Directory bread(block 1057) failed
[  126.007821][ T5146] FAT-fs (loop2): Directory bread(block 1058) failed
[  126.014872][ T5146] FAT-fs (loop2): Directory bread(block 1059) failed
[  126.023902][ T5146] FAT-fs (loop2): Directory bread(block 1060) failed
[  126.030980][ T5146] FAT-fs (loop2): Directory bread(block 1061) failed
[  126.037795][ T5146] FAT-fs (loop2): Directory bread(block 1062) failed
[  126.042838][   T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  126.044615][ T5146] FAT-fs (loop2): Directory bread(block 1063) failed
[  126.064256][ T5146] FAT-fs (loop2): Directory bread(block 1064) failed
[  126.071065][ T5146] FAT-fs (loop2): Directory bread(block 1065) failed
[  126.138984][  T651] usb 5-1: Using ep0 maxpacket: 8
[  126.145288][ T1319] usb 2-1: Using ep0 maxpacket: 16
[  126.177071][   T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.193740][   T53] usb 1-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[  126.245926][   T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.287390][   T53] usb 1-1: config 0 descriptor??
[  126.310154][  T651] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  126.337619][  T336] print_req_error: 1495 callbacks suppressed
[  126.337635][  T336] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  126.337664][  T358] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  126.344847][   T53] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count
[  126.357549][  T755] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  126.366997][ T1319] usb 2-1: unable to get BOS descriptor or descriptor too short
[  126.382134][  T358] buffer_io_error: 756 callbacks suppressed
[  126.382144][  T358] Buffer I/O error on dev loop1p1, logical block 0, async page read
[  126.400774][  T651] usb 5-1: config 179 has no interface number 0
[  126.411145][  T755] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  126.417254][ T4402] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  126.428547][  T336] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  126.439922][ T4616] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  126.462884][ T1755] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  126.462917][ T1747] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  126.487514][  T377] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  126.494620][ T1755] Buffer I/O error on dev loop1p104, logical block 1, async page read
[  126.500407][ T4617] Buffer I/O error on dev loop1p107, logical block 1, async page read
[  126.507423][  T358] Buffer I/O error on dev loop1p1, logical block 0, async page read
[  126.516937][ T4615] Buffer I/O error on dev loop1p108, logical block 1, async page read
[  126.534115][  T651] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  126.544467][ T4401] Buffer I/O error on dev loop1p101, logical block 1, async page read
[  126.549193][ T4402] Buffer I/O error on dev loop1p102, logical block 1, async page read
[  126.554729][  T755] Buffer I/O error on dev loop1p10, logical block 1, async page read
[  126.564009][ T4616] Buffer I/O error on dev loop1p105, logical block 1, async page read
[  126.579596][  T377] Buffer I/O error on dev loop1p106, logical block 1, async page read
[  126.587956][   T53] usbhid 1-1:0.0: can't add hid device: -22
[  126.588034][   T53] usbhid: probe of 1-1:0.0 failed with error -22
[  126.611457][  T651] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  126.650639][   T53] usb 1-1: USB disconnect, device number 44
[  126.699865][  T651] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  126.715439][  T651] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  126.791198][ T1319] usb 2-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[  126.805833][  T651] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  126.821822][ T1319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.840288][ T1319] usb 2-1: Product: syz
[  126.846186][  T651] usb 5-1: config 179 interface 65 has no altsetting 0
[  126.855222][ T1319] usb 2-1: Manufacturer: syz
[  126.864525][  T651] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  126.883357][ T1319] usb 2-1: SerialNumber: syz
[  126.894972][  T651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.953796][  T651] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11
[  126.955184][   T24] audit: type=1400 audit(1793500926.034:197): avc:  denied  { create } for  pid=5170 comm="syz.2.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  127.197455][ T1321] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  127.207512][  T293] usb 5-1: USB disconnect, device number 47
[  127.207997][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  127.222439][  T293] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  127.354218][ T1319] usb 2-1: USB disconnect, device number 43
[  127.394357][ T5185] fuse: Bad value for 'fd'
[  127.625023][ T1321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.635890][ T1321] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  127.817439][ T1321] usb 4-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00
[  127.821041][ T5218] EXT4-fs (loop1): filesystem too large to mount safely on this system
[  127.826711][ T1321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.826721][ T1321] usb 4-1: Product: syz
[  127.826741][ T1321] usb 4-1: Manufacturer: syz
[  127.852626][  T651] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  127.860186][  T293] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  127.868709][ T1321] usb 4-1: SerialNumber: syz
[  127.925027][ T1321] usb 4-1: unsupported MDLM descriptors
[  127.959033][   T24] audit: type=1400 audit(1793500926.969:198): avc:  denied  { mounton } for  pid=5229 comm="syz.1.2263" path="/syzcgroup/unified/syz1" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  128.051087][ T5227] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  128.063480][ T5227] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  128.094304][ T5227] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.2262: Failed to acquire dquot type 1
[  128.149081][ T5227] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  128.168334][ T1321] usb 4-1: USB disconnect, device number 46
[  128.202055][ T5227] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  128.245113][  T651] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.255737][  T293] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  128.266188][  T651] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  128.278546][ T5227] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.2262: Failed to acquire dquot type 1
[  128.309775][ T5227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2262: bg 0: block 248: padding at end of block bitmap is not set
[  128.328407][  T293] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  128.330830][  T651] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  128.362194][  T651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.378699][ T5227] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  128.404112][ T5227] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  128.414737][ T5227] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  128.438718][ T5227] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.2262: Failed to acquire dquot type 1
[  128.446867][  T293] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  128.450882][ T5227] EXT4-fs (loop4): 1 orphan inode deleted
[  128.470188][  T651] uvcvideo: Found UVC 1.00 device <unnamed> (0000:0000)
[  128.477270][  T651] uvcvideo: No valid video chain found.
[  128.536309][ T5227] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  128.548286][ T5227] ext4 filesystem being mounted at /348/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.629944][  T293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.642690][  T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  128.650794][  T293] usb 1-1: SerialNumber: syz
[  128.694780][  T651] usb 3-1: USB disconnect, device number 45
[  128.696053][ T5258] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  128.709570][ T5258] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a006c128, mo2=0002]
[  128.717655][ T5258] System zones: 1-12
[  128.722026][ T5258] EXT4-fs (loop4): orphan cleanup on readonly fs
[  128.728455][ T5258] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  128.736478][ T5258] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  128.745357][ T5258] EXT4-fs (loop4): 1 truncate cleaned up
[  128.751810][ T5258] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,
[  128.754837][   T24] audit: type=1400 audit(1793500927.718:199): avc:  denied  { mount } for  pid=5263 comm="syz.3.2278" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  128.792891][   T24] audit: type=1400 audit(1793500927.755:200): avc:  denied  { unmount } for  pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  128.929303][ T1321] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  128.961385][  T293] rndis_host 1-1:253.0: RNDIS init failed, -71
[  128.967754][  T293] rndis_host: probe of 1-1:253.0 failed with error -71
[  128.982157][  T293] usb 1-1: USB disconnect, device number 45
[  129.092654][ T5334] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  129.102675][ T5334] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  129.112579][ T5334] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  129.123132][ T5334] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  129.131115][ T5334] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000]
[  129.139444][ T5334] EXT4-fs (loop4): failed to initialize system zone (-117)
[  129.146745][ T5334] EXT4-fs (loop4): mount failed
[  129.185853][ T1321] usb 2-1: Using ep0 maxpacket: 32
[  129.324735][  T651] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  129.356901][ T1321] usb 2-1: unable to get BOS descriptor or descriptor too short
[  129.453158][ T1321] usb 2-1: config 1 has an invalid interface number: 76 but max is 0
[  129.461395][ T1321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.482135][ T5346] F2FS-fs (loop4): invalid crc value
[  129.487761][ T1321] usb 2-1: config 1 has no interface number 0
[  129.496616][ T5346] F2FS-fs (loop4): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  129.513756][ T5346] F2FS-fs (loop4): Found nat_bits in checkpoint
[  129.539787][ T5346] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[  129.546431][ T5346] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  129.555630][ T5346] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  129.656230][ T1321] usb 2-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=9b.14
[  129.674126][ T1321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.687101][ T1321] usb 2-1: Product: syz
[  129.702186][ T1321] usb 2-1: Manufacturer: syz
[  129.708532][ T1321] usb 2-1: SerialNumber: syz
[  129.731149][  T651] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config
[  129.741797][  T651] usb 4-1: config 26 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  129.848698][  T651] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.857865][  T651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  129.866249][  T651] usb 4-1: SerialNumber: syz
[  129.913383][  T651] usb 4-1: bad CDC descriptors
[  129.998295][ T5080] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  130.009393][ T1321] usb-storage 2-1:1.76: USB Mass Storage device detected
[  130.017515][ T1321] usb-storage 2-1:1.76: Quirks match for vid 07c4 pid a4a5: 420
[  130.025306][  T293] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  130.063656][ T1321] usb 2-1: USB disconnect, device number 44
[  130.091264][ T5429] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  130.100660][ T5429] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  130.109165][ T5429] EXT4-fs (loop4): orphan cleanup on readonly fs
[  130.116137][ T5429] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  130.131198][ T5429] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  130.137057][  T756] usb 4-1: USB disconnect, device number 47
[  130.138656][ T5429] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2917: inode #16: comm syz.4.2356: corrupted xattr block 31
[  130.157295][ T5429] EXT4-fs warning (device loop4): ext4_evict_inode:305: xattr delete (err -117)
[  130.166475][ T5429] EXT4-fs (loop4): 1 orphan inode deleted
[  130.172535][ T5429] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  130.254652][ T5441] IPv6: addrconf: prefix option has invalid lifetime
[  130.254833][ T5080] usb 1-1: Using ep0 maxpacket: 8
[  130.276229][  T293] usb 3-1: Using ep0 maxpacket: 32
[  130.393884][ T5080] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.404358][ T5080] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  130.490058][  T293] usb 3-1: unable to get BOS descriptor or descriptor too short
[  130.549718][ T5455] EXT4-fs (loop1): Test dummy encryption mode enabled
[  130.557022][ T5455] EXT4-fs (loop1): Test dummy encryption mode enabled
[  130.564211][ T5455] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.577641][ T5455] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,resuid=0x0000000000000000,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000
[  130.586319][  T293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.604815][ T1321] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  130.622852][ T5080] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  130.632261][ T5080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.640172][  T293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.640511][ T5080] usb 1-1: Product: syz
[  130.661087][ T5080] usb 1-1: Manufacturer: syz
[  130.665731][ T5080] usb 1-1: SerialNumber: syz
[  130.725270][ T5461] fuseblk: Bad value for 'source'
[  130.747152][ T5459] EXT4-fs (loop1): unable to read superblock
[  130.832184][  T293] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  130.841494][  T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.850382][  T293] usb 3-1: Product: syz
[  130.855999][  T293] usb 3-1: Manufacturer: syz
[  130.874602][  T293] usb 3-1: SerialNumber: syz
[  130.906996][ T1321] usb 5-1: Using ep0 maxpacket: 8
[  130.918317][  T293] usb 3-1: selecting invalid altsetting 1
[  131.056695][ T5080] usb 1-1: 1:1 : bogus bTerminalLink 7
[  131.076643][ T5489] EXT4-fs (loop3): VFS: Can't find ext4 filesystem
[  131.078119][ T5080] usb 1-1: unit 119 not found!
[  131.092884][ T5080] snd-usb-audio: probe of 1-1:1.2 failed with error -16
[  131.104226][ T5080] usb 1-1: USB disconnect, device number 46
[  131.156388][ T1319] usb 3-1: USB disconnect, device number 46
[  131.217099][ T1321] usb 5-1: New USB device found, idVendor=2b73, idProduct=001e, bcdDevice= 0.40
[  131.252692][ T1321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.280288][ T1321] usb 5-1: Product: syz
[  131.291354][ T1321] usb 5-1: Manufacturer: syz
[  131.302117][ T1321] usb 5-1: SerialNumber: syz
[  131.388030][  T293] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  131.689281][ T4616] print_req_error: 1633 callbacks suppressed
[  131.689298][ T4616] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.689534][ T1755] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.709453][ T4617] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.719781][ T1321] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  131.731893][ T4616] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  131.747102][  T336] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.764392][ T4615] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.776709][ T4616] buffer_io_error: 828 callbacks suppressed
[  131.776719][ T4616] Buffer I/O error on dev loop1p16, logical block 1, async page read
[  131.778245][  T455] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.784824][  T377] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.795620][ T1747] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.804740][  T755] blk_update_request: I/O error, dev loop1, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  131.815641][ T1319] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  131.828328][ T4401] Buffer I/O error on dev loop1p164, logical block 1, async page read
[  131.840747][ T4402] Buffer I/O error on dev loop1p165, logical block 1, async page read
[  131.847990][  T358] Buffer I/O error on dev loop1p160, logical block 1, async page read
[  131.869239][ T4617] Buffer I/O error on dev loop1p156, logical block 1, async page read
[  131.883731][ T4615] Buffer I/O error on dev loop1p157, logical block 1, async page read
[  131.891225][  T293] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1601, setting to 1024
[  131.892838][  T336] Buffer I/O error on dev loop1p153, logical block 1, async page read
[  131.904626][  T455] Buffer I/O error on dev loop1p162, logical block 1, async page read
[  131.912597][ T1321] usb 5-1: unit 5 not found!
[  131.921509][  T377] Buffer I/O error on dev loop1p161, logical block 1, async page read
[  131.926235][  T755] Buffer I/O error on dev loop1p163, logical block 1, async page read
[  131.944032][ T1321] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x200, wIndex = 0x600, type = 5
[  131.953903][ T1321] usb 5-1: 6:0: cannot get min/max values for control 2 (id 6)
[  131.976200][ T1321] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x200, wIndex = 0x600, type = 5
[  131.988646][ T1321] usb 5-1: USB disconnect, device number 48
[  132.020476][ T5520] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  132.113963][ T5520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002]
[  132.125737][  T293] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  132.140179][ T5520] System zones: 1-12
[  132.148156][  T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.164287][ T5520] EXT4-fs (loop2): orphan cleanup on readonly fs
[  132.170295][  T293] usb 2-1: Product: syz
[  132.177261][  T293] usb 2-1: Manufacturer: syz
[  132.199819][  T293] usb 2-1: SerialNumber: syz
[  132.240572][ T5520] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2398: bg 0: block 361: padding at end of block bitmap is not set
[  132.360945][ T1319] usb 4-1: unable to get BOS descriptor or descriptor too short
[  132.363916][ T5534] sit: Dst spoofed 0.0.0.0/400:: -> 255.255.255.255/2002::8000:0
[  132.400032][ T4616] udevd[4616]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.425481][ T5520] EXT4-fs (loop2): Remounting filesystem read-only
[  132.432359][ T5520] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  132.457181][ T1319] usb 4-1: not running at top speed; connect to a high speed hub
[  132.464375][ T5520] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.2398: invalid indirect mapped block 12 (level 1)
[  132.531355][ T5520] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #11: comm syz.2.2398: invalid indirect mapped block 2 (level 2)
[  132.545505][  T293] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  132.552980][ T5520] EXT4-fs (loop2): 1 truncate cleaned up
[  132.553380][ T1319] usb 4-1: config index 0 descriptor too short (expected 61365, got 181)
[  132.567929][ T1319] usb 4-1: config 1 has an invalid interface number: 1 but max is 0
[  132.571592][ T5520] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,inode_readahead_blks=0x0000000000000200,errors=remount-ro,init_itable
[  132.576196][ T1319] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.576209][ T1319] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 1
[  132.610704][  T293] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  132.638916][  T293] usb 2-1: unit 3 not found!
[  132.703070][ T1319] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  132.712850][ T1319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  132.721322][ T1319] usb 4-1: Product: syz
[  132.725508][ T1319] usb 4-1: Manufacturer: syz
[  132.736768][  T293] usb 2-1: USB disconnect, device number 45
[  132.778897][ T1319] uvcvideo: Found UVC 1.00 device syz (8086:0ad2)
[  132.785658][ T1319] uvcvideo: No streaming interface found for terminal 2.
[  132.786565][ T1319] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input12
[  132.842674][ T5532] F2FS-fs (loop0): fault_injection options not supported
[  133.137356][ T1321] usb 4-1: USB disconnect, device number 48
[  133.216162][  T756] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  133.333823][ T1319] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  133.397885][  T293] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  133.611699][ T5080] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  133.619941][ T1319] usb 5-1: Using ep0 maxpacket: 16
[  133.622434][  T756] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  133.634144][  T756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.644535][  T756] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  133.653533][  T756] usb 3-1: config 1 has no interface number 1
[  133.659750][  T756] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  133.672982][  T293] usb 2-1: Using ep0 maxpacket: 8
[  133.804226][  T293] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.814894][  T293] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  133.823869][  T293] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  133.854199][ T5577] fuse: Unknown parameter 'fscontext'
[  133.859935][  T756] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.868498][ T1319] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  133.869106][  T756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.880699][ T1319] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49591, setting to 1024
[  133.890227][  T756] usb 3-1: Product: syz
[  133.903576][  T756] usb 3-1: Manufacturer: syz
[  133.908197][  T756] usb 3-1: SerialNumber: syz
[  133.956843][ T5583] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  133.967135][ T5583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee02c, mo2=0002]
[  133.975319][ T5583] System zones: 1-12
[  133.979798][ T5583] EXT4-fs (loop3): orphan cleanup on readonly fs
[  133.986852][ T5583] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2427: bg 0: block 361: padding at end of block bitmap is not set
[  133.996627][  T293] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  134.001686][ T5583] EXT4-fs (loop3): Remounting filesystem read-only
[  134.010301][  T293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.010310][  T293] usb 2-1: Product: syz
[  134.010320][  T293] usb 2-1: Manufacturer: syz
[  134.010328][  T293] usb 2-1: SerialNumber: syz
[  134.038723][ T5583] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5650: Corrupt filesystem
[  134.047855][ T5583] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2427: invalid indirect mapped block 12 (level 1)
[  134.050051][ T5080] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.062607][ T5583] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #11: comm syz.3.2427: invalid indirect mapped block 2 (level 2)
[  134.072691][ T5080] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  134.086666][ T5583] EXT4-fs (loop3): 1 truncate cleaned up
[  134.095223][ T5080] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  134.101137][ T5583] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,max_dir_size_kb=0x00000000000000de,inode_readahead_blks=0x0000000000000200,errors=remount-ro,commit=0x0000000000000005
[  134.110049][ T5080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.137621][ T1319] usb 5-1: New USB device found, idVendor=1686, idProduct=00dd, bcdDevice= 0.40
[  134.147313][ T1319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.155758][ T1319] usb 5-1: Product: syz
[  134.160016][ T1319] usb 5-1: Manufacturer: ࠓ
[  134.164875][ T1319] usb 5-1: SerialNumber: syz
[  134.189578][ T5080] uvcvideo: Found UVC 1.00 device <unnamed> (0000:0000)
[  134.245758][ T5587] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300)
[  134.296237][  T756] usb 3-1: MIDIStreaming interface descriptor not found
[  134.306882][  T756] usb 3-1: USB disconnect, device number 47
[  134.316347][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  134.370819][  T293] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  134.379785][  T293] usb 2-1: clock source 0 is not valid, cannot use
[  134.402839][  T293] usb 2-1: 1:1: cannot get freq (v2/v3): err -71
[  134.410596][  T293] usb 2-1: 1:1: freq mismatch (RO clock): req 44100, clock runs @0
[  134.421124][  T293] usb 2-1: USB disconnect, device number 46
[  134.424179][ T5080] uvcvideo: Failed to query (GET_INFO) UVC control 10 on unit 1: -71 (exp. 1).
[  134.433468][ T5590]  loop3: p1 < > p2 p3 < p5 p6 > p4
[  134.442106][ T5590] loop3: partition table partially beyond EOD, truncated
[  134.449637][ T5590] loop3: p1 start 100663296 is beyond EOD, truncated
[  134.456766][ T5590] loop3: p2 size 134217732 extends beyond EOD, truncated
[  134.457281][ T5080] uvcvideo: Failed to query (GET_INFO) UVC control 11 on unit 1: -71 (exp. 1).
[  134.464897][ T5590] loop3: p4 size 14876672 extends beyond EOD, truncated
[  134.481194][ T5590] loop3: p5 size 134217732 extends beyond EOD, truncated
[  134.489222][ T5080] uvcvideo: Failed to query (GET_INFO) UVC control 12 on unit 1: -71 (exp. 1).
[  134.489612][ T5590] loop3: p6 size 14876672 extends beyond EOD, truncated
[  134.531109][ T5080] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[  134.563295][ T1319] usb 5-1: 1:1 : format type 0 is detected, processed as PCM
[  134.571087][ T1319] usb 5-1: 1:1 : sample bitwidth 255 in over sample bytes 3
[  134.578619][ T5080] uvcvideo: Failed to query (GET_INFO) UVC control 15 on unit 1: -71 (exp. 1).
[  134.588095][ T1319] usb 5-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  134.597934][  T755] udevd[755]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  134.608574][  T358] udevd[358]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  134.611563][  T336] udevd[336]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  134.619841][ T4402] udevd[4402]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  134.629295][ T4401] udevd[4401]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  134.638550][ T5080] uvcvideo: Failed to query (GET_INFO) UVC control 16 on unit 1: -71 (exp. 1).
[  134.657498][ T1319] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  134.664703][ T5080] uvcvideo: No valid video chain found.
[  134.674128][ T5080] usb 1-1: USB disconnect, device number 47
[  134.683199][ T1319] usb 5-1: USB disconnect, device number 49
[  134.894659][  T756] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  134.918648][  T377] udevd[377]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  134.946938][  T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  134.993209][  T755] udevd[755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  135.057876][ T5652] capability: warning: `syz.2.2459' uses deprecated v2 capabilities in a way that may be insecure
[  135.154987][ T5634]  loop1: p1 < > p4 < >
[  135.279548][  T756] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1601, setting to 1024
[  135.296531][ T5670] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  135.305145][ T5670] EXT4-fs (loop1): orphan cleanup on readonly fs
[  135.311975][ T5670] EXT4-fs warning (device loop1): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  135.322206][  T622] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  135.328039][ T5670] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  135.341369][ T5670] EXT4-fs error (device loop1): __ext4_iget:5034: inode #16: block 127754: comm syz.1.2468: invalid block
[  135.353443][ T5670] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2468: couldn't read orphan inode 16 (err -117)
[  135.366018][ T5670] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  135.407792][  T293] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  135.450574][  T367] usb 5-1: new low-speed USB device number 50 using dummy_hcd
[  135.471992][  T756] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 0.40
[  135.481074][  T756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.489820][  T756] usb 4-1: Product: syz
[  135.494204][  T756] usb 4-1: Manufacturer: syz
[  135.499015][  T756] usb 4-1: SerialNumber: syz
[  135.610896][  T622] usb 1-1: Using ep0 maxpacket: 16
[  135.664271][  T293] usb 3-1: Using ep0 maxpacket: 8
[  135.728464][ T1319] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  135.739177][  T622] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.749535][  T622] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  135.846138][  T293] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.853989][  T622] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  135.863386][  T622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  135.871688][  T622] usb 1-1: SerialNumber: syz
[  135.889052][  T756] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  135.895936][  T367] usb 5-1: unable to get BOS descriptor or descriptor too short
[  135.910658][  T622] cdc_acm 1-1:1.0: skipping garbage
[  135.918192][  T756] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  135.931668][  T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  135.942757][  T756] usb 4-1: unit 3 not found!
[  135.947663][  T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  135.957368][  T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  135.969156][  T756] usb 4-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0
[  135.979214][  T293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  135.989356][  T367] usb 5-1: config 3 has an invalid interface number: 67 but max is 0
[  135.999538][  T756] usb 4-1: USB disconnect, device number 49
[  136.006377][  T367] usb 5-1: config 3 has no interface number 0
[  136.012574][  T367] usb 5-1: config 3 interface 67 has no altsetting 0
[  136.019757][  T293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  136.031353][  T293] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 255
[  136.126437][   T20] usb 1-1: USB disconnect, device number 48
[  136.198846][ T1319] usb 2-1: unable to get BOS descriptor or descriptor too short
[  136.284378][  T367] usb 5-1: string descriptor 0 read error: -22
[  136.290778][  T367] usb 5-1: New USB device found, idVendor=13d3, idProduct=5103, bcdDevice=c8.28
[  136.300247][  T293] usb 3-1: string descriptor 0 read error: -22
[  136.306574][  T293] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  136.315900][  T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.316469][ T1319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  136.324463][  T367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.338723][ T1319] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  136.354801][  T293] usb 3-1: config 0 descriptor??
[  136.380691][ T5662] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  136.387904][ T5662] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  136.403843][  T367] uvcvideo: Found UVC 0.00 device <unnamed> (13d3:5103)
[  136.411209][  T367] uvcvideo: No valid video chain found.
[  136.540981][ T1319] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[  136.550062][ T1319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.558211][ T1319] usb 2-1: Product: syz
[  136.562406][ T1319] usb 2-1: Manufacturer: syz
[  136.567069][ T1319] usb 2-1: SerialNumber: syz
[  136.628190][ T1321] usb 3-1: USB disconnect, device number 48
[  136.636097][  T367] usb 5-1: USB disconnect, device number 50
[  136.658549][   T20] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  136.705033][ T5690] IPv6: addrconf: prefix option has invalid lifetime
[  136.979260][ T1319] usb 2-1: Can't get UAC3 power state for id 10
[  137.011334][   T53] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  137.011341][   T20] usb 4-1: not running at top speed; connect to a high speed hub
[  137.043436][ T1319] usb 2-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  137.053364][ T1319] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2)
[  137.065609][ T1319] usb 2-1: USB disconnect, device number 47
[  137.096862][   T20] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.107148][   T20] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  137.116386][   T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.161550][   T20] uvcvideo: Found UVC 1.00 device <unnamed> (046d:0825)
[  137.168656][   T20] uvcvideo: No streaming interface found for terminal 2.
[  137.237644][ T5702] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  137.254127][ T5702] EXT4-fs (loop4): ea_inode feature is not supported for Hurd
[  137.264862][ T5707] EXT4-fs (loop2): unsupported inode size: 9
[  137.271333][ T5707] EXT4-fs (loop2): blocksize: 4096
[  137.382918][   T20] usb 4-1: USB disconnect, device number 50
[  137.417611][   T53] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.433513][   T53] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  137.450249][ T5716] EXT4-fs (loop2): external journal device major/minor numbers have changed
[  137.460519][ T5716] EXT4-fs (loop2): failed to open journal device unknown-block(0,128) -6
[  137.462142][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  137.462155][   T24] audit: type=1400 audit(1793500935.866:202): avc:  denied  { read } for  pid=5724 comm="syz.4.2493" name="usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  137.499479][   T24] audit: type=1400 audit(1793500935.866:203): avc:  denied  { open } for  pid=5724 comm="syz.4.2493" path="/dev/usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  137.623613][   T53] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00
[  137.641583][   T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.650290][   T53] usb 1-1: Product: syz
[  137.654895][   T53] usb 1-1: Manufacturer: syz
[  137.659569][   T53] usb 1-1: SerialNumber: syz
[  137.677110][ T5749] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6)
[  137.686759][ T5749] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  137.696389][ T5749] EXT4-fs error (device loop4): ext4_acquire_dquot:6230: comm syz.4.2505: Failed to acquire dquot type 0
[  137.706709][   T53] usb 1-1: unsupported MDLM descriptors
[  137.708903][ T5749] EXT4-fs error (device loop4): mb_free_blocks:1540: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  137.728642][  T367] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  137.728884][ T5749] EXT4-fs (loop4): 1 truncate cleaned up
[  137.742461][ T5749] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  137.905233][   T24] audit: type=1400 audit(1793500936.268:204): avc:  denied  { create } for  pid=5757 comm="syz.4.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  137.930126][  T622] usb 1-1: USB disconnect, device number 49
[  138.001294][ T5768] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  138.008830][ T5768] EXT4-fs (loop2): Ignoring removed oldalloc option
[  138.015973][ T5768] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  138.026140][ T5768] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  138.035962][ T5768] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2846c01c, mo2=0002]
[  138.045590][ T5773] EXT4-fs (loop4): filesystem has both journal inode and journal device!
[  138.051420][ T5768] System zones: 0-2, 18-18, 34-34
[  138.059882][ T5768] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  138.068144][ T5768] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  138.077126][ T5768] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.2513: bad orphan inode 20829
[  138.087932][ T5768] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=continue,usrjquota=.,noinit_itable,nomblk_io_submit,grpquota,jqfmt=vfsold,oldalloc,grpjquota=.,bsddf,journal_dev=0x0000000000000006,,errors=continue
[  138.165902][  T367] usb 2-1: unable to get BOS descriptor or descriptor too short
[  138.251463][  T367] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping
[  138.265295][  T367] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.277937][  T367] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.315658][   T53] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  138.374598][   T24] audit: type=1326 audit(1793500936.708:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5817 comm="syz.4.2536" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020a694559 code=0x0
[  138.454578][  T367] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  138.467015][  T367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.476801][  T367] usb 2-1: Product: syz
[  138.481183][  T367] usb 2-1: Manufacturer: syz
[  138.486054][  T367] usb 2-1: SerialNumber: syz
[  138.566117][ T5820] F2FS-fs (loop2): Mismatch start address, segment0(0) cp_blkaddr(512)
[  138.588728][ T5820] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  138.597523][ T5820] F2FS-fs (loop2): fault_injection options not supported
[  138.604996][ T5820] F2FS-fs (loop2): fault_type options not supported
[  138.612682][ T5820] F2FS-fs (loop2): invalid crc value
[  138.619542][ T5820] F2FS-fs (loop2): Found nat_bits in checkpoint
[  138.640842][ T5820] F2FS-fs (loop2): Start checkpoint disabled!
[  138.648065][ T5820] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  138.655098][ T5820] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  138.689756][   T53] usb 4-1: not running at top speed; connect to a high speed hub
[  138.775278][  T622] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  138.786138][   T53] usb 4-1: config 6 has an invalid interface number: 6 but max is 0
[  138.794404][  T367] usb 2-1: USB disconnect, device number 48
[  138.796698][   T53] usb 4-1: config 6 has an invalid descriptor of length 174, skipping remainder of the config
[  138.811315][   T53] usb 4-1: config 6 has no interface number 0
[  138.812602][ T5852] EXT4-fs (loop2): Ignoring removed bh option
[  138.817627][   T53] usb 4-1: config 6 interface 6 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  138.830314][ T5852] EXT4-fs (loop2): old and new quota format mixing
[  138.837329][   T53] usb 4-1: config 6 interface 6 has no altsetting 0
[  138.892871][  T293] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  139.042508][  T622] usb 5-1: Using ep0 maxpacket: 16
[  139.117420][   T53] usb 4-1: string descriptor 0 read error: -22
[  139.123759][   T53] usb 4-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=b4.d9
[  139.132883][   T53] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.213615][ T1319] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  139.235046][  T622] usb 5-1: unable to get BOS descriptor or descriptor too short
[  139.320580][  T293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.330813][  T293] usb 1-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00
[  139.342114][  T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.342307][ T5859]  loop1: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215
[  139.351011][ T5859] loop1: p3 start 4284289 is beyond EOD, 
[  139.421264][   T53] usb 4-1: USB disconnect, device number 51
[  139.440914][ T5859] truncated
[  139.481255][  T293] cdc_acm: probe of 1-1:1.0 failed with error -22
[  139.488676][  T293] cdc_acm: probe of 1-1:1.1 failed with error -22
[  139.502229][ T1319] usb 3-1: Using ep0 maxpacket: 32
[  139.651922][  T622] usb 5-1: string descriptor 0 read error: -22
[  139.658220][  T622] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  139.667531][  T622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.669896][  T455] print_req_error: 864 callbacks suppressed
[  139.669911][  T455] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.677172][  T358] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.682900][  T455] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.694536][  T336] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.704814][ T1319] usb 3-1: unable to get BOS descriptor or descriptor too short
[  139.727398][  T756] usb 1-1: USB disconnect, device number 50
[  139.728813][  T377] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.737891][ T4402] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.744573][  T377] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  139.754558][  T755] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.766608][ T4617] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.789284][  T622] usb 5-1: 1:1 : bogus bTerminalLink 4
[  139.801781][ T4401] blk_update_request: I/O error, dev loop1, sector 226 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[  139.807334][ T4615] buffer_io_error: 433 callbacks suppressed
[  139.807346][ T4615] Buffer I/O error on dev loop1p11, logical block 8, async page read
[  139.820405][  T455] Buffer I/O error on dev loop1p5, logical block 8, async page read
[  139.825827][ T1747] Buffer I/O error on dev loop1p12, logical block 8, async page read
[  139.834012][  T358] Buffer I/O error on dev loop1p1, logical block 8, async page read
[  139.842615][ T1755] Buffer I/O error on dev loop1p13, logical block 8, async page read
[  139.849763][ T4401] Buffer I/O error on dev loop1p8, logical block 8, async page read
[  139.859189][ T4616] Buffer I/O error on dev loop1p14, logical block 8, async page read
[  139.866702][  T279] __loop_clr_fd: partition scan of loop1 failed (rc=-16)
[  139.885042][ T1755] Buffer I/O error on dev loop1p13, logical block 9, async page read
[  139.900398][ T1755] Buffer I/O error on dev loop1p13, logical block 10, async page read
[  139.901138][  T455] Buffer I/O error on dev loop1p5, logical block 9, async page read
[  139.940560][ T1319] usb 3-1: config 143 has an invalid interface number: 118 but max is 1
[  139.949235][ T1319] usb 3-1: config 143 has an invalid interface number: 60 but max is 1
[  139.958576][ T5866] tmpfs: Unsupported parameter 'mpol'
[  139.983305][  T622] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  139.997566][ T1319] usb 3-1: config 143 has no interface number 0
[  140.026233][  T622] usb 5-1: USB disconnect, device number 51
[  140.029678][ T1319] usb 3-1: config 143 has no interface number 1
[  140.132960][ T1319] usb 3-1: config 143 interface 118 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 16
[  140.177392][ T1319] usb 3-1: config 143 interface 118 has no altsetting 0
[  140.184566][ T1319] usb 3-1: config 143 interface 60 has no altsetting 0
[  140.443049][ T1319] usb 3-1: New USB device found, idVendor=19dc, idProduct=1f43, bcdDevice=35.c2
[  140.464803][ T5878] EXT4-fs (loop3): Unsupported blocksize for fs-verity
[  140.490721][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  140.494908][ T1319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.521075][ T1319] usb 3-1: Product: syz
[  140.525323][ T1319] usb 3-1: Manufacturer: syz
[  140.530714][ T1319] usb 3-1: SerialNumber: syz
[  140.535980][ T1319] usb 3-1: Interface #118 referenced by multiple IADs
[  140.543122][ T1319] usb 3-1: Interface #60 referenced by multiple IADs
[  140.560619][   T53] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  140.571388][ T5855] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  140.597063][ T5887] cgroup: release_agent respecified
[  140.631826][ T5897] EXT4-fs error (device loop4): ext4_quota_enable:6451: comm syz.4.2572: inode #768: comm syz.4.2572: iget: illegal inode #
[  140.645292][ T5897] EXT4-fs error (device loop4): ext4_quota_enable:6454: comm syz.4.2572: Bad quota inode: 768, type: 2
[  140.657072][ T5897] EXT4-fs warning (device loop4): ext4_enable_quotas:6495: Failed to enable quota tracking (type=2, err=-117, ino=768). Please run e2fsck to fix.
[  140.672621][ T5897] EXT4-fs (loop4): mount failed
[  140.805153][ T5919] tmpfs: Bad value for 'rootcontext'
[  140.817149][   T53] usb 2-1: Using ep0 maxpacket: 8
[  140.849574][ T1319] rndis_host 3-1:143.118: skipping garbage
[  140.855818][ T1319] usb 3-1: bad CDC descriptors
[  140.902697][  T756] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  140.906879][ T1319] usb 3-1: USB disconnect, device number 49
[  140.917616][ T5923] FAT-fs (loop4): bogus sectors per cluster 0
[  140.941142][ T5923] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code
[  140.966961][ T5923] FAT-fs (loop4): Can't find a valid FAT filesystem
[  140.988265][   T53] usb 2-1: unable to get BOS descriptor or descriptor too short
[  141.073807][   T53] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.330334][   T53] usb 2-1: string descriptor 0 read error: -22
[  141.336798][   T53] usb 2-1: New USB device found, idVendor=04b8, idProduct=0206, bcdDevice= 0.40
[  141.345893][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  141.351726][  T756] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.394484][ T5080] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  141.405151][  T622] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  141.458637][  T756] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 8.40
[  141.467713][  T756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  141.475951][  T756] usb 1-1: SerialNumber: syz
[  141.544502][  T756] cdc_ether 1-1:1.0: skipping garbage
[  141.549947][  T756] usb 1-1: bad CDC descriptors
[  141.564984][ T5933] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12
[  141.572850][ T5933] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  141.581261][ T5933] F2FS-fs (loop2): Not support 1, larger than 256
[  141.612583][   T53] usb 2-1: USB disconnect, device number 49
[  141.661913][  T622] usb 5-1: Using ep0 maxpacket: 8
[  141.763681][  T756] usb 1-1: USB disconnect, device number 51
[  141.854277][  T622] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.864429][  T622] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  141.877580][  T622] usb 5-1: too many endpoints for config 1 interface 0 altsetting 228: 36, using maximum allowed: 30
[  141.888581][  T622] usb 5-1: config 1 interface 0 altsetting 228 has 0 endpoint descriptors, different from the interface descriptor's value: 36
[  141.901890][  T622] usb 5-1: config 1 interface 0 has no altsetting 0
[  141.961131][ T5080] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  141.970345][ T5080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.978418][ T5080] usb 4-1: Product: syz
[  141.982830][ T5080] usb 4-1: Manufacturer: syz
[  141.987428][ T5080] usb 4-1: SerialNumber: syz
[  142.035921][  T293] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  142.100067][  T622] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.109154][  T622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.117211][  T622] usb 5-1: Product: syz
[  142.121577][  T622] usb 5-1: Manufacturer: syz
[  142.126171][  T622] usb 5-1: SerialNumber: syz
[  142.282256][ T5080] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  142.338656][ T5944]  loop1: p1[EZD] p3 p4
[  142.343612][ T5944] loop1: p1 size 67043332 extends beyond EOD, truncated
[  142.351514][ T5944] loop1: p3 start 33556736 is beyond EOD, truncated
[  142.358554][ T5944] loop1: p4 size 32769 extends beyond EOD, truncated
[  142.402757][ T5080] usb 4-1: USB disconnect, device number 52
[  142.421405][  T293] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 211, changing to 7
[  142.464429][  T622] cdc_ether: probe of 5-1:1.0 failed with error -22
[  142.476572][  T622] usb 5-1: USB disconnect, device number 52
[  142.498941][  T377] udevd[377]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  142.499134][  T358] udevd[358]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  142.602536][  T293] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  142.611818][  T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.620089][  T293] usb 3-1: Product: syz
[  142.624297][  T293] usb 3-1: Manufacturer: syz
[  142.629198][  T293] usb 3-1: SerialNumber: syz
[  142.634757][ T1319] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  142.643559][  T455] udevd[455]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  142.752181][   T53] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  143.008829][   T53] usb 2-1: Using ep0 maxpacket: 8
[  143.062199][ T5080] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  143.062208][  T293] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  143.094377][ T1319] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.115719][  T293] usb 3-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[  143.124524][  T293] usb 3-1: found format II with max.bitrate = 1, frame size=2
[  143.137184][ T1319] usb 1-1: not running at top speed; connect to a high speed hub
[  143.158531][  T293] usb 3-1: 2:1 : unknown format tag 0x1 is detected.  processed as MPEG.
[  143.167225][  T293] usb 3-1: found format II with max.bitrate = 1, frame size=2
[  143.211913][  T293] usb 3-1: 2:1: cannot set freq 8846414 to ep 0x82
[  143.222631][   T53] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.232982][ T1319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.243122][   T53] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  143.252403][ T1319] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  143.255107][  T756] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  143.261541][   T53] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  143.279267][  T293] usb 3-1: USB disconnect, device number 50
[  143.282279][ T1319] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  143.468579][   T53] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.477954][ T1319] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  143.487227][ T1319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.495710][   T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.504000][ T5080] usb 4-1: unable to get BOS descriptor or descriptor too short
[  143.512231][ T1319] usb 1-1: Product: syz
[  143.516660][ T1319] usb 1-1: Manufacturer: syz
[  143.521283][ T1319] usb 1-1: SerialNumber: syz
[  143.526309][   T53] usb 2-1: Product: syz
[  143.530647][   T53] usb 2-1: Manufacturer: syz
[  143.535650][   T53] usb 2-1: SerialNumber: syz
[  143.576191][   T53] cdc_ncm 2-1:1.0: bind() failure
[  143.618209][ T5080] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  143.703704][  T756] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1601, setting to 1024
[  143.800061][ T5080] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  143.800453][   T20] usb 2-1: USB disconnect, device number 50
[  143.809321][ T5080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.823817][ T5080] usb 4-1: Product: syz
[  143.828080][ T5080] usb 4-1: Manufacturer: 
[  143.831934][  T293] usb 3-1: new low-speed USB device number 51 using dummy_hcd
[  143.833112][ T5080] usb 4-1: SerialNumber: syz
[  143.866102][ T1319] usb 1-1: USB disconnect, device number 52
[  143.896153][  T756] usb 5-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  143.905360][  T756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.913770][  T756] usb 5-1: Product: syz
[  143.918250][  T756] usb 5-1: Manufacturer: syz
[  143.922944][  T756] usb 5-1: SerialNumber: syz
[  144.088868][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  144.131905][ T5080] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  144.152688][ T5080] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  144.185777][ T5080] usb 4-1: USB disconnect, device number 53
[  144.249460][  T756] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  144.270331][  T756] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  144.302400][  T756] usb 5-1: unit 3 not found!
[  144.323752][  T293] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 512, setting to 8
[  144.334572][  T756] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x600, type = 0
[  144.344620][  T293] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.357743][  T293] usb 3-1: config 1 interface 0 has no altsetting 0
[  144.420617][ T5975] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  144.427060][  T756] usb 5-1: USB disconnect, device number 53
[  144.444616][ T5975] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.2608: lblock 2 mapped to illegal pblock 2 (length 1)
[  144.459483][ T5975] EXT4-fs (loop1): Remounting filesystem read-only
[  144.466607][ T5975] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  144.474776][ T5975] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.2608: Invalid inode table block 1 in block_group 0
[  144.487735][ T5975] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[  144.497583][ T5975] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #3: comm syz.1.2608: mark_inode_dirty error
[  144.509981][ T5975] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  144.518844][ T5975] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.2608: Failed to acquire dquot type 0
[  144.530938][ T5975] EXT4-fs (loop1): 1 orphan inode deleted
[  144.537311][ T5975] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000008c9,errors=remount-ro,dioread_nolock,
[  144.563103][  T279] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0
[  144.576627][  T279] EXT4-fs (loop1): Remounting filesystem read-only
[  144.583371][  T279] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[  144.593392][  T279] EXT4-fs error (device loop1): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error
[  144.612389][  T293] usb 3-1: string descriptor 0 read error: -22
[  144.618899][  T293] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.40
[  144.628026][  T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.644418][ T1319] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  144.655567][  T358] udevd[358]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  144.655609][ T5967] raw-gadget.4 gadget: fail, usb_ep_enable returned -22
[  144.696425][ T5979] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.2609: casefold flag without casefold feature
[  144.709523][ T5979] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.2609: couldn't read orphan inode 15 (err -117)
[  144.721981][ T5979] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,,errors=continue
[  144.742951][ T5983] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  144.982727][ T5987] F2FS-fs (loop1): Fix alignment : done, start(4096) end(16896) block(12288)
[  144.992000][ T5989] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  144.997985][ T5987] F2FS-fs (loop1): invalid crc value
[  145.015293][ T5987] F2FS-fs (loop1): invalid crc value
[  145.020802][ T5987] F2FS-fs (loop1): Failed to get valid F2FS checkpoint
[  145.029639][ T5996] EXT4-fs (loop3): Unsupported blocksize for fs-verity
[  145.050713][  T293] usbhid 3-1:1.0: can't add hid device: -71
[  145.050727][ T1319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 104, changing to 10
[  145.050753][ T1319] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1104, setting to 1024
[  145.056852][  T293] usbhid: probe of 3-1:1.0 failed with error -71
[  145.069053][ T1319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  145.084291][  T293] usb 3-1: USB disconnect, device number 51
[  145.090287][ T1319] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  145.286069][ T1319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.295172][ T1319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.303282][ T1319] usb 1-1: Product: syz
[  145.307576][ T1319] usb 1-1: Manufacturer: syz
[  145.312446][ T1319] usb 1-1: SerialNumber: syz
[  145.339389][ T5969] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  145.367713][ T6003] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  145.554441][ T6010] EXT4-fs (loop1): Unsupported blocksize for fs-verity
[  145.612172][ T6012]  loop4: p4 < >
[  145.617577][ T1319] cdc_ncm 1-1:1.0: bind() failure
[  145.623418][ T1319] cdc_ncm 1-1:1.1: bind() failure
[  145.630198][ T1319] usb 1-1: USB disconnect, device number 53
[  145.727929][ T6019] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  145.735903][ T6019] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  145.735903][ T6019] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  145.735903][ T6019] 
[  145.754922][ T6019] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  145.765492][ T6019] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  145.775772][ T6019] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  145.786420][ T6019] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  145.794554][ T6019] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c000a01c, mo2=0000]
[  145.802962][ T6019] EXT4-fs (loop3): orphan cleanup on readonly fs
[  145.814093][ T6019] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2620: bg 0: block 34: padding at end of block bitmap is not set
[  145.828654][ T6019] Quota error (device loop3): write_blk: dquota write failed
[  145.836240][ T6019] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  145.846301][ T6019] EXT4-fs error (device loop3): ext4_acquire_dquot:6230: comm syz.3.2620: Failed to acquire dquot type 1
[  145.866030][  T358] udevd[358]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  145.884416][ T6019] EXT4-fs (loop3): 1 truncate cleaned up
[  145.890977][ T6019] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nomblk_io_submit,nodioread_nolock,nouser_xattr,,errors=continue
[  145.986140][ T6027] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[  146.162506][ T1319] usb 2-1: new full-speed USB device number 51 using dummy_hcd
[  146.558110][ T1319] usb 2-1: config 0 has an invalid interface number: 231 but max is 0
[  146.568709][  T756] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  146.577348][ T1319] usb 2-1: config 0 has no interface number 0
[  146.583583][ T1319] usb 2-1: too many endpoints for config 0 interface 231 altsetting 0: 116, using maximum allowed: 30
[  146.605845][ T1319] usb 2-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  146.627719][ T1319] usb 2-1: config 0 interface 231 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 116
[  146.696981][ T5080] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  146.814625][ T1319] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  146.845515][ T1319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.867044][ T1319] usb 2-1: Product: syz
[  146.877806][ T1319] usb 2-1: Manufacturer: syz
[  146.899359][ T1319] usb 2-1: SerialNumber: syz
[  146.910590][ T1319] usb 2-1: config 0 descriptor??
[  146.942944][ T6024] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.962479][ T6051] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0)
[  146.972968][ T1319] hub 2-1:0.231: bad descriptor, ignoring hub
[  146.988975][ T1319] hub: probe of 2-1:0.231 failed with error -5
[  146.996573][  T756] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.005842][ T1319] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 3e:9d:4c:d1:63:1c
[  147.007009][ T6051] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  147.036342][   T24] audit: type=1400 audit(1793500944.814:206): avc:  denied  { read } for  pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  147.068084][  T756] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  147.082976][   T24] audit: type=1400 audit(1793500944.832:207): avc:  denied  { search } for  pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.104925][ T6051] F2FS-fs (loop2): invalid crc value
[  147.115353][   T24] audit: type=1400 audit(1793500944.832:208): avc:  denied  { read } for  pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=13676 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  147.124636][ T5080] usb 4-1: unable to get BOS descriptor or descriptor too short
[  147.144923][   T24] audit: type=1400 audit(1793500944.832:209): avc:  denied  { open } for  pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=13676 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  147.169585][ T6051] F2FS-fs (loop2): Found nat_bits in checkpoint
[  147.199534][ T5080] usb 4-1: not running at top speed; connect to a high speed hub
[  147.199579][   T24] audit: type=1400 audit(1793500944.832:210): avc:  denied  { getattr } for  pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=13676 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  147.235721][   T24] audit: type=1400 audit(1793500944.879:211): avc:  denied  { read } for  pid=6060 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=417 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  147.259243][ T6051] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  147.266698][ T6051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  147.274374][  T756] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  147.283517][  T756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  147.292150][  T756] usb 5-1: Product: syz
[  147.302314][  T756] usb 5-1: Manufacturer: syz
[  147.317226][  T651] usb 2-1: USB disconnect, device number 51
[  147.324408][  T651] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  147.456157][ T5080] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  147.472911][ T5080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.488287][ T5080] usb 4-1: Product: syz
[  147.494021][ T5080] usb 4-1: Manufacturer: syz
[  147.498856][ T5080] usb 4-1: SerialNumber: syz
[  147.590752][  T756] usb 5-1: USB disconnect, device number 54
[  147.855389][ T5080] usb 4-1: USB disconnect, device number 54
[  147.883628][  T293] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  148.109819][  T755] udevd[755]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  148.279315][  T293] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.290432][  T293] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  148.301605][ T6094] F2FS-fs (loop1): Found nat_bits in checkpoint
[  148.330216][ T6094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  148.343449][   T53] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  148.460949][  T756] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  148.471788][  T293] usb 3-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40
[  148.481319][  T293] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.489717][  T293] usb 3-1: Product: syz
[  148.494172][  T293] usb 3-1: Manufacturer: syz
[  148.498843][  T293] usb 3-1: SerialNumber: syz
[  148.653387][  T651] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  148.792405][   T53] usb 1-1: unable to get BOS descriptor or descriptor too short
[  148.814394][   T20] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[  148.867338][  T756] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.877724][  T756] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  148.877943][   T53] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.901514][   T53] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  148.910528][   T53] usb 1-1: config 1 interface 0 has no altsetting 0
[  148.917562][   T53] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00
[  148.920699][  T293] usb 3-1: 0:1 : does not exist
[  148.926770][   T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.952979][  T293] usb 3-1: unable to issue vendor read request (ret = -71)
[  148.974228][  T756] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.975103][   T53] uvcvideo: Found UVC 0.00 device <unnamed> (8086:0ad2)
[  148.983509][  T293] usb 3-1: unable to issue vendor read request (ret = -71)
[  148.990684][   T53] uvcvideo: No valid video chain found.
[  148.998034][  T756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  149.011713][  T756] usb 5-1: SerialNumber: syz
[  149.038297][  T293] usb 3-1: unable to issue vendor read request (ret = -71)
[  149.038329][  T651] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.056060][  T651] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  149.067016][  T651] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.070696][  T293] usb 3-1: unable to issue vendor read request (ret = -71)
[  149.094786][  T293] usb 3-1: USB disconnect, device number 52
[  149.214948][  T622] usb 1-1: USB disconnect, device number 54
[  149.241438][   T20] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  149.241450][  T651] usb 4-1: New USB device found, idVendor=0582, idProduct=0145, bcdDevice= 0.40
[  149.241467][  T651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.249749][   T20] usb 2-1: config 0 has no interface number 0
[  149.258922][  T651] usb 4-1: Product: syz
[  149.277638][  T651] usb 4-1: Manufacturer: syz
[  149.282327][  T651] usb 4-1: SerialNumber: syz
[  149.287414][   T20] usb 2-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  149.297371][   T20] usb 2-1: config 0 interface 41 has no altsetting 0
[  149.305661][ T6113] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  149.327203][  T756] cdc_ether 5-1:1.0: More than one union descriptor, skipping ...
[  149.335126][  T756] usb 5-1: bad CDC descriptors
[  149.346915][  T756] usb 5-1: USB disconnect, device number 55
[  149.498024][   T20] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  149.507322][   T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.515530][   T20] usb 2-1: Product: syz
[  149.519734][   T20] usb 2-1: Manufacturer: syz
[  149.524340][   T20] usb 2-1: SerialNumber: syz
[  149.529794][   T20] usb 2-1: config 0 descriptor??
[  149.594631][   T20] CoreChips: probe of 2-1:0.41 failed with error -22
[  149.676904][ T6151] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2661'.
[  149.686303][ T6151] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2661'.
[  149.711854][  T651] usb 4-1: MIDIStreaming interface descriptor not found
[  149.722689][  T651] usb 4-1: USB disconnect, device number 55
[  149.783130][ T6163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2666'.
[  149.792829][ T6163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2666'.
[  149.835454][ T1319] usb 2-1: USB disconnect, device number 52
[  149.842734][   T24] kauditd_printk_skb: 18 callbacks suppressed
[  149.842745][   T24] audit: type=1400 audit(1793500947.442:230): avc:  denied  { write } for  pid=6170 comm="syz.0.2671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  149.875545][   T24] audit: type=1326 audit(1793500947.470:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  149.903474][   T24] audit: type=1326 audit(1793500947.470:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  149.938669][   T24] audit: type=1326 audit(1793500947.526:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  149.984019][ T6191] syz.0.2680 uses obsolete (PF_INET,SOCK_PACKET)
[  149.997717][   T24] audit: type=1326 audit(1793500947.536:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  150.024625][   T24] audit: type=1326 audit(1793500947.554:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  150.029712][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2686'.
[  150.052449][   T24] audit: type=1326 audit(1793500947.554:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  150.087815][ T6201] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2686'.
[  150.091702][   T24] audit: type=1326 audit(1793500947.554:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  150.124741][   T24] audit: type=1326 audit(1793500947.554:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  150.126901][ T6201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  150.152202][   T24] audit: type=1326 audit(1793500947.554:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6172 comm="syz.2.2673" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2b5f7ce559 code=0x7ffc0000
[  150.312728][ T6241] netlink: 'syz.0.2706': attribute type 11 has an invalid length.
[  150.322794][ T6241] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2706'.
[  150.362561][ T6255] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2713'.
[  150.373770][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.408020][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'.
[  150.513553][  T622] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  150.689439][ T6354] netlink: 'syz.2.2762': attribute type 15 has an invalid length.
[  150.716776][ T6354] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.770794][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2765'.
[  150.850284][ T6375] xt_hashlimit: max too large, truncated to 1048576
[  150.905221][ T6389] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  151.135255][ T6423] FAT-fs (loop1): Directory bread(block 64) failed
[  151.239268][ T6423] FAT-fs (loop1): Directory bread(block 65) failed
[  151.246549][ T6423] FAT-fs (loop1): Directory bread(block 66) failed
[  151.253305][ T6431] tc_dump_action: action bad kind
[  151.263208][ T6423] FAT-fs (loop1): Directory bread(block 67) failed
[  151.272780][  T622] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  151.283517][  T622] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.291609][  T622] usb 4-1: Manufacturer: ᐁ
[  151.300815][ T6423] FAT-fs (loop1): Directory bread(block 68) failed
[  151.309314][ T6423] FAT-fs (loop1): Directory bread(block 69) failed
[  151.316839][  T622] usb 4-1: SerialNumber: Ⰱ
[  151.329488][ T6423] FAT-fs (loop1): Directory bread(block 70) failed
[  151.336332][ T6423] FAT-fs (loop1): Directory bread(block 71) failed
[  151.345599][ T6423] FAT-fs (loop1): Directory bread(block 72) failed
[  151.352897][ T6423] FAT-fs (loop1): Directory bread(block 73) failed
[  151.543316][ T6466] IPv6: NLM_F_CREATE should be specified when creating new route
[  151.595907][ T6477] device xfrm0 entered promiscuous mode
[  151.711011][  T622] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  151.732306][  T622] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  151.767455][  T622] usb 4-1: USB disconnect, device number 56
[  151.981307][ T6523] xt_time: invalid argument - start or stop time greater than 23:59:59
[  151.990624][ T6337] F2FS-fs (loop4): Found nat_bits in checkpoint
[  152.074930][ T6337] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  152.096012][ T6545] exfat: Deprecated parameter 'namecase'
[  152.101713][ T6545] exfat: Deprecated parameter 'utf8'
[  152.127902][ T6545] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  152.135048][ T6552] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  152.206627][ T6564] SELinux:  policydb magic number 0x10 does not match expected magic number 0xf97cff8c
[  152.214001][ T6568] xt_NFQUEUE: number of total queues is 0
[  152.232537][ T6564] SELinux: failed to load policy
[  152.728863][ T6660] netlink: 'syz.0.2908': attribute type 16 has an invalid length.
[  152.749276][ T6660] netlink: 'syz.0.2908': attribute type 17 has an invalid length.
[  152.779648][ T6660] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.795663][ T6660] device xfrm0 left promiscuous mode
[  152.830647][ T6677] binfmt_misc: register: failed to install interpreter file ./mnt
[  152.856427][ T6683] netlink: 'syz.0.2920': attribute type 4 has an invalid length.
[  153.017718][ T6728] xt_CT: You must specify a L4 protocol and not use inversions on it
[  153.103892][ T6759] netlink: 'syz.0.2956': attribute type 32 has an invalid length.
[  153.112040][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  153.120615][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  153.129050][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  153.141301][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.150328][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.159217][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.167916][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.176720][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.378761][ T1319] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  153.403141][ T6833] SELinux: security_context_str_to_sid(user_u) failed for (dev bpf, type bpf) errno=-22
[  153.466775][ T6849] netlink: 'syz.0.3002': attribute type 2 has an invalid length.
[  153.606135][ T6884] kernel read not supported for file /policy (pid: 6884 comm: syz.3.3018)
[  153.675464][ T6910] netlink: 'syz.2.3033': attribute type 11 has an invalid length.
[  153.763550][ T1319] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.784065][ T1319] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  153.802810][ T1319] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  153.831342][ T1319] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  153.927827][ T6902] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  153.929083][ T6946] xt_hashlimit: overflow, try lower: 3/0
[  153.940399][ T6902] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  153.961338][ T6902] F2FS-fs (loop0): invalid crc value
[  153.966863][ T1319] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  153.978004][ T6902] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  153.990337][ T1319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  153.998872][ T1319] usb 5-1: Product: syz
[  154.003281][ T1319] usb 5-1: Manufacturer: syz
[  154.036976][ T6902] F2FS-fs (loop0): Start checkpoint disabled!
[  154.043948][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.051618][ T6962] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  154.051630][ T6902] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  154.051649][ T6902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  154.228671][ T6980] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables
[  154.255232][  T367] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  154.303652][ T6986] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  154.312179][ T6986] EXT4-fs (loop1): orphan cleanup on readonly fs
[  154.320204][ T6986] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3066: bg 0: block 10: padding at end of block bitmap is not set
[  154.334770][ T6986] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3066: Failed to acquire dquot type 0
[  154.346630][ T6986] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3066: Failed to acquire dquot type 0
[  154.358349][ T6986] EXT4-fs error (device loop1): ext4_free_blocks:5690: comm syz.1.3066: Freeing blocks not in datazone - block = 0, count = 4096
[  154.372402][ T6986] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.3066: Failed to acquire dquot type 0
[  154.384571][ T6986] EXT4-fs (loop1): 1 orphan inode deleted
[  154.391614][ T6986] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[  154.480189][ T7013] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  154.650842][  T367] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  154.659831][  T367] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  154.670015][  T367] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  154.679092][  T367] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  154.698200][  T367] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.749633][  T367] uvcvideo: Found UVC 71.01 device <unnamed> (0000:0000)
[  154.759800][  T367] uvcvideo: No streaming interface found for terminal 2.
[  154.792899][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.793050][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.952264][ T7054] xt_hashlimit: max too large, truncated to 1048576
[  154.967131][  T367] usb 3-1: USB disconnect, device number 53
[  155.003748][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.093284][ T7076] __nla_validate_parse: 164 callbacks suppressed
[  155.093294][ T7076] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3110'.
[  155.116323][ T7076] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3110'.
[  155.128354][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'.
[  155.137415][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'.
[  155.266464][ T7091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  155.275746][ T7091] ext4 filesystem being mounted at /626/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.290558][ T7091] EXT4-fs warning (device loop3): ext4_group_extend:1829: will only finish group (16384 blocks, 16256 new)
[  155.302785][ T7091] EXT4-fs warning (device loop3): ext4_group_extend:1834: can't read last block, resize aborted
[  155.421092][ T7108] exfat: Deprecated parameter 'utf8'
[  155.426949][ T7108] exfat: Deprecated parameter 'utf8'
[  155.432574][ T7108] exfat: Deprecated parameter 'namecase'
[  155.521249][ T7108] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  155.623902][ T7106] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  155.648621][ T7106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  155.656015][   T24] kauditd_printk_skb: 72 callbacks suppressed
[  155.656028][   T24] audit: type=1400 audit(2000000001.010:303): avc:  denied  { ioctl } for  pid=7119 comm="syz.2.3129" path="socket:[34482]" dev="sockfs" ino=34482 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  155.676260][ T7106] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.730481][ T7106] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  155.739703][ T7106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.781808][   T24] audit: type=1400 audit(2000000001.113:304): avc:  denied  { append } for  pid=7137 comm="syz.2.3137" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  155.816594][   T24] audit: type=1400 audit(2000000001.150:305): avc:  denied  { getopt } for  pid=7143 comm="syz.2.3139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  155.849665][   T24] audit: type=1400 audit(2000000001.159:306): avc:  denied  { append } for  pid=7145 comm="syz.2.3141" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  155.986283][   T24] audit: type=1400 audit(2000000001.309:307): avc:  denied  { write } for  pid=7169 comm="syz.3.3151" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  156.074137][ T7188] xt_policy: output policy not valid in PREROUTING and INPUT
[  156.085789][   T24] audit: type=1400 audit(2000000001.403:308): avc:  denied  { setcheckreqprot } for  pid=7189 comm="syz.2.3161" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  156.085798][ T7190] SELinux: syz.2.3161 (7190) set checkreqprot to 1. This is deprecated and will be rejected in a future kernel release.
[  156.160227][ T7198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'.
[  156.177588][   T24] audit: type=1400 audit(2000000001.487:309): avc:  denied  { bind } for  pid=7201 comm="syz.1.3168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  156.197847][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  156.211126][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.222403][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  156.230559][   T24] audit: type=1400 audit(2000000001.496:310): avc:  denied  { ioctl } for  pid=7199 comm="syz.0.3167" path="uts:[4026532451]" dev="nsfs" ino=4026532451 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  156.256013][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.256246][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.258258][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.283131][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.292353][ T4922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.306093][ T7219] device bridge_slave_0 left promiscuous mode
[  156.312750][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.314254][ T5080] usb 5-1: USB disconnect, device number 56
[  156.330014][ T7219] device bridge_slave_1 left promiscuous mode
[  156.336298][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.352998][ T7227] tc_dump_action: action bad kind
[  156.490993][   T24] audit: type=1400 audit(2000000001.786:311): avc:  denied  { write } for  pid=7266 comm="syz.1.3200" path="socket:[34762]" dev="sockfs" ino=34762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  156.535303][   T24] audit: type=1400 audit(2000000001.814:312): avc:  denied  { read } for  pid=7276 comm="syz.1.3205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  156.651356][ T7316] x_tables: duplicate entry at hook 3
[  156.711141][ T7334] device bridge1 entered promiscuous mode
[  156.788063][ T7344] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue
[  156.800918][ T7356] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  156.819175][ T7344] ext4 filesystem being mounted at /661/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  156.999326][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3253'.
[  157.066539][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3259'.
[  157.327774][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3277'.
[  157.492763][ T7446] bridge0: port 3(gretap0) entered blocking state
[  157.509860][ T7446] bridge0: port 3(gretap0) entered disabled state
[  157.533544][ T7446] device gretap0 entered promiscuous mode
[  157.547524][ T7446] bridge0: port 3(gretap0) entered blocking state
[  157.554042][ T7446] bridge0: port 3(gretap0) entered forwarding state
[  157.641059][ T7341] F2FS-fs (loop0): Invalid segment/section count (458783, 24 x 150994945)
[  157.654248][ T7341] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  157.676712][ T7341] F2FS-fs (loop0): invalid crc value
[  157.701795][ T7341] F2FS-fs (loop0): Found nat_bits in checkpoint
[  157.778094][ T7341] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  157.785250][ T7341] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  158.081470][ T7516] device bridge1 left promiscuous mode
[  158.166769][ T7530] x_tables: duplicate entry at hook 2
[  158.303283][ T7557] EXT4-fs (loop2): Ignoring removed oldalloc option
[  158.328627][ T7557] EXT4-fs (loop2): Ignoring removed orlov option
[  158.370213][ T7557] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,oldalloc,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,resuid=0x0000000000000000,,errors=continue
[  158.391873][ T7589] binder: 7581:7589 ioctl c0046209 9999999999999999 returned -22
[  158.436811][ T7557] EXT4-fs error (device loop2): ext4_iget_extra_inode:4692: inode #12: comm syz.2.3339: corrupted in-inode xattr
[  158.458160][ T7597] EXT4-fs (loop0): 1 truncate cleaned up
[  158.463948][ T7597] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,
[  158.493682][ T7611] bridge3: the hash_elasticity option has been deprecated and is always 16
[  158.858788][ T7646] netlink: 'syz.4.3379': attribute type 9 has an invalid length.
[  158.885414][ T7649] netlink: 'syz.3.3381': attribute type 46 has an invalid length.
[  158.900917][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3381'.
[  158.971762][ T7672] TCP: TCP_TX_DELAY enabled
[  159.076098][ T7678] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,
[  159.349876][ T7687] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.402723][ T7716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3410'.
[  159.840419][ T7805] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,
[  159.867665][ T7805] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.3455: path /723/file1: bad entry in directory: inode out of bounds - offset=0, inode=622082, rec_len=12, size=2048 fake=1
[  159.896942][ T7805] EXT4-fs (loop3): Remounting filesystem read-only
[  159.915776][ T7840] SELinux:  policydb string length 0 does not match expected length 8
[  159.928654][ T7840] SELinux: failed to load policy
[  159.951569][ T7848] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  159.985520][ T7846] netlink: 'syz.3.3473': attribute type 5 has an invalid length.
[  160.129078][ T7890] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  160.160587][ T7890] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000003,noinit_itable,noblock_validity,nouid32,dioread_nolock,nodiscard,sysvgroups,jqfmt=vfsold,minixdf,auto_da_alloc=0x0000000000000800,,errors=continue
[  160.213880][ T7890] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  160.236762][ T7926] x_tables: duplicate entry at hook 3
[  160.283736][ T7890] EXT4-fs (loop4): re-mounted. Opts: (null)
[  160.325266][ T7943] IPv6: NLM_F_CREATE should be specified when creating new route
[  160.357822][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.449875][ T7963] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[  160.465917][ T7963] EXT4-fs error (device loop0): ext4_find_extent:928: inode #2: comm syz.0.3532: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  160.626518][ T8010] usb usb8: usbfs: process 8010 (syz.1.3555) did not claim interface 0 before use
[  160.670249][ T8030] xt_hashlimit: size too large, truncated to 1048576
[  160.677473][ T8030] xt_hashlimit: max too large, truncated to 1048576
[  160.696108][ T8036] netlink: 'syz.0.3567': attribute type 27 has an invalid length.
[  160.743735][ T8051] usb usb7: usbfs: process 8051 (syz.3.3576) did not claim interface 0 before use
[  160.759469][ T8059] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  160.783079][ T8061] netlink: 'syz.3.3580': attribute type 7 has an invalid length.
[  160.796300][ T8061] netlink: 'syz.3.3580': attribute type 5 has an invalid length.
[  160.804350][ T8061] __nla_validate_parse: 2 callbacks suppressed
[  160.804423][ T8061] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3580'.
[  160.945049][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3598'.
[  160.969741][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3598'.
[  161.088648][ T8120] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[  161.110573][ T8120] ext4 filesystem being mounted at /754/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.143542][   T24] kauditd_printk_skb: 130 callbacks suppressed
[  161.143555][   T24] audit: type=1400 audit(2000000006.134:443): avc:  denied  { remove_name } for  pid=8118 comm="syz.3.3609" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  161.172725][   T24] audit: type=1400 audit(2000000006.134:444): avc:  denied  { rename } for  pid=8118 comm="syz.3.3609" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  161.213386][   T24] audit: type=1400 audit(2000000006.200:445): avc:  denied  { mount } for  pid=8142 comm="syz.4.3620" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  161.239225][   T24] audit: type=1400 audit(2000000006.228:446): avc:  denied  { unmount } for  pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  161.343273][   T24] audit: type=1400 audit(2000000006.312:447): avc:  denied  { mmap_zero } for  pid=8159 comm="syz.1.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1
[  161.373347][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3633'.
[  161.405321][   T24] audit: type=1400 audit(2000000006.312:448): avc:  denied  { create } for  pid=8165 comm="syz.0.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  161.452126][   T24] audit: type=1400 audit(2000000006.312:449): avc:  denied  { setopt } for  pid=8165 comm="syz.0.3631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  161.482811][ T8191] exfat: Deprecated parameter 'utf8'
[  161.488182][ T8191] exfat: Deprecated parameter 'utf8'
[  161.493947][ T8191] exfat: Deprecated parameter 'namecase'
[  161.499714][ T8191] exfat: Deprecated parameter 'namecase'
[  161.505413][ T8191] exfat: Deprecated parameter 'namecase'
[  161.548641][ T8198] tc_dump_action: action bad kind
[  161.583163][   T24] audit: type=1400 audit(2000000006.546:450): avc:  denied  { create } for  pid=8205 comm="syz.1.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  161.583250][ T8191] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  161.619241][   T24] audit: type=1400 audit(2000000006.574:451): avc:  denied  { ioctl } for  pid=8205 comm="syz.1.3650" path="socket:[38269]" dev="sockfs" ino=38269 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  161.644403][   T24] audit: type=1400 audit(2000000006.574:452): avc:  denied  { mount } for  pid=8190 comm="syz.0.3643" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  161.650352][ T8214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.130889][ T8239] ip6t_REJECT: ECHOREPLY is not supported
[  162.137253][ T8228] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d)
[  162.212752][ T8258] netlink: 3620 bytes leftover after parsing attributes in process `syz.0.3676'.
[  162.256608][ T8268] netlink: 'syz.0.3680': attribute type 3 has an invalid length.
[  162.269446][ T8268] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3680'.
[  162.417660][ T8293] netlink: 'syz.0.3693': attribute type 30 has an invalid length.
[  162.487077][ T5080] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  162.597853][ T8324] netlink: 'syz.4.3708': attribute type 29 has an invalid length.
[  162.609047][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'.
[  162.627332][ T8324] netlink: 'syz.4.3708': attribute type 29 has an invalid length.
[  162.648190][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'.
[  162.666573][ T8334] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  162.745700][ T8359] ip_tables: iptables: counters copy to user failed while replacing table
[  162.775723][ T5080] usb 4-1: Using ep0 maxpacket: 16
[  162.799268][ T8375] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.839170][ T8389] x_tables: duplicate underflow at hook 2
[  162.852942][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3742'.
[  162.914735][ T5080] usb 4-1: config index 0 descriptor too short (expected 51443, got 18)
[  162.965031][ T8411] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3751'.
[  163.085746][ T5080] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  163.095008][ T5080] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.116834][ T5080] usb 4-1: Product: syz
[  163.128622][ T5080] usb 4-1: Manufacturer: syz
[  163.133339][ T5080] usb 4-1: SerialNumber: syz
[  163.149927][ T5080] usb 4-1: config 0 descriptor??
[  163.280595][ T8490] x_tables: ip_tables: hashlimit.1 match: invalid size 56 (kernel) != (user) 616
[  163.436568][ T8466] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  163.460621][ T8466] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  163.471287][ T8466] F2FS-fs (loop0): invalid crc value
[  163.507230][ T8466] F2FS-fs (loop0): Found nat_bits in checkpoint
[  163.563185][ T8520] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  163.576396][ T8466] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  163.592310][ T8466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  163.647178][ T5080] usb 4-1: USB disconnect, device number 57
[  163.769560][ T8533] mip6: mip6_destopt_init_state: state's mode is not 2: 4
[  163.817981][ T8461] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  163.844719][ T8461] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  163.874687][ T8461] F2FS-fs (loop1): invalid crc value
[  163.899642][ T8461] F2FS-fs (loop1): Found nat_bits in checkpoint
[  163.935805][ T8461] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  163.945409][ T8553] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  163.951703][ T8461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  163.974434][ T8553] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 2: comm syz.0.3817: lblock 2 mapped to illegal pblock 2 (length 1)
[  163.998308][ T8553] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz.0.3817: Invalid inode table block 1 in block_group 0
[  164.011830][ T8553] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem
[  164.021766][ T8553] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #3: comm syz.0.3817: mark_inode_dirty error
[  164.033337][ T8553] EXT4-fs error (device loop0): ext4_acquire_dquot:6230: comm syz.0.3817: Failed to acquire dquot type 0
[  164.044973][ T8553] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem
[  164.054664][ T8553] EXT4-fs error (device loop0): ext4_evict_inode:285: inode #11: comm syz.0.3817: mark_inode_dirty error
[  164.066095][ T8567] page size migration: [8567 (syz.4.3820)] madvise_vma_pad_pages:289: Invalid attempt to madvise padding on MAP_SHARED vma
[  164.068896][ T8553] EXT4-fs warning (device loop0): ext4_evict_inode:288: couldn't mark inode dirty (err -117)
[  164.092549][ T8553] EXT4-fs (loop0): 1 orphan inode deleted
[  164.098467][ T8553] EXT4-fs (loop0): mounted filesystem without journal. Opts: acl,noblock_validity,user_xattr,max_batch_time=0x00000000000009fe,inlinecrypt,dioread_nolock,,errors=continue
[  164.116263][    T7] EXT4-fs error (device loop0): ext4_map_blocks:632: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  164.141829][    T7] EXT4-fs error (device loop0): ext4_release_dquot:6266: comm kworker/u4:0: Failed to release dquot type 0
[  164.161675][ T8553] EXT4-fs error (device loop0): __ext4_get_inode_loc:4451: comm syz.0.3817: Invalid inode table block 1 in block_group 0
[  164.174918][ T8553] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5971: Corrupt filesystem
[  164.197866][ T8553] EXT4-fs error (device loop0): ext4_quota_off:6549: inode #3: comm syz.0.3817: mark_inode_dirty error
[  164.287185][ T8575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.366306][ T8589] xt_TCPMSS: Only works on TCP SYN packets
[  164.426972][ T8595] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  164.541434][ T8611] validate_nla: 1 callbacks suppressed
[  164.541444][ T8611] netlink: 'syz.1.3841': attribute type 16 has an invalid length.
[  164.577268][ T8611] netlink: 'syz.1.3841': attribute type 17 has an invalid length.
[  164.643314][ T8611] device veth0_vlan left promiscuous mode
[  164.656670][ T8611] device veth0_vlan entered promiscuous mode
[  164.672990][ T8611] device veth1_macvtap left promiscuous mode
[  164.688537][ T8611] device veth1_macvtap entered promiscuous mode
[  164.700059][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.732688][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.750801][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.761714][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.770178][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.779562][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.788895][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  164.797469][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.806111][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  164.815387][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  164.824491][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  164.833715][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  164.843705][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  164.852574][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  164.861672][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.870409][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.879208][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  164.887871][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  164.896649][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  164.904994][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  164.913434][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  164.921931][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  164.930253][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.938960][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.947793][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.956137][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.964580][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.972347][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.980044][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.988219][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.996474][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.006245][ T8637] netlink: 'syz.3.3854': attribute type 12 has an invalid length.
[  165.025106][ T8581] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945)
[  165.045993][ T8581] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  165.076190][ T8581] F2FS-fs (loop4): invalid crc value
[  165.122886][ T8581] F2FS-fs (loop4): Found nat_bits in checkpoint
[  165.177084][ T8581] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  165.184271][ T8581] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  165.318544][ T8680] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  165.337653][ T8680] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  165.407834][ T8644] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  165.432521][ T8644] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  165.441988][ T8644] F2FS-fs (loop0): invalid crc value
[  165.450481][ T8644] F2FS-fs (loop0): Found nat_bits in checkpoint
[  165.487772][ T8644] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  165.495139][ T8644] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  165.534170][ T8653] F2FS-fs (loop2): fault_injection options not supported
[  165.568524][ T8653] F2FS-fs (loop2): invalid crc value
[  165.584364][ T8653] F2FS-fs (loop2): Found nat_bits in checkpoint
[  165.585205][ T8702] tc_dump_action: action bad kind
[  165.629095][ T8653] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.745286][ T8724] netlink: 'syz.0.3883': attribute type 3 has an invalid length.
[  166.051735][ T8779] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nogrpid,quota,,errors=continue
[  166.063369][ T8779] ext4 filesystem being mounted at /797/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.272135][ T8823] SELinux:  Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped).
[  166.395796][ T8855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  166.442730][ T8867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.450453][ T8867] IPv6: NLM_F_CREATE should be set when creating new route
[  166.457907][ T8867] IPv6: NLM_F_CREATE should be set when creating new route
[  166.591914][ T8903] __nla_validate_parse: 12 callbacks suppressed
[  166.591924][ T8903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3975'.
[  166.680364][   T24] kauditd_printk_skb: 65 callbacks suppressed
[  166.680378][   T24] audit: type=1400 audit(2000000011.316:515): avc:  denied  { write } for  pid=8925 comm="syz.0.3989" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  166.696612][ T8930] xt_limit: Overflow, try lower: 0/0
[  166.736784][ T8936] ip6t_rpfilter: unknown options
[  166.737552][   T24] audit: type=1400 audit(2000000011.316:516): avc:  denied  { open } for  pid=8925 comm="syz.0.3989" path="/dev/mapper/control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  166.770909][ T8923] EXT4-fs (loop2): Test dummy encryption mode enabled
[  166.771119][ T8941] xt_policy: too many policy elements
[  166.778163][ T8923] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  166.794081][   T24] audit: type=1400 audit(2000000011.344:517): avc:  denied  { ioctl } for  pid=8925 comm="syz.0.3989" path="/dev/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1
[  166.826415][ T8923] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec0a8, mo2=0002]
[  166.848895][ T8923] System zones: 0-5
[  166.853540][ T8923] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,inlinecrypt,user_xattr,noinit_itable,errors=remount-ro,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,usrquota,max_dir_size_kb=0x0000000000000001,
[  166.889589][   T24] audit: type=1400 audit(2000000011.503:518): avc:  denied  { rename } for  pid=8922 comm="syz.2.3987" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  166.912035][   T24] audit: type=1400 audit(2000000011.522:519): avc:  denied  { unlink } for  pid=8922 comm="syz.2.3987" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  166.976561][ T8979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4014'.
[  167.017444][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4015'.
[  167.072813][ T8982] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue
[  167.086057][ T8982] ext4 filesystem being mounted at /710/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.114429][ T9004] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  167.114429][ T9004] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  167.114429][ T9004] 
[  167.136546][ T9004] EXT4-fs (loop3): Ignoring removed bh option
[  167.154557][ T9004] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80e8018, mo2=0002]
[  167.163358][ T9004] System zones: 0-1, 3-12
[  167.168046][ T9004] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,dioread_lock,barrier=0x0000000000000004,nolazytime,nouser_xattr,sysvgroups,quota,discard,bh,debug,,errors=continue
[  167.211979][   T24] audit: type=1326 audit(2000000011.803:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.4030" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a694559 code=0x7ffc0000
[  167.241756][   T24] audit: type=1326 audit(2000000011.803:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.4030" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a694559 code=0x7ffc0000
[  167.267120][   T24] audit: type=1326 audit(2000000011.803:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.4030" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a694559 code=0x7ffc0000
[  167.301779][   T24] audit: type=1326 audit(2000000011.803:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.4030" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=212 compat=0 ip=0x7f020a694559 code=0x7ffc0000
[  167.301796][   T24] audit: type=1326 audit(2000000011.803:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9018 comm="syz.4.4030" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a694559 code=0x7ffc0000
[  167.410738][ T9058] netlink: 'syz.0.4049': attribute type 4 has an invalid length.
[  167.428305][ T9058] netlink: 'syz.0.4049': attribute type 5 has an invalid length.
[  167.436600][ T9058] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4049'.
[  167.496988][ T9073] netlink: 45 bytes leftover after parsing attributes in process `syz.4.4056'.
[  167.725762][ T9118] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.4079: bg 0: block 248: padding at end of block bitmap is not set
[  167.742925][ T9118] EXT4-fs error (device loop2): ext4_acquire_dquot:6230: comm syz.2.4079: Failed to acquire dquot type 1
[  167.755283][ T9118] EXT4-fs (loop2): 1 truncate cleaned up
[  167.761237][ T9118] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,noload,,errors=continue
[  167.772413][ T9118] ext4 filesystem being mounted at /979/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.895447][ T9163] netlink: 'syz.0.4099': attribute type 3 has an invalid length.
[  167.969452][ T9182] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4107'.
[  168.010240][ T9173] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,noinit_itable,max_batch_time=0x00000000000003ff,
[  168.032595][ T9173] EXT4-fs error (device loop0): ext4_find_extent:892: inode #2: comm syz.0.4104: inode has invalid extent depth: 8
[  168.058676][ T9173] EXT4-fs (loop0): Remounting filesystem read-only
[  168.124350][ T9211] xt_hashlimit: overflow, rate too high: 0
[  168.154053][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4125'.
[  168.321586][ T9277] x_tables: unsorted underflow at hook 2
[  168.365184][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4162'.
[  168.440701][ T9315] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodelalloc,,errors=continue
[  168.455505][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.621369][ T9374] mip6: mip6_destopt_init_state: spi is not 0: 436207616
[  168.631554][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4203'.
[  168.641259][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4203'.
[  168.704236][ T9383] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,quota,,errors=continue
[  168.721457][ T9383] ext4 filesystem being mounted at /750/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  168.849090][ T9413] ==================================================================
[  168.857461][ T9413] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x9dc/0xac0
[  168.865730][ T9413] Read of size 4 at addr ffff88811437c470 by task syz.4.4218/9413
[  168.873836][ T9413] 
[  168.876194][ T9413] CPU: 0 PID: 9413 Comm: syz.4.4218 Tainted: G        W         syzkaller #0
[  168.885224][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  168.895568][ T9413] Call Trace:
[  168.898902][ T9413]  __dump_stack+0x21/0x24
[  168.903262][ T9413]  dump_stack_lvl+0x1a7/0x208
[  168.907961][ T9413]  ? show_regs_print_info+0x18/0x18
[  168.913181][ T9413]  ? thaw_kernel_threads+0x220/0x220
[  168.918590][ T9413]  print_address_description+0x7f/0x2c0
[  168.924243][ T9413]  ? unaccount_page_cache_page+0x9dc/0xac0
[  168.930178][ T9413]  kasan_report+0x100/0x140
[  168.935099][ T9413]  ? xas_store+0xd0c/0x18d0
[  168.939906][ T9413]  ? unaccount_page_cache_page+0x9dc/0xac0
[  168.945728][ T9413]  __asan_report_load4_noabort+0x14/0x20
[  168.951400][ T9413]  unaccount_page_cache_page+0x9dc/0xac0
[  168.957483][ T9413]  __delete_from_page_cache+0xc3/0x470
[  168.962950][ T9413]  ? memset+0x35/0x40
[  168.966943][ T9413]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  168.974065][ T9413]  ? _raw_spin_lock_irqsave+0xc2/0x130
[  168.979616][ T9413]  ? __kasan_check_read+0x11/0x20
[  168.984745][ T9413]  ? workingset_eviction+0x3dc/0x940
[  168.990140][ T9413]  __remove_mapping+0x581/0x6b0
[  168.994991][ T9413]  shrink_page_list+0x21ee/0x4160
[  169.000024][ T9413]  ? shrink_page_list+0x1ea1/0x4160
[  169.005232][ T9413]  ? reclaim_clean_pages_from_list+0x740/0x740
[  169.011403][ T9413]  ? shrink_inactive_list+0xef0/0xef0
[  169.016873][ T9413]  ? _raw_spin_lock_irq+0x95/0xf0
[  169.021994][ T9413]  ? __count_memcg_events+0x89/0x210
[  169.027282][ T9413]  shrink_inactive_list+0x90c/0xef0
[  169.032932][ T9413]  ? shrink_active_list+0xe00/0xe00
[  169.038368][ T9413]  ? __update_load_avg_cfs_rq+0xb1/0x2f0
[  169.044092][ T9413]  ? __kasan_check_read+0x11/0x20
[  169.049119][ T9413]  ? lruvec_lru_size+0x230/0x250
[  169.054063][ T9413]  ? blk_start_plug+0x5a/0x170
[  169.058840][ T9413]  shrink_lruvec+0x281a/0x2ef0
[  169.063606][ T9413]  ? set_next_entity+0xb4/0x5d0
[  169.068560][ T9413]  ? __update_idle_core+0x280/0x280
[  169.073943][ T9413]  ? __kasan_check_write+0x14/0x20
[  169.079075][ T9413]  ? finish_task_switch+0x1b7/0x5a0
[  169.084311][ T9413]  ? __switch_to_asm+0x3a/0x60
[  169.089284][ T9413]  ? __schedule+0xc0b/0x13e0
[  169.093976][ T9413]  ? mem_cgroup_shrink_node+0x4c0/0x4c0
[  169.099538][ T9413]  ? __sched_text_start+0x8/0x8
[  169.104396][ T9413]  ? __this_cpu_preempt_check+0x13/0x20
[  169.110074][ T9413]  ? tracing_record_taskinfo+0x7c/0x220
[  169.115648][ T9413]  ? preempt_schedule_common+0xbe/0xf0
[  169.121356][ T9413]  ? __kasan_check_read+0x11/0x20
[  169.126590][ T9413]  ? inactive_is_low+0x17a/0x2f0
[  169.131627][ T9413]  ? __kasan_check_write+0x14/0x20
[  169.136765][ T9413]  shrink_node+0xee0/0x2690
[  169.141296][ T9413]  ? ktime_get+0x10e/0x140
[  169.145823][ T9413]  do_try_to_free_pages+0x602/0x1590
[  169.151186][ T9413]  ? _raw_spin_unlock_irqrestore+0x5b/0x80
[  169.156990][ T9413]  ? try_to_free_pages+0xc20/0xc20
[  169.162101][ T9413]  try_to_free_mem_cgroup_pages+0x261/0x610
[  169.167987][ T9413]  ? shrink_lruvec+0x2ef0/0x2ef0
[  169.173061][ T9413]  ? drain_all_stock+0x701/0x740
[  169.178105][ T9413]  mem_cgroup_force_empty_write+0x130/0x170
[  169.184247][ T9413]  ? memcg_stat_show+0x12d0/0x12d0
[  169.189407][ T9413]  cgroup_file_write+0x294/0x560
[  169.194524][ T9413]  ? cgroup_seqfile_stop+0xc0/0xc0
[  169.199666][ T9413]  ? mutex_lock+0x92/0xf0
[  169.204270][ T9413]  ? mutex_trylock+0xb0/0xb0
[  169.208973][ T9413]  ? __kasan_check_write+0x14/0x20
[  169.214084][ T9413]  ? cgroup_seqfile_stop+0xc0/0xc0
[  169.219209][ T9413]  kernfs_fop_write_iter+0x2bd/0x400
[  169.224520][ T9413]  vfs_write+0x770/0xd70
[  169.228968][ T9413]  ? kernel_write+0x3c0/0x3c0
[  169.233831][ T9413]  ? mutex_trylock+0xb0/0xb0
[  169.238538][ T9413]  ? __fget_files+0x2e1/0x340
[  169.243223][ T9413]  ? __fdget_pos+0x2d2/0x380
[  169.248009][ T9413]  ? ksys_write+0x70/0x260
[  169.252422][ T9413]  ksys_write+0x14a/0x260
[  169.256831][ T9413]  ? __ia32_sys_read+0x90/0x90
[  169.261594][ T9413]  ? __kasan_check_read+0x11/0x20
[  169.266613][ T9413]  __x64_sys_write+0x7b/0x90
[  169.271461][ T9413]  do_syscall_64+0x31/0x40
[  169.275899][ T9413]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  169.281883][ T9413] RIP: 0033:0x7f020a694559
[  169.286305][ T9413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  169.307061][ T9413] RSP: 002b:00007f02090ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  169.315473][ T9413] RAX: ffffffffffffffda RBX: 00007f020a91afa0 RCX: 00007f020a694559
[  169.323442][ T9413] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003
[  169.331679][ T9413] RBP: 00007f020a72bb50 R08: 0000000000000000 R09: 0000000000000000
[  169.339848][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  169.347901][ T9413] R13: 00007f020a91b038 R14: 00007f020a91afa0 R15: 00007ffda258ac68
[  169.355958][ T9413] 
[  169.358279][ T9413] Allocated by task 8366:
[  169.362617][ T9413]  __kasan_slab_alloc+0xb7/0xe0
[  169.367460][ T9413]  slab_post_alloc_hook+0x5d/0x2f0
[  169.372653][ T9413]  kmem_cache_alloc+0x15a/0x2d0
[  169.377499][ T9413]  getname_flags+0xba/0x510
[  169.381997][ T9413]  do_symlinkat+0x7a/0x3d0
[  169.386415][ T9413]  __x64_sys_symlinkat+0x7b/0x90
[  169.391357][ T9413]  do_syscall_64+0x31/0x40
[  169.395776][ T9413]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  169.401865][ T9413] 
[  169.404187][ T9413] Freed by task 8366:
[  169.408375][ T9413]  kasan_set_track+0x4a/0x70
[  169.413159][ T9413]  kasan_set_free_info+0x23/0x40
[  169.418144][ T9413]  ____kasan_slab_free+0x125/0x160
[  169.423256][ T9413]  __kasan_slab_free+0x11/0x20
[  169.428014][ T9413]  slab_free_freelist_hook+0xc5/0x190
[  169.433468][ T9413]  kmem_cache_free+0x100/0x2d0
[  169.438229][ T9413]  filename_create+0x443/0x680
[  169.443127][ T9413]  do_symlinkat+0x8b/0x3d0
[  169.447717][ T9413]  __x64_sys_symlinkat+0x7b/0x90
[  169.452741][ T9413]  do_syscall_64+0x31/0x40
[  169.457324][ T9413]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  169.463202][ T9413] 
[  169.465534][ T9413] The buggy address belongs to the object at ffff88811437c400
[  169.465534][ T9413]  which belongs to the cache names_cache of size 4096
[  169.480049][ T9413] The buggy address is located 112 bytes inside of
[  169.480049][ T9413]  4096-byte region [ffff88811437c400, ffff88811437d400)
[  169.493410][ T9413] The buggy address belongs to the page:
[  169.499132][ T9413] page:ffffea000450de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114378
[  169.509644][ T9413] head:ffffea000450de00 order:3 compound_mapcount:0 compound_pincount:0
[  169.517965][ T9413] flags: 0x4000000000010200(slab|head)
[  169.523443][ T9413] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018b500
[  169.532043][ T9413] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[  169.540650][ T9413] page dumped because: kasan: bad access detected
[  169.547054][ T9413] page_owner tracks the page as allocated
[  169.552785][ T9413] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8366, ts 162767069945, free_ts 158173224554
[  169.573606][ T9413]  prep_new_page+0x176/0x190
[  169.578189][ T9413]  get_page_from_freelist+0x225f/0x23f0
[  169.583863][ T9413]  __alloc_pages_nodemask+0x29a/0x640
[  169.589248][ T9413]  new_slab+0x84/0x3f0
[  169.593483][ T9413]  ___slab_alloc+0x2f8/0x4c0
[  169.598163][ T9413]  __slab_alloc+0x63/0xa0
[  169.602571][ T9413]  kmem_cache_alloc+0x1a4/0x2d0
[  169.607415][ T9413]  getname_flags+0xba/0x510
[  169.612085][ T9413]  do_symlinkat+0x48/0x3d0
[  169.616665][ T9413]  __x64_sys_symlinkat+0x7b/0x90
[  169.621903][ T9413]  do_syscall_64+0x31/0x40
[  169.626325][ T9413]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[  169.632299][ T9413] page last free stack trace:
[  169.636972][ T9413]  __free_pages_ok+0x80b/0x830
[  169.641737][ T9413]  __free_pages+0xd8/0x390
[  169.646148][ T9413]  __free_slab+0xcf/0x190
[  169.650558][ T9413]  discard_slab+0x29/0x40
[  169.654875][ T9413]  __slab_free+0x313/0x3a0
[  169.659287][ T9413]  ___cache_free+0x10e/0x130
[  169.663961][ T9413]  qlink_free+0x50/0x90
[  169.668111][ T9413]  qlist_free_all+0x5f/0xb0
[  169.672608][ T9413]  kasan_quarantine_reduce+0x14a/0x160
[  169.678055][ T9413]  __kasan_slab_alloc+0x2f/0xe0
[  169.682983][ T9413]  slab_post_alloc_hook+0x5d/0x2f0
[  169.688108][ T9413]  kmem_cache_alloc+0x15a/0x2d0
[  169.693007][ T9413]  getname_flags+0xba/0x510
[  169.697599][ T9413]  getname+0x19/0x20
[  169.701498][ T9413]  do_sys_openat2+0xde/0x750
[  169.706250][ T9413]  __x64_sys_openat+0x136/0x160
[  169.712072][ T9413] 
[  169.714402][ T9413] Memory state around the buggy address:
[  169.720252][ T9413]  ffff88811437c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.728517][ T9413]  ffff88811437c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  169.737278][ T9413] >ffff88811437c400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.745678][ T9413]                                                              ^
[  169.753419][ T9413]  ffff88811437c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.761589][ T9413]  ffff88811437c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  169.769908][ T9413] ==================================================================
[  169.778061][ T9413] Disabling lock debugging due to kernel taint
[  170.056851][ T9418] F2FS-fs (loop0): invalid crc value
[  170.064970][ T9418] F2FS-fs (loop0): Found nat_bits in checkpoint
[  170.092513][ T9418] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5