last executing test programs:

2m15.202868958s ago: executing program 1 (id=160):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x483, 0x0, 0x400006}]})

2m14.751136399s ago: executing program 1 (id=162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810)

2m14.557439644s ago: executing program 1 (id=164):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0)
read(r0, &(0x7f00000002c0)=""/10, 0x5b)

2m14.32909996s ago: executing program 1 (id=166):
syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x3a00014, &(0x7f0000005800)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT], 0x1, 0x615, &(0x7f0000000a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./config\x00', &(0x7f0000001080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./config/usb_gadget/g1/strings/file0\x00', 0x1ff)

2m13.737930865s ago: executing program 1 (id=168):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x8}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0x8, 0xb709, 0x0, [{0x0, 0x3, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)

2m13.191760959s ago: executing program 1 (id=173):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x30, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

2m12.641375353s ago: executing program 32 (id=173):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x40082, 0x509cb86664327f4)
r1 = fanotify_init(0x81, 0x40000)
fanotify_mark(r1, 0x105, 0x30, r0, 0x0)
read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020)

38.289043152s ago: executing program 2 (id=822):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d3, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfd, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

37.913461721s ago: executing program 2 (id=823):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73})
r1 = gettid()
kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)

37.858502333s ago: executing program 2 (id=825):
r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x0, r4}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

37.545548341s ago: executing program 2 (id=829):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

36.328307872s ago: executing program 2 (id=833):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2643)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x1, 0x3, 0x3, &(0x7f0000000000)={0x20, "e551595944bd993e9f61070b25787d91f7dd2a35446df6de515c5a5ae4e1e1b0fb"}})

34.46301739s ago: executing program 2 (id=848):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0)

34.037217381s ago: executing program 33 (id=848):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4)
syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x0)

23.782484083s ago: executing program 4 (id=883):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000300)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000580)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000680)={0x48, 0x8, r2, 0x0, 0x4, 0x162390, 0x0, 0x0, 0x10000})

23.554907518s ago: executing program 4 (id=884):
syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18cd6, &(0x7f00000013c0)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}, {@fat=@debug}, {@fat=@showexec}, {@shortname_mixed}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0xffffffffffffff01}}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@rodir}, {@shortname_winnt}, {@fat=@dmask={'dmask', 0x3d, 0x3}}, {@utf8no}, {@utf8no}, {@shortname_win95}, {@uni_xlate}]}, 0x81, 0x29b, &(0x7f0000001100)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0xfffffffffffffe8c}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

23.164961868s ago: executing program 4 (id=885):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

22.855752836s ago: executing program 4 (id=886):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x200005c, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x152b, &(0x7f0000002780)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

22.353380808s ago: executing program 4 (id=888):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./bus\x00', 0x800000, 0x0, 0x1, 0x0, &(0x7f00000003c0))
syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, 0x0)
lsetxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000340)='\x04', 0x1, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

21.732443664s ago: executing program 4 (id=891):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f000065d000/0x4000)=nil, 0x4000, 0x0, 0x3fb, 0x0)
timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x33, 0x1, @thr={0x0, &(0x7f0000000200)="19dc"}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

21.009862713s ago: executing program 34 (id=891):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f000065d000/0x4000)=nil, 0x4000, 0x0, 0x3fb, 0x0)
timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x33, 0x1, @thr={0x0, &(0x7f0000000200)="19dc"}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

14.617137556s ago: executing program 3 (id=903):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d071004"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)

12.021539033s ago: executing program 5 (id=906):
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

10.659900567s ago: executing program 0 (id=907):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xffffffffffffefff})
mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
mlock2(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0)

10.659107147s ago: executing program 5 (id=908):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x5}, 0x1c)
setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0)

10.651695008s ago: executing program 3 (id=909):
r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZH\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q~@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xff14\x87I\xc7\\vK<m2\x16\x03\xcd\xc1\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10012, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
read(r0, &(0x7f0000000000)=""/269, 0xfffffdef)

9.146017556s ago: executing program 0 (id=910):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xaa7, 0x2000, 0x1, 0xfffe}, 'syz1\x00', 0x4})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000180)={{}, 0x0, 0x401, 0xfffffe04}, 0x18)

9.145181026s ago: executing program 5 (id=911):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xe042, 0x0)
fcntl$setlease(r0, 0x400, 0x1)
link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

9.142892236s ago: executing program 3 (id=912):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/webusb/landingPage\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='h', 0x104)

7.522855287s ago: executing program 0 (id=913):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2})
ppoll(&(0x7f0000002700)=[{r0, 0x8018}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2)

7.520051827s ago: executing program 5 (id=914):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006e6f646973636172642c75737271756f74b23194d8726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f726e75652c726573697a652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c0000000000000000d398e30e7cdc23a1553be48fabf3f19f3ca197da8932a8e170520258e19420036141172352466ff223e87948b103", @ANYRES8], 0x1, 0x62cd, &(0x7f00000042c0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)

7.519425738s ago: executing program 3 (id=915):
r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
statx(r1, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

5.793003542s ago: executing program 0 (id=916):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000007bc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="5ff9e2c37a0627007bcefee917", 0xd}, {&(0x7f0000001a80)='T', 0x1}], 0x2}}], 0x1, 0x24040844)

3.982415578s ago: executing program 0 (id=917):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x9, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000000c0), 0x0}, 0x20)

3.981701538s ago: executing program 5 (id=918):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd26, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xaf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0)

3.981638188s ago: executing program 3 (id=919):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfb, 0x2, 0x7fff7ffc}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

1.38833ms ago: executing program 0 (id=920):
mkdir(&(0x7f0000000100)='./dbg\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./dbg\x00', &(0x7f0000000400)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy1/netdev:wlan1/beacon_loss\x00', 0x1, 0x0)
write(r0, 0x0, 0x0)

541.35µs ago: executing program 5 (id=921):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@minixdf}, {@init_itable}, {@nolazytime}]}, 0x1, 0x5c5, &(0x7f00000000c0)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000000c0)="4701000000000000ff8483400000000020000000", 0x70, 0x81, &(0x7f0000000340)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14)

0s ago: executing program 3 (id=922):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCNXCL(r1, 0x540d)

kernel console output (not intermixed with test programs):

from 0 to 256
[  111.437579][ T6227] binder: 6226:6227 ioctl c0306201 2000000001c0 returned -14
[  111.677451][ T6236] mmap: syz.1.148 (6236) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  112.419390][ T5782] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.529262][   T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  112.615474][ T5782] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.644293][ T5782] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  112.681726][ T5782] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.709115][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.717305][ T5782] usb 3-1: Product: syz
[  112.722595][ T5782] usb 3-1: Manufacturer: syz
[  112.727268][ T5782] usb 3-1: SerialNumber: syz
[  112.749175][   T27] usb 1-1: Using ep0 maxpacket: 32
[  112.757918][   T27] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  112.785111][   T27] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  112.809202][   T27] usb 1-1: config 0 interface 0 has no altsetting 0
[  112.823330][   T27] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  112.835969][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.847425][   T27] usb 1-1: Product: syz
[  112.861840][   T27] usb 1-1: Manufacturer: syz
[  112.866598][   T27] usb 1-1: SerialNumber: syz
[  112.912620][   T27] usb 1-1: config 0 descriptor??
[  112.972428][ T6256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.188677][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'.
[  113.341051][   T27] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  113.613745][ T6297] loop1: detected capacity change from 0 to 1024
[  113.627144][ T5782] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[  113.637316][ T5782] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed
[  113.665619][ T5782] cdc_ncm 3-1:1.0: bind() failure
[  113.712152][ T5782] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  113.739964][ T5782] cdc_ncm 3-1:1.1: bind() failure
[  113.793383][ T5782] usb 3-1: USB disconnect, device number 4
[  113.800835][   T27] usb 1-1: USB disconnect, device number 2
[  114.070544][ T5773] hfsplus: walked past end of dir
[  114.529196][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  114.611943][   T27] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  114.688839][ T1138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.749157][ T5823] usb 4-1: Using ep0 maxpacket: 32
[  114.851389][   T27] usb 3-1: unable to get BOS descriptor or descriptor too short
[  114.857451][ T1138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.889685][   T27] usb 3-1: not running at top speed; connect to a high speed hub
[  114.936918][   T27] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.953796][   T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  114.971501][   T27] usb 3-1: string descriptor 0 read error: -22
[  114.976321][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short
[  114.989374][   T27] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  115.005019][ T5823] usb 4-1: no configurations
[  115.010051][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.038617][ T5823] usb 4-1: can't read configurations, error -22
[  115.065268][   T27] usb 3-1: 0:2 : does not exist
[  115.102729][ T1138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.225546][ T1138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.915148][   T27] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  115.982361][   T27] usb 3-1: Warning! Unlikely big volume range (=4347), cval->res is probably wrong.
[  116.012235][   T27] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = -15617/-11270/1
[  116.072118][   T27] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  116.112630][   T27] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  116.133955][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  116.144918][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  116.162884][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  116.175058][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  116.187565][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  116.198649][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  116.248297][ T6329] batadv0: entered promiscuous mode
[  116.272317][ T6320] loop0: detected capacity change from 0 to 32768
[  116.283991][ T6329] bond0: entered promiscuous mode
[  116.295917][ T6329] bond_slave_0: entered promiscuous mode
[  116.302500][ T6329] bond_slave_1: entered promiscuous mode
[  116.318689][ T6320] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.176 (6320)
[  116.332532][ T6329] hsr1: entered allmulticast mode
[  116.337664][ T6329] batadv0: entered allmulticast mode
[  116.344918][ T6329] bond0: entered allmulticast mode
[  116.350895][ T6329] bond_slave_0: entered allmulticast mode
[  116.356889][ T6329] bond_slave_1: entered allmulticast mode
[  116.365507][ T6329] 8021q: adding VLAN 0 to HW filter on device hsr1
[  116.375111][   T27] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  116.385582][ T6329] batadv0: left promiscuous mode
[  116.409169][ T6320] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  116.436229][   T27] usb 3-1: USB disconnect, device number 5
[  116.446585][ T6329] bond0: left promiscuous mode
[  116.452111][ T6320] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  116.471233][ T6329] bond_slave_0: left promiscuous mode
[  116.490948][ T6320] BTRFS info (device loop0): using free space tree
[  116.498240][ T6329] bond_slave_1: left promiscuous mode
[  116.701280][ T6320] BTRFS info (device loop0): enabling ssd optimizations
[  116.708323][ T6320] BTRFS info (device loop0): auto enabling async discard
[  117.139952][ T6360] loop3: detected capacity change from 0 to 2048
[  117.163338][ T5772] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  117.279684][ T6360] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  117.399538][ T6360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  118.006420][ T6376] loop3: detected capacity change from 0 to 1024
[  118.139132][    T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  118.202537][ T6376] syz.3.184: attempt to access beyond end of device
[  118.202537][ T6376] loop3: rw=0, sector=393222, nr_sectors = 2 limit=1024
[  118.280226][   T51] Bluetooth: hci1: command tx timeout
[  118.290366][ T6376] syz.3.184: attempt to access beyond end of device
[  118.290366][ T6376] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  118.305518][ T6376] Buffer I/O error on dev loop3, logical block 2889, lost async page write
[  118.315779][ T6376] syz.3.184: attempt to access beyond end of device
[  118.315779][ T6376] loop3: rw=2049, sector=393216, nr_sectors = 2 limit=1024
[  118.329758][ T6376] Buffer I/O error on dev loop3, logical block 196608, lost async page write
[  118.338659][ T6376] syz.3.184: attempt to access beyond end of device
[  118.338659][ T6376] loop3: rw=2049, sector=393218, nr_sectors = 2 limit=1024
[  118.352653][ T6376] Buffer I/O error on dev loop3, logical block 196609, lost async page write
[  118.361567][ T6376] syz.3.184: attempt to access beyond end of device
[  118.361567][ T6376] loop3: rw=2049, sector=393220, nr_sectors = 2 limit=1024
[  118.387714][ T6376] Buffer I/O error on dev loop3, logical block 196610, lost async page write
[  118.405348][ T6330] chnl_net:caif_netlink_parms(): no params data found
[  118.414194][    T8] usb 1-1: Using ep0 maxpacket: 8
[  118.423647][ T6383] syz.3.184: attempt to access beyond end of device
[  118.423647][ T6383] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024
[  118.453744][    T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  118.469341][ T6383] Buffer I/O error on dev loop3, logical block 2889, lost async page write
[  118.478404][    T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.503963][    T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.536472][    T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.562152][    T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.583656][    T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.593551][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.844728][ T6394] loop5: detected capacity change from 0 to 7
[  118.861672][    T8] usb 1-1: GET_CAPABILITIES returned 0
[  118.869610][ T6394] Dev loop5: unable to read RDB block 7
[  118.884658][    T8] usbtmc 1-1:16.0: can't read capabilities
[  118.894235][ T6394]  loop5: unable to read partition table
[  118.938783][ T6394] loop5: partition table beyond EOD, truncated
[  118.969188][ T6394] loop_reread_partitions: partition scan of loop5 (í|:î�ñG53¤ð‰DÇ‚‘òxx=¯íehÞ#·]ǛYµž,±Ò>—‡ÚßqE%|ýÁ ­) failed (rc=-5)
[  119.084275][    T8] usb 1-1: USB disconnect, device number 3
[  119.178306][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.223579][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.259424][ T6330] bridge_slave_0: entered allmulticast mode
[  119.285258][ T6330] bridge_slave_0: entered promiscuous mode
[  119.341107][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.348369][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.378445][ T6330] bridge_slave_1: entered allmulticast mode
[  119.388758][ T6330] bridge_slave_1: entered promiscuous mode
[  119.563983][ T6330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.578142][ T6330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.738998][ T1138] hsr_slave_0: left promiscuous mode
[  119.748683][ T1138] hsr_slave_1: left promiscuous mode
[  119.762771][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.774023][ T5823] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  119.779503][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.807990][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.826164][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.840284][ T1138] bridge_slave_1: left allmulticast mode
[  119.846755][ T1138] bridge_slave_1: left promiscuous mode
[  119.859571][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.890368][ T1138] bridge_slave_0: left allmulticast mode
[  119.896127][ T1138] bridge_slave_0: left promiscuous mode
[  119.913139][ T6416] loop0: detected capacity change from 0 to 4096
[  119.928181][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.002560][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  120.017333][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[  120.047237][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64
[  120.069941][ T1138] veth1_macvtap: left promiscuous mode
[  120.076146][ T1138] veth0_macvtap: left promiscuous mode
[  120.095426][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  120.107828][ T6420] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.123800][ T1138] veth1_vlan: left promiscuous mode
[  120.129676][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  120.140123][ T1138] veth0_vlan: left promiscuous mode
[  120.155114][ T5823] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00
[  120.179212][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.187579][ T5823] usb 3-1: Product: syz
[  120.192592][ T5823] usb 3-1: Manufacturer: syz
[  120.197252][ T5823] usb 3-1: SerialNumber: syz
[  120.222593][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.257229][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.280070][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.287440][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.316583][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.328511][ T5823] keyspan 3-1:1.0: Keyspan 1 port adapter converter detected
[  120.339455][   T51] Bluetooth: hci1: command tx timeout
[  120.363925][ T5823] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82
[  120.407247][ T6423] NILFS (loop0): nilfs_palloc_freev (ino=3): entry number 1882 already freed
[  120.417055][ T5823] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2
[  120.442412][ T6423] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  120.445134][ T5823] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  120.689684][ T6425] syz.3.198 (6425) used greatest stack depth: 20728 bytes left
[  120.997569][ T5782] usb 3-1: USB disconnect, device number 6
[  121.014745][ T5782] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  121.039170][ T5782] keyspan 3-1:1.0: device disconnected
[  121.838243][ T6437] cgroup: Need name or subsystem set
[  122.160258][ T6435] loop0: detected capacity change from 0 to 40427
[  122.194210][ T6435] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(263168)
[  122.214927][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  122.227885][ T6435] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  122.265763][ T6435] F2FS-fs (loop0): invalid crc value
[  122.291154][ T6435] F2FS-fs (loop0): Found nat_bits in checkpoint
[  122.349316][   T56] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  122.372882][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  122.419725][   T51] Bluetooth: hci1: command tx timeout
[  122.463656][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.503373][ T6435] F2FS-fs (loop0): Start checkpoint disabled!
[  122.535136][ T6435] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  122.542548][ T6435] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  122.553404][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.563366][   T56] usb 3-1: Using ep0 maxpacket: 32
[  122.571434][   T56] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  122.587442][   T56] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  122.600357][   T56] usb 3-1: config 0 interface 0 has no altsetting 0
[  122.611378][   T56] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  122.626314][   T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.639094][   T56] usb 3-1: Product: syz
[  122.643395][   T56] usb 3-1: Manufacturer: syz
[  122.648073][   T56] usb 3-1: SerialNumber: syz
[  122.666429][   T56] usb 3-1: config 0 descriptor??
[  122.888098][  T139] kworker/u4:5: attempt to access beyond end of device
[  122.888098][  T139] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  122.917991][  T139] kworker/u4:5: attempt to access beyond end of device
[  122.917991][  T139] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  122.935433][  T139] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  122.944370][  T139] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  122.952438][  T139] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  123.136852][   T56] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  123.418644][ T1138] bond0 (unregistering): Released all slaves
[  123.528189][ T6330] team0: Port device team_slave_0 added
[  123.632901][   T56] usb 3-1: USB disconnect, device number 7
[  123.692959][ T6330] team0: Port device team_slave_1 added
[  123.822247][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  123.849248][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.883001][ T6330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  123.903361][ T6330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  123.912831][ T6330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.955683][ T6330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.185752][ T6330] hsr_slave_0: entered promiscuous mode
[  124.236898][ T6330] hsr_slave_1: entered promiscuous mode
[  124.295411][ T6330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  124.329187][ T6330] Cannot create hsr debugfs directory
[  124.499522][   T51] Bluetooth: hci1: command tx timeout
[  125.237831][ T6330] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  125.340765][ T6330] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  125.413056][ T6330] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  125.505106][ T6330] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.071821][ T6487] loop0: detected capacity change from 0 to 32768
[  126.096448][ T6487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.217 (6487)
[  126.138973][ T6487] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.158777][ T6487] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  126.168644][ T6487] BTRFS info (device loop0): setting nodatasum
[  126.183857][ T6487] BTRFS info (device loop0): force zlib compression, level 3
[  126.194067][ T6487] BTRFS info (device loop0): turning on flush-on-commit
[  126.204175][ T6487] BTRFS info (device loop0): max_inline at 4096
[  126.211243][ T6487] BTRFS info (device loop0): using free space tree
[  126.258405][ T6487] BTRFS info (device loop0): enabling ssd optimizations
[  126.352591][ T6330] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.475255][ T6330] 8021q: adding VLAN 0 to HW filter on device team0
[  126.631652][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.638882][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.652899][  T139] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.660196][  T139] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.691855][ T5772] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.652872][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'.
[  127.713185][ T6561] ipvlan2: entered allmulticast mode
[  127.718631][ T6561] syz_tun: entered allmulticast mode
[  127.947137][ T6330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.887803][ T6330] veth0_vlan: entered promiscuous mode
[  128.932357][ T6330] veth1_vlan: entered promiscuous mode
[  129.060551][ T6330] veth0_macvtap: entered promiscuous mode
[  129.086742][ T6330] veth1_macvtap: entered promiscuous mode
[  129.143129][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.164825][ T6603] loop0: detected capacity change from 0 to 2048
[  129.179187][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.198946][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.246864][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.276476][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.308482][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.331622][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.382912][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.401960][ T5788] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  129.422846][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.467928][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.503504][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.529073][ T6330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.563667][ T6330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.611095][ T6330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.668872][ T6330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.710304][ T6330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.729088][ T6330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.752819][ T6330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.777279][ T6593] loop3: detected capacity change from 0 to 32768
[  129.806763][ T6593] XFS: attr2 mount option is deprecated.
[  130.013126][ T6593] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.107478][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.123560][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.158091][ T3421] Bluetooth: hci4: Frame reassembly failed (-84)
[  130.175519][ T6629] Bluetooth: hci4: Frame reassembly failed (-84)
[  130.241218][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.261053][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.360604][ T6593] XFS (loop3): Ending clean mount
[  130.386763][ T6593] XFS (loop3): Quotacheck needed: Please wait.
[  130.497900][ T6593] XFS (loop3): Quotacheck: Done.
[  130.584031][ T6637] capability: warning: `syz.4.175' uses deprecated v2 capabilities in a way that may be insecure
[  130.674073][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.934458][ T6645] loop2: detected capacity change from 0 to 256
[  131.208491][ T6645] syz.2.249: attempt to access beyond end of device
[  131.208491][ T6645] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256
[  131.343419][ T6648] loop3: detected capacity change from 0 to 4096
[  131.994309][ T6666] WARNING! power/level is deprecated; use power/control instead
[  132.182200][   T51] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  132.279873][ T6675] loop2: detected capacity change from 0 to 256
[  132.287440][ T6675] exfat: Deprecated parameter 'utf8'
[  132.393965][ T6675] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  132.595138][ T6675] netlink: 116 bytes leftover after parsing attributes in process `syz.2.257'.
[  132.659324][ T5818] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  132.765473][ T6690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'.
[  132.846759][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'.
[  132.869246][ T5818] usb 5-1: Using ep0 maxpacket: 8
[  132.889545][ T5818] usb 5-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30
[  132.934986][ T5818] usb 5-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.948099][ T5818] usb 5-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.972424][ T5818] usb 5-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193
[  133.013635][ T5818] usb 5-1: config 0 interface 0 has no altsetting 0
[  133.032698][ T5818] usb 5-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  133.052208][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.102801][ T5818] usb 5-1: config 0 descriptor??
[  133.226702][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  133.233290][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  133.571070][ T5818] wacom 0003:056A:010E.0001: unbalanced collection at end of report description
[  133.598944][ T5818] wacom 0003:056A:010E.0001: parse failed
[  133.612632][ T5818] wacom: probe of 0003:056A:010E.0001 failed with error -22
[  133.647410][ T6707] loop0: detected capacity change from 0 to 1024
[  133.760298][ T6687] loop3: detected capacity change from 0 to 32768
[  133.817757][ T6687] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.850179][ T5823] usb 5-1: USB disconnect, device number 2
[  134.000848][ T6687] XFS (loop3): Ending clean mount
[  134.213264][ T6724] loop0: detected capacity change from 0 to 1024
[  134.334189][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.365614][ T6728] loop2: detected capacity change from 0 to 4096
[  134.446852][ T3421] hfsplus: bad catalog file entry
[  134.497834][ T3421] hfsplus: b-tree write err: -5, ino 3
[  134.520360][ T6728] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  134.581127][ T6728] ntfs3: loop2: Failed to load $Extend (-22).
[  134.587986][ T6728] ntfs3: loop2: Failed to initialize $Extend.
[  134.699368][ T6733] Driver unsupported XDP return value 0 on prog  (id 13) dev N/A, expect packet loss!
[  135.056647][ T6739] loop0: detected capacity change from 0 to 512
[  135.073529][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'.
[  135.113459][ T6743] capability: warning: `syz.3.269' uses 32-bit capabilities (legacy support in use)
[  135.133133][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'.
[  135.163864][ T6739] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  135.196870][ T6739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  135.264311][ T6739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  135.308799][ T6739] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  135.318720][ T6739] System zones: 1-12
[  135.338514][ T6739] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  135.359331][ T6739] EXT4-fs (loop0): 1 truncate cleaned up
[  135.366557][ T6739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.621015][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.011975][ T6769] loop3: detected capacity change from 0 to 512
[  136.026355][ T6768] pimreg: tun_chr_ioctl cmd 1074812118
[  136.050815][ T6769] EXT4-fs: Ignoring removed oldalloc option
[  136.096942][ T6769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.184051][ T6769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.259997][ T6769] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.560704][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.994412][ T6797] loop4: detected capacity change from 0 to 512
[  137.077002][ T6797] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  137.100729][ T6797] EXT4-fs (loop4): can't mount with commit=33527, fs mounted w/o journal
[  137.644632][ T6817] loop2: detected capacity change from 0 to 1024
[  137.684872][ T6817] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block
[  137.684872][ T6817] 
[  137.747493][ T6816] loop4: detected capacity change from 0 to 4096
[  137.790940][ T6816] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  137.808959][ T5788] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  138.050773][ T6816] ntfs3: loop4: ino=0, attr_set_size
[  138.163868][ T6816] ntfs3: loop4: MFT: r=0, expect seq=0 instead of 1!
[  138.590582][ T6839] netlink: 'syz.2.306': attribute type 3 has an invalid length.
[  139.053886][ T6851] ieee802154 phy0 wpan0: encryption failed: -22
[  139.381065][ T6841] loop4: detected capacity change from 0 to 32768
[  139.472751][ T6841] JBD2: Ignoring recovery information on journal
[  139.601331][ T6841] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  139.788587][ T6863] loop0: detected capacity change from 0 to 512
[  139.866890][ T6863] Quota error (device loop0): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  139.915829][ T6863] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  139.967151][ T6863] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.315: Failed to acquire dquot type 1
[  140.060742][ T6863] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.315: bg 0: block 495: padding at end of block bitmap is not set
[  140.146337][ T6863] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  140.170885][ T6330] ocfs2: Unmounting device (7,4) on (node local)
[  140.205947][ T6863] EXT4-fs (loop0): 1 truncate cleaned up
[  140.262812][ T6863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.352875][ T6863] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.637068][ T6863] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  140.979028][    C1] sched: RT throttling activated
[  141.062736][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.230533][ T6871] loop3: detected capacity change from 0 to 131072
[  141.240414][ T6871] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  141.247771][ T6871] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  141.259086][ T6871] F2FS-fs (loop3): invalid crc value
[  141.304512][ T6871] F2FS-fs (loop3): Found nat_bits in checkpoint
[  141.452586][ T6871] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  141.459752][ T6871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  141.613811][ T6871] F2FS-fs (loop3): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361]
[  141.891262][ T6902] warning: `syz.4.329' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  141.964455][ T6906] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  141.974032][ T6906] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  141.982856][ T6906] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  141.991741][ T6906] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  142.106343][ T6905] loop2: detected capacity change from 0 to 4096
[  142.274781][ T6905] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  142.343724][ T6905] ntfs3: loop2: Failed to load $Extend (-22).
[  142.369546][ T6905] ntfs3: loop2: Failed to initialize $Extend.
[  142.541952][   T28] audit: type=1800 audit(1786033634.366:4): pid=6905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.330" name="file1" dev="loop2" ino=30 res=0 errno=0
[  143.233820][ T6930] loop2: detected capacity change from 0 to 2048
[  143.281673][ T6930] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.354332][   T28] audit: type=1800 audit(1786033635.176:5): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.338" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  143.579376][   T27] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  143.658355][ T6939] loop2: detected capacity change from 0 to 8
[  143.758486][ T6939] SQUASHFS error: Unable to read inode 0xe3
[  143.779124][   T27] usb 5-1: Using ep0 maxpacket: 16
[  143.801437][   T27] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  143.859582][   T27] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  143.868713][   T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.924373][   T27] usb 5-1: Product: syz
[  143.930007][   T27] usb 5-1: Manufacturer: syz
[  143.934679][   T27] usb 5-1: SerialNumber: syz
[  143.962669][   T27] usb 5-1: config 0 descriptor??
[  144.022447][   T27] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  144.050370][   T27] usb 5-1: Detected FT232R
[  144.339729][   T27] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  144.411732][ T6957] loop3: detected capacity change from 0 to 128
[  144.472039][ T6957] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.587407][ T6957] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  144.626486][   T27] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  144.747974][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  144.904330][ T5823] usb 5-1: USB disconnect, device number 3
[  144.955899][ T5823] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  145.026491][ T5823] ftdi_sio 5-1:0.0: device disconnected
[  145.512217][ T6958] loop0: detected capacity change from 0 to 32768
[  145.802441][ T6964] loop3: detected capacity change from 0 to 32768
[  145.925436][ T6964] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  146.157033][ T6964] XFS (loop3): Ending clean mount
[  146.219440][ T6964] XFS (loop3): User initiated shutdown received.
[  146.226232][ T6964] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  146.263126][ T6983] loop4: detected capacity change from 0 to 512
[  146.318511][ T6964] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  146.378625][ T6983] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.357: invalid indirect mapped block 10 (level 1)
[  146.557228][ T6983] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.357: invalid indirect mapped block 8 (level 1)
[  146.595566][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  146.610296][ T6983] EXT4-fs (loop4): 1 truncate cleaned up
[  146.617409][ T6983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.027345][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.719483][ T7017] netlink: 'syz.0.365': attribute type 22 has an invalid length.
[  148.807159][ T7038] gretap0: entered promiscuous mode
[  149.436049][ T7015] loop2: detected capacity change from 0 to 32768
[  149.536200][ T7050] loop0: detected capacity change from 0 to 4096
[  149.561817][ T7050] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  149.599184][ T5860] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  149.831950][ T5860] usb 4-1: Using ep0 maxpacket: 8
[  149.908686][ T5860] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  149.939888][ T5860] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.989232][ T5860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  150.031160][ T5860] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  150.076988][ T5860] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  150.112708][ T5860] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  150.189107][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.489735][ T5860] usb 4-1: GET_CAPABILITIES returned 0
[  150.515557][ T5860] usbtmc 4-1:16.0: can't read capabilities
[  150.754609][ T5860] usb 4-1: USB disconnect, device number 4
[  150.956575][ T7073] loop0: detected capacity change from 0 to 128
[  151.150727][ T7078] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  152.006451][ T7097] loop2: detected capacity change from 0 to 2048
[  152.007262][ T7100] loop4: detected capacity change from 0 to 128
[  152.055098][ T7100] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  152.118831][ T7097] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.999599][ T7096] loop3: detected capacity change from 0 to 32768
[  153.209795][ T7096] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  153.395506][ T5782] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  153.419205][ T5860] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  153.503415][ T7096] syz.3.384 (7096) used greatest stack depth: 18840 bytes left
[  153.609851][ T5775] ocfs2: Unmounting device (7,3) on (node local)
[  153.632710][ T5860] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  153.644110][ T5782] usb 5-1: unable to get BOS descriptor or descriptor too short
[  153.663705][ T5860] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  153.689291][ T5782] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.724252][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  153.764949][ T5860] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  153.790804][ T5782] usb 5-1: string descriptor 0 read error: -22
[  153.800169][ T5782] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  153.811667][ T5860] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  153.842432][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.861613][ T5860] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  153.881689][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  153.919329][ T5860] usb 1-1: Product: syz
[  153.923708][ T5860] usb 1-1: Manufacturer: syz
[  153.960725][ T5860] cdc_wdm 1-1:1.0: skipping garbage
[  153.966064][ T5860] cdc_wdm 1-1:1.0: skipping garbage
[  153.993777][ T5860] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  154.009365][ T5860] cdc_wdm 1-1:1.0: Unknown control protocol
[  154.253000][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  154.255842][ T6616] usb 1-1: USB disconnect, device number 4
[  154.260494][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  154.272246][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  154.870471][ T5823] usb 5-1: USB disconnect, device number 4
[  155.350788][ T7144] loop2: detected capacity change from 0 to 32768
[  156.398613][ T7191] loop0: detected capacity change from 0 to 136
[  156.422098][ T7194] loop3: detected capacity change from 0 to 128
[  156.610482][ T7201] netlink: 'syz.4.410': attribute type 1 has an invalid length.
[  156.716181][ T7191] rock: directory entry would overflow storage
[  156.775584][ T7191] rock: sig=0x4f50, size=4, remaining=3
[  156.819522][ T7191] iso9660: Corrupted directory entry in block 2 of inode 1472
[  156.903994][ T7209] program syz.4.413 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  157.201862][ T7215] loop3: detected capacity change from 0 to 2048
[  157.260231][ T7215] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  157.300634][ T7215] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  157.308409][ T7215] UDF-fs: Scanning with blocksize 512 failed
[  157.404866][ T7223] loop0: detected capacity change from 0 to 128
[  157.419594][ T7215] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.491906][ T7223] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002]
[  157.531134][ T7223] System zones: 1-3, 19-19, 35-36
[  157.595364][ T7223] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.641540][ T7223] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  157.780489][ T7223] EXT4-fs warning (device loop0): ext4_group_extend:1897: can't read last block, resize aborted
[  157.909818][ T5772] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.496663][ T7225] loop4: detected capacity change from 0 to 32768
[  158.577286][ T7225] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.783127][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.424'.
[  158.860184][ T7225] XFS (loop4): Ending clean mount
[  158.945644][ T7225] XFS (loop4): Quotacheck needed: Please wait.
[  158.983957][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'.
[  159.089102][ T7225] XFS (loop4): Quotacheck: Done.
[  159.260295][ T7268] loop0: detected capacity change from 0 to 1024
[  159.420021][   T28] audit: type=1800 audit(1786033651.236:6): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.427" name="file1" dev="loop0" ino=3 res=0 errno=0
[  159.453601][ T6330] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  159.524976][ T7274] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  159.653703][ T3421] hfsplus: bad catalog file entry
[  159.687400][ T3421] hfsplus: b-tree write err: -5, ino 3
[  160.254732][ T7271] loop3: detected capacity change from 0 to 40427
[  160.304059][ T5788] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  160.728421][ T7286] loop4: detected capacity change from 0 to 40427
[  160.745827][ T7286] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff
[  160.767537][ T7286] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4
[  160.802241][ T7286] F2FS-fs (loop4): invalid crc value
[  160.849204][ T7286] F2FS-fs (loop4): Found nat_bits in checkpoint
[  160.999850][ T7286] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  161.019482][ T7303] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  161.149308][ T7286] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  161.269469][ T7286] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  161.333414][ T7313] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0
[  161.412748][ T7312] loop2: detected capacity change from 0 to 4096
[  161.481920][ T6330] syz-executor: attempt to access beyond end of device
[  161.481920][ T6330] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  161.531230][ T6330] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  161.697633][ T7312] ntfs3: loop2: failed to convert "0080" to koi8-ru
[  161.709236][ T5860] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  161.742743][ T7312] ntfs3: loop2: failed to convert name for inode 1e.
[  161.755054][ T7319] program syz.3.448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  161.767015][ T7312] ntfs3: loop2: failed to convert "256c" to koi8-ru
[  161.920025][ T5860] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  161.939227][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  161.948936][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.970933][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  161.991134][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.000609][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.029142][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.046237][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.079193][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.100201][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.119948][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.139197][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.170717][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.189362][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.199726][ T7324] netlink: 56 bytes leftover after parsing attributes in process `syz.2.450'.
[  162.211186][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'.
[  162.220237][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.249074][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.277725][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.289109][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.329156][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.349624][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.379275][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.399200][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.429953][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  162.446678][ T5860] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  162.464431][ T5860] usb 1-1: config 0 interface 0 has no altsetting 0
[  162.492120][ T5860] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  162.512906][ T5860] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  162.538019][ T5860] usb 1-1: Product: syz
[  162.551559][ T5860] usb 1-1: Manufacturer: syz
[  162.565345][ T5860] usb 1-1: SerialNumber: syz
[  162.577019][ T5860] usb 1-1: config 0 descriptor??
[  162.597229][ T5860] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  162.737137][ T7335] loop4: detected capacity change from 0 to 2048
[  162.817620][ T7335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.831614][ T7339] loop3: detected capacity change from 0 to 1024
[  162.846693][ T7339] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.960856][ T7339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.046958][    C1] usb 1-1: yurex_control_callback - control failed: -71
[  163.058052][ T5860] usb 1-1: USB disconnect, device number 5
[  163.089076][ T5860] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  163.155592][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.324969][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.473649][ T7350] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.460'.
[  163.709307][ T5823] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  163.780692][ T7359] loop2: detected capacity change from 0 to 2048
[  163.808562][ T7359] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.854468][   T28] audit: type=1800 audit(1786033655.676:7): pid=7359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.463" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  163.919269][ T5823] usb 4-1: Using ep0 maxpacket: 8
[  163.955063][ T5823] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  163.995267][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  164.036152][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  164.084427][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  164.106103][ T5823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  164.153637][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  164.176713][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.470156][ T5823] usb 4-1: GET_CAPABILITIES returned 0
[  164.475761][ T5823] usbtmc 4-1:16.0: can't read capabilities
[  164.545298][ T7369] loop0: detected capacity change from 0 to 1024
[  164.734752][ T5860] usb 4-1: USB disconnect, device number 5
[  164.755493][ T7373] netlink: 32 bytes leftover after parsing attributes in process `syz.0.470'.
[  164.789640][ T5823] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  164.947810][ T7363] loop2: detected capacity change from 0 to 40427
[  164.980640][ T7363] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  164.998587][ T5823] usb 5-1: Using ep0 maxpacket: 16
[  165.006983][ T7363] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  165.018800][ T5823] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  165.045086][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.045744][ T7363] F2FS-fs (loop2): invalid crc value
[  165.062606][ T5823] usb 5-1: Product: syz
[  165.066856][ T5823] usb 5-1: Manufacturer: syz
[  165.076429][ T5823] usb 5-1: SerialNumber: syz
[  165.108494][ T7363] F2FS-fs (loop2): Found nat_bits in checkpoint
[  165.186433][ T7363] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  165.193816][ T7363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.312118][ T7382] F2FS-fs (loop2): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  165.349115][ T5818] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  165.377751][ T5823] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  165.423752][ T5823] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  165.436201][ T5823] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  165.449378][ T5823] usb 5-1: media controller created
[  165.487336][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  165.552876][ T5818] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  165.579273][ T5818] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  165.611101][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.632602][ T5818] gspca_main: stv0680-2.14.0 probing 041e:4007
[  165.746867][ T7388] loop3: detected capacity change from 0 to 512
[  165.763832][ T7388] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  165.786857][    C0] raw-gadget.1 gadget.4: ignoring, device is not running
[  165.823460][ T5823] zl10353_read_register: readreg error (reg=127, ret==-32)
[  165.851026][ T7388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.864325][ T7388] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.966531][ T7388] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.476: iget: bad i_size value: 2533274857506816
[  165.987735][ T5823] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5
[  166.006601][ T5823] usb 5-1: USB disconnect, device number 5
[  166.111593][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.507675][ T7403] loop3: detected capacity change from 0 to 512
[  166.578784][ T5782] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0
[  166.596743][ T5788] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  166.622997][ T5782] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  166.678834][ T5818] stv0680 1-1:4.0: Could not get descriptor 0200
[  166.699217][ T5860] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  166.881400][ T5818] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  166.909596][ T5818] stv0680 1-1:4.0: last error: 34,  command = 0x2
[  166.926629][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  166.950517][ T5818] usb 1-1: USB disconnect, device number 6
[  166.966401][ T5860] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  166.999959][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.024427][ T5860] usb 3-1: config 0 descriptor??
[  167.054512][ T5860] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  167.318658][ T7424] loop4: detected capacity change from 0 to 1024
[  167.372771][ T7424] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  167.397829][ T5818] usb 3-1: USB disconnect, device number 8
[  167.422508][ T7424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.668061][ T7433] loop0: detected capacity change from 0 to 128
[  167.675918][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.710955][ T7433] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  167.744770][ T7433] hpfs: filesystem error: improperly stopped
[  167.762263][ T7433] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  167.777534][ T7433] hpfs: You really don't want any checks? You are crazy...
[  167.813168][ T7433] hpfs: hpfs_map_sector(): read error
[  167.830766][ T7433] hpfs: code page support is disabled
[  167.840143][ T7433] hpfs: hpfs_map_4sectors(): unaligned read
[  167.861774][ T7433] hpfs: hpfs_map_4sectors(): unaligned read
[  167.867782][ T7433] hpfs: filesystem error: unable to find root dir
[  168.153682][ T7443] loop0: detected capacity change from 0 to 128
[  168.212118][   T28] audit: type=1800 audit(1786033660.036:8): pid=7443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.496" name="file2" dev="loop0" ino=1048619 res=0 errno=0
[  168.253837][ T7443] syz.0.496: attempt to access beyond end of device
[  168.253837][ T7443] loop0: rw=2049, sector=145, nr_sectors = 79 limit=128
[  168.683757][ T7453] loop0: detected capacity change from 0 to 2048
[  168.741069][ T7453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.835946][ T7435] loop3: detected capacity change from 0 to 32768
[  168.848619][   T28] audit: type=1800 audit(1786033660.656:9): pid=7453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.499" name="file1" dev="loop0" ino=1346 res=0 errno=0
[  168.901260][ T7435] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.493 (7435)
[  168.965403][ T7435] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  169.012819][ T7435] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  169.029540][ T7435] BTRFS info (device loop3): enabling disk space caching
[  169.036694][ T7435] BTRFS info (device loop3): force clearing of disk cache
[  169.062306][ T7435] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  169.107509][ T7435] BTRFS info (device loop3): use zstd compression, level 3
[  169.139268][ T7435] BTRFS info (device loop3): disk space caching is enabled
[  169.338529][ T7435] BTRFS info (device loop3): enabling ssd optimizations
[  169.369529][ T7435] BTRFS info (device loop3): auto enabling async discard
[  169.404878][ T7435] BTRFS info (device loop3): rebuilding free space tree
[  169.536701][ T7435] BTRFS info (device loop3): disabling free space tree
[  169.591037][ T7435] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  169.609665][   T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  169.639243][ T7435] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  169.651160][ T7452] loop2: detected capacity change from 0 to 32768
[  169.699269][ T5818] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  169.703912][ T7452] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.500 (7452)
[  169.821963][ T5788] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (5788)
[  169.839441][   T27] usb 1-1: Using ep0 maxpacket: 8
[  169.872967][   T27] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[  169.904552][   T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  169.939176][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.978082][ T5775] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  169.980836][   T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  169.998808][ T5818] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  170.008924][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.034690][   T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  170.049610][ T5818] usb 5-1: config 0 descriptor??
[  170.063185][ T5818] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  170.080714][   T27] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  170.125067][   T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  170.152164][   T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  170.163465][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.172520][ T7484] netlink: 'syz.2.506': attribute type 12 has an invalid length.
[  170.199273][ T7484] netlink: 'syz.2.506': attribute type 29 has an invalid length.
[  170.233151][ T7484] netlink: 148 bytes leftover after parsing attributes in process `syz.2.506'.
[  170.252640][ T7484] netlink: 'syz.2.506': attribute type 3 has an invalid length.
[  170.304303][ T5780] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop3 scanned by udevd (5780)
[  170.440086][   T27] usb 1-1: GET_CAPABILITIES returned 0
[  170.445703][   T27] usbtmc 1-1:16.0: can't read capabilities
[  170.569225][   T27] usb 5-1: USB disconnect, device number 6
[  170.619914][ T7489] loop2: detected capacity change from 0 to 1764
[  170.653666][ T5782] usb 1-1: USB disconnect, device number 7
[  171.119765][ T7499] loop2: detected capacity change from 0 to 256
[  171.190130][ T7499] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  171.355196][   T28] audit: type=1800 audit(1786033663.176:10): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="file1" dev="loop2" ino=1048620 res=0 errno=0
[  171.584215][ T7506] loop3: detected capacity change from 0 to 128
[  171.639575][ T7506] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  171.721257][ T7506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.554889][ T7527] loop2: detected capacity change from 0 to 1024
[  172.581426][ T7527] EXT4-fs: Ignoring removed bh option
[  172.606185][ T7527] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  172.673395][ T7510] loop0: detected capacity change from 0 to 32768
[  172.709276][ T7527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.954689][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.053490][ T7515] loop3: detected capacity change from 0 to 40427
[  173.119147][ T7515] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  173.126970][ T7515] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  173.190019][ T7515] F2FS-fs (loop3): invalid crc value
[  173.254745][ T7515] F2FS-fs (loop3): Found nat_bits in checkpoint
[  173.430820][ T7515] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  173.450467][ T7515] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  173.490110][ T5823] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  173.572932][ T7515] syz.3.519: attempt to access beyond end of device
[  173.572932][ T7515] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  173.637437][ T7515] syz.3.519: attempt to access beyond end of device
[  173.637437][ T7515] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  173.691801][ T5823] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  173.719122][ T5823] usb 3-1: config 0 interface 0 has no altsetting 0
[  173.736200][ T5823] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  173.760461][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.782710][ T5823] usb 3-1: config 0 descriptor??
[  173.798063][ T7537] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  173.928602][ T7535] loop4: detected capacity change from 0 to 32768
[  173.957327][ T7535] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 12
[  174.029366][ T5788] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  174.263989][ T5823] uclogic 0003:2179:0053.0003: interface is invalid, ignoring
[  174.530287][   T27] usb 3-1: USB disconnect, device number 9
[  174.653993][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.534'.
[  175.263026][ T7568] loop7: detected capacity change from 0 to 7
[  175.274210][ T7567] loop0: detected capacity change from 0 to 2048
[  175.291896][ T7567] EXT4-fs: Ignoring removed oldalloc option
[  175.335918][ T7567] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  175.364198][ T7567] System zones: 0-7
[  175.375843][ T7567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.482908][ T7567] EXT4-fs error (device loop0): ext4_find_extent:947: inode #2: comm syz.0.540: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  175.525914][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  175.540112][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.549399][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  175.558830][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.568126][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  175.578964][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.588279][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  175.599057][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.608367][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  175.640104][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.649505][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  175.663556][ T7567] EXT4-fs (loop0): Remounting filesystem read-only
[  175.857918][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.282782][ T7591] loop4: detected capacity change from 0 to 164
[  176.690259][ T6616] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  176.723648][ T7576] loop3: detected capacity change from 0 to 32768
[  176.765837][ T7576] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  176.889211][ T6616] usb 1-1: Using ep0 maxpacket: 16
[  176.896485][ T7576] XFS (loop3): Ending clean mount
[  176.913269][ T6616] usb 1-1: unable to get BOS descriptor or descriptor too short
[  176.955049][ T6616] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05
[  176.979097][ T6616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.999062][ T6616] usb 1-1: Product: syz
[  177.003337][ T6616] usb 1-1: Manufacturer: syz
[  177.012049][ T6616] usb 1-1: SerialNumber: syz
[  177.217406][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  177.295581][ T6616] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  177.854975][ T7626] ima: policy update failed
[  177.866465][   T28] audit: type=1802 audit(1786033670.683:11): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.561" res=0 errno=0
[  177.896949][ T6616] gspca_vc032x: reg_r err -71
[  177.904832][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.918879][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.925550][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.934871][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.940432][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.945773][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.952037][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.957379][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.965230][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.970909][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.976288][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  177.996902][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.002629][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.014833][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.022446][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.027822][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.037146][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.043872][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.049619][ T7629] loop2: detected capacity change from 0 to 128
[  178.056734][ T6616] gspca_vc032x: I2c Bus Busy Wait 00
[  178.063643][ T6616] gspca_vc032x: Unknown sensor...
[  178.068966][ T6616] vc032x: probe of 1-1:12.0 failed with error -22
[  178.113603][ T6616] usb 1-1: USB disconnect, device number 8
[  178.222564][ T7631] loop2: detected capacity change from 0 to 8
[  178.648078][ T7637] loop2: detected capacity change from 0 to 2048
[  178.726948][ T7637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.742847][ T7639] loop0: detected capacity change from 0 to 2048
[  178.782471][ T7639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.818569][ T7639] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.865350][ T7637] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  178.969093][ T7637] EXT4-fs (loop2): Remounting filesystem read-only
[  179.088261][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.103921][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.270683][ T7657] loop0: detected capacity change from 0 to 512
[  179.319759][ T7657] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.571: bg 0: block 5: invalid block bitmap
[  179.392300][ T7657] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  179.427037][ T7657] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.571: invalid indirect mapped block 3 (level 2)
[  179.493969][ T7657] EXT4-fs (loop0): 1 orphan inode deleted
[  179.501445][ T7657] EXT4-fs (loop0): 1 truncate cleaned up
[  179.515717][ T7657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.618640][   T28] audit: type=1800 audit(1786033672.433:12): pid=7657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.571" name="file0" dev="loop0" ino=11 res=0 errno=0
[  179.725473][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.837843][ T7670] loop2: detected capacity change from 0 to 512
[  179.903641][ T7670] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  179.978748][ T7670] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.577: bad orphan inode 131083
[  180.071778][ T7670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.137014][  T139] Bluetooth: hci4: Frame reassembly failed (-84)
[  180.184577][ T7681] loop4: detected capacity change from 0 to 512
[  180.212131][   T28] audit: type=1800 audit(1786033673.023:13): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="bus" dev="loop2" ino=18 res=0 errno=0
[  180.267971][ T7681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.405430][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.822307][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.088670][ T7699] loop2: detected capacity change from 0 to 131072
[  182.100269][ T7699] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  182.107990][ T7699] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  182.119877][ T7699] F2FS-fs (loop2): invalid crc value
[  182.143067][ T7699] F2FS-fs (loop2): Found nat_bits in checkpoint
[  182.159244][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  182.179843][   T51] Bluetooth: hci4: command 0x1003 tx timeout
[  182.189164][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  182.244640][ T7699] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  182.251978][ T7699] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  182.400741][   T27] usb 4-1: Using ep0 maxpacket: 16
[  182.423430][   T27] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  182.441793][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.466061][   T27] usb 4-1: Product: syz
[  182.479810][   T27] usb 4-1: Manufacturer: syz
[  182.489223][   T27] usb 4-1: SerialNumber: syz
[  182.753091][   T27] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  182.790323][   T27] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  182.821434][   T27] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  182.835420][   T27] usb 4-1: media controller created
[  182.921480][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  183.151849][ T7720] loop0: detected capacity change from 0 to 8192
[  183.162338][   T27] zl10353_read_register: readreg error (reg=127, ret==-71)
[  183.243059][   T27] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5
[  183.273567][   T27] usb 4-1: USB disconnect, device number 6
[  183.618348][ T7723] loop0: detected capacity change from 0 to 2048
[  183.697924][ T7723] NILFS (loop0): invalid segment: Magic number mismatch
[  183.719614][ T7723] NILFS (loop0): trying rollback from an earlier position
[  183.772682][ T7723] NILFS (loop0): recovery complete
[  183.797829][ T7724] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.844295][ T7721] loop4: detected capacity change from 0 to 32768
[  184.100951][ T7725] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean
[  184.173669][ T7727] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  184.507297][ T7736] loop2: detected capacity change from 0 to 128
[  184.529613][ T7736] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  184.581638][ T7736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.654434][ T7732] ftl_cs: FTL header not found.
[  184.819571][ T7732] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096]
[  185.245526][ T7751] loop4: detected capacity change from 0 to 1024
[  185.273709][ T7751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  185.364542][ T7751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.505351][ T7751] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.609: missing EA_INODE flag
[  185.552196][ T7751] EXT4-fs (loop4): Remounting filesystem read-only
[  185.680409][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.765239][ T7760] loop3: detected capacity change from 0 to 4096
[  185.814126][ T7760] NILFS (loop3): invalid segment: Checksum error in segment payload
[  185.839471][ T7760] NILFS (loop3): trying rollback from an earlier position
[  185.882482][ T7762] loop4: detected capacity change from 0 to 128
[  185.894837][ T7760] NILFS (loop3): recovery complete
[  185.912417][ T7763] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.946046][ T7762] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  185.989208][ T7762] hpfs: filesystem error: improperly stopped
[  186.006504][ T7762] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  186.036960][ T7762] hpfs: You really don't want any checks? You are crazy...
[  186.055634][ T7760] NILFS (loop3): Segment number 1023 to be freed is out of range
[  186.071068][ T7762] hpfs: hpfs_map_sector(): read error
[  186.083328][ T7762] hpfs: code page support is disabled
[  186.119581][ T7762] hpfs: hpfs_map_4sectors(): unaligned read
[  186.132587][ T7762] hpfs: hpfs_map_4sectors(): unaligned read
[  186.142700][ T7762] hpfs: filesystem error: unable to find root dir
[  186.336252][ T7746] loop2: detected capacity change from 0 to 40427
[  186.394411][ T7746] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff
[  186.460484][ T7746] F2FS-fs (loop2): invalid crc value
[  186.494484][ T7746] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.671078][ T7746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  186.879406][ T5774] syz-executor: attempt to access beyond end of device
[  186.879406][ T5774] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  186.918819][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  186.936883][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  187.109239][ T5782] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  187.144157][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.0.620'.
[  187.154513][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'.
[  187.259783][ T5817] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  187.300297][ T5782] usb 4-1: Using ep0 maxpacket: 16
[  187.317776][ T5782] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  187.337831][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.363526][ T5782] usb 4-1: Product: syz
[  187.367784][ T5782] usb 4-1: Manufacturer: syz
[  187.373915][ T5782] usb 4-1: SerialNumber: syz
[  187.479174][ T5817] usb 5-1: Using ep0 maxpacket: 16
[  187.490999][ T5817] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  187.519299][ T5817] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  187.549130][ T5817] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  187.558274][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.604898][ T5817] usb 5-1: config 0 descriptor??
[  187.628821][ T5782] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  187.658365][ T5782] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  187.671101][ T5782] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  187.679980][ T5782] usb 4-1: media controller created
[  187.730802][ T5782] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  188.030724][ T5782] zl10353_read_register: readreg error (reg=127, ret==-110)
[  188.061079][ T5817] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x5
[  188.085970][ T5817] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x5
[  188.109708][ T5817] logitech-hidpp-device 0003:046D:C262.0004: item fetching failed at offset 38/40
[  188.140021][ T5817] logitech-hidpp-device 0003:046D:C262.0004: hidpp_probe:parse failed
[  188.156195][ T5782] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5
[  188.161009][ T5817] logitech-hidpp-device: probe of 0003:046D:C262.0004 failed with error -22
[  188.201654][ T5782] usb 4-1: USB disconnect, device number 7
[  188.332631][ T5818] usb 5-1: USB disconnect, device number 7
[  188.523777][ T7789] loop2: detected capacity change from 0 to 32768
[  188.553004][ T7789] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  188.862690][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  189.574997][ T7817] jffs2: notice: (7817) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  189.995080][ T7810] loop2: detected capacity change from 0 to 32768
[  190.082100][ T7810] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  190.138512][ T7810] JBD2: Ignoring recovery information on journal
[  190.242185][ T7810] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  190.523058][ T5774] ocfs2: Unmounting device (7,2) on (node local)
[  191.040935][   T28] audit: type=1326 audit(1786033683.843:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.074108][   T28] audit: type=1326 audit(1786033683.893:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.098877][   T28] audit: type=1326 audit(1786033683.893:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.172772][   T28] audit: type=1326 audit(1786033683.893:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.214762][   T28] audit: type=1326 audit(1786033683.893:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.252863][ T7859] loop4: detected capacity change from 0 to 512
[  191.274040][ T7859] EXT4-fs: Ignoring removed oldalloc option
[  191.292186][   T28] audit: type=1326 audit(1786033683.893:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.324378][   T28] audit: type=1326 audit(1786033683.893:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.354631][   T28] audit: type=1326 audit(1786033683.893:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.408305][   T28] audit: type=1326 audit(1786033683.893:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.441926][ T7859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.455203][ T7859] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  191.467220][   T28] audit: type=1326 audit(1786033683.893:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7852 comm="syz.2.641" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f2f2939e0d9 code=0x7ffc0000
[  191.604754][ T7859] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.650: bg 0: block 217: padding at end of block bitmap is not set
[  191.687551][ T7859] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  191.828578][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.849363][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.656'.
[  192.694744][ T7878] loop4: detected capacity change from 0 to 32768
[  192.711686][ T7877] loop3: detected capacity change from 0 to 32768
[  192.827326][ T7877] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  193.131780][ T5775] ocfs2: Unmounting device (7,3) on (node local)
[  193.881572][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'.
[  194.664416][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  194.671049][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  194.840001][ T7922] loop2: detected capacity change from 0 to 32768
[  194.879239][ T5782] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  195.099185][ T5782] usb 5-1: Using ep0 maxpacket: 8
[  195.117913][ T5782] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  195.136242][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.168431][ T5782] pvrusb2: Hardware description: Terratec Grabster AV400
[  195.206511][ T5782] pvrusb2: **********
[  195.215515][ T5782] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  195.246668][ T5782] pvrusb2: Important functionality might not be entirely working.
[  195.284372][ T5782] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  195.298373][ T5782] pvrusb2: **********
[  195.373390][ T2323] pvrusb2: Invalid write control endpoint
[  195.557885][ T2323] pvrusb2: Invalid write control endpoint
[  195.576407][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  195.606889][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  195.638323][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  195.677751][ T2323] pvrusb2: Device being rendered inoperable
[  195.707610][ T7933] pvrusb2: Attempted to execute control transfer when device not ok
[  195.741226][ T6614] usb 5-1: USB disconnect, device number 8
[  195.748884][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  195.757299][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  195.806365][ T2323] pvrusb2: Attached sub-driver cx25840
[  195.830861][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  195.856738][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  196.888468][ T7975] syz.4.701[7975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  196.888734][ T7975] syz.4.701[7975] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  197.498171][ T7994] loop2: detected capacity change from 0 to 16
[  197.564761][ T7994] erofs: (device loop2): mounted with root inode @ nid 36.
[  197.628063][ T7994] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  197.796785][ T7988] loop3: detected capacity change from 0 to 32768
[  197.843965][ T7988] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  197.924796][ T7988] XFS (loop3): Ending clean mount
[  198.032213][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.073893][ T8012] openvswitch: netlink: Message has 161 unknown bytes.
[  198.084715][ T8012] openvswitch: netlink: Actions may not be safe on all matching packets
[  198.274366][ T8016] loop2: detected capacity change from 0 to 256
[  199.308327][ T5817] kernel write not supported for file /ppp (pid: 5817 comm: kworker/0:3)
[  199.461683][ T8051] erspan0: entered promiscuous mode
[  199.997394][ T8065] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  200.007042][ T8065] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  200.017122][ T8065] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  200.027799][ T8065] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  200.124497][ T8042] loop3: detected capacity change from 0 to 32768
[  200.172064][   T28] kauditd_printk_skb: 18 callbacks suppressed
[  200.172081][   T28] audit: type=1326 audit(1786033692.983:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.309266][   T28] audit: type=1326 audit(1786033693.033:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.407337][   T28] audit: type=1326 audit(1786033693.033:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.530608][   T28] audit: type=1326 audit(1786033693.033:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.554664][    C1] vkms_vblank_simulate: vblank timer overrun
[  200.635853][   T28] audit: type=1326 audit(1786033693.033:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.721988][   T28] audit: type=1326 audit(1786033693.033:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.789158][   T28] audit: type=1326 audit(1786033693.033:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  200.833715][   T28] audit: type=1326 audit(1786033693.033:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8068 comm="syz.0.740" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570b9e0d9 code=0x7ffc0000
[  201.116810][ T8093] program syz.4.753 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  201.389792][ T8099] syzkaller1: tun_chr_ioctl cmd 35108
[  201.684494][ T8111] loop2: detected capacity change from 0 to 128
[  201.710683][ T8111] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  201.732655][ T8113] vcan0: tx address claim with dlc 0
[  201.747271][ T8111] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.566031][ T8128] loop2: detected capacity change from 0 to 1024
[  202.718872][   T28] audit: type=1800 audit(1786033695.523:50): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.768" name="file1" dev="loop2" ino=20 res=0 errno=0
[  202.725514][ T8130] syz.2.768: attempt to access beyond end of device
[  202.725514][ T8130] loop2: rw=0, sector=393284, nr_sectors = 2 limit=1024
[  202.805840][ T5817] IPVS: starting estimator thread 0...
[  202.919305][ T8134] IPVS: using max 22 ests per chain, 52800 per kthread
[  203.006492][ T8141] loop3: detected capacity change from 0 to 512
[  203.088051][ T8141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.168282][ T8141] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.171843][ T8149] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  203.453360][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.047304][ T8163] loop2: detected capacity change from 0 to 4096
[  204.086127][ T8163] EXT4-fs: inline encryption not supported
[  204.109985][ T8163] EXT4-fs (loop2): Test dummy encryption mode enabled
[  204.126714][ T8163] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  204.135262][ T8163] System zones: 0-5
[  204.161687][ T8163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.251480][   T28] audit: type=1800 audit(1786033697.073:51): pid=8163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.782" name="file1" dev="loop2" ino=15 res=0 errno=0
[  204.585491][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'.
[  204.612529][ T8172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.785'.
[  204.805343][ T8161] loop3: detected capacity change from 0 to 32768
[  204.840177][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.896030][ T8161] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.186786][ T8161] XFS (loop3): Ending clean mount
[  205.207801][ T8161] XFS (loop3): Quotacheck needed: Please wait.
[  205.269430][ T8161] XFS (loop3): Quotacheck: Done.
[  205.390846][ T8161] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  205.543488][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  206.341984][ T6614] kernel read not supported for file /dsp1 (pid: 6614 comm: kworker/0:5)
[  206.398854][ T8215] loop4: detected capacity change from 0 to 2048
[  206.510977][ T8215] Alternate GPT is invalid, using primary GPT.
[  206.537096][ T8215]  loop4: p1 p2 p3
[  206.546994][ T8215] loop4: partition table partially beyond EOD, truncated
[  206.929220][ T5817] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  207.139337][ T5817] usb 5-1: Using ep0 maxpacket: 16
[  207.177465][ T5817] usb 5-1: config index 0 descriptor too short (expected 4495, got 71)
[  207.206707][ T5817] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  207.229248][ T5817] usb 5-1: config 0 has an invalid descriptor of length 195, skipping remainder of the config
[  207.256261][ T5817] usb 5-1: config 0 has no interface number 0
[  207.270368][ T5817] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[  207.282082][ T8225] loop2: detected capacity change from 0 to 4096
[  207.289159][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.305863][ T5817] usb 5-1: Product: syz
[  207.310602][ T5817] usb 5-1: Manufacturer: syz
[  207.315260][ T5817] usb 5-1: SerialNumber: syz
[  207.332773][ T5817] usb 5-1: config 0 descriptor??
[  207.369502][ T8225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.599118][ T5817] usb 5-1: USB disconnect, device number 9
[  207.713030][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.918829][ T8242] ieee802154 phy0 wpan0: encryption failed: -22
[  208.569358][ T6614] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  208.586208][ T8241] loop3: detected capacity change from 0 to 32768
[  208.637497][ T8241] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.693335][ T8241] XFS (loop3): Ending clean mount
[  208.769114][ T6614] usb 1-1: Using ep0 maxpacket: 8
[  208.779905][ T6614] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  208.795877][ T8241] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk!
[  208.799430][ T6614] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.830421][   T27] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  208.857220][ T6614] pvrusb2: Hardware description: Terratec Grabster AV400
[  208.878002][ T6614] pvrusb2: **********
[  208.886780][ T6614] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  208.907546][ T6614] pvrusb2: Important functionality might not be entirely working.
[  208.929775][ T6614] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  208.959079][ T6614] pvrusb2: **********
[  208.968389][ T8252] loop2: detected capacity change from 0 to 40427
[  208.989181][ T8252] F2FS-fs (loop2): Wrong segment_count / block_count (64 > 16384)
[  209.006278][ T8252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  209.031306][   T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.049701][   T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  209.072645][   T27] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  209.075918][ T5775] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.096815][ T2323] pvrusb2: Invalid write control endpoint
[  209.117785][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  209.131800][ T8252] F2FS-fs (loop2): Found nat_bits in checkpoint
[  209.160371][   T27] usb 5-1: SerialNumber: syz
[  209.239432][ T2323] pvrusb2: Invalid write control endpoint
[  209.245265][ T2323] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  209.268855][ T2323] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  209.277182][ T2323] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  209.287665][ T2323] pvrusb2: Device being rendered inoperable
[  209.294629][ T2323] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  209.317619][ T8252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  209.325379][ T2323] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  209.334354][ T8250] pvrusb2: Attempted to execute control transfer when device not ok
[  209.345405][ T8252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  209.354804][ T6616] usb 1-1: USB disconnect, device number 9
[  209.373921][ T2323] pvrusb2: Attached sub-driver cx25840
[  209.393524][ T2323] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  209.411866][   T27] usb 5-1: 0:2 : does not exist
[  209.429877][ T2323] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  209.532095][   T27] usb 5-1: USB disconnect, device number 10
[  210.806937][ T8290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  211.234869][ T8286] loop2: detected capacity change from 0 to 40427
[  211.247804][ T8286] F2FS-fs (loop2): invalid crc value
[  211.264362][ T8286] F2FS-fs (loop2): Found nat_bits in checkpoint
[  211.345282][ T8286] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  211.444810][ T5774] syz-executor: attempt to access beyond end of device
[  211.444810][ T5774] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  211.463718][ T5774] syz-executor: attempt to access beyond end of device
[  211.463718][ T5774] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  211.638213][   T48] kworker/u4:3: attempt to access beyond end of device
[  211.638213][   T48] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  211.661554][   T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  211.714993][   T48] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  211.957434][ T8311] netlink: 152 bytes leftover after parsing attributes in process `syz.4.839'.
[  211.980614][ T8311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.839'.
[  212.109750][ T5789] Bluetooth: hci3: command 0x0406 tx timeout
[  212.109779][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  212.109869][ T5084] Bluetooth: hci2: command 0x0406 tx timeout
[  212.219136][ T5818] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  212.256453][ T8319] process 'syz.3.844' launched '/dev/fd/4' with NULL argv: empty string added
[  212.337227][ T8322] loop4: detected capacity change from 0 to 256
[  212.392970][ T8322] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  212.438341][ T5818] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  212.459834][ T5818] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  212.489765][ T5818] usb 1-1: config 220 contains an unexpected descriptor of type 0x1, skipping
[  212.506908][ T5818] usb 1-1: config 220 has an invalid descriptor of length 25, skipping remainder of the config
[  212.520131][ T5818] usb 1-1: config 220 has no interface number 2
[  212.526542][ T5818] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  212.556660][ T5818] usb 1-1: config 220 interface 0 has no altsetting 0
[  212.585779][ T5818] usb 1-1: config 220 interface 76 has no altsetting 0
[  212.613322][ T5818] usb 1-1: config 220 interface 1 has no altsetting 0
[  212.648013][ T5818] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  212.679536][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.708547][ T5818] usb 1-1: Product: syz
[  212.740689][ T5818] usb 1-1: Manufacturer: syz
[  212.748164][ T5818] usb 1-1: SerialNumber: syz
[  212.777412][ T8326] loop3: detected capacity change from 0 to 1024
[  212.790280][   T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.816040][ T8326] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  212.901372][ T8326] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.017940][ T8326] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.096123][ T8326] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.846: bg 0: block 112: padding at end of block bitmap is not set
[  213.111957][ T5818] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000
[  213.133419][ T5818] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  213.149063][ T5818] usb 1-1: No valid video chain found.
[  213.179225][ T5818] usb 1-1: selecting invalid altsetting 0
[  213.198156][ T8332] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  213.220376][   T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.260595][ T8332] EXT4-fs (loop3): This should not happen!! Data will be lost
[  213.260595][ T8332] 
[  213.271588][ T5818] usb 1-1: selecting invalid altsetting 0
[  213.283893][ T8332] EXT4-fs (loop3): Total free blocks count 0
[  213.305296][ T5818] usbtest: probe of 1-1:220.1 failed with error -22
[  213.315112][ T8332] EXT4-fs (loop3): Free/Dirty block details
[  213.337472][ T8332] EXT4-fs (loop3): free_blocks=0
[  213.343507][ T8332] EXT4-fs (loop3): dirty_blocks=64
[  213.360236][ T5818] usb 1-1: USB disconnect, device number 10
[  213.375333][ T8332] EXT4-fs (loop3): Block reservation details
[  213.403579][ T8332] EXT4-fs (loop3): i_reserved_data_blocks=4
[  213.482293][   T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.573520][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  213.633700][   T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.306616][ T8345] loop4: detected capacity change from 0 to 512
[  214.418539][ T8345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.493011][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  214.504819][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  214.514326][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  214.528843][ T8345] ext4 filesystem being mounted at /149/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  214.529726][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  214.548727][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  214.579499][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  214.617239][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'.
[  214.949874][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.979147][ T6616] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  215.182163][ T6616] usb 4-1: Using ep0 maxpacket: 8
[  215.196425][ T6616] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  215.219489][ T6616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.227750][ T6616] usb 4-1: Product: syz
[  215.244788][ T6616] usb 4-1: Manufacturer: syz
[  215.250172][ T6616] usb 4-1: SerialNumber: syz
[  215.266514][ T6616] usb 4-1: config 0 descriptor??
[  215.297383][ T6616] gspca_main: se401-2.14.0 probing 047d:5003
[  215.741841][ T6616] gspca_se401: Frame size: 0x0 1/16th janggu
[  215.753601][ T6616] gspca_se401: Frame size: 0x0 1/16th janggu
[  215.760686][ T6616] gspca_se401: Frame size: 0x0 1/16th janggu
[  215.766769][ T6616] gspca_se401: Frame size: 0x0 1/16th janggu
[  215.773000][ T6616] gspca_se401: Frame size: 0x0 1/16th janggu
[  215.779670][ T6616] gspca_se401: Frame size: 0x0 1/16th janggu
[  215.928810][ T8350] chnl_net:caif_netlink_parms(): no params data found
[  215.953759][ T6616] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  216.017654][ T6616] usb 4-1: USB disconnect, device number 8
[  216.059440][ T6614] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  216.293313][ T6614] usb 5-1: Using ep0 maxpacket: 32
[  216.313815][ T6614] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.325264][ T6614] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.341758][ T6614] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  216.352067][ T6614] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  216.360576][ T6614] usb 5-1: Product: syz
[  216.366180][ T6614] usb 5-1: Manufacturer: syz
[  216.390368][ T6614] hub 5-1:4.0: USB hub found
[  216.496264][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.521476][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.548551][ T8350] bridge_slave_0: entered allmulticast mode
[  216.567807][ T8350] bridge_slave_0: entered promiscuous mode
[  216.595154][   T42] hsr_slave_0: left promiscuous mode
[  216.604935][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.620026][   T42] hsr_slave_1: left promiscuous mode
[  216.632300][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  216.645480][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.669399][   T42] batman_adv: batadv0: Removing interface: batadv_slave_0
[  216.692306][   T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  216.695527][ T6614] hub 5-1:4.0: config failed, hub has too many ports! (err -19)
[  216.715083][   T42] batman_adv: batadv0: Removing interface: batadv_slave_1
[  216.739424][ T5785] Bluetooth: hci2: command tx timeout
[  216.747650][   T42] bridge_slave_1: left allmulticast mode
[  216.791775][   T42] bridge_slave_1: left promiscuous mode
[  216.824113][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.861727][   T42] bridge_slave_0: left allmulticast mode
[  216.876173][   T42] bridge_slave_0: left promiscuous mode
[  216.884063][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.989194][   T42] veth1_macvtap: left promiscuous mode
[  216.995385][   T42] veth0_macvtap: left promiscuous mode
[  217.007605][   T42] veth1_vlan: left promiscuous mode
[  217.013608][   T42] veth0_vlan: left promiscuous mode
[  217.049427][ T6614] usb 5-1: USB disconnect, device number 11
[  217.345870][   T42] bond1 (unregistering): Released all slaves
[  217.615971][ T8401] loop4: detected capacity change from 0 to 512
[  217.640566][ T8401] EXT4-fs: inline encryption not supported
[  217.736648][ T8401] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.862: bad orphan inode 15
[  217.793729][ T8401] ext4_test_bit(bit=14, block=5) = 0
[  217.854734][ T8401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.005458][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.697962][   T42] team0 (unregistering): Port device team_slave_1 removed
[  218.790874][   T42] team0 (unregistering): Port device team_slave_0 removed
[  218.828747][ T5785] Bluetooth: hci2: command tx timeout
[  218.871414][   T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.943318][   T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.548350][   T42] bond0 (unregistering): Released all slaves
[  219.654745][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.664626][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.672588][ T8350] bridge_slave_1: entered allmulticast mode
[  219.684690][ T8350] bridge_slave_1: entered promiscuous mode
[  219.803143][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  219.843839][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  219.996762][ T8350] team0: Port device team_slave_0 added
[  220.027722][ T8350] team0: Port device team_slave_1 added
[  220.158120][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.171311][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.208797][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.241993][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.249526][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  220.296621][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.500200][ T8350] hsr_slave_0: entered promiscuous mode
[  220.518483][ T8350] hsr_slave_1: entered promiscuous mode
[  220.902566][ T5785] Bluetooth: hci2: command tx timeout
[  221.259279][ T8350] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  221.282683][ T8350] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  221.298762][ T8423] loop3: detected capacity change from 0 to 32768
[  221.318767][ T8350] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  221.332822][ T8350] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  221.356183][ T8423] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.869 (8423)
[  221.410584][ T8423] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  221.411320][ T8444] loop4: detected capacity change from 0 to 512
[  221.446524][ T8423] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  221.467909][ T8423] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  221.479213][ T8423] BTRFS info (device loop3): use zstd compression, level 3
[  221.486878][ T8423] BTRFS info (device loop3): using free space tree
[  221.494936][ T8444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.713831][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.810289][ T8423] BTRFS info (device loop3): enabling ssd optimizations
[  221.822883][ T8350] 8021q: adding VLAN 0 to HW filter on device team0
[  221.846705][ T8423] BTRFS info (device loop3): auto enabling async discard
[  221.903528][  T139] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.910835][  T139] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.005110][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.013614][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.099518][   T28] audit: type=1800 audit(1786033714.903:52): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.869" name="file1" dev="loop3" ino=260 res=0 errno=0
[  222.225852][ T8350] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  222.238310][ T8350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  222.517381][ T6330] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.627501][ T5775] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.766873][ T8479] Bluetooth: MGMT ver 1.22
[  222.979765][ T5785] Bluetooth: hci2: command tx timeout
[  223.101940][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.485738][ T8491] loop4: detected capacity change from 0 to 512
[  224.171342][ T6616] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  224.381882][ T6616] usb 4-1: New USB device found, idVendor=0451, idProduct=5416, bcdDevice= 1.00
[  224.383120][ T8350] veth0_vlan: entered promiscuous mode
[  224.401189][ T8513] loop4: detected capacity change from 0 to 256
[  224.419294][ T6616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.464170][ T8350] veth1_vlan: entered promiscuous mode
[  224.480580][ T6616] usb-storage 4-1:1.0: USB Mass Storage device detected
[  224.530815][ T6616] usb-storage 4-1:1.0: Quirks match for vid 0451 pid 5416: 2
[  224.580670][ T6616] scsi host1: usb-storage 4-1:1.0
[  224.652914][ T8350] veth0_macvtap: entered promiscuous mode
[  224.716635][ T8350] veth1_macvtap: entered promiscuous mode
[  224.774103][ T5823] usb 4-1: USB disconnect, device number 9
[  224.842315][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.873440][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.894465][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.919029][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.959394][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  224.989189][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.030804][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.045958][ T8525] loop4: detected capacity change from 0 to 256
[  225.070401][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.109536][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.137200][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.148031][ T8525] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  225.179291][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.205034][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.236421][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.274478][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.332396][ T8350] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.363381][ T8350] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.381872][ T8350] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.404743][ T8350] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.842172][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.859726][ T5823] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  225.879022][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.971749][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.985559][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.065572][ T5823] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  226.088608][ T5823] usb 4-1: config 0 has no interface number 0
[  226.102268][ T5823] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  226.113633][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.128091][ T5823] usb 4-1: Product: syz
[  226.143480][ T5823] usb 4-1: Manufacturer: syz
[  226.148201][ T5823] usb 4-1: SerialNumber: syz
[  226.181338][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.182956][ T5823] usb 4-1: config 0 descriptor??
[  226.209938][ T1138] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.409983][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.435464][ T1138] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.448140][ T5823] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  226.502043][ T5823] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  226.551379][ T5823] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  226.578165][ T5823] usb 4-1: media controller created
[  226.660600][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.678243][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  226.697518][ T1138] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.817331][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  226.861989][ T1138] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.743082][ T5823] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  227.833264][ T5823] usb 4-1: USB disconnect, device number 10
[  228.371220][ T1138] IPVS: stopping backup sync thread 7078 ...
[  228.614917][ T8580] loop5: detected capacity change from 0 to 2048
[  228.688068][ T8580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.793700][ T1138] hsr_slave_0: left promiscuous mode
[  228.815755][ T1138] hsr_slave_1: left promiscuous mode
[  228.834145][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.849344][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.867822][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.875513][ T5818] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  228.893790][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.906159][ T1138] bridge_slave_1: left allmulticast mode
[  228.912636][ T1138] bridge_slave_1: left promiscuous mode
[  228.918605][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.931607][ T1138] bridge_slave_0: left allmulticast mode
[  228.937385][ T1138] bridge_slave_0: left promiscuous mode
[  228.958104][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.011816][ T1138] veth1_macvtap: left promiscuous mode
[  229.017626][ T1138] veth0_macvtap: left promiscuous mode
[  229.025752][ T1138] veth1_vlan: left promiscuous mode
[  229.031625][ T1138] veth0_vlan: left promiscuous mode
[  229.082176][ T5818] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30
[  229.104778][ T5818] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  229.129081][ T5818] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  229.160792][ T5818] usb 4-1: config 0 interface 0 has no altsetting 0
[  229.169059][ T5818] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[  229.187726][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.212811][ T5818] usb 4-1: config 0 descriptor??
[  229.239764][ T8582] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  229.694642][ T5818] lenovo 0003:17EF:6062.0005: unknown main item tag 0x2
[  229.707073][ T5818] lenovo 0003:17EF:6062.0005: unknown main item tag 0x3
[  229.716976][ T5818] lenovo 0003:17EF:6062.0005: unknown main item tag 0x1
[  229.725058][ T5818] lenovo 0003:17EF:6062.0005: unknown main item tag 0x2
[  229.758005][ T5818] lenovo 0003:17EF:6062.0005: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0
[  229.821700][ T5788] udevd[5788]: 'fido_id' [8591] terminated by signal 11 (Segmentation fault)
[  229.955971][ T6614] usb 4-1: USB disconnect, device number 11
[  230.272088][ T1138] team0 (unregistering): Port device team_slave_1 removed
[  230.334740][ T1138] team0 (unregistering): Port device team_slave_0 removed
[  230.396420][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  230.458767][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.057044][ T1138] bond0 (unregistering): Released all slaves
[  233.226571][ T8627] loop5: detected capacity change from 0 to 256
[  233.245067][ T8627] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  233.489288][ T6616] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  233.571770][ T5860] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  233.673357][ T6616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.684575][ T6616] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  233.694171][ T6616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.705363][ T6616] usb 4-1: config 0 descriptor??
[  233.759593][ T5860] usb 1-1: Using ep0 maxpacket: 32
[  233.767104][ T5860] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  233.776854][ T5860] usb 1-1: config 0 has no interface number 0
[  233.786235][ T5860] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  233.796536][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.804654][ T5860] usb 1-1: Product: syz
[  233.808890][ T5860] usb 1-1: Manufacturer: syz
[  233.813682][ T5860] usb 1-1: SerialNumber: syz
[  233.823218][ T5860] usb 1-1: config 0 descriptor??
[  233.843060][ T5860] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  233.944891][ T6616] usbhid 4-1:0.0: can't add hid device: -71
[  233.951675][ T6616] usbhid: probe of 4-1:0.0 failed with error -71
[  233.970542][ T6616] usb 4-1: USB disconnect, device number 12
[  234.056253][ T5860] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  234.074628][ T5860] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  234.434971][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.904'.
[  234.481897][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  234.492553][ T5823] usb 1-1: USB disconnect, device number 11
[  234.522454][ T5823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  234.540828][ T6616] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  234.554992][ T5823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  234.573104][ T5823] quatech2 1-1:0.51: device disconnected
[  234.749193][ T6616] usb 4-1: Using ep0 maxpacket: 16
[  234.758452][ T6616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.770722][ T6616] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40
[  234.780944][ T6616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.798400][ T6616] usb 4-1: config 0 descriptor??
[  235.218697][ T6616] powermate: Expected payload of 3--6 bytes, found 8 bytes!
[  235.238572][ T6616] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  235.278003][    C0] powermate: config urb returned -71
[  235.284528][    C0] powermate: config urb returned -71
[  235.294392][    C0] powermate: config urb returned -71
[  235.300248][    C0] powermate: config urb returned -71
[  235.308607][ T6616] usb 4-1: USB disconnect, device number 13
[  235.314794][    C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  235.358880][ T5788] udevd[5788]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[  235.755690][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.906'.
[  238.710115][ T8675] input: syz1 as /devices/virtual/input/input7
[  239.037996][ T8672] loop5: detected capacity change from 0 to 32768
[  239.073781][   T28] audit: type=1800 audit(1786033731.893:53): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.911" name="file1" dev="loop5" ino=7 res=0 errno=0
[  240.595546][ T8680] loop5: detected capacity change from 0 to 32768
[  240.660042][ T8680] ialloc: diAlloc returned -28!
[  243.896278][   T28] audit: type=1326 audit(1786033736.713:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  243.942908][   T28] audit: type=1326 audit(1786033736.743:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  243.979994][   T28] audit: type=1326 audit(1786033736.743:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  244.010591][   T28] audit: type=1326 audit(1786033736.753:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  244.040152][   T28] audit: type=1326 audit(1786033736.753:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  244.070461][   T28] audit: type=1326 audit(1786033736.753:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  244.102889][   T28] audit: type=1326 audit(1786033736.753:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
[  244.136082][   T28] audit: type=1326 audit(1786033736.753:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8707 comm="syz.3.919" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe563d9e0d9 code=0x7ffc0000
SYZFAIL: repeatedly failed to execute the program
proc=6 req=892 state=1 status=11 (errno 9: Bad file descriptor)
[  247.901244][ T8725] loop5: detected capacity change from 0 to 1024
[  247.993676][ T8725] EXT4-fs error (device loop5): __ext4_fill_super:5517: comm syz.5.921: inode #2: comm syz.5.921: iget: illegal inode #
[  248.118427][ T8725] EXT4-fs (loop5): get root inode failed
[  248.167758][ T8725] EXT4-fs (loop5): mount failed
[  248.820284][  T139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.965529][  T139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.046949][  T139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.146981][  T139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.151945][  T139] IPVS: stopping master sync thread 7303 ...
[  250.348343][  T139] hsr_slave_0: left promiscuous mode
[  250.356161][  T139] hsr_slave_1: left promiscuous mode
[  250.362819][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.370510][  T139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.378631][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.386630][  T139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.394850][  T139] bridge_slave_1: left allmulticast mode
[  250.400626][  T139] bridge_slave_1: left promiscuous mode
[  250.406488][  T139] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.417504][  T139] bridge_slave_0: left allmulticast mode
[  250.424474][  T139] bridge_slave_0: left promiscuous mode
[  250.431227][  T139] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.458912][  T139] veth1_macvtap: left promiscuous mode
[  250.464790][  T139] veth0_macvtap: left promiscuous mode
[  250.470892][  T139] veth1_vlan: left promiscuous mode
[  250.476226][  T139] veth0_vlan: left promiscuous mode
[  251.282400][  T139] team0 (unregistering): Port device team_slave_1 removed
[  251.356505][  T139] team0 (unregistering): Port device team_slave_0 removed
[  251.417678][  T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.429481][  T139] bond_slave_1 (unregistering): left allmulticast mode
[  251.512736][  T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.524278][  T139] bond_slave_0 (unregistering): left allmulticast mode
[  252.014244][  T139] bond0 (unregistering): Released all slaves
[  252.393199][  T139] IPVS: stop unused estimator thread 0...
[  252.473368][  T139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.557598][  T139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.631393][  T139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.702014][  T139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.864164][  T139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.875345][  T139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  252.967676][  T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  252.978187][  T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.063601][  T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.074259][  T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.170361][  T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  253.181548][  T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.872695][  T139] hsr_slave_0: left promiscuous mode
[  254.878889][  T139] hsr_slave_1: left promiscuous mode
[  254.887233][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.894994][  T139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.903967][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.911504][  T139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.920771][  T139] bridge_slave_1: left allmulticast mode
[  254.926447][  T139] bridge_slave_1: left promiscuous mode
[  254.932675][  T139] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.943441][  T139] bridge_slave_0: left allmulticast mode
[  254.949517][  T139] bridge_slave_0: left promiscuous mode
[  254.955260][  T139] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.971071][  T139] hsr_slave_0: left promiscuous mode
[  254.976983][  T139] hsr_slave_1: left promiscuous mode
[  254.984445][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  255.000566][  T139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  255.009210][  T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.016670][  T139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.024696][  T139] bridge_slave_1: left allmulticast mode
[  255.030432][  T139] bridge_slave_1: left promiscuous mode
[  255.036155][  T139] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.047281][  T139] bridge_slave_0: left allmulticast mode
[  255.053623][  T139] bridge_slave_0: left promiscuous mode
[  255.061218][  T139] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.107720][  T139] veth1_macvtap: left promiscuous mode
[  255.113393][  T139] veth0_macvtap: left promiscuous mode
[  255.119178][  T139] veth1_vlan: left promiscuous mode
[  255.124699][  T139] veth0_vlan: left promiscuous mode
[  255.133166][  T139] veth1_macvtap: left promiscuous mode
[  255.138736][  T139] veth0_macvtap: left promiscuous mode
[  255.146188][  T139] veth1_vlan: left promiscuous mode
[  255.151669][  T139] veth0_vlan: left promiscuous mode
[  256.113704][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  256.132988][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  256.152811][  T139] team0 (unregistering): Port device team_slave_1 removed
[  256.223656][  T139] team0 (unregistering): Port device team_slave_0 removed
[  256.291956][  T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.363398][  T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.897899][  T139] bond0 (unregistering): Released all slaves
[  257.705458][  T139] team0 (unregistering): Port device team_slave_1 removed
[  257.762094][  T139] team0 (unregistering): Port device team_slave_0 removed